last executing test programs: 5.605214739s ago: executing program 0 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresgid(0xee00, 0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r9, &(0x7f00000001c0)=""/70, 0xffffffd8) 4.565852953s ago: executing program 0 (id=894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) 4.547696914s ago: executing program 0 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x200080a5}, 0x90) tkill(r2, 0x7) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1d, 0x40000320, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 3.577816299s ago: executing program 0 (id=902): fstatfs(0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xe851caf327e8b79b}, 0x14) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) r2 = epoll_create(0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0xc0383) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r6, 0x100) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='%', 0x1}], 0x1}, 0x8050) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000c0000000000000c050000000700000000000005c39bc88176a9d700"], &(0x7f00000003c0)=""/189, 0x34, 0xbd, 0x0, 0x7, 0x10000}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000500)={0x90000000}) write$cgroup_int(r9, &(0x7f0000000080)=0x4, 0xfffffe7d) close_range(r1, 0xffffffffffffffff, 0x0) dup(r0) 3.462935437s ago: executing program 1 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) (fail_nth: 5) 3.20199331s ago: executing program 2 (id=905): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x400, 0x8, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(r2, &(0x7f0000002840)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/138, 0x8a}, {&(0x7f0000001500)=""/243, 0xf3}, {&(0x7f0000001600)=""/235, 0xeb}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x7, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0) r3 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000040)="f8ee2691e86a741d750b8e", 0xb}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 3.047834251s ago: executing program 0 (id=906): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') sendfile(r1, r1, 0x0, 0x8f) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c95da7b4b2351ab1314d6a284794caac9932d30fff1a2e85df05a4674696f91595bee2cdbe2ef1d3c1035df096e337fda6e3c16a7d2b88b351d069b33cfe631111b01808e3aac9bad689fd90e3186a5885aa2791f713e646e50bf95b587d9aedc9c65e1099cb92137c5d0c2d706fec800188e6018b2020a2e9345a8e992bdc13c2bbf0200000098073953a5db4a48be5c687c64780e3f85c9729c6c0a0000", @ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRES64=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f00000009c0)='1', 0x47f, 0xf}]) dup3(r4, r2, 0x80000) setns(0xc9, 0x0) r6 = socket(0x2a, 0x2, 0x9) bind$inet(r6, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r6, &(0x7f0000000800)={0x0, 0x700, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpeername$l2tp6(r6, 0x0, &(0x7f0000000080)) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 2.698515044s ago: executing program 3 (id=908): semget$private(0x0, 0x20000000102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffe, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='never\x00', 0x5) 2.618819673s ago: executing program 1 (id=909): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f920f1c57fbe3cac8703adacbe7c2c57a2ed867c0b72616c25090bfd49317b803b058f8f6ebf30d29e9e5d09b583518a5324d4301e0d406642e5aca31e4c412a8a5722be8c72132220e7ead1ccfd8b263fcf5a678012a55b723a470f618c82834ec951d95395826500cf5cfa826c0a1df000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) dup2(r4, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 2.618449725s ago: executing program 3 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x200080a5}, 0x90) tkill(r2, 0x7) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1d, 0x40000320, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 2.438508032s ago: executing program 2 (id=911): semget$private(0x0, 0x20000000102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffe, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x802, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x78}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x20000084) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='never\x00', 0x5) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r9, 0x703, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a40)) 2.160084586s ago: executing program 2 (id=912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) 2.072962589s ago: executing program 2 (id=913): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') sendfile(r1, r1, 0x0, 0x8f) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c95da7b4b2351ab1314d6a284794caac9932d30fff1a2e85df05a4674696f91595bee2cdbe2ef1d3c1035df096e337fda6e3c16a7d2b88b351d069b33cfe631111b01808e3aac9bad689fd90e3186a5885aa2791f713e646e50bf95b587d9aedc9c65e1099cb92137c5d0c2d706fec800188e6018b2020a2e9345a8e992bdc13c2bbf0200000098073953a5db4a48be5c687c64780e3f85c9729c6c0a0000", @ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRES64=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f00000009c0)='1', 0x47f, 0xf}]) dup3(r4, r2, 0x80000) setns(0xc9, 0x0) r6 = socket(0x2a, 0x2, 0x9) bind$inet(r6, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r6, &(0x7f0000000800)={0x0, 0x700, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpeername$l2tp6(r6, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x401}, &(0x7f00000002c0)=0x8) 1.790743306s ago: executing program 0 (id=914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80081, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x10d001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x6, 0x0, 0x9, 0x2, 0x2, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x73ed, 0x101, 0x6, 0x6, 0x401, 0x7, 0x484, 0xa2d8, 0x9, 0x1000, 0x1, 0xa, 0xfffffffd, 0x383, 0x1666c000, 0x4, 0xfffffffd]}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r5 = socket(0x10, 0x803, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/65, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0x4048aecb, &(0x7f0000000040)="07000000000000000f000000ffffffff42e04d6d") 1.718236983s ago: executing program 3 (id=915): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f920f1c57fbe3cac8703adacbe7c2c57a2ed867c0b72616c25090bfd49317b803b058f8f6ebf30d29e9e5d09b583518a5324d4301e0d406642e5aca31e4c412a8a5722be8c72132220e7ead1ccfd8b263fcf5a678012a55b723a470f618c82834ec951d95395826500cf5cfa826c0a1df000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = dup2(r4, r0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 1.519713507s ago: executing program 1 (id=916): bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '[[#', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x4c) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) lseek(r3, 0x8000, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x20000) membarrier(0x2, 0x0) 1.222009427s ago: executing program 1 (id=917): bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '[[#', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x4c) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) lseek(r3, 0x8000, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x20000) membarrier(0x2, 0x0) 1.080171901s ago: executing program 1 (id=918): semget$private(0x0, 0x20000000102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='never\x00', 0x5) 1.053273817s ago: executing program 1 (id=919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1f00000000000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") socket(0x2, 0xa, 0x0) 641.957313ms ago: executing program 2 (id=920): semget$private(0x0, 0x20000000102, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffe, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x802, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x78}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x20000084) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='never\x00', 0x5) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r9, 0x703, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a40)) 503.460028ms ago: executing program 3 (id=921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) 456.395499ms ago: executing program 2 (id=922): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f920f1c57fbe3cac8703adacbe7c2c57a2ed867c0b72616c25090bfd49317b803b058f8f6ebf30d29e9e5d09b583518a5324d4301e0d406642e5aca31e4c412a8a5722be8c72132220e7ead1ccfd8b263fcf5a678012a55b723a470f618c82834ec951d95395826500cf5cfa826c0a1df000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz1\x00'}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = dup2(r4, r0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 399.023344ms ago: executing program 3 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x200080a5}, 0x90) tkill(r2, 0x7) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r5, 0x0, 0x1d, 0x40000320, 0x0, 0x0) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 0s ago: executing program 3 (id=924): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xe97, 0x2, 0x6, 0x55bc, 0x8, 0x8, 0x4, 0x401}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='bfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1', 0x1) kernel console output (not intermixed with test programs): 0246 R12: 0000000000000000 [ 77.622306][ T6533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.622320][ T6533] [ 77.964345][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 77.966399][ T1160] IPVS: starting estimator thread 0... [ 77.967599][ T6546] IPVS: set_ctl: invalid protocol: 20551 172.20.20.170:0 [ 77.975045][ T6552] capability: warning: `syz.0.183' uses deprecated v2 capabilities in a way that may be insecure [ 78.006847][ T5096] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 78.064673][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.076752][ T6553] IPVS: using max 43 ests per chain, 103200 per kthread [ 78.190448][ T5096] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 78.193738][ T5096] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 78.193767][ T5096] usb 6-1: can't read configurations, error -71 [ 78.759404][ T6564] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.837161][ T6566] wlan0 speed is unknown, defaulting to 1000 [ 78.997845][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 79.003480][ T6578] bridge_slave_1: left allmulticast mode [ 79.005577][ T6578] bridge_slave_1: left promiscuous mode [ 79.008690][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.041696][ T6578] bridge_slave_0: left allmulticast mode [ 79.041754][ T6578] bridge_slave_0: left promiscuous mode [ 79.041942][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.169150][ T6590] FAULT_INJECTION: forcing a failure. [ 80.169150][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.170165][ T6590] CPU: 1 UID: 0 PID: 6590 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 80.170181][ T6590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.170188][ T6590] Call Trace: [ 80.170193][ T6590] [ 80.170198][ T6590] dump_stack_lvl+0x100/0x190 [ 80.170217][ T6590] should_fail_ex.cold+0x5/0xa [ 80.170232][ T6590] _copy_to_user+0x32/0xd0 [ 80.170245][ T6590] simple_read_from_buffer+0xcb/0x170 [ 80.170259][ T6590] proc_fail_nth_read+0x1af/0x230 [ 80.170278][ T6590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.170297][ T6590] ? rw_verify_area+0xce/0x6d0 [ 80.170313][ T6590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.170331][ T6590] vfs_read+0x1e4/0xb40 [ 80.170341][ T6590] ? lock_acquire+0x1d1/0x380 [ 80.170356][ T6590] ? __fget_files+0x34/0x3d0 [ 80.170367][ T6590] ? __pfx_vfs_read+0x10/0x10 [ 80.170376][ T6590] ? find_held_lock+0x2b/0x80 [ 80.170387][ T6590] ? __fget_files+0x215/0x3d0 [ 80.170400][ T6590] ? __fget_files+0x21f/0x3d0 [ 80.170415][ T6590] ksys_read+0x12a/0x250 [ 80.170425][ T6590] ? __pfx_ksys_read+0x10/0x10 [ 80.170440][ T6590] do_int80_emulation+0x166/0x650 [ 80.170458][ T6590] asm_int80_emulation+0x1a/0x20 [ 80.170474][ T6590] RIP: 0023:0xf71575ab [ 80.170488][ T6590] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 80.170502][ T6590] RSP: 002b:00000000f53ec4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.170518][ T6590] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ec5d0 [ 80.170529][ T6590] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 80.170535][ T6590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.170541][ T6590] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.170547][ T6590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.170562][ T6590] [ 80.419483][ T6597] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 80.430406][ T6601] FAULT_INJECTION: forcing a failure. [ 80.430406][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 80.434804][ T6601] CPU: 2 UID: 0 PID: 6601 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 80.434833][ T6601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.434842][ T6601] Call Trace: [ 80.434847][ T6601] [ 80.434853][ T6601] dump_stack_lvl+0x100/0x190 [ 80.434875][ T6601] should_fail_ex.cold+0x5/0xa [ 80.434892][ T6601] should_failslab+0xc2/0x120 [ 80.434908][ T6601] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.434922][ T6601] ? alloc_empty_file+0x5b/0x1c0 [ 80.434941][ T6601] alloc_empty_file+0x5b/0x1c0 [ 80.434957][ T6601] path_openat+0xdb/0x2440 [ 80.434973][ T6601] ? __pfx_path_openat+0x10/0x10 [ 80.434991][ T6601] do_file_open+0x20e/0x430 [ 80.435006][ T6601] ? __pfx_do_file_open+0x10/0x10 [ 80.435031][ T6601] ? _raw_spin_unlock+0x28/0x50 [ 80.435044][ T6601] ? alloc_fd+0x471/0x7a0 [ 80.435061][ T6601] do_sys_openat2+0x10f/0x1e0 [ 80.435078][ T6601] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.435100][ T6601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.435126][ T6601] ? __fget_files+0x21f/0x3d0 [ 80.435153][ T6601] __ia32_compat_sys_openat+0x12d/0x210 [ 80.435183][ T6601] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 80.435211][ T6601] ? ksys_write+0x1ac/0x250 [ 80.435236][ T6601] do_int80_emulation+0x166/0x650 [ 80.435254][ T6601] asm_int80_emulation+0x1a/0x20 [ 80.435267][ T6601] RIP: 0023:0xf71675ab [ 80.435277][ T6601] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 80.435289][ T6601] RSP: 002b:00000000f542603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 80.435301][ T6601] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426100 [ 80.435309][ T6601] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.435316][ T6601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.435322][ T6601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.435329][ T6601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.435345][ T6601] [ 80.452066][ T6603] sd 0:0:0:0: PR command failed: 1026 [ 80.452091][ T6603] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 80.452113][ T6603] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 80.549922][ T6608] Illegal XDP return value 4294967294 on prog (id 18) dev N/A, expect packet loss! [ 80.608428][ T6610] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 80.648982][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.671350][ T6610] bond1: (slave geneve2): making interface the new active one [ 80.678155][ T6610] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 80.686177][ T6610] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.856811][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 80.996690][ T35] usb 6-1: device descriptor read/64, error -71 [ 81.237016][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.282741][ T6626] FAULT_INJECTION: forcing a failure. [ 81.282741][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.282800][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 81.282838][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.282853][ T6626] Call Trace: [ 81.282859][ T6626] [ 81.282867][ T6626] dump_stack_lvl+0x100/0x190 [ 81.282898][ T6626] should_fail_ex.cold+0x5/0xa [ 81.282921][ T6626] _copy_from_user+0x2e/0xd0 [ 81.282942][ T6626] memdup_user+0x6b/0xe0 [ 81.282968][ T6626] strndup_user+0x78/0xe0 [ 81.282996][ T6626] __do_sys_add_key+0x160/0x460 [ 81.283017][ T6626] ? __pfx___do_sys_add_key+0x10/0x10 [ 81.283032][ T6626] ? fput+0x7c/0x100 [ 81.283055][ T6626] ? __pfx_ksys_write+0x10/0x10 [ 81.283076][ T6626] __do_fast_syscall_32+0x13a/0x8b0 [ 81.283099][ T6626] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.283122][ T6626] do_fast_syscall_32+0x32/0x70 [ 81.283144][ T6626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.283166][ T6626] RIP: 0023:0xf701efec [ 81.283186][ T6626] Code: Unable to access opcode bytes at 0xf701efc2. [ 81.283194][ T6626] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 81.283212][ T6626] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000800001c0 [ 81.283224][ T6626] RDX: 0000000080000540 RSI: 0000000000000028 RDI: 00000000fffffffe [ 81.283234][ T6626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.283249][ T6626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.283260][ T6626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.283283][ T6626] [ 81.388969][ T35] usb 6-1: device descriptor read/64, error -71 [ 81.497089][ T35] usb usb6-port1: attempt power cycle [ 81.705942][ T6630] 9p: Bad value for 'rfdno' [ 81.834497][ T6638] syz.0.213 uses obsolete (PF_INET,SOCK_PACKET) [ 81.847997][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.869009][ T35] usb 6-1: device descriptor read/8, error -71 [ 81.939838][ T6645] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.969469][ T6645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.986339][ T6645] FAULT_INJECTION: forcing a failure. [ 81.986339][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 81.986422][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT(full) [ 81.986459][ T6645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.986472][ T6645] Call Trace: [ 81.986479][ T6645] [ 81.986487][ T6645] dump_stack_lvl+0x100/0x190 [ 81.986545][ T6645] should_fail_ex.cold+0x5/0xa [ 81.986569][ T6645] should_failslab+0xc2/0x120 [ 81.986598][ T6645] __kmalloc_cache_node_noprof+0x94/0x720 [ 81.986620][ T6645] ? blkg_conf_open_bdev+0x2e3/0x410 [ 81.986649][ T6645] ? blk_throtl_init+0xa2/0x5b0 [ 81.986677][ T6645] blk_throtl_init+0xa2/0x5b0 [ 81.986698][ T6645] ? kernfs_root_flags+0x19/0x60 [ 81.986725][ T6645] tg_set_conf.isra.0+0x252/0x500 [ 81.986753][ T6645] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 81.986785][ T6645] ? kernfs_root+0xf8/0x2a0 [ 81.986810][ T6645] cgroup_file_write+0x1e6/0x8a0 [ 81.986843][ T6645] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 81.986868][ T6645] ? __pfx_cgroup_file_write+0x10/0x10 [ 81.986894][ T6645] ? __kmalloc_noprof+0x350/0x840 [ 81.986921][ T6645] kernfs_fop_write_iter+0x3e0/0x5f0 [ 81.986945][ T6645] ? __pfx_cgroup_file_write+0x10/0x10 [ 81.986974][ T6645] vfs_write+0x6af/0x1050 [ 81.986993][ T6645] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 81.987022][ T6645] ? __pfx_vfs_write+0x10/0x10 [ 81.987038][ T6645] ? find_held_lock+0x2b/0x80 [ 81.987077][ T6645] ksys_write+0x12a/0x250 [ 81.987095][ T6645] ? __pfx_ksys_write+0x10/0x10 [ 81.987111][ T6645] ? ksys_write+0x1ac/0x250 [ 81.987129][ T6645] ? __pfx_ksys_write+0x10/0x10 [ 81.987152][ T6645] __do_fast_syscall_32+0x13a/0x8b0 [ 81.987181][ T6645] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.987207][ T6645] do_fast_syscall_32+0x32/0x70 [ 81.987231][ T6645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.987254][ T6645] RIP: 0023:0xf701efec [ 81.987276][ T6645] Code: Unable to access opcode bytes at 0xf701efc2. [ 81.987285][ T6645] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 81.987303][ T6645] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800000c0 [ 81.987314][ T6645] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 81.987325][ T6645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.987335][ T6645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.987345][ T6645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.987372][ T6645] [ 82.118097][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.151785][ T35] usb 6-1: device descriptor read/8, error -71 [ 82.161243][ T6652] FAULT_INJECTION: forcing a failure. [ 82.161243][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.161297][ T6652] CPU: 2 UID: 0 PID: 6652 Comm: syz.0.218 Not tainted syzkaller #0 PREEMPT(full) [ 82.161321][ T6652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.161329][ T6652] Call Trace: [ 82.161333][ T6652] [ 82.161338][ T6652] dump_stack_lvl+0x100/0x190 [ 82.161356][ T6652] should_fail_ex.cold+0x5/0xa [ 82.161371][ T6652] _copy_from_user+0x2e/0xd0 [ 82.161383][ T6652] bpf_test_init.isra.0+0xaf/0x100 [ 82.161408][ T6652] bpf_prog_test_run_xdp+0x587/0x1670 [ 82.161431][ T6652] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.161452][ T6652] ? fput+0x7c/0x100 [ 82.161465][ T6652] ? __bpf_prog_get+0x97/0x290 [ 82.161479][ T6652] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.161496][ T6652] __sys_bpf+0x2265/0x4a30 [ 82.161510][ T6652] ? __pfx___sys_bpf+0x10/0x10 [ 82.161519][ T6652] ? lock_acquire+0x1d1/0x380 [ 82.161533][ T6652] ? get_pid_task+0x2a/0x250 [ 82.161544][ T6652] ? find_held_lock+0x2b/0x80 [ 82.161554][ T6652] ? get_pid_task+0xfc/0x250 [ 82.161564][ T6652] ? get_pid_task+0xfc/0x250 [ 82.161578][ T6652] ? proc_fail_nth_write+0x9f/0x220 [ 82.161589][ T6652] ? find_held_lock+0x2b/0x80 [ 82.161602][ T6652] ? rcu_read_lock_any_held+0x6a/0x90 [ 82.161614][ T6652] ? find_held_lock+0x2b/0x80 [ 82.161626][ T6652] ? ksys_write+0x190/0x250 [ 82.161636][ T6652] ? ksys_write+0x190/0x250 [ 82.161646][ T6652] ? lock_acquire+0x1d1/0x380 [ 82.161669][ T6652] ? fput+0x7c/0x100 [ 82.161683][ T6652] ? __ia32_sys_bpf+0xcc/0x170 [ 82.161693][ T6652] __ia32_sys_bpf+0xcc/0x170 [ 82.161704][ T6652] ? __do_fast_syscall_32+0xb3/0x8b0 [ 82.161719][ T6652] __do_fast_syscall_32+0x13a/0x8b0 [ 82.161737][ T6652] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.161758][ T6652] do_fast_syscall_32+0x32/0x70 [ 82.161780][ T6652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.161803][ T6652] RIP: 0023:0xf7f62fec [ 82.161824][ T6652] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 82.161833][ T6652] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 82.161849][ T6652] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 82.161858][ T6652] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.161864][ T6652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.161870][ T6652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.161876][ T6652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.161890][ T6652] [ 82.267216][ T35] usb usb6-port1: unable to enumerate USB device [ 82.275456][ T6657] 9p: Bad value for 'rfdno' [ 82.399968][ T6661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.473405][ T6663] lo: entered allmulticast mode [ 82.476212][ T6663] bond0: entered allmulticast mode [ 82.477396][ T6663] dummy0: entered allmulticast mode [ 82.478256][ T6663] eql: entered allmulticast mode [ 82.478398][ T6663] ifb0: entered allmulticast mode [ 82.479015][ T6663] ifb1: entered allmulticast mode [ 82.482856][ T6663] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 82.492684][ T6663] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 82.496474][ T6663] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 82.497201][ T6663] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 82.498055][ T6663] hwsim0: entered allmulticast mode [ 82.498316][ T6663] ieee802154 phy0 wpan0: entered allmulticast mode [ 82.498642][ T6663] ieee802154 phy1 wpan1: entered allmulticast mode [ 82.498953][ T6663] teql0: entered allmulticast mode [ 82.499146][ T6663] tunl0: entered allmulticast mode [ 82.499336][ T6663] gre0: entered allmulticast mode [ 82.499533][ T6663] gretap0: entered allmulticast mode [ 82.500054][ T6663] erspan0: entered allmulticast mode [ 82.500167][ T6663] ip_vti0: entered allmulticast mode [ 82.500280][ T6663] ip6_vti0: entered allmulticast mode [ 82.500389][ T6663] sit0: entered allmulticast mode [ 82.500472][ T6663] ip6tnl0: entered allmulticast mode [ 82.500549][ T6663] ip6gre0: entered allmulticast mode [ 82.500641][ T6663] lapb0: entered allmulticast mode [ 82.500811][ T6663] lapb1: entered allmulticast mode [ 82.500965][ T6663] lapb2: entered allmulticast mode [ 82.501122][ T6663] lapb3: entered allmulticast mode [ 82.501270][ T6663] lapb4: entered allmulticast mode [ 82.501412][ T6663] lapb5: entered allmulticast mode [ 82.501556][ T6663] lapb6: entered allmulticast mode [ 82.506501][ T6663] lowpan0: entered allmulticast mode [ 82.540490][ T6665] input: syz1 as /devices/virtual/input/input10 [ 82.719263][ T6679] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 82.744927][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.358690][ T6682] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 83.655077][ T6692] FAULT_INJECTION: forcing a failure. [ 83.655077][ T6692] name fail_futex, interval 1, probability 0, space 0, times 1 [ 83.655146][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 83.655171][ T6692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.655179][ T6692] Call Trace: [ 83.655184][ T6692] [ 83.655189][ T6692] dump_stack_lvl+0x100/0x190 [ 83.655210][ T6692] should_fail_ex.cold+0x5/0xa [ 83.655226][ T6692] get_futex_key+0xf72/0x14f0 [ 83.655245][ T6692] ? __pfx_get_futex_key+0x10/0x10 [ 83.655261][ T6692] ? lock_acquire+0x1d1/0x380 [ 83.655276][ T6692] ? get_pid_task+0x2a/0x250 [ 83.655288][ T6692] ? find_held_lock+0x2b/0x80 [ 83.655298][ T6692] ? get_pid_task+0xfc/0x250 [ 83.655310][ T6692] futex_wake+0xf4/0x5e0 [ 83.655324][ T6692] ? __pfx_futex_wake+0x10/0x10 [ 83.655335][ T6692] ? find_held_lock+0x2b/0x80 [ 83.655349][ T6692] ? rcu_read_lock_any_held+0x6a/0x90 [ 83.655366][ T6692] ? find_held_lock+0x2b/0x80 [ 83.655378][ T6692] do_futex+0x2b2/0x440 [ 83.655389][ T6692] ? __pfx_do_futex+0x10/0x10 [ 83.655398][ T6692] ? __mutex_unlock_slowpath+0x35d/0x930 [ 83.655417][ T6692] __ia32_sys_futex_time32+0x2f4/0x470 [ 83.655431][ T6692] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 83.655442][ T6692] ? fput+0x7c/0x100 [ 83.655456][ T6692] ? ksys_write+0x1ac/0x250 [ 83.655466][ T6692] ? __pfx_ksys_write+0x10/0x10 [ 83.655479][ T6692] __do_fast_syscall_32+0x13a/0x8b0 [ 83.655493][ T6692] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.655508][ T6692] do_fast_syscall_32+0x32/0x70 [ 83.655522][ T6692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.655536][ T6692] RIP: 0023:0xf7f42fec [ 83.655551][ T6692] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 83.655556][ T6692] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 83.655567][ T6692] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000001 [ 83.655574][ T6692] RDX: 00000000fffffffe RSI: 0000000000000000 RDI: 0000000000000000 [ 83.655580][ T6692] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 83.655586][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.655593][ T6692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.655606][ T6692] [ 83.831804][ T6700] smpboot: CPU 1 is now offline [ 83.939036][ T6704] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 83.940373][ T6700] netlink: 80 bytes leftover after parsing attributes in process `syz.2.234'. [ 83.945800][ T5755] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 84.088885][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.236'. [ 84.393090][ T6562] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 84.407551][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.537460][ T6562] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.538335][ T6562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.538351][ T6562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.538362][ T6562] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.538380][ T6562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.545592][ T6562] usb 6-1: config 0 descriptor?? [ 84.609887][ T5755] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 84.713905][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 85.107014][ T6729] FAULT_INJECTION: forcing a failure. [ 85.107014][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.107062][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 85.107085][ T6729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.107093][ T6729] Call Trace: [ 85.107098][ T6729] [ 85.107103][ T6729] dump_stack_lvl+0x100/0x190 [ 85.107135][ T6729] should_fail_ex.cold+0x5/0xa [ 85.107149][ T6729] _copy_to_user+0x32/0xd0 [ 85.107163][ T6729] simple_read_from_buffer+0xcb/0x170 [ 85.107180][ T6729] proc_fail_nth_read+0x1af/0x230 [ 85.107199][ T6729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.107217][ T6729] ? rw_verify_area+0xce/0x6d0 [ 85.107233][ T6729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.107251][ T6729] vfs_read+0x1e4/0xb40 [ 85.107261][ T6729] ? lock_acquire+0x1d1/0x380 [ 85.107275][ T6729] ? __fget_files+0x34/0x3d0 [ 85.107286][ T6729] ? __pfx_vfs_read+0x10/0x10 [ 85.107295][ T6729] ? find_held_lock+0x2b/0x80 [ 85.107306][ T6729] ? __fget_files+0x215/0x3d0 [ 85.107319][ T6729] ? __fget_files+0x21f/0x3d0 [ 85.107334][ T6729] ksys_read+0x12a/0x250 [ 85.107344][ T6729] ? __pfx_ksys_read+0x10/0x10 [ 85.107358][ T6729] do_int80_emulation+0x166/0x650 [ 85.107374][ T6729] asm_int80_emulation+0x1a/0x20 [ 85.107386][ T6729] RIP: 0023:0xf71575ab [ 85.107394][ T6729] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 85.107405][ T6729] RSP: 002b:00000000f53cb4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 85.107416][ T6729] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53cb5d0 [ 85.107422][ T6729] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 85.107428][ T6729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.107434][ T6729] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.107440][ T6729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.107454][ T6729] [ 85.466648][ T6562] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.467983][ T6562] usb 6-1: USB disconnect, device number 10 [ 85.541241][ T6753] FAULT_INJECTION: forcing a failure. [ 85.541241][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 85.541310][ T6753] CPU: 2 UID: 0 PID: 6753 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT(full) [ 85.541334][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.541343][ T6753] Call Trace: [ 85.541348][ T6753] [ 85.541352][ T6753] dump_stack_lvl+0x100/0x190 [ 85.541371][ T6753] should_fail_ex.cold+0x5/0xa [ 85.541386][ T6753] should_failslab+0xc2/0x120 [ 85.541401][ T6753] __kmalloc_cache_noprof+0x91/0x6d0 [ 85.541419][ T6753] ? shrinker_alloc+0xf5/0xc90 [ 85.541439][ T6753] shrinker_alloc+0xf5/0xc90 [ 85.541458][ T6753] ? mark_held_locks+0x40/0x70 [ 85.541473][ T6753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.541487][ T6753] ? rcu_is_watching+0x13/0xc0 [ 85.541498][ T6753] ? __pfx_shrinker_alloc+0x10/0x10 [ 85.541517][ T6753] ? lockdep_init_map_type+0x5c/0x250 [ 85.541532][ T6753] ? lockdep_init_map_type+0x5c/0x250 [ 85.541548][ T6753] ? __raw_spin_lock_init+0x3a/0x110 [ 85.541565][ T6753] ? __init_rwsem+0x10e/0x180 [ 85.541582][ T6753] sget_fc+0x979/0x1f20 [ 85.541603][ T6753] ? __pfx_set_anon_super_fc+0x10/0x10 [ 85.541619][ T6753] ? __pfx_sget_fc+0x10/0x10 [ 85.541636][ T6753] ? __pfx___mutex_lock+0x10/0x10 [ 85.541651][ T6753] ? rcu_is_watching+0x13/0xc0 [ 85.541662][ T6753] ? apparmor_capable+0x1d7/0x4d0 [ 85.541677][ T6753] ? __pfx_ramfs_fill_super+0x10/0x10 [ 85.541691][ T6753] get_tree_nodev+0x28/0x190 [ 85.541709][ T6753] vfs_get_tree+0x92/0x320 [ 85.541724][ T6753] vfs_cmd_create+0xd7/0x2a0 [ 85.541741][ T6753] __do_sys_fsconfig+0x55a/0xcb0 [ 85.541758][ T6753] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 85.541779][ T6753] ? ksys_write+0x1ac/0x250 [ 85.541789][ T6753] ? __pfx_ksys_write+0x10/0x10 [ 85.541803][ T6753] __do_fast_syscall_32+0x13a/0x8b0 [ 85.541818][ T6753] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.541833][ T6753] do_fast_syscall_32+0x32/0x70 [ 85.541848][ T6753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.541862][ T6753] RIP: 0023:0xf7f03fec [ 85.541876][ T6753] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 85.541881][ T6753] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 85.541892][ T6753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 85.541899][ T6753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.541905][ T6753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.541911][ T6753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.541917][ T6753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.541932][ T6753] [ 85.750300][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 85.751364][ T43] audit: type=1804 audit(1787987296.926:31): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.255" name="/newroot/41/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=13850 res=1 errno=0 [ 85.757070][ T43] audit: type=1800 audit(1787987296.926:32): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.255" name="iface_name" dev="configfs" ino=13850 res=0 errno=0 [ 85.758659][ T6763] binder: Unknown parameter 'hash' [ 85.759738][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.255'. [ 85.759757][ T6763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'. [ 85.988034][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 86.687216][ T6771] fido_id[6771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 87.140103][ T6780] wlan0 speed is unknown, defaulting to 1000 [ 87.848631][ T6783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.869091][ T43] audit: type=1400 audit(1787987299.046:33): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6782 comm="syz.1.261" name="p" offset=58 [ 88.066943][ T6790] FAULT_INJECTION: forcing a failure. [ 88.066943][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 88.066999][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT(full) [ 88.067022][ T6790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.067030][ T6790] Call Trace: [ 88.067034][ T6790] [ 88.067038][ T6790] dump_stack_lvl+0x100/0x190 [ 88.067056][ T6790] should_fail_ex.cold+0x5/0xa [ 88.067076][ T6790] should_failslab+0xc2/0x120 [ 88.067090][ T6790] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.067102][ T6790] ? alloc_empty_file+0x5b/0x1c0 [ 88.067118][ T6790] alloc_empty_file+0x5b/0x1c0 [ 88.067132][ T6790] path_openat+0xdb/0x2440 [ 88.067147][ T6790] ? __pfx_path_openat+0x10/0x10 [ 88.067163][ T6790] do_file_open+0x20e/0x430 [ 88.067175][ T6790] ? __pfx_do_file_open+0x10/0x10 [ 88.067197][ T6790] ? _raw_spin_unlock+0x28/0x50 [ 88.067208][ T6790] ? alloc_fd+0x471/0x7a0 [ 88.067224][ T6790] do_sys_openat2+0x10f/0x1e0 [ 88.067238][ T6790] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.067253][ T6790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.067268][ T6790] ? __fget_files+0x21f/0x3d0 [ 88.067281][ T6790] __ia32_compat_sys_openat+0x12d/0x210 [ 88.067297][ T6790] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 88.067312][ T6790] ? ksys_write+0x1ac/0x250 [ 88.067327][ T6790] do_int80_emulation+0x166/0x650 [ 88.067343][ T6790] asm_int80_emulation+0x1a/0x20 [ 88.067354][ T6790] RIP: 0023:0xf71675ab [ 88.067363][ T6790] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 88.067373][ T6790] RSP: 002b:00000000f542603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 88.067384][ T6790] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426100 [ 88.067391][ T6790] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.067397][ T6790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.067403][ T6790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.067409][ T6790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.067422][ T6790] [ 88.176997][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.190013][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 88.190079][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 88.201875][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 88.337143][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.343990][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.349981][ T10] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.353989][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.376161][ T6800] syzkaller0: entered promiscuous mode [ 88.376242][ T6800] syzkaller0: entered allmulticast mode [ 88.390222][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.395404][ T10] usb 6-1: invalid MIDI out EP 0 [ 88.400100][ T6800] tipc: Started in network mode [ 88.400928][ T6800] tipc: Node identity f2a3835dc9f2, cluster identity 4711 [ 88.401137][ T6800] tipc: Enabled bearer , priority 0 [ 88.427058][ T6799] tipc: Resetting bearer [ 88.449301][ T6799] tipc: Disabling bearer [ 88.542607][ T6806] overlayfs: missing 'lowerdir' [ 88.566685][ T6786] FAULT_INJECTION: forcing a failure. [ 88.566685][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 88.575174][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) [ 88.575215][ T6786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.575226][ T6786] Call Trace: [ 88.575232][ T6786] [ 88.575240][ T6786] dump_stack_lvl+0x100/0x190 [ 88.575272][ T6786] should_fail_ex.cold+0x5/0xa [ 88.575295][ T6786] should_failslab+0xc2/0x120 [ 88.575319][ T6786] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.575340][ T6786] ? alloc_empty_file+0x5b/0x1c0 [ 88.575368][ T6786] alloc_empty_file+0x5b/0x1c0 [ 88.575392][ T6786] path_openat+0xdb/0x2440 [ 88.575416][ T6786] ? __pfx_path_openat+0x10/0x10 [ 88.575445][ T6786] do_file_open+0x20e/0x430 [ 88.575467][ T6786] ? __pfx_do_file_open+0x10/0x10 [ 88.575505][ T6786] ? _raw_spin_unlock+0x28/0x50 [ 88.575524][ T6786] ? alloc_fd+0x471/0x7a0 [ 88.575551][ T6786] do_sys_openat2+0x10f/0x1e0 [ 88.575576][ T6786] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.575604][ T6786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.575633][ T6786] __ia32_compat_sys_openat+0x12d/0x210 [ 88.575661][ T6786] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 88.575685][ T6786] ? fput+0x7c/0x100 [ 88.575706][ T6786] ? ksys_write+0x1ac/0x250 [ 88.575730][ T6786] ? __pfx_ksys_write+0x10/0x10 [ 88.575753][ T6786] __do_fast_syscall_32+0x13a/0x8b0 [ 88.575778][ T6786] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.575960][ T6786] do_fast_syscall_32+0x32/0x70 [ 88.575986][ T6786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.576009][ T6786] RIP: 0023:0xf7f42fec [ 88.576030][ T6786] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 88.576038][ T6786] RSP: 002b:00000000f540650c EFLAGS: 00000292 [ 88.576042][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.576049][ T6786] ORIG_RAX: 0000000000000127 [ 88.576057][ T6786] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 88.576069][ T6786] RDX: 00000000000c2882 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.576080][ T6786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.576090][ T6786] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.576101][ T6786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.576126][ T6786] [ 88.583340][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.589666][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.591334][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.597328][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.608932][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.615834][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.618159][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.635617][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.649985][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.655282][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.659418][ T6816] FAULT_INJECTION: forcing a failure. [ 88.659418][ T6816] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.659441][ T6816] CPU: 2 UID: 0 PID: 6816 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT(full) [ 88.659453][ T6816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.659460][ T6816] Call Trace: [ 88.659465][ T6816] [ 88.659470][ T6816] dump_stack_lvl+0x100/0x190 [ 88.659489][ T6816] should_fail_ex.cold+0x5/0xa [ 88.659502][ T6816] ? prepare_alloc_pages+0x16d/0x5b0 [ 88.659518][ T6816] should_fail_alloc_page+0xeb/0x140 [ 88.659534][ T6816] prepare_alloc_pages+0x1f0/0x5b0 [ 88.659550][ T6816] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 88.659570][ T6816] ? __page_table_check_zero+0x27f/0x410 [ 88.659589][ T6816] ? __lock_acquire+0x4c5/0x1ec0 [ 88.659608][ T6816] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.659630][ T6816] ? __lock_acquire+0x4c5/0x1ec0 [ 88.659650][ T6816] ? lock_acquire+0x1d1/0x380 [ 88.659664][ T6816] ? unwind_next_frame+0xbd/0x2090 [ 88.659681][ T6816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.659698][ T6816] ? policy_nodemask+0xed/0x4f0 [ 88.659713][ T6816] alloc_pages_mpol+0x201/0x550 [ 88.659728][ T6816] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.659741][ T6816] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.659756][ T6816] ? is_bpf_text_address+0x94/0x1a0 [ 88.659771][ T6816] ? kernel_text_address+0x8d/0x100 [ 88.659786][ T6816] folio_alloc_mpol_noprof+0x36/0x260 [ 88.659803][ T6816] vma_alloc_folio_noprof+0xed/0x1d0 [ 88.659819][ T6816] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 88.659840][ T6816] do_anonymous_page+0xac9/0x2050 [ 88.659860][ T6816] ? __pfx_do_anonymous_page+0x10/0x10 [ 88.659879][ T6816] ? rcu_read_unlock+0x2d/0xb0 [ 88.659895][ T6816] ? rcu_read_unlock+0x2d/0xb0 [ 88.659910][ T6816] ? __pte_offset_map+0x179/0x310 [ 88.659925][ T6816] __handle_mm_fault+0x1ff3/0x2f60 [ 88.659943][ T6816] ? __pfx___handle_mm_fault+0x10/0x10 [ 88.659958][ T6816] ? __pfx_mt_find+0x10/0x10 [ 88.659981][ T6816] ? find_vma+0xbf/0x140 [ 88.659992][ T6816] ? __pfx_find_vma+0x10/0x10 [ 88.660005][ T6816] handle_mm_fault+0x363/0xa20 [ 88.660023][ T6816] do_user_addr_fault+0x745/0x12f0 [ 88.660040][ T6816] exc_page_fault+0x6f/0xd0 [ 88.660053][ T6816] asm_exc_page_fault+0x26/0x30 [ 88.660064][ T6816] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 88.660077][ T6816] Code: 00 00 00 00 e9 4d ff ff ff e8 b0 c4 e5 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 80 e1 57 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 88.660087][ T6816] RSP: 0018:ffffc90003a6f918 EFLAGS: 00050246 [ 88.660098][ T6816] RAX: 0000000000000001 RBX: 0000000080001640 RCX: 0000000000000002 [ 88.660104][ T6816] RDX: 0000000000000001 RSI: ffff88804eae4000 RDI: 0000000080001640 [ 88.660111][ T6816] RBP: ffffc90003a6fcf8 R08: 0000000000000000 R09: ffffed1009d5c800 [ 88.660117][ T6816] R10: ffff88804eae4001 R11: 0000000000000001 R12: 0000000080001642 [ 88.660123][ T6816] R13: 00007ffffffff000 R14: ffff88804eae4000 R15: 0000000000000002 [ 88.660138][ T6816] ? _copy_to_iter+0x380/0x1720 [ 88.660150][ T6816] ? __mutex_unlock_slowpath+0x35d/0x930 [ 88.660165][ T6816] ? __pfx__copy_to_iter+0x10/0x10 [ 88.660176][ T6816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.660192][ T6816] ? kernfs_put_active+0x93/0xe0 [ 88.660209][ T6816] seq_read_iter+0xdab/0x1270 [ 88.660226][ T6816] kernfs_fop_read_iter+0x46c/0x610 [ 88.660245][ T6816] do_iter_readv_writev+0x616/0x930 [ 88.660263][ T6816] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 88.660279][ T6816] ? common_file_perm+0x266/0x500 [ 88.660299][ T6816] ? rw_verify_area+0xce/0x6d0 [ 88.660316][ T6816] vfs_readv+0x4d3/0x8d0 [ 88.660332][ T6816] ? rcu_is_watching+0x13/0xc0 [ 88.660343][ T6816] ? trace_contention_end+0x126/0x160 [ 88.660361][ T6816] ? __pfx_vfs_readv+0x10/0x10 [ 88.660382][ T6816] ? lock_acquire+0x1d1/0x380 [ 88.660396][ T6816] ? __fget_files+0x34/0x3d0 [ 88.660412][ T6816] ? __fget_files+0x21f/0x3d0 [ 88.660427][ T6816] ? do_readv+0x13e/0x340 [ 88.660442][ T6816] do_readv+0x13e/0x340 [ 88.660458][ T6816] ? __pfx_do_readv+0x10/0x10 [ 88.660473][ T6816] ? ksys_write+0x1ac/0x250 [ 88.660483][ T6816] ? __pfx_ksys_write+0x10/0x10 [ 88.660496][ T6816] __do_fast_syscall_32+0x13a/0x8b0 [ 88.660510][ T6816] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.660525][ T6816] do_fast_syscall_32+0x32/0x70 [ 88.660539][ T6816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.660553][ T6816] RIP: 0023:0xf7f62fec [ 88.660566][ T6816] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 88.660571][ T6816] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 88.660580][ T6816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 88.660587][ T6816] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.660594][ T6816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.660599][ T6816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.660606][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.660620][ T6816] [ 88.844537][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.866192][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.903145][ T5755] Bluetooth: hci3: unexpected event for opcode 0x200c [ 