last executing test programs: 20.169500096s ago: executing program 0 (id=1108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="bd6a726f75705f69643d64e99c25e3b6eb179f4e957d502d2998bc69f53d4be739391585f495180d16ab4edaa9088ec38078877461147c1b985bc7ecc86cc9ab7baecefcfc28c27e6712ada4e45c6bf3bc8cb5e1d58696fdf6a97dc21b2c36781a26423a567be115cdefea1a36cbb7b4fb", @ANYRESDEC=0x0]) r4 = socket$inet_icmp(0x2, 0x2, 0x1) shutdown(r4, 0x0) recvmsg(r4, &(0x7f0000000440)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000680)='timers\x00') close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r8, 0x1}, 0x18) sendto$unix(r7, &(0x7f0000000040)="000000ff403f3de01fefccf9d83c7785", 0x8, 0x4000800, 0x0, 0x16) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 19.0307088s ago: executing program 0 (id=1111): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mlockall(0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) syz_clone(0x8a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x3, 0x0) write$9p(r0, 0x0, 0x0) 17.188399663s ago: executing program 1 (id=1112): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {}, 0x3}, 0x18) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x1c}}, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x3, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40800) (fail_nth: 1) 17.081678287s ago: executing program 0 (id=1113): ioctl$IOMMU_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) r0 = epoll_create1(0x80000) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x2, 0x146) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)={'ipvlan1\x00', 0x200}) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)={'netpci0\x00', 0x400}) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000100)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xd, 0x80000001, 0x800, 0x2, 0x1, "d66f29eb785f3e85b49e148ff7ebff981e116a", 0x0, 0x10}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_stall_count', 0x80, 0x20) read$watch_queue(r2, &(0x7f00000001c0)=""/4096, 0x1000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000011c0)) (async) write$sysctl(r1, &(0x7f0000001200)='3\x00', 0x2) ioctl$FIONCLEX(r0, 0x5450) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001240)={0x32, 0x7, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x4, 0x24, "0555da192e2bf6e771ea7f0789a1a5017fbdae4d418c6dbee234f4aae82dea52bb16812b"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x669a}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xc}]}, 0x48) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000012c0)=0x6) (async) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r4, &(0x7f0000001340)=""/233, 0xe9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001780)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000001500)={0x22c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aedd708bf54be409"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f8603e749f36a0b4798557b3bbc6aec7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="894520c719b56e78571b4754ccb0997f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3750ba53f434ca99"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x32eb089a}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3c11cb3edde6a05598a280ec09e25f79"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4046c18f46ebaecc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ffb02b46c3570781a950421ab392e711"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "285d98d5aa25df5e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3eae4296894a4d086e0675dc8307c046197836f04b177ebc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x48}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ea06c46e34aba8de"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5830ea04d8cdf91f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b589889d19216432"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c2c33360ea9810011522da57078b36fe090d598fdcb8c4d2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3581bfe81184fb70d3a98d8fd81dd852f78b7077b4b371d1745b991021ca0818"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="29362e3379c5f2386d34a4fc1a0f857d4a6c6e0d7bb701f0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "016d89a0f194b549"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5548bc0b5f6ee174"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bad865bcdc5c17b2"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fa5b09b327adab16b0cbe15490fbfea1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1228cc68888d57d9111147650bd101589ccda5b945ee98a633b2f364f4e23c05"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5bea054b9f056dbd500a1ab3958da361"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0x22c}}, 0x40) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000017c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800), 0x20000) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}}, 