88.929997][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.937829][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.946973][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.947583][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.959174][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.967502][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.977385][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 88.984066][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.004073][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.017257][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.017926][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.024012][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.024800][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.033859][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.040608][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.045148][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.056870][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 89.058841][ T10] usb 6-1: USB disconnect, device number 11 [ 89.064111][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.077040][ T6830] tmpfs: Bad value for 'nr_blocks' [ 89.077862][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.098649][ T6806] overlay: filesystem on ./file0 not supported as upperdir [ 89.117226][ T6830] wlan0 speed is unknown, defaulting to 1000 [ 89.297772][ T6849] ======================================================= [ 89.297772][ T6849] WARNING: The mand mount option has been deprecated and [ 89.297772][ T6849] and is ignored by this kernel. Remove the mand [ 89.297772][ T6849] option from the mount to silence this warning. [ 89.297772][ T6849] ======================================================= [ 89.297973][ T6849] overlay: Unknown parameter 'fscontext' [ 89.565089][ T43] audit: type=1326 audit(1787987300.736:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.0.284" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62fec code=0x0 [ 90.643579][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 91.643205][ T6892] sctp: [Deprecated]: syz.0.292 (pid 6892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.643205][ T6892] Use struct sctp_sack_info instead [ 91.762522][ T6909] FAULT_INJECTION: forcing a failure. [ 91.762522][ T6909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.771104][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 91.771157][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.771174][ T6909] Call Trace: [ 91.771182][ T6909] [ 91.771193][ T6909] dump_stack_lvl+0x100/0x190 [ 91.771229][ T6909] should_fail_ex.cold+0x5/0xa [ 91.771259][ T6909] _copy_from_user+0x2e/0xd0 [ 91.771290][ T6909] video_usercopy+0x9e0/0x14c0 [ 91.771325][ T6909] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.771360][ T6909] ? __pfx_video_usercopy+0x10/0x10 [ 91.771417][ T6909] ? __fget_files+0x215/0x3d0 [ 91.771444][ T6909] ? hook_file_ioctl_common+0x140/0x440 [ 91.771485][ T6909] v4l2_ioctl+0x1bd/0x250 [ 91.771523][ T6909] v4l2_compat_ioctl32+0x20f/0x2d0 [ 91.771550][ T6909] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 91.771579][ T6909] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 91.771627][ T6909] __do_fast_syscall_32+0x13a/0x8b0 [ 91.771659][ T6909] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.771690][ T6909] do_fast_syscall_32+0x32/0x70 [ 91.771719][ T6909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.771749][ T6909] RIP: 0023:0xf7f62fec [ 91.771777][ T6909] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 91.771788][ T6909] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 91.771813][ T6909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004020565a [ 91.771829][ T6909] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.771843][ T6909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.771855][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.771867][ T6909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.771900][ T6909] [ 91.814229][ T6904] sctp: [Deprecated]: syz.0.295 (pid 6904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.814229][ T6904] Use struct sctp_sack_info instead [ 91.824768][ T6912] syzkaller0: entered promiscuous mode [ 91.824785][ T6912] syzkaller0: entered allmulticast mode [ 91.836176][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'. [ 91.864106][ T6914] FAULT_INJECTION: forcing a failure. [ 91.864106][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.864137][ T6914] CPU: 2 UID: 0 PID: 6914 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 91.864161][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.864172][ T6914] Call Trace: [ 91.864178][ T6914] [ 91.864184][ T6914] dump_stack_lvl+0x100/0x190 [ 91.864213][ T6914] should_fail_ex.cold+0x5/0xa [ 91.864238][ T6914] _copy_from_user+0x2e/0xd0 [ 91.864260][ T6914] dvb_usercopy+0x27e/0x340 [ 91.864289][ T6914] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 91.864311][ T6914] ? __pfx_dvb_usercopy+0x10/0x10 [ 91.864337][ T6914] ? __fget_files+0x34/0x3d0 [ 91.864367][ T6914] ? __fget_files+0x21f/0x3d0 [ 91.864391][ T6914] dvb_demux_ioctl+0x29/0x40 [ 91.864418][ T6914] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 91.864445][ T6914] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 91.864477][ T6914] __do_fast_syscall_32+0x13a/0x8b0 [ 91.864500][ T6914] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.864525][ T6914] do_fast_syscall_32+0x32/0x70 [ 91.864549][ T6914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.864581][ T6914] RIP: 0023:0xf701efec [ 91.864600][ T6914] Code: Unable to access opcode bytes at 0xf701efc2. [ 91.864609][ T6914] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 91.864628][ T6914] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000403c6f2b [ 91.864640][ T6914] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.864650][ T6914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.864661][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.864671][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.864696][ T6914] [ 92.267520][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 92.495556][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 92.712138][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.507864][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 94.003250][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.011904][ T6983] FAULT_INJECTION: forcing a failure. [ 94.011904][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.011979][ T6983] CPU: 2 UID: 0 PID: 6983 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) [ 94.012015][ T6983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.012027][ T6983] Call Trace: [ 94.012033][ T6983] [ 94.012040][ T6983] dump_stack_lvl+0x100/0x190 [ 94.012068][ T6983] should_fail_ex.cold+0x5/0xa [ 94.012092][ T6983] _copy_to_user+0x32/0xd0 [ 94.012115][ T6983] simple_read_from_buffer+0xcb/0x170 [ 94.012136][ T6983] proc_fail_nth_read+0x1af/0x230 [ 94.012167][ T6983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.012198][ T6983] ? rw_verify_area+0xce/0x6d0 [ 94.012225][ T6983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.012253][ T6983] vfs_read+0x1e4/0xb40 [ 94.012270][ T6983] ? lock_acquire+0x1d1/0x380 [ 94.012294][ T6983] ? __fget_files+0x34/0x3d0 [ 94.012313][ T6983] ? __pfx_vfs_read+0x10/0x10 [ 94.012328][ T6983] ? find_held_lock+0x2b/0x80 [ 94.012348][ T6983] ? __fget_files+0x215/0x3d0 [ 94.012371][ T6983] ? __fget_files+0x21f/0x3d0 [ 94.012397][ T6983] ksys_read+0x12a/0x250 [ 94.012415][ T6983] ? __pfx_ksys_read+0x10/0x10 [ 94.012439][ T6983] do_int80_emulation+0x166/0x650 [ 94.012466][ T6983] asm_int80_emulation+0x1a/0x20 [ 94.012484][ T6983] RIP: 0023:0xf71475ab [ 94.012499][ T6983] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 94.012516][ T6983] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 94.012534][ T6983] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000f54065d0 [ 94.012546][ T6983] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 94.012565][ T6983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.012576][ T6983] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.012587][ T6983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.012612][ T6983] [ 94.253782][ T6988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.254079][ T6988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.254222][ T6988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.254316][ T6988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.290446][ T6995] binder: 6994:6995 ioctl c0306201 800001c0 returned -22 [ 94.352266][ T7000] FAULT_INJECTION: forcing a failure. [ 94.352266][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 94.352354][ T7000] CPU: 3 UID: 0 PID: 7000 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT(full) [ 94.352401][ T7000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.352413][ T7000] Call Trace: [ 94.352419][ T7000] [ 94.352426][ T7000] dump_stack_lvl+0x100/0x190 [ 94.352454][ T7000] should_fail_ex.cold+0x5/0xa [ 94.352476][ T7000] should_failslab+0xc2/0x120 [ 94.352499][ T7000] __kmalloc_noprof+0xfc/0x840 [ 94.352518][ T7000] ? tomoyo_encode2+0xfb/0x3c0 [ 94.352547][ T7000] tomoyo_encode2+0xfb/0x3c0 [ 94.352574][ T7000] tomoyo_encode+0x29/0x50 [ 94.352596][ T7000] tomoyo_realpath_from_path+0x18c/0x690 [ 94.352626][ T7000] tomoyo_path_number_perm+0x23c/0x580 [ 94.352648][ T7000] ? tomoyo_path_number_perm+0x22e/0x580 [ 94.352670][ T7000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.352692][ T7000] ? get_pid_task+0x106/0x250 [ 94.352716][ T7000] ? __lock_acquire+0x4c5/0x1ec0 [ 94.352749][ T7000] ? __fget_files+0x34/0x3d0 [ 94.352768][ T7000] ? find_held_lock+0x2b/0x80 [ 94.352784][ T7000] ? __fget_files+0x215/0x3d0 [ 94.352798][ T7000] ? hook_file_ioctl_common+0x140/0x440 [ 94.352819][ T7000] ? __fget_files+0x215/0x3d0 [ 94.352840][ T7000] ? __fget_files+0x21f/0x3d0 [ 94.352861][ T7000] security_file_ioctl_compat+0xd3/0x230 [ 94.352886][ T7000] __ia32_compat_sys_ioctl+0xc2/0x360 [ 94.352914][ T7000] __do_fast_syscall_32+0x13a/0x8b0 [ 94.352935][ T7000] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.352956][ T7000] do_fast_syscall_32+0x32/0x70 [ 94.352978][ T7000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.352999][ T7000] RIP: 0023:0xf7f03fec [ 94.353019][ T7000] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 94.353026][ T7000] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 94.353043][ T7000] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005607 [ 94.353054][ T7000] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.353063][ T7000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.353073][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.353083][ T7000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.353112][ T7000] [ 94.357438][ T7000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.407431][ T6997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.407653][ T6997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.407796][ T6997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.407925][ T6997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.848832][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 95.041280][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 95.655183][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.741147][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.791378][ T7043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.824758][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 96.090449][ T7054] FAULT_INJECTION: forcing a failure. [ 96.090449][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 96.090524][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 96.090559][ T7054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.090573][ T7054] Call Trace: [ 96.090579][ T7054] [ 96.090587][ T7054] dump_stack_lvl+0x100/0x190 [ 96.090615][ T7054] should_fail_ex.cold+0x5/0xa [ 96.090638][ T7054] should_failslab+0xc2/0x120 [ 96.090661][ T7054] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.090682][ T7054] ? alloc_empty_file+0x5b/0x1c0 [ 96.090710][ T7054] alloc_empty_file+0x5b/0x1c0 [ 96.090733][ T7054] path_openat+0xdb/0x2440 [ 96.090754][ T7054] ? __pfx_path_openat+0x10/0x10 [ 96.090777][ T7054] do_file_open+0x20e/0x430 [ 96.090796][ T7054] ? __pfx_do_file_open+0x10/0x10 [ 96.090831][ T7054] ? _raw_spin_unlock+0x28/0x50 [ 96.090850][ T7054] ? alloc_fd+0x471/0x7a0 [ 96.090875][ T7054] do_sys_openat2+0x10f/0x1e0 [ 96.090899][ T7054] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.090925][ T7054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.090952][ T7054] __ia32_compat_sys_openat+0x12d/0x210 [ 96.090976][ T7054] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 96.090999][ T7054] ? fput+0x7c/0x100 [ 96.091020][ T7054] ? ksys_write+0x1ac/0x250 [ 96.091036][ T7054] ? __pfx_ksys_write+0x10/0x10 [ 96.091059][ T7054] __do_fast_syscall_32+0x13a/0x8b0 [ 96.091083][ T7054] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.091107][ T7054] do_fast_syscall_32+0x32/0x70 [ 96.091131][ T7054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.091155][ T7054] RIP: 0023:0xf7f62fec [ 96.091176][ T7054] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 96.091185][ T7054] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 96.091203][ T7054] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 96.091223][ T7054] RDX: 0000000000080201 RSI: 0000000000000088 RDI: 0000000000000000 [ 96.091234][ T7054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.091245][ T7054] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.091256][ T7054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.091282][ T7054] [ 96.093651][ T7054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.376914][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.459234][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 96.459400][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.459426][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.805361][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 96.812420][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 96.917437][ T7088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.096695][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.214433][ T7090] FAULT_INJECTION: forcing a failure. [ 97.214433][ T7090] name failslab, interval 1, probability 0, space 0, times 0 [ 97.214492][ T7090] CPU: 2 UID: 0 PID: 7090 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(full) [ 97.214516][ T7090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.214524][ T7090] Call Trace: [ 97.214528][ T7090] [ 97.214533][ T7090] dump_stack_lvl+0x100/0x190 [ 97.214552][ T7090] should_fail_ex.cold+0x5/0xa [ 97.214567][ T7090] should_failslab+0xc2/0x120 [ 97.214582][ T7090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.214595][ T7090] ? alloc_empty_file+0x5b/0x1c0 [ 97.214612][ T7090] alloc_empty_file+0x5b/0x1c0 [ 97.214626][ T7090] path_openat+0xdb/0x2440 [ 97.214641][ T7090] ? __pfx_path_openat+0x10/0x10 [ 97.214659][ T7090] do_file_open+0x20e/0x430 [ 97.214673][ T7090] ? __pfx_do_file_open+0x10/0x10 [ 97.214696][ T7090] ? _raw_spin_unlock+0x28/0x50 [ 97.214711][ T7090] ? alloc_fd+0x471/0x7a0 [ 97.214726][ T7090] do_sys_openat2+0x10f/0x1e0 [ 97.214741][ T7090] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.214770][ T7090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.214785][ T7090] ? __fget_files+0x21f/0x3d0 [ 97.214799][ T7090] __ia32_compat_sys_openat+0x12d/0x210 [ 97.214815][ T7090] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 97.214832][ T7090] ? ksys_write+0x1ac/0x250 [ 97.214847][ T7090] do_int80_emulation+0x166/0x650 [ 97.214863][ T7090] asm_int80_emulation+0x1a/0x20 [ 97.214875][ T7090] RIP: 0023:0xf71575ab [ 97.214884][ T7090] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 97.214896][ T7090] RSP: 002b:00000000f540d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 97.214907][ T7090] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f540d100 [ 97.214914][ T7090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.214920][ T7090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.214926][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.214933][ T7090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.214947][ T7090] [ 97.259328][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 97.277839][ T5892] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.300921][ T5892] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 97.300953][ T5892] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.300964][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.300976][ T5892] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.300987][ T5892] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.301012][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.404438][ T7096] tipc: Enabling of bearer rejected, failed to enable media [ 97.505519][ T5892] usb 5-1: GET_CAPABILITIES returned 0 [ 97.508120][ T5892] usbtmc 5-1:16.0: can't read capabilities [ 97.610922][ T7109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.673151][ T7110] tipc: Started in network mode [ 97.673215][ T7110] tipc: Node identity aa3a, cluster identity 4711 [ 97.673241][ T7110] tipc: Node number set to 43578 [ 97.711531][ T7086] FAULT_INJECTION: forcing a failure. [ 97.711531][ T7086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.711588][ T7086] CPU: 2 UID: 0 PID: 7086 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(full) [ 97.711617][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.711628][ T7086] Call Trace: [ 97.711634][ T7086] [ 97.711641][ T7086] dump_stack_lvl+0x100/0x190 [ 97.711670][ T7086] should_fail_ex.cold+0x5/0xa [ 97.711694][ T7086] _copy_from_user+0x2e/0xd0 [ 97.711721][ T7086] snd_seq_ioctl+0x1bf/0x410 [ 97.711737][ T7086] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 97.711759][ T7086] ? __fget_files+0x21f/0x3d0 [ 97.711774][ T7086] snd_seq_ioctl_compat+0x13b/0x300 [ 97.711787][ T7086] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 97.711802][ T7086] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 97.711821][ T7086] __do_fast_syscall_32+0x13a/0x8b0 [ 97.711837][ T7086] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.711851][ T7086] do_fast_syscall_32+0x32/0x70 [ 97.711866][ T7086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.711880][ T7086] RIP: 0023:0xf7f62fec [ 97.711895][ T7086] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 97.711900][ T7086] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 97.711911][ T7086] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000404c534a [ 97.711919][ T7086] RDX: 0000000080000ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.711925][ T7086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.711931][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.711938][ T7086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.711952][ T7086] [ 97.879066][ T7112] FAULT_INJECTION: forcing a failure. [ 97.879066][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.879122][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT(full) [ 97.879146][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.879154][ T7112] Call Trace: [ 97.879164][ T7112] [ 97.879168][ T7112] dump_stack_lvl+0x100/0x190 [ 97.879187][ T7112] should_fail_ex.cold+0x5/0xa [ 97.879202][ T7112] _copy_from_user+0x2e/0xd0 [ 97.879215][ T7112] dvb_frontend_handle_compat_ioctl+0x189/0x710 [ 97.879233][ T7112] ? tomoyo_path_number_perm+0x28f/0x580 [ 97.879248][ T7112] ? __pfx_dvb_frontend_handle_compat_ioctl+0x10/0x10 [ 97.879266][ T7112] ? tomoyo_path_number_perm+0x188/0x580 [ 97.879281][ T7112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.879296][ T7112] ? get_pid_task+0x106/0x250 [ 97.879312][ T7112] ? __lock_acquire+0x4c5/0x1ec0 [ 97.879328][ T7112] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.879348][ T7112] ? do_raw_spin_lock+0x128/0x260 [ 97.879365][ T7112] ? find_held_lock+0x2b/0x80 [ 97.879376][ T7112] ? down_interruptible+0x66/0xa0 [ 97.879404][ T7112] ? rcu_is_watching+0x13/0xc0 [ 97.879415][ T7112] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 97.879428][ T7112] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.879443][ T7112] dvb_frontend_compat_ioctl+0xf6/0x180 [ 97.879459][ T7112] ? __pfx_dvb_frontend_compat_ioctl+0x10/0x10 [ 97.879476][ T7112] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 97.879495][ T7112] __do_fast_syscall_32+0x13a/0x8b0 [ 97.879508][ T7112] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.879523][ T7112] do_fast_syscall_32+0x32/0x70 [ 97.879537][ T7112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.879551][ T7112] RIP: 0023:0xf701efec [ 97.879564][ T7112] Code: Unable to access opcode bytes at 0xf701efc2. [ 97.879569][ T7112] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 97.879580][ T7112] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040086f52 [ 97.879587][ T7112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.879593][ T7112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.879599][ T7112] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.879605][ T7112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.879619][ T7112] [ 97.898261][ T7112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.322700][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 98.525190][ T7120] netlink: 'syz.3.362': attribute type 29 has an invalid length. [ 99.666659][ T5847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 99.808323][ T65] e1000 0000:00:06.0 eth0: Reset adapter [ 99.822459][ T9] usb 5-1: USB disconnect, device number 4 [ 99.828400][ T5847] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.836286][ T5847] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.836400][ T5847] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.836448][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.851920][ T7127] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 99.878081][ T5847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.063881][ T7136] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 100.304642][ T7153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.310176][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 100.567385][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.622594][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 100.679262][ T5819] usb 8-1: USB disconnect, device number 4 [ 100.716767][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 100.719423][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.730646][ T25] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.730694][ T25] usb 5-1: config 0 has no interface number 0 [ 100.730750][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.743006][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.747917][ T25] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.752716][ T25] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.752775][ T25] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.752831][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.783726][ T25] usb 5-1: config 0 descriptor?? [ 100.811970][ T25] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.858243][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 100.987004][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 101.056981][ T7153] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 101.076286][ T5096] usb 5-1: USB disconnect, device number 5 [ 101.079339][ T5096] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 101.158019][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 101.316654][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 101.324055][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.330011][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 101.333593][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.342818][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.348163][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.354327][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.354445][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.177604][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 103.862379][ T65] usb 6-1: usb_control_msg returned -71 [ 103.865049][ T65] usbtmc 6-1:16.0: can't read capabilities [ 103.881336][ T65] usb 6-1: USB disconnect, device number 12 [ 111.144731][ T7220] xt_HMARK: proto mask must be zero with L3 mode [ 111.331321][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 111.431907][ T7238] vlan2: entered allmulticast mode [ 111.431990][ T7238] dummy0: entered allmulticast mode [ 111.521679][ T7224] tunl0: entered promiscuous mode [ 111.526000][ T7224] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 111.526077][ T7224] netlink: 9 bytes leftover after parsing attributes in process `syz.1.379'. [ 111.560865][ T7247] FAULT_INJECTION: forcing a failure. [ 111.560865][ T7247] name failslab, interval 1, probability 0, space 0, times 0 [ 111.560895][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(full) [ 111.560914][ T7247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.560923][ T7247] Call Trace: [ 111.560929][ T7247] [ 111.560949][ T7247] dump_stack_lvl+0x100/0x190 [ 111.560978][ T7247] should_fail_ex.cold+0x5/0xa [ 111.560999][ T7247] should_failslab+0xc2/0x120 [ 111.561020][ T7247] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.561038][ T7247] ? alloc_empty_file+0x5b/0x1c0 [ 111.561063][ T7247] alloc_empty_file+0x5b/0x1c0 [ 111.561084][ T7247] path_openat+0xdb/0x2440 [ 111.561104][ T7247] ? __pfx_path_openat+0x10/0x10 [ 111.561128][ T7247] do_file_open+0x20e/0x430 [ 111.561147][ T7247] ? __pfx_do_file_open+0x10/0x10 [ 111.561180][ T7247] ? _raw_spin_unlock+0x28/0x50 [ 111.561197][ T7247] ? alloc_fd+0x471/0x7a0 [ 111.561222][ T7247] do_sys_openat2+0x10f/0x1e0 [ 111.561243][ T7247] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.561266][ T7247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.561292][ T7247] __ia32_compat_sys_openat+0x12d/0x210 [ 111.561315][ T7247] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 111.561336][ T7247] ? fput+0x7c/0x100 [ 111.561353][ T7247] ? ksys_write+0x1ac/0x250 [ 111.561367][ T7247] ? __pfx_ksys_write+0x10/0x10 [ 111.561387][ T7247] __do_fast_syscall_32+0x13a/0x8b0 [ 111.561406][ T7247] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.561426][ T7247] do_fast_syscall_32+0x32/0x70 [ 111.561447][ T7247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.561468][ T7247] RIP: 0023:0xf701efec [ 111.561487][ T7247] Code: Unable to access opcode bytes at 0xf701efc2. [ 111.561494][ T7247] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 111.561510][ T7247] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 111.561520][ T7247] RDX: 0000000000004903 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.561529][ T7247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.561538][ T7247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.561548][ T7247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.561569][ T7247] [ 112.029460][ T7258] 9p: Bad value for 'wfdno' [ 112.103799][ T43] audit: type=1326 audit(1787987323.276:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.388" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fec code=0x0 [ 112.129641][ T7253] syzkaller0: left promiscuous mode [ 112.129713][ T7253] syzkaller0: left allmulticast mode [ 112.775658][ T7302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 112.775700][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 112.776416][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 113.066718][ T1034] usb 40-1: SetAddress Request (2) to port 0 [ 113.066994][ T1034] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 113.077972][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 113.078037][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 113.278682][ T7303] vhci_hcd: connection reset by peer [ 113.281460][ T5849] vhci_hcd vhci_hcd.1: stop threads [ 113.288394][ T5849] vhci_hcd vhci_hcd.1: release socket [ 113.292284][ T5849] vhci_hcd vhci_hcd.1: disconnect device [ 114.102994][ T7348] wlan0 speed is unknown, defaulting to 1000 [ 114.479657][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 115.135494][ T7369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.201972][ T7369] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 115.207605][ T7369] overlayfs: failed to look up (tracing) for ino (-66) [ 116.352545][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.428'. [ 116.626676][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.797397][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.798454][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.798479][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.798497][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.798530][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.800737][ T42] usb 5-1: config 0 descriptor?? [ 117.123969][ T7417] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 117.222054][ T42] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.408515][ T10] usb 5-1: USB disconnect, device number 6 [ 117.622610][ T7424] wlan0 speed is unknown, defaulting to 1000 [ 117.805545][ T7430] netlink: ct family unspecified [ 117.809735][ T7430] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.146736][ T1034] usb 40-1: device descriptor read/8, error -110 [ 118.539363][ T1034] usb usb40-port1: attempt power cycle [ 118.636806][ T5892] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 118.766646][ T5892] usb 8-1: device descriptor read/64, error -71 [ 119.016836][ T5892] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 119.099659][ T1034] usb usb40-port1: unable to enumerate USB device [ 119.156673][ T5892] usb 8-1: device descriptor read/64, error -71 [ 119.276922][ T5892] usb usb8-port1: attempt power cycle [ 119.616693][ T5892] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 