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x3e) (async) write$9p(r2, &(0x7f0000001980)="ed93d34c4c711f8674886c44a20991ace45d66b1f6a02f820d1f1ad338b0e468878521f181bb626b69bfbf0de3cce384c44eb013d9a715ba855997c2494dc267b32d8ad465c6af9ddbe1ee708879f4d15f949c8e9d03a62a16d71f48f830aac2ebdd29342773bccd25bc99d4505269859bb5c133276d403c1de02b12", 0x7c) (async) bind$inet6(r5, &(0x7f0000001a00)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) 16.07981003s ago: executing program 1 (id=1114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x4021) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa05a85be5f3e09b9, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd23, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008855}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8cc8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e57}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 14.019040006s ago: executing program 0 (id=1115): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='timers\x00') close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 13.949509958s ago: executing program 0 (id=1116): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x701883, 0x0) socket(0x11, 0x2, 0x6) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) close(r0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x40, 0xe, 0x6, @time={0x2, 0x3}, {0x0, 0x3}, {0x3b, 0xe8}, @quote={{0x9, 0x2}, 0x6}}], 0x1c) 13.540116508s ago: executing program 1 (id=1117): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mlockall(0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) syz_clone(0x8a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x3, 0x0) write$9p(r0, 0x0, 0x0) 10.599767199s ago: executing program 1 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5bbf4d60bb2e6f72}, 0x8000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlockall(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x1000087}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0x5452, 0x20000000) r3 = socket(0x2b, 0x80801, 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = dup(r4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0xff000000, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0xb5a}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) r6 = dup(r3) r7 = epoll_create1(0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r6, 0x80045113, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000100)) syz_clone(0x8a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x3, 0x7a481) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff6000/0x3000)=nil}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x0) 10.401091865s ago: executing program 0 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dwc2\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dwc2/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/pcspkr/hw_params\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/100, 0x64) close(r2) 279.910214ms ago: executing program 1 (id=1121): read(0xffffffffffffffff, &(0x7f0000000100)=""/100, 0x64) 0s ago: executing program 1 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/disk\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='suspend\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='disk\n', 0x5) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45286' (ED25519) to the list of known hosts. syzkaller login: [ 75.360334][ T3368] cgroup: Unknown subsys name 'net' [ 75.546052][ T3368] cgroup: Unknown subsys name 'cpuset' [ 75.565319][ T3368] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.947338][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.111375][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.125282][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.329391][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.345516][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.838221][ T3373] hsr_slave_0: entered promiscuous mode [ 84.842112][ T3373] hsr_slave_1: entered promiscuous mode [ 85.102750][ T3374] hsr_slave_0: entered promiscuous mode [ 85.108929][ T3374] hsr_slave_1: entered promiscuous mode [ 85.111541][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 85.112519][ T3374] Cannot create hsr debugfs directory [ 85.680983][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.713282][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.727070][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.743818][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.772129][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.788028][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.792589][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.810911][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.961044][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.975314][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.979299][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.989940][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.995502][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.004025][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.008926][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.022977][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.563196][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.769075][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.605329][ T3374] veth0_vlan: entered promiscuous mode [ 89.663442][ T3373] veth0_vlan: entered promiscuous mode [ 89.697988][ T3373] veth1_vlan: entered promiscuous mode [ 89.707587][ T3374] veth1_vlan: entered promiscuous mode [ 89.899415][ T3374] veth0_macvtap: entered promiscuous mode [ 89.920047][ T3373] veth0_macvtap: entered promiscuous mode [ 89.943864][ T3373] veth1_macvtap: entered promiscuous mode [ 89.965794][ T3374] veth1_macvtap: entered promiscuous mode [ 90.307386][ T29] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308226][ T29] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312177][ T29] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.313827][ T29] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.334763][ T3009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.406749][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.406988][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.408132][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.538311][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.538313][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.473554][ T3537] fuse: Unknown parameter 'grou00000000000000000000' [ 95.512250][ T3549] Zero length message leads to an empty skb [ 95.593752][ T3551] fuse: Unknown parameter 'grou00000000000000000000' [ 98.656130][ T3565] fuse: Unknown parameter 'grou00000000000000000000' [ 101.163845][ T3576] fuse: Unknown parameter 'group_i00000000000000000000' [ 103.681314][ T3587] fuse: Unknown parameter 'group_i00000000000000000000' [ 104.786311][ T3593] fuse: Bad value for 'fd' [ 105.607921][ T3611] fuse: Bad value for 'fd' [ 105.612750][ T3610] fuse: Unknown parameter 'group_i00000000000000000000' [ 109.502197][ T3630] fuse: Bad value for 'fd' [ 110.279106][ T3650] FAULT_INJECTION: forcing a failure. [ 110.279106][ T3650] name failslab, interval 1, probability 0, space 0, times 1 [ 110.279734][ T3650] CPU: 0 UID: 0 PID: 3650 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT [ 110.279872][ T3650] Hardware name: linux,dummy-virt (DT) [ 110.280084][ T3650] Call trace: [ 110.280329][ T3650] show_stack+0x18/0x24 (C) [ 110.280961][ T3650] dump_stack_lvl+0x60/0x80 [ 110.281004][ T3650] dump_stack+0x18/0x24 [ 110.281040][ T3650] should_fail_ex+0x1e0/0x238 [ 110.281082][ T3650] should_failslab+0x54/0x80 [ 110.281120][ T3650] __kmalloc_cache_noprof+0x58/0x460 [ 110.281161][ T3650] __devm_add_action+0x3c/0xc0 [ 110.281199][ T3650] devm_pinctrl_get+0x40/0x68 [ 110.281234][ T3650] pinctrl_bind_pins+0x58/0x160 [ 110.281307][ T3650] really_probe+0x54/0x2bc [ 110.281363][ T3650] __driver_probe_device+0x118/0x16c [ 110.281401][ T3650] driver_probe_device+0x3c/0x120 [ 110.281482][ T3650] __driver_attach+0x90/0x180 [ 110.281523][ T3650] bus_for_each_dev+0x7c/0xdc [ 110.281558][ T3650] driver_attach+0x24/0x30 [ 110.281593][ T3650] bus_add_driver+0xe4/0x208 [ 110.281651][ T3650] driver_register+0x68/0x130 [ 110.281751][ T3650] usb_gadget_register_driver_owner+0x54/0xfc [ 110.281842][ T3650] raw_ioctl+0x728/0xd38 [ 110.281912][ T3650] __arm64_sys_ioctl+0xac/0x104 [ 110.281952][ T3650] invoke_syscall+0x54/0x10c [ 110.281986][ T3650] el0_svc_common.constprop.0+0x40/0xe0 [ 110.282059][ T3650] do_el0_svc+0x1c/0x34 [ 110.282100][ T3650] el0_svc+0x38/0x1fc [ 110.282138][ T3650] el0t_64_sync_handler+0xa0/0xf0 [ 110.282172][ T3650] el0t_64_sync+0x1a4/0x1a8 [ 110.545393][ T3445] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.705811][ T3445] usb 1-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 110.740860][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.741226][ T3445] usb 1-1: Product: syz [ 110.743906][ T3445] usb 1-1: Manufacturer: syz [ 110.745795][ T3445] usb 1-1: SerialNumber: syz [ 111.235054][ T3445] usb 1-1: USB disconnect, device number 2 [ 111.488611][ T3651] udevd[3651]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.362922][ T3685] FAULT_INJECTION: forcing a failure. [ 117.362922][ T3685] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.363129][ T3685] CPU: 1 UID: 0 PID: 3685 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT [ 117.363181][ T3685] Hardware name: linux,dummy-virt (DT) [ 117.363202][ T3685] Call trace: [ 117.363219][ T3685] show_stack+0x18/0x24 (C) [ 117.363278][ T3685] dump_stack_lvl+0x60/0x80 [ 117.363313][ T3685] dump_stack+0x18/0x24 [ 117.363346][ T3685] should_fail_ex+0x1e0/0x238 [ 117.363385][ T3685] should_fail+0x14/0x40 [ 117.363421][ T3685] should_fail_usercopy+0x1c/0x40 [ 117.363501][ T3685] _copy_from_iter+0x60/0x6a0 [ 117.363581][ T3685] netlink_sendmsg+0x15c/0x410 [ 117.363706][ T3685] __sock_sendmsg+0x54/0x60 [ 117.363815][ T3685] ____sys_sendmsg+0x250/0x2a8 [ 117.363902][ T3685] ___sys_sendmsg+0xb0/0x108 [ 117.363979][ T3685] __sys_sendmsg+0x9c/0x100 [ 117.364124][ T3685] __arm64_sys_sendmsg+0x24/0x38 [ 117.364211][ T3685] invoke_syscall+0x54/0x10c [ 117.364285][ T3685] el0_svc_common.constprop.0+0x40/0xe0 [ 117.364399][ T3685] do_el0_svc+0x1c/0x34 [ 117.364492][ T3685] el0_svc+0x38/0x1fc [ 117.364584][ T3685] el0t_64_sync_handler+0xa0/0xf0 [ 117.364626][ T3685] el0t_64_sync+0x1a4/0x1a8 [ 121.690596][ T3709] "syz.0.62" (3709) uses obsolete ecb(arc4) skcipher [ 123.036874][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.038491][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.049647][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.051115][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.059439][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.060786][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.070797][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.072183][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.101223][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.102664][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.936459][ T3750] Injecting memory failure for pfn 0x41f05 at process virtual address 0x20ff9000 [ 133.976352][ T3750] Memory failure: 0x41f05: unhandlable page. [ 133.977250][ T3750] Memory failure: 0x41f05: recovery action for get hwpoison page: Ignored [ 134.005447][ T3750] random: crng reseeded on system resumption [ 134.639094][ T3770] input: syz1 as /devices/virtual/input/input1 [ 136.543259][ T3783] fuse: Bad value for 'fd' [ 140.671733][ T3797] fuse: Unknown parameter 'grou00000000000000000000' [ 140.806131][ T3799] fuse: Bad value for 'fd' [ 141.228631][ T3807] fuse: Unknown parameter 'grou00000000000000000000' [ 141.366455][ T3809] fuse: Bad value for 'fd' [ 142.197460][ T3818] fuse: Unknown parameter 'group_i00000000000000000000' [ 143.935039][ T3829] fuse: Unknown parameter 'group_i00000000000000000000' [ 145.621836][ T3840] fuse: Unknown parameter 'group_i00000000000000000000' [ 145.720969][ T3844] fuse: Bad value for 'group_id' [ 145.722163][ T3844] fuse: Bad value for 'group_id' [ 145.997197][ T3851] fuse: Unknown parameter 'group_id00000000000000000000' [ 146.473373][ T3864] fuse: Unknown parameter 'group_id00000000000000000000' [ 146.814782][ T3519] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.973034][ T3519] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.973512][ T3519] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.981316][ T3519] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 146.981737][ T3519] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 146.982297][ T3519] usb 1-1: config 0 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 146.982513][ T3519] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.004939][ T3519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.005192][ T3519] usb 1-1: Product: syz [ 147.005406][ T3519] usb 1-1: Manufacturer: syz [ 147.005459][ T3519] usb 1-1: SerialNumber: syz [ 147.014853][ T3519] usb 1-1: config 0 descriptor?? [ 147.019972][ T3866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.042243][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.076701][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.590920][ T3882] fuse: Unknown parameter 'group_id00000000000000000000' [ 150.698697][ T3884] input: syz1 as /devices/virtual/input/input2 [ 152.063771][ T3519] cdc_ether 1-1:0.0: probe with driver cdc_ether failed with error -32 [ 157.789916][ T38] usb 1-1: USB disconnect, device number 3 [ 161.225793][ T3906] fuse: Bad value for 'fd' [ 165.327670][ T3920] fuse: Bad value for 'fd' [ 169.018862][ T3945] input: syz1 as /devices/virtual/input/input3 [ 176.449870][ T3994] FAULT_INJECTION: forcing a failure. [ 176.449870][ T3994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.450128][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT [ 176.450179][ T3994] Hardware name: linux,dummy-virt (DT) [ 176.450200][ T3994] Call trace: [ 176.450218][ T3994] show_stack+0x18/0x24 (C) [ 176.450273][ T3994] dump_stack_lvl+0x60/0x80 [ 176.450310][ T3994] dump_stack+0x18/0x24 [ 176.450349][ T3994] should_fail_ex+0x1e0/0x238 [ 176.450420][ T3994] should_fail+0x14/0x40 [ 176.450471][ T3994] should_fail_usercopy+0x1c/0x40 [ 176.450520][ T3994] strncpy_from_user+0x24/0x1c0 [ 176.450568][ T3994] do_getname+0x5c/0x1a0 [ 176.450615][ T3994] getname_flags+0x14/0x20 [ 176.450665][ T3994] do_sys_openat2+0x5c/0x104 [ 176.450722][ T3994] __arm64_sys_openat+0x64/0xc0 [ 176.450763][ T3994] invoke_syscall+0x54/0x10c [ 176.450797][ T3994] el0_svc_common.constprop.0+0x40/0xe0 [ 176.450850][ T3994] do_el0_svc+0x1c/0x34 [ 176.450886][ T3994] el0_svc+0x38/0x1fc [ 176.450923][ T3994] el0t_64_sync_handler+0xa0/0xf0 [ 176.450968][ T3994] el0t_64_sync+0x1a4/0x1a8 [ 177.272431][ T3998] fuse: Unknown parameter 'group_id00000000000000000000' [ 179.245925][ T4011] FAULT_INJECTION: forcing a failure. [ 179.245925][ T4011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.248050][ T4011] CPU: 0 UID: 0 PID: 4011 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT [ 179.248175][ T4011] Hardware name: linux,dummy-virt (DT) [ 179.248216][ T4011] Call trace: [ 179.248249][ T4011] show_stack+0x18/0x24 (C) [ 179.248351][ T4011] dump_stack_lvl+0x60/0x80 [ 179.248418][ T4011] dump_stack+0x18/0x24 [ 179.248483][ T4011] should_fail_ex+0x1e0/0x238 [ 179.248560][ T4011] should_fail+0x14/0x40 [ 179.248661][ T4011] should_fail_usercopy+0x1c/0x40 [ 179.248737][ T4011] _copy_from_iter+0x60/0x6a0 [ 179.248820][ T4011] isotp_sendmsg+0x1dc/0xb54 [ 179.248898][ T4011] __sock_sendmsg+0x54/0x60 [ 179.248974][ T4011] ____sys_sendmsg+0x250/0x2a8 [ 179.249061][ T4011] ___sys_sendmsg+0xb0/0x108 [ 179.249135][ T4011] __sys_sendmsg+0x9c/0x100 [ 179.249198][ T4011] __arm64_sys_sendmsg+0x24/0x38 [ 179.249260][ T4011] invoke_syscall+0x54/0x10c [ 179.249325][ T4011] el0_svc_common.constprop.0+0x40/0xe0 [ 179.249390][ T4011] do_el0_svc+0x1c/0x34 [ 179.249485][ T4011] el0_svc+0x38/0x1fc [ 179.249573][ T4011] el0t_64_sync_handler+0xa0/0xf0 [ 179.249640][ T4011] el0t_64_sync+0x1a4/0x1a8 [ 179.273662][ T4013] fuse: Bad value for 'user_id' [ 179.273943][ T4013] fuse: Bad value for 'user_id' [ 179.909963][ T4026] input: syz1 as /devices/virtual/input/input4 [ 180.148046][ T4030] fuse: Bad value for 'user_id' [ 180.148343][ T4030] fuse: Bad value for 'user_id' [ 181.226079][ T4047] fuse: Bad value for 'user_id' [ 181.226428][ T4047] fuse: Bad value for 'user_id' [ 182.366799][ T4060] fuse: Bad value for 'fd' [ 183.297801][ T4070] fuse: Bad value for 'fd' [ 184.638188][ T4081] fuse: Bad value for 'fd' [ 187.923876][ T4092] fuse: Bad value for 'fd' [ 190.822404][ T4102] fuse: Bad value for 'group_id' [ 190.823581][ T4102] fuse: Bad value for 'group_id' [ 190.966614][ T4106] fuse: Bad value for 'fd' [ 191.159485][ T4108] input: syz1 as /devices/virtual/input/input5 [ 197.068246][ T4123] fuse: Bad value for 'group_id' [ 197.068564][ T4123] fuse: Bad value for 'group_id' [ 197.327901][ T4125] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.337656][ T4136] fuse: Bad value for 'group_id' [ 199.338452][ T4136] fuse: Bad value for 'group_id' [ 199.508612][ T4138] fuse: Bad value for 'rootmode' [ 201.118545][ T4150] fuse: Bad value for 'fd' [ 202.056075][ T4168] fuse: Unknown parameter 'grou00000000000000000000' [ 202.596397][ T4181] fuse: Unknown parameter 'fd00000000000000000004' [ 204.030362][ T4207] fuse: Bad value for 'fd' [ 204.225099][ T4211] fuse: Unknown parameter 'fd00000000000000000004' [ 204.979954][ T4220] fuse: Bad value for 'fd' [ 205.084075][ T4224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 205.586404][ T4235] fuse: Bad value for 'fd' [ 205.955187][ T3437] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.095070][ T3437] usb 1-1: device descriptor read/64, error -71 [ 206.286522][ T4239] FAULT_INJECTION: forcing a failure. [ 206.286522][ T4239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.286848][ T4239] CPU: 1 UID: 0 PID: 4239 Comm: syz.1.247 Not tainted syzkaller #0 PREEMPT [ 206.286950][ T4239] Hardware name: linux,dummy-virt (DT) [ 206.286990][ T4239] Call trace: [ 206.287022][ T4239] show_stack+0x18/0x24 (C) [ 206.287124][ T4239] dump_stack_lvl+0x60/0x80 [ 206.287197][ T4239] dump_stack+0x18/0x24 [ 206.287265][ T4239] should_fail_ex+0x1e0/0x238 [ 206.287338][ T4239] should_fail+0x14/0x40 [ 206.287407][ T4239] should_fail_usercopy+0x1c/0x40 [ 206.287482][ T4239] simple_read_from_buffer+0x5c/0x12c [ 206.287555][ T4239] proc_fail_nth_read+0xb4/0x140 [ 206.287630][ T4239] vfs_read+0xc4/0x31c [ 206.287700][ T4239] ksys_read+0x70/0x110 [ 206.287764][ T4239] __arm64_sys_read+0x1c/0x28 [ 206.287841][ T4239] invoke_syscall+0x54/0x10c [ 206.287912][ T4239] el0_svc_common.constprop.0+0x40/0xe0 [ 206.287980][ T4239] do_el0_svc+0x1c/0x34 [ 206.288045][ T4239] el0_svc+0x38/0x1fc [ 206.288117][ T4239] el0t_64_sync_handler+0xa0/0xf0 [ 206.288189][ T4239] el0t_64_sync+0x1a4/0x1a8 [ 206.335306][ T3437] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 206.421713][ T4242] fuse: Unknown parameter 'grou00000000000000000000' [ 206.465065][ T3437] usb 1-1: device descriptor read/64, error -71 [ 206.578048][ T3437] usb usb1-port1: attempt power cycle [ 206.915046][ T3437] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.938423][ T3437] usb 1-1: device descriptor read/8, error -71 [ 207.039595][ T4245] fuse: Unknown parameter '0000000000000000000000700000000000000000007' [ 207.175085][ T3437] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.199372][ T3437] usb 1-1: device descriptor read/8, error -71 [ 207.307006][ T3437] usb usb1-port1: unable to enumerate USB device [ 209.371614][ T4252] fuse: Bad value for 'fd' [ 209.571971][ T4256] fuse: Unknown parameter 'grou00000000000000000000' [ 209.679983][ T4258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.682743][ T4258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.036956][ T4265] fuse: Bad value for 'fd' [ 210.151785][ T4269] fuse: Unknown parameter 'grou00000000000000000000' [ 211.688308][ T4278] fuse: Bad value for 'fd' [ 211.882987][ T4282] fuse: Unknown parameter 'group_i00000000000000000000' [ 212.706397][ T4296] fuse: Unknown parameter 'group_i00000000000000000000' [ 212.818121][ T4298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.821514][ T4298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.456038][ T4310] fuse: Unknown parameter 'group_i00000000000000000000' [ 214.334985][ T4324] fuse: Unknown parameter 'group_id00000000000000000000' [ 216.052099][ T4336] fuse: Unknown parameter '00000000000000000003' [ 218.692061][ T4361] fuse: Unknown parameter 'group_id00000000000000000000' [ 218.861534][ T4366] input: syz1 as /devices/virtual/input/input6 [ 219.075513][ T4370] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.320875][ T4388] fuse: Bad value for 'user_id' [ 220.321842][ T4388] fuse: Bad value for 'user_id' [ 223.639713][ T4396] fuse: Bad value for 'user_id' [ 223.639900][ T4396] fuse: Bad value for 'user_id' [ 225.439043][ T4405] fuse: Bad value for 'user_id' [ 225.439390][ T4405] fuse: Bad value for 'user_id' [ 227.918171][ T4412] fuse: Bad value for 'user_id' [ 227.919384][ T4412] fuse: Bad value for 'user_id' [ 229.231175][ T4419] fuse: Bad value for 'user_id' [ 229.232699][ T4419] fuse: Bad value for 'user_id' [ 229.359260][ T4423] fuse: Bad value for 'user_id' [ 229.360765][ T4423] fuse: Bad value for 'user_id' [ 229.995692][ T4436] fuse: Bad value for 'fd' [ 230.090659][ T4438] fuse: Bad value for 'fd' [ 230.670047][ T4447] FAULT_INJECTION: forcing a failure. [ 230.670047][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.671847][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.1.313 Not tainted syzkaller #0 PREEMPT [ 230.671975][ T4447] Hardware name: linux,dummy-virt (DT) [ 230.672016][ T4447] Call trace: [ 230.672051][ T4447] show_stack+0x18/0x24 (C) [ 230.672152][ T4447] dump_stack_lvl+0x60/0x80 [ 230.672225][ T4447] dump_stack+0x18/0x24 [ 230.672296][ T4447] should_fail_ex+0x1e0/0x238 [ 230.672378][ T4447] should_fail+0x14/0x40 [ 230.672453][ T4447] should_fail_usercopy+0x1c/0x40 [ 230.672533][ T4447] _inline_copy_from_user+0x24/0xa8 [ 230.672617][ T4447] copy_msghdr_from_user+0x58/0x160 [ 230.672705][ T4447] ___sys_sendmsg+0x90/0x108 [ 230.672783][ T4447] __sys_sendmsg+0x9c/0x100 [ 230.672846][ T4447] __arm64_sys_sendmsg+0x24/0x38 [ 230.672931][ T4447] invoke_syscall+0x54/0x10c [ 230.672997][ T4447] el0_svc_common.constprop.0+0x40/0xe0 [ 230.673093][ T4447] do_el0_svc+0x1c/0x34 [ 230.673159][ T4447] el0_svc+0x38/0x1fc [ 230.673227][ T4447] el0t_64_sync_handler+0xa0/0xf0 [ 230.673294][ T4447] el0t_64_sync+0x1a4/0x1a8 [ 231.772117][ T4450] fuse: Bad value for 'fd' [ 233.509313][ T4466] fuse: Unknown parameter '00000000000000000003' [ 233.717265][ T4471] fuse: Bad value for 'fd' [ 234.222747][ T4481] fuse: Unknown parameter '00000000000000000003' [ 234.335678][ T4483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 237.503763][ T4502] fuse: Unknown parameter '00000000000000000003' [ 238.377927][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.497617][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.577047][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.675316][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.454777][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.505913][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.550909][ T29] bond0 (unregistering): Released all slaves [ 239.718059][ T29] hsr_slave_0: left promiscuous mode [ 239.727106][ T29] hsr_slave_1: left promiscuous mode [ 239.754058][ T29] veth1_macvtap: left promiscuous mode [ 239.755299][ T29] veth0_macvtap: left promiscuous mode [ 239.755708][ T29] veth1_vlan: left promiscuous mode [ 239.756127][ T29] veth0_vlan: left promiscuous mode [ 241.189572][ T4534] fuse: Unknown parameter '00000000000000000003' [ 241.598411][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 242.247842][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.258838][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.735619][ T4573] fuse: Unknown parameter '00000000000000000003' [ 242.917014][ T4575] fuse: Invalid rootmode [ 243.036585][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 243.312020][ T4507] hsr_slave_0: entered promiscuous mode [ 243.316679][ T4507] hsr_slave_1: entered promiscuous mode [ 243.319585][ T4507] debugfs: 'hsr0' already exists in 'hsr' [ 243.322146][ T4507] Cannot create hsr debugfs directory [ 243.696038][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 244.393856][ T4507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.409247][ T4507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.415377][ T4507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.438886][ T4507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.446087][ T4507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.461437][ T4507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.468928][ T4507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.484529][ T4507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.035055][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.947710][ T4631] fuse: Bad value for 'rootmode' [ 248.519160][ T4507] veth0_vlan: entered promiscuous mode [ 248.581139][ T4507] veth1_vlan: entered promiscuous mode [ 248.705337][ T4507] veth0_macvtap: entered promiscuous mode [ 248.739492][ T4507] veth1_macvtap: entered promiscuous mode [ 248.926142][ T734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.926391][ T734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.926616][ T734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.926697][ T734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.308422][ T4675] fuse: Invalid rootmode [ 249.452177][ T4677] fuse: Unknown parameter 'grou00000000000000000000' [ 249.742840][ T4681] fuse: Bad value for 'rootmode' [ 250.012604][ T4685] fuse: Invalid rootmode [ 250.216129][ T4687] fuse: Unknown parameter 'grou00000000000000000000' [ 250.482354][ T4693] fuse: Unknown parameter 'use00000000000000000000' [ 250.570467][ T4695] fuse: Bad value for 'rootmode' [ 250.753860][ T4699] fuse: Unknown parameter 'grou00000000000000000000' [ 250.979859][ T4704] fuse: Unknown parameter 'use00000000000000000000' [ 251.157425][ T4708] fuse: Bad value for 'rootmode' [ 251.191185][ T4709] fuse: Unknown parameter 'group_i00000000000000000000' [ 251.380788][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.382277][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.527739][ T4716] fuse: Unknown parameter 'use00000000000000000000' [ 251.807961][ T4721] fuse: Bad value for 'rootmode' [ 251.834077][ T4723] fuse: Unknown parameter 'group_i00000000000000000000' [ 252.067495][ T4727] fuse: Unknown parameter 'user_i00000000000000000000' [ 253.428035][ T4739] fuse: Unknown parameter 'use00000000000000000000' [ 253.505934][ T4741] fuse: Unknown parameter 'group_i00000000000000000000' [ 253.580898][ T4743] fuse: Unknown parameter 'user_i00000000000000000000' [ 254.771611][ T4749] fuse: Unknown parameter 'use00000000000000000000' [ 254.865866][ T4751] fuse: Unknown parameter 'group_id00000000000000000000' [ 254.981571][ T4753] fuse: Unknown parameter 'user_i00000000000000000000' [ 257.287934][ T4763] fuse: Unknown parameter 'use00000000000000000000' [ 257.358750][ T4765] fuse: Unknown parameter 'group_id00000000000000000000' [ 257.457577][ T4767] fuse: Unknown parameter 'user_id00000000000000000000' [ 258.789770][ T4783] fuse: Unknown parameter 'group_id00000000000000000000' [ 258.909207][ T4785] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.790421][ T4802] fuse: Unknown parameter 'group_i00000000000000000000' [ 260.873338][ T4804] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.965166][ T4806] fuse: Unknown parameter 'user_i00000000000000000000' [ 264.219987][ T4821] fuse: Unknown parameter 'group_id00000000000000000000' [ 264.332274][ T4823] fuse: Bad value for 'fd' [ 264.429252][ T4825] fuse: Unknown parameter 'user_i00000000000000000000' [ 265.140894][ T4830] fuse: Bad value for 'fd' [ 265.284023][ T4834] fuse: Bad value for 'fd' [ 266.308376][ T4844] fuse: Bad value for 'fd' [ 272.052837][ T4851] fuse: Bad value for 'fd' [ 278.757566][ T4870] fuse: Unknown parameter '00000000000000000003' [ 285.867516][ T4899] fuse: Bad value for 'rootmode' [ 287.843487][ T4919] fuse: Bad value for 'fd' [ 287.919783][ T4921] fuse: Bad value for 'rootmode' [ 289.658290][ T4941] fuse: Unknown parameter 'use00000000000000000000' [ 295.025049][ T3445] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 295.180358][ T3445] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 295.210968][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.212395][ T3445] usb 1-1: Product: syz [ 295.213730][ T3445] usb 1-1: Manufacturer: syz [ 295.215490][ T3445] usb 1-1: SerialNumber: syz [ 297.105903][ T4977] FAULT_INJECTION: forcing a failure. [ 297.105903][ T4977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.108415][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.1.442 Not tainted syzkaller #0 PREEMPT [ 297.108514][ T4977] Hardware name: linux,dummy-virt (DT) [ 297.108538][ T4977] Call trace: [ 297.108556][ T4977] show_stack+0x18/0x24 (C) [ 297.108613][ T4977] dump_stack_lvl+0x60/0x80 [ 297.108649][ T4977] dump_stack+0x18/0x24 [ 297.108718][ T4977] should_fail_ex+0x1e0/0x238 [ 297.108786][ T4977] should_fail+0x14/0x40 [ 297.108824][ T4977] should_fail_usercopy+0x1c/0x40 [ 297.108861][ T4977] _inline_copy_from_user+0x24/0xa8 [ 297.108902][ T4977] copy_msghdr_from_user+0x58/0x160 [ 297.108939][ T4977] ___sys_sendmsg+0x90/0x108 [ 297.108976][ T4977] __sys_sendmsg+0x9c/0x100 [ 297.109009][ T4977] __arm64_sys_sendmsg+0x24/0x38 [ 297.109041][ T4977] invoke_syscall+0x54/0x10c [ 297.109074][ T4977] el0_svc_common.constprop.0+0x40/0xe0 [ 297.109108][ T4977] do_el0_svc+0x1c/0x34 [ 297.109141][ T4977] el0_svc+0x38/0x1fc [ 297.109176][ T4977] el0t_64_sync_handler+0xa0/0xf0 [ 297.109210][ T4977] el0t_64_sync+0x1a4/0x1a8 [ 297.671875][ T3445] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 297.689389][ T3445] usb 1-1: USB disconnect, device number 8 [ 300.702912][ T4996] fuse: Unknown