119.623035][ T7455] xt_HMARK: proto mask must be zero with L3 mode [ 119.647326][ T5892] usb 8-1: device descriptor read/8, error -71 [ 119.757957][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 119.799637][ T7466] vlan2: entered allmulticast mode [ 119.799731][ T7466] dummy0: entered allmulticast mode [ 119.857644][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.009450][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.010791][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.010811][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.010823][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.010846][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.150291][ T5892] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 120.418255][ T5892] usb 8-1: device descriptor read/8, error -71 [ 120.507605][ T25] usb 5-1: config 0 descriptor?? [ 120.584770][ T5892] usb usb8-port1: unable to enumerate USB device [ 120.880003][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 120.911359][ T7478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.942953][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 121.132829][ T25] usb 5-1: USB disconnect, device number 7 [ 121.403265][ T7484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 121.494593][ T7484] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 121.494706][ T7484] overlayfs: failed to look up (tracing) for ino (-66) [ 122.525940][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 122.781530][ T5819] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.927187][ T5819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.931619][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.936703][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.941357][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.941819][ T43] audit: type=1326 audit(1787987334.116:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 122.942022][ T43] audit: type=1326 audit(1787987334.116:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 122.948703][ T43] audit: type=1326 audit(1787987334.116:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 122.970998][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.975627][ T5819] usb 5-1: config 0 descriptor?? [ 123.144647][ T43] audit: type=1326 audit(1787987334.316:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 123.144752][ T43] audit: type=1326 audit(1787987334.316:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 123.385758][ T7529] FAULT_INJECTION: forcing a failure. [ 123.385758][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 123.397295][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT(full) [ 123.397337][ T7529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.397349][ T7529] Call Trace: [ 123.397356][ T7529] [ 123.397364][ T7529] dump_stack_lvl+0x100/0x190 [ 123.397393][ T7529] should_fail_ex.cold+0x5/0xa [ 123.397452][ T7529] should_failslab+0xc2/0x120 [ 123.397474][ T7529] __kmalloc_cache_noprof+0x91/0x6d0 [ 123.397499][ T7529] ? genl_start+0x1e8/0x970 [ 123.397525][ T7529] genl_start+0x1e8/0x970 [ 123.397547][ T7529] __netlink_dump_start+0x60e/0x990 [ 123.397577][ T7529] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 123.397599][ T7529] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 123.397625][ T7529] ? __pfx_genl_get_cmd+0x10/0x10 [ 123.397640][ T7529] ? __pfx_genl_start+0x10/0x10 [ 123.397657][ T7529] ? __pfx_genl_dumpit+0x10/0x10 [ 123.397673][ T7529] ? __pfx_genl_done+0x10/0x10 [ 123.397693][ T7529] ? netlink_sendmsg+0x680/0xda0 [ 123.397708][ T7529] ? ____sys_sendmsg+0xa4d/0xbe0 [ 123.397730][ T7529] ? __radix_tree_lookup+0x217/0x2b0 [ 123.397755][ T7529] genl_rcv_msg+0x471/0x800 [ 123.397776][ T7529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.397795][ T7529] ? __lock_acquire+0x4c5/0x1ec0 [ 123.397818][ T7529] ? __pfx_nl802154_dump_interface+0x10/0x10 [ 123.397841][ T7529] ? __lock_acquire+0x4c5/0x1ec0 [ 123.397868][ T7529] netlink_rcv_skb+0x159/0x420 [ 123.397912][ T7529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.397933][ T7529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.397961][ T7529] ? netlink_deliver_tap+0x1ae/0xcc0 [ 123.397990][ T7529] genl_rcv+0x28/0x40 [ 123.398007][ T7529] netlink_unicast+0x585/0x850 [ 123.398027][ T7529] ? __pfx_netlink_unicast+0x10/0x10 [ 123.398051][ T7529] netlink_sendmsg+0x8b0/0xda0 [ 123.398072][ T7529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.398095][ T7529] ? apparmor_socket_sendmsg+0x165/0x280 [ 123.398122][ T7529] ____sys_sendmsg+0xa4d/0xbe0 [ 123.398143][ T7529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.398162][ T7529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.398198][ T7529] ___sys_sendmsg+0x190/0x1e0 [ 123.398225][ T7529] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.398263][ T7529] ? find_held_lock+0x2b/0x80 [ 123.398297][ T7529] __sys_sendmsg+0x160/0x210 [ 123.398317][ T7529] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.398344][ T7529] ? __pfx_ksys_write+0x10/0x10 [ 123.398367][ T7529] __do_fast_syscall_32+0x13a/0x8b0 [ 123.398390][ T7529] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.398419][ T7529] do_fast_syscall_32+0x32/0x70 [ 123.398442][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.398464][ T7529] RIP: 0023:0xf701efec [ 123.398486][ T7529] Code: Unable to access opcode bytes at 0xf701efc2. [ 123.398494][ T7529] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 123.398513][ T7529] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 123.398524][ T7529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.398534][ T7529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.398544][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.398554][ T7529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.398577][ T7529] [ 124.268952][ T5819] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.277085][ T5819] usb 5-1: USB disconnect, device number 8 [ 124.351802][ T7543] fido_id[7543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 124.546281][ T7556] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 124.546324][ T7556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.546779][ T7556] vhci_hcd vhci_hcd.0: Device attached [ 124.633946][ T7557] vhci_hcd: connection closed [ 124.636422][ T13] vhci_hcd vhci_hcd.2: stop threads [ 124.638400][ T13] vhci_hcd vhci_hcd.2: release socket [ 124.638437][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 124.653854][ T7561] fuse: Bad value for 'rootmode' [ 124.756424][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.188265][ T7585] FAULT_INJECTION: forcing a failure. [ 125.188265][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 125.190936][ T7585] CPU: 2 UID: 0 PID: 7585 Comm: syz.3.490 Not tainted syzkaller #0 PREEMPT(full) [ 125.190956][ T7585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.190965][ T7585] Call Trace: [ 125.190970][ T7585] [ 125.190976][ T7585] dump_stack_lvl+0x100/0x190 [ 125.190999][ T7585] should_fail_ex.cold+0x5/0xa [ 125.191017][ T7585] should_failslab+0xc2/0x120 [ 125.191034][ T7585] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.191049][ T7585] ? security_file_alloc+0x34/0x2c0 [ 125.191071][ T7585] security_file_alloc+0x34/0x2c0 [ 125.191093][ T7585] init_file+0x95/0x480 [ 125.191110][ T7585] alloc_empty_file+0x79/0x1c0 [ 125.191127][ T7585] path_openat+0xdb/0x2440 [ 125.191144][ T7585] ? __pfx_path_openat+0x10/0x10 [ 125.191163][ T7585] do_file_open+0x20e/0x430 [ 125.191179][ T7585] ? __pfx_do_file_open+0x10/0x10 [ 125.191206][ T7585] ? _raw_spin_unlock+0x28/0x50 [ 125.191220][ T7585] ? alloc_fd+0x471/0x7a0 [ 125.191238][ T7585] do_sys_openat2+0x10f/0x1e0 [ 125.191257][ T7585] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.191276][ T7585] ? __pfx___seccomp_filter+0x10/0x10 [ 125.191293][ T7585] __ia32_sys_creat+0xcb/0x120 [ 125.191312][ T7585] ? __pfx___ia32_sys_creat+0x10/0x10 [ 125.191333][ T7585] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 125.191348][ T7585] __do_fast_syscall_32+0x13a/0x8b0 [ 125.191365][ T7585] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.191382][ T7585] do_fast_syscall_32+0x32/0x70 [ 125.191400][ T7585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.191417][ T7585] RIP: 0023:0xf701efec [ 125.191432][ T7585] Code: Unable to access opcode bytes at 0xf701efc2. [ 125.191439][ T7585] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 125.191452][ T7585] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000020 [ 125.191461][ T7585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.191468][ T7585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.191475][ T7585] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.191483][ T7585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.191500][ T7585] [ 125.484456][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 126.215703][ T7629] syzkaller0: entered promiscuous mode [ 126.215778][ T7629] syzkaller0: entered allmulticast mode [ 126.254522][ T7631] netlink: 220 bytes leftover after parsing attributes in process `syz.3.505'. [ 126.636646][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.796733][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 126.800100][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.802449][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.802494][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.810598][ T42] usb 5-1: config 0 descriptor?? [ 127.028427][ T7642] fuse: Bad value for 'fd' [ 127.338199][ T43] audit: type=1326 audit(1787987338.516:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.1.513" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42fec code=0x0 [ 127.420944][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 128.075627][ T7671] usbip-vudc usbip-vudc.0: gadget not bound [ 128.168596][ T7675] FAULT_INJECTION: forcing a failure. [ 128.168596][ T7675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.168652][ T7675] CPU: 3 UID: 0 PID: 7675 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(full) [ 128.168676][ T7675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.168684][ T7675] Call Trace: [ 128.168688][ T7675] [ 128.168693][ T7675] dump_stack_lvl+0x100/0x190 [ 128.168711][ T7675] should_fail_ex.cold+0x5/0xa [ 128.168726][ T7675] _copy_from_iter+0x1f4/0x1690 [ 128.168742][ T7675] ? __pfx__copy_from_iter+0x10/0x10 [ 128.168753][ T7675] ? trace_kmalloc+0xeb/0x110 [ 128.168766][ T7675] ? __kasan_kmalloc+0xaa/0xb0 [ 128.168779][ T7675] ? __kmalloc_noprof+0x350/0x840 [ 128.168791][ T7675] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 128.168809][ T7675] kernfs_fop_write_iter+0x186/0x5f0 [ 128.168827][ T7675] vfs_write+0x6af/0x1050 [ 128.168839][ T7675] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 128.168856][ T7675] ? __pfx_vfs_write+0x10/0x10 [ 128.168865][ T7675] ? find_held_lock+0x2b/0x80 [ 128.168886][ T7675] ksys_write+0x12a/0x250 [ 128.168896][ T7675] ? __pfx_ksys_write+0x10/0x10 [ 128.168906][ T7675] ? ksys_write+0x1ac/0x250 [ 128.168916][ T7675] ? __pfx_ksys_write+0x10/0x10 [ 128.168929][ T7675] __do_fast_syscall_32+0x13a/0x8b0 [ 128.168943][ T7675] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.168958][ T7675] do_fast_syscall_32+0x32/0x70 [ 128.168973][ T7675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.168987][ T7675] RIP: 0023:0xf7f42fec [ 128.169000][ T7675] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 128.169005][ T7675] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 128.169016][ T7675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 128.169023][ T7675] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.169029][ T7675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.169035][ T7675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.169042][ T7675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.169056][ T7675] [ 128.476751][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 128.501613][ T7697] wlan0 speed is unknown, defaulting to 1000 [ 128.627422][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.629280][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.629306][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.629324][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.629354][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.631639][ T25] usb 6-1: config 0 descriptor?? [ 128.639553][ T7697] netlink: 13 bytes leftover after parsing attributes in process `syz.3.529'. [ 129.041225][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 129.041368][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 129.043753][ T25] usb 6-1: USB disconnect, device number 13 [ 129.168007][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 129.168111][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.184174][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.262574][ T7703] kvm: user requested TSC rate below hardware speed [ 129.541485][ T42] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 129.554361][ T42] usb 5-1: USB disconnect, device number 9 [ 129.559251][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 129.972835][ T7729] siw: device registration error -23 [ 130.564521][ T5096] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 130.630305][ T7747] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 130.717353][ T5096] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.718393][ T5096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.718749][ T5096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.718870][ T5096] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.718987][ T5096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.720527][ T5096] usb 8-1: config 0 descriptor?? [ 130.881013][ T7749] wlan0 speed is unknown, defaulting to 1000 [ 131.140622][ T7758] siw: device registration error -23 [ 131.168269][ T5096] usbhid 8-1:0.0: can't add hid device: -71 [ 131.170813][ T5096] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 131.175915][ T5096] usb 8-1: USB disconnect, device number 9 [ 131.781366][ T7780] PKCS7: Unsupported SignerInfo version [ 131.866895][ T7782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.047583][ T5753] Bluetooth: hci0: unexpected event for opcode 0x201c [ 132.381713][ T6283] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 132.387825][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.387888][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.454491][ T7801] FAULT_INJECTION: forcing a failure. [ 132.454491][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.459734][ T7801] CPU: 3 UID: 0 PID: 7801 Comm: syz.3.566 Not tainted syzkaller #0 PREEMPT(full) [ 132.459765][ T7801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.459775][ T7801] Call Trace: [ 132.459780][ T7801] [ 132.459786][ T7801] dump_stack_lvl+0x100/0x190 [ 132.459807][ T7801] should_fail_ex.cold+0x5/0xa [ 132.459824][ T7801] _copy_to_user+0x32/0xd0 [ 132.459839][ T7801] simple_read_from_buffer+0xcb/0x170 [ 132.459853][ T7801] proc_fail_nth_read+0x1af/0x230 [ 132.459872][ T7801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.459892][ T7801] ? rw_verify_area+0xce/0x6d0 [ 132.459909][ T7801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.459927][ T7801] vfs_read+0x1e4/0xb40 [ 132.459938][ T7801] ? lock_acquire+0x1d1/0x380 [ 132.459953][ T7801] ? __fget_files+0x34/0x3d0 [ 132.459965][ T7801] ? __pfx_vfs_read+0x10/0x10 [ 132.459974][ T7801] ? find_held_lock+0x2b/0x80 [ 132.459986][ T7801] ? __fget_files+0x215/0x3d0 [ 132.460000][ T7801] ? __fget_files+0x21f/0x3d0 [ 132.460016][ T7801] ksys_read+0x12a/0x250 [ 132.460027][ T7801] ? __pfx_ksys_read+0x10/0x10 [ 132.460042][ T7801] do_int80_emulation+0x166/0x650 [ 132.460060][ T7801] asm_int80_emulation+0x1a/0x20 [ 132.460073][ T7801] RIP: 0023:0xf71575ab [ 132.460084][ T7801] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 132.460095][ T7801] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.460108][ T7801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f540d5d0 [ 132.460115][ T7801] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 132.460122][ T7801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.460128][ T7801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.460135][ T7801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.460150][ T7801] [ 132.542345][ T6283] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.549441][ T6283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.549494][ T6283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.549530][ T6283] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.549580][ T6283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.552641][ T6283] usb 6-1: config 0 descriptor?? [ 132.553226][ T7808] kAFS: bad VL server IP address [ 132.728089][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.728468][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.728667][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.728883][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.729125][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.729318][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.729498][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.729644][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.729789][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730046][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730259][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730445][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730599][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730768][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.730930][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731086][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731275][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731485][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731641][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731801][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.731956][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732123][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732269][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732438][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732610][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732771][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732923][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733074][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733230][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733429][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733618][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733788][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.733985][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.734190][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.734435][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.734601][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.734805][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.734988][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.735166][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.735335][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.737407][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.737602][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.737793][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.738000][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.738224][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.739087][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.741689][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.741899][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742093][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742261][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742434][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742596][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742804][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.742954][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743079][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743242][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743412][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743566][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743718][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.743918][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.744075][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.744271][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.744458][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.744621][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.744770][ T7821] program syz.0.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.802178][ T7822] netlink: 'syz.0.574': attribute type 16 has an invalid length. [ 132.802227][ T7822] netlink: 'syz.0.574': attribute type 17 has an invalid length. [ 132.830354][ T43] audit: type=1800 audit(1787987343.996:42): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.575" name="/newroot/156/file0/file0" dev="tmpfs" ino=884 res=0 errno=0 [ 132.967096][ T6283] usbhid 6-1:0.0: can't add hid device: -71 [ 132.967197][ T6283] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 132.973702][ T6283] usb 6-1: USB disconnect, device number 14 [ 133.172500][ T7838] ip6t_rt: too many addresses specified [ 133.210298][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.210533][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.210702][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.210880][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.211026][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.211217][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.211376][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.211544][ T7841] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 133.609870][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 134.259090][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 134.304322][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 134.379596][ T7855] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 134.982341][ T7887] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 135.124020][ T5753] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 135.138420][ T43] audit: type=1800 audit(1787987346.316:43): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 135.304099][ T5819] Process accounting resumed [ 135.530463][ T7911] jffs2: notice: (7911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.396904][ T7932] binder: 7931:7932 ioctl 40186e8d 80000300 returned -22 [ 136.491298][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 136.654068][ T7948] syz_tun: entered allmulticast mode [ 136.658573][ T7948] lo: entered allmulticast mode [ 136.727066][ T5819] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 136.877292][ T5819] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.878340][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.878357][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.878369][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 136.878391][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.882849][ T5819] usb 8-1: config 0 descriptor?? [ 137.105221][ T5819] usbhid 8-1:0.0: can't add hid device: -71 [ 137.107463][ T5819] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 137.112088][ T5819] usb 8-1: USB disconnect, device number 10 [ 137.276824][ T7945] syz_tun: left allmulticast mode [ 137.276952][ T7945] lo: left allmulticast mode [ 137.845694][ T7973] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.868355][ T7973] kvm: pic: level sensitive irq not supported [ 137.870387][ T7973] kvm: pic: non byte read [ 137.874897][ T7973] kvm: pic: level sensitive irq not supported [ 137.875773][ T7973] kvm: pic: non byte read [ 137.881907][ T7973] kvm: pic: level sensitive irq not supported [ 137.882978][ T7973] kvm: pic: non byte read [ 138.112166][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 138.392263][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 138.942494][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 139.079537][ T7998] wlan0 speed is unknown, defaulting to 1000 [ 139.253768][ T43] audit: type=1800 audit(1787987350.426:44): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.634" name="/newroot/160/file0/file0" dev="tmpfs" ino=905 res=0 errno=0 [ 139.772094][ T8022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.100853][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 140.202880][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 140.939572][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 140.999870][ T8045] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.090868][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'. [ 142.038064][ T8068] syz_tun: entered allmulticast mode [ 142.528002][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 142.790217][ T8065] syz_tun: left allmulticast mode [ 143.382983][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 143.513150][ T8085] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 143.513191][ T8085] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.514619][ T8085] vhci_hcd vhci_hcd.0: Device attached [ 143.690946][ T8089] vhci_hcd: connection closed [ 143.697410][ T5554] vhci_hcd vhci_hcd.1: stop threads [ 143.697541][ T5554] vhci_hcd vhci_hcd.1: release socket [ 143.697662][ T5554] vhci_hcd vhci_hcd.1: disconnect device [ 143.809098][ T65] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 144.109055][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 144.109509][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.427098][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.491374][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 145.727996][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 146.669088][ T8127] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 146.883359][ T8141] smpboot: CPU 1 is now offline [ 146.916571][ T8142] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 147.040655][ T8141] netlink: 80 bytes leftover after parsing attributes in process `syz.0.668'. [ 147.044182][ T5753] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 147.115979][ T8146] netlink: ct family unspecified [ 147.116052][ T8146] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.288584][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.306635][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.343152][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.850001][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 148.037968][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 149.606708][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.757489][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 149.758088][ T65] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.759160][ T65] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.759186][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.759205][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.759223][ T65] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.759252][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.844742][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 150.026811][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 150.043644][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 150.196580][ T65] usb 5-1: usb_control_msg returned -32 [ 150.196660][ T65] usbtmc 5-1:16.0: can't read capabilities [ 150.921303][ T65] usb 5-1: USB disconnect, device number 10 [ 151.256680][ T6283] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 151.276646][ T65] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.386810][ T6283] usb 8-1: device descriptor read/64, error -71 [ 151.427467][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.428898][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.428929][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.428953][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.428995][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.431752][ T65] usb 5-1: config 0 descriptor?? [ 151.636693][ T6283] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 151.776654][ T6283] usb 8-1: device descriptor read/64, error -71 [ 151.855673][ T65] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.903133][ T6283] usb usb8-port1: attempt power cycle [ 151.966934][ T8256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.042708][ T8261] __nla_validate_parse: 1 callbacks suppressed [ 152.042813][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 152.236845][ T6283] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 152.257355][ T6283] usb 8-1: device descriptor read/8, error -71 [ 152.506641][ T6283] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 152.527180][ T6283] usb 8-1: device descriptor read/8, error -71 [ 152.646790][ T6283] usb usb8-port1: unable to enumerate USB device [ 153.202117][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 153.927514][ T8286] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 153.934678][ T8285] wlan0 speed is unknown, defaulting to 1000 [ 153.975757][ T5847] usb 5-1: USB disconnect, device number 11 [ 154.446672][ T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.606695][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 154.608519][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.609050][ T42] usb 5-1: config 0 has no interfaces? [ 154.609075][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.612262][ T42] usb 5-1: config 0 descriptor?? [ 154.822418][ T42] usb 5-1: USB disconnect, device number 12 [ 155.882312][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 156.360609][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 156.798258][ T8328] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 157.307813][ T8343] batadv_slave_1: entered promiscuous mode [ 