parameter 'user_i00000000000000000000' [ 302.196844][ T5007] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.334886][ T38] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 308.487280][ T38] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 308.504598][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.504924][ T38] usb 1-1: Product: syz [ 308.505163][ T38] usb 1-1: Manufacturer: syz [ 308.505206][ T38] usb 1-1: SerialNumber: syz [ 309.100448][ T38] rtl8150 1-1:1.0: couldn't reset the device [ 309.101582][ T38] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 309.150608][ T38] usb 1-1: USB disconnect, device number 9 [ 309.295402][ T5044] fuse: Bad value for 'fd' [ 310.653327][ T5055] fuse: Bad value for 'fd' [ 313.018355][ T5063] FAULT_INJECTION: forcing a failure. [ 313.018355][ T5063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.018762][ T5063] CPU: 1 UID: 0 PID: 5063 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT [ 313.018857][ T5063] Hardware name: linux,dummy-virt (DT) [ 313.018900][ T5063] Call trace: [ 313.018936][ T5063] show_stack+0x18/0x24 (C) [ 313.019039][ T5063] dump_stack_lvl+0x60/0x80 [ 313.019111][ T5063] dump_stack+0x18/0x24 [ 313.019180][ T5063] should_fail_ex+0x1e0/0x238 [ 313.019259][ T5063] should_fail+0x14/0x40 [ 313.019364][ T5063] should_fail_usercopy+0x1c/0x40 [ 313.019450][ T5063] _copy_from_iter+0x60/0x6a0 [ 313.019523][ T5063] netlink_sendmsg+0x15c/0x410 [ 313.019627][ T5063] __sock_sendmsg+0x54/0x60 [ 313.019797][ T5063] sock_write_iter+0xac/0x12c [ 313.020086][ T5063] vfs_write+0x30c/0x36c [ 313.020181][ T5063] ksys_write+0xec/0x108 [ 313.020266][ T5063] __arm64_sys_write+0x1c/0x30 [ 313.020341][ T5063] invoke_syscall+0x54/0x10c [ 313.020420][ T5063] el0_svc_common.constprop.0+0x40/0xe0 [ 313.020583][ T5063] do_el0_svc+0x1c/0x34 [ 313.020654][ T5063] el0_svc+0x38/0x1fc [ 313.020721][ T5063] el0t_64_sync_handler+0xa0/0xf0 [ 313.020786][ T5063] el0t_64_sync+0x1a4/0x1a8 [ 313.449350][ T5067] fuse: Bad value for 'fd' [ 314.979031][ T5087] fuse: Unknown parameter '00000000000000000003' [ 317.359354][ T5107] fuse: Unknown parameter '00000000000000000003' [ 319.182213][ T5126] fuse: Unknown parameter '00000000000000000003' [ 321.120250][ T5147] fuse: Unknown parameter '00000000000000000003' [ 323.196293][ T5161] fuse: Unknown parameter '00000000000000000003' [ 324.808769][ T5174] fuse: Unknown parameter '00000000000000000003' [ 335.692347][ T5227] fuse: Bad value for 'fd' [ 338.700232][ T5242] fuse: Unknown parameter '00000000000000000003' [ 343.910337][ T5258] fuse: Unknown parameter '00000000000000000003' [ 348.188383][ T5272] fuse: Unknown parameter '00000000000000000003' [ 354.166515][ T5283] fuse: Unknown parameter '00000000000000000003' [ 356.287893][ T5295] fuse: Unknown parameter '00000000000000000003' [ 363.232200][ T5312] fuse: Unknown parameter '00000000000000000003' [ 366.698168][ T5324] fuse: Unknown parameter 'fd00000000000000000003' [ 369.330623][ T5338] fuse: Unknown parameter 'fd00000000000000000003' [ 370.672583][ T5352] fuse: Unknown parameter 'fd00000000000000000003' [ 397.052474][ T5501] fuse: Unknown parameter 'group_id00000000000000000000' [ 414.922994][ T5618] fuse: Bad value for 'fd' [ 417.426394][ T5628] FAULT_INJECTION: forcing a failure. [ 417.426394][ T5628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.428458][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: syz.0.645 Not tainted syzkaller #0 PREEMPT [ 417.428584][ T5628] Hardware name: linux,dummy-virt (DT) [ 417.428627][ T5628] Call trace: [ 417.428663][ T5628] show_stack+0x18/0x24 (C) [ 417.428771][ T5628] dump_stack_lvl+0x60/0x80 [ 417.428848][ T5628] dump_stack+0x18/0x24 [ 417.428918][ T5628] should_fail_ex+0x1e0/0x238 [ 417.429001][ T5628] should_fail+0x14/0x40 [ 417.429077][ T5628] should_fail_usercopy+0x1c/0x40 [ 417.429154][ T5628] simple_read_from_buffer+0x5c/0x12c [ 417.429227][ T5628] proc_fail_nth_read+0xb4/0x140 [ 417.429303][ T5628] vfs_read+0xc4/0x31c [ 417.429385][ T5628] ksys_read+0x70/0x110 [ 417.429483][ T5628] __arm64_sys_read+0x1c/0x28 [ 417.429551][ T5628] invoke_syscall+0x54/0x10c [ 417.429621][ T5628] el0_svc_common.constprop.0+0x40/0xe0 [ 417.429720][ T5628] do_el0_svc+0x1c/0x34 [ 417.429807][ T5628] el0_svc+0x38/0x1fc [ 417.429888][ T5628] el0t_64_sync_handler+0xa0/0xf0 [ 417.429958][ T5628] el0t_64_sync+0x1a4/0x1a8 [ 417.619257][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.637184][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.848707][ T3445] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 418.015396][ T3445] usb 1-1: Using ep0 maxpacket: 8 [ 418.051840][ T3445] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.079587][ T3445] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 418.080428][ T3445] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.080572][ T3445] usb 1-1: config 1 interface 0 has no altsetting 0 [ 418.104589][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.104902][ T3445] usb 1-1: Product: Й [ 418.106776][ T3445] usb 1