157.808517][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 158.083837][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 158.895963][ T8341] batadv_slave_1: left promiscuous mode [ 159.075005][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.096888][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.836254][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 160.376581][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 160.986649][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 161.116665][ T5892] usb 5-1: device descriptor read/64, error -71 [ 161.366770][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.506727][ T5892] usb 5-1: device descriptor read/64, error -71 [ 161.617583][ T5892] usb usb5-port1: attempt power cycle [ 161.981538][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.001762][ T5892] usb 5-1: device descriptor read/8, error -71 [ 162.108962][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 162.266710][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 162.308459][ T5892] usb 5-1: device descriptor read/8, error -71 [ 162.450479][ T5892] usb usb5-port1: unable to enumerate USB device [ 163.040340][ T8427] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 163.268096][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 163.631967][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 164.726101][ T8459] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 164.753659][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 165.677045][ T8484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.677298][ T8484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.686083][ T8484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.689240][ T8485] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 165.700538][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 165.938020][ T8501] Console: switching to colour dummy device 80x25 [ 166.897993][ T8508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 166.965364][ T8512] loop8: detected capacity change from 0 to 7 [ 166.995580][ T8512] Dev loop8: unable to read RDB block 7 [ 166.995655][ T8512] loop8: unable to read partition table [ 166.995875][ T8512] loop8: partition table beyond EOD, truncated [ 166.995930][ T8512] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 167.007710][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 167.201975][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 167.736898][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.737006][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.740145][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.854046][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 169.727775][ T8569] validate_nla: 25 callbacks suppressed [ 169.732380][ T8569] netlink: 'syz.2.792': attribute type 2 has an invalid length. [ 169.747103][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 169.870736][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 171.587018][ T6283] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 171.648833][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 171.737262][ T6283] usb 5-1: device descriptor read/64, error -71 [ 171.796601][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 171.797625][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 171.798691][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.798710][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.798737][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.800245][ T9] usb 6-1: config 0 descriptor?? [ 171.986706][ T6283] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 172.014432][ T8607] loop8: detected capacity change from 0 to 7 [ 172.028894][ T8607] Dev loop8: unable to read RDB block 7 [ 172.029002][ T8607] loop8: unable to read partition table [ 172.029201][ T8607] loop8: partition table beyond EOD, truncated [ 172.031972][ T8607] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.040233][ T9] usb 6-1: USB disconnect, device number 15 [ 172.116631][ T6283] usb 5-1: device descriptor read/64, error -71 [ 172.236910][ T6283] usb usb5-port1: attempt power cycle [ 172.576658][ T6283] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 172.607439][ T6283] usb 5-1: device descriptor read/8, error -71 [ 172.856864][ T6283] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 172.877012][ T6283] usb 5-1: device descriptor read/8, error -71 [ 173.111390][ T6283] usb usb5-port1: unable to enumerate USB device [ 174.960961][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 175.445548][ T8717] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 175.461166][ T8717] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 175.462002][ T8717] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 175.462557][ T8717] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 175.467674][ T8717] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 175.557783][ T8717] pci 0000:00:01.0: Adding to iommu group 1 [ 175.587799][ T8717] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 175.587826][ T8717] pci 0000:00:01.0: vgaarb: bridge control possible [ 175.587835][ T8717] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 175.600396][ T8717] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 175.600877][ T8717] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 175.625907][ T8717] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 175.672239][ T8717] [drm] Found bochs VGA, ID 0xb0c5. [ 175.672360][ T8717] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 175.837624][ T8717] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 176.862394][ T8717] Console: switching to colour frame buffer device 160x50 [ 176.866048][ T8717] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 177.418735][ T8736] netlink: 27 bytes leftover after parsing attributes in process `syz.3.825'. [ 177.538484][ T43] audit: type=1400 audit(1787987388.716:45): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8737 comm="syz.3.826" [ 177.620670][ T8740] dummy0: left allmulticast mode [ 177.633160][ T8740] lapb0: left allmulticast mode [ 178.035133][ T8748] Console: switching to colour dummy device 80x25 [ 178.278521][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 178.671311][ T8768] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 178.845945][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 179.169593][ T8782] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 179.194100][ T8782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 179.197592][ T8782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 179.201709][ T8782] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 179.209583][ T8782] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 179.234696][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 179.332950][ T8782] pci 0000:00:01.0: Adding to iommu group 1 [ 179.371576][ T8782] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 179.371619][ T8782] pci 0000:00:01.0: vgaarb: bridge control possible [ 179.371635][ T8782] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 179.398201][ T8782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 179.402670][ T8782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 179.420220][ T8782] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 179.459798][ T8782] [drm] Found bochs VGA, ID 0xb0c5. [ 179.459931][ T8782] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 179.525087][ T8782] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 179.678518][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 179.960191][ T8782] Console: switching to colour frame buffer device 160x50 [ 179.993241][ T8782] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 181.901005][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 182.818989][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 183.154895][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 183.217552][ T8843] team0: Device gtp0 is of different type [ 184.412845][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 184.739473][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 185.342954][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 186.152552][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 186.304529][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 187.498050][ T8925] IPVS: set_ctl: invalid protocol: 115 172.30.128.3:20004 [ 188.072640][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 188.595321][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 189.269253][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 189.835556][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 190.486916][ T8968] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 191.513380][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 191.879244][ T9019] wlan0 speed is unknown, defaulting to 1000 [ 192.753382][ T9039] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 193.215692][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 193.676847][ T9061] FAULT_INJECTION: forcing a failure. [ 193.676847][ T9061] name failslab, interval 1, probability 0, space 0, times 0 [ 193.694662][ T9061] CPU: 2 UID: 0 PID: 9061 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(full) [ 193.694700][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.694711][ T9061] Call Trace: [ 193.694720][ T9061] [ 193.694727][ T9061] dump_stack_lvl+0x100/0x190 [ 193.694810][ T9061] should_fail_ex.cold+0x5/0xa [ 193.694825][ T9061] ? __netlink_lookup+0x652/0x900 [ 193.694872][ T9061] should_failslab+0xc2/0x120 [ 193.694913][ T9061] kmem_cache_alloc_noprof+0x92/0x6a0 [ 193.694930][ T9061] ? skb_clone+0x190/0x400 [ 193.694949][ T9061] skb_clone+0x190/0x400 [ 193.694965][ T9061] netlink_deliver_tap+0xaed/0xcc0 [ 193.694991][ T9061] netlink_unicast+0x62b/0x850 [ 193.695007][ T9061] ? __pfx_netlink_unicast+0x10/0x10 [ 193.695026][ T9061] netlink_sendmsg+0x8b0/0xda0 [ 193.695043][ T9061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.695057][ T9061] ? apparmor_socket_sendmsg+0x165/0x280 [ 193.695077][ T9061] ____sys_sendmsg+0xa4d/0xbe0 [ 193.695095][ T9061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.695110][ T9061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.695138][ T9061] ___sys_sendmsg+0x190/0x1e0 [ 193.695160][ T9061] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.695189][ T9061] ? find_held_lock+0x2b/0x80 [ 193.695216][ T9061] __sys_sendmsg+0x160/0x210 [ 193.695233][ T9061] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.695259][ T9061] ? __pfx_ksys_write+0x10/0x10 [ 193.695277][ T9061] __do_fast_syscall_32+0x13a/0x8b0 [ 193.695317][ T9061] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.695336][ T9061] do_fast_syscall_32+0x32/0x70 [ 193.695355][ T9061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.695373][ T9061] RIP: 0023:0xf7f42fec [ 193.695391][ T9061] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 193.695398][ T9061] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 193.695414][ T9061] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 193.695423][ T9061] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.695432][ T9061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.695440][ T9061] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.695449][ T9061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.695470][ T9061] [ 193.817642][ T9063] Bluetooth: MGMT ver 1.23 [ 193.837298][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.837592][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.035658][ T9067] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 194.173011][ T9063] pim6reg: entered allmulticast mode [ 194.173191][ T9066] pim6reg: left allmulticast mode [ 194.530702][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 194.946704][ T9092] fuse: Unknown parameter ' •Ú{K#Q«Ö¢„yLªÉ“-0ÿñ¢è]ðZFtio‘Y[î' [ 195.268753][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 196.668871][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 197.095215][ C3] [ 197.096044][ C3] ============================= [ 197.097560][ C3] [ BUG: Invalid wait context ] [ 197.099108][ C3] syzkaller #0 Not tainted [ 197.100842][ C3] ----------------------------- [ 197.102533][ C3] syz.0.914/9095 is trying to lock: [ 197.104302][ C3] ffff8880517cddb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 197.107524][ C3] other info that might help us debug this: [ 197.109529][ C3] context-{2:2} [ 197.110741][ C3] locks held by syz.0.914/9095: 1, last CPU#3: [ 197.112778][ C3] #0: ffff8880517ce310 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 197.115903][ C3] stack backtrace: [ 197.117135][ C3] CPU: 3 UID: 0 PID: 9095 Comm: syz.0.914 Not tainted syzkaller #0 PREEMPT(full) [ 197.120293][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.123788][ C3] Call Trace: [ 197.124924][ C3] [ 197.125877][ C3] dump_stack_lvl+0x100/0x190 [ 197.127392][ C3] __lock_acquire+0x104c/0x1ec0 [ 197.128937][ C3] ? xa_load+0x149/0x2c0 [ 197.130318][ C3] ? xa_load+0x149/0x2c0 [ 197.131714][ C3] lock_acquire+0x1d1/0x380 [ 197.133221][ C3] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 197.135125][ C3] _raw_read_lock_irqsave+0x46/0x90 [ 197.136811][ C3] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 197.138848][ C3] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 197.140810][ C3] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 197.142963][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 197.144753][ C3] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 197.146673][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.148471][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.150352][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 197.152211][ C3] xen_timer_callback+0x1db/0x2a0 [ 197.153894][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 197.155750][ C3] ? __hrtimer_run_queues+0x37b/0x9c0 [ 197.157576][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.159312][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 197.161179][ C3] __hrtimer_run_queues+0x13f/0x9c0 [ 197.162948][ C3] hrtimer_interrupt+0x441/0xaa0 [ 197.164783][ C3] __sysvec_apic_timer_interrupt+0x109/0x470 [ 197.166820][ C3] sysvec_apic_timer_interrupt+0x51/0xc0 [ 197.168771][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.171161][ C3] RIP: 0023:0xf706b43c [ 197.172915][ C3] Code: 24 10 89 f8 19 e8 73 1f 8b 44 24 08 66 90 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef 89 44 24 08 89 54 24 10 8b 73 f8 <8d> 53 f8 8b 5b fc 89 e8 39 f1 19 d8 73 27 2e 8d b4 26 00 00 00 00 [ 197.180128][ C3] RSP: 002b:00000000ff875d90 EFLAGS: 00000246 [ 197.182318][ C3] RAX: 0000000000000000 RBX: 00000000f5e72008 RCX: 00000000825e98ba [ 197.185081][ C3] RDX: 00000000f5e72008 RSI: 00000000825e974b RDI: 00000000ffffffff [ 197.188422][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 197.191612][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 197.194706][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.197938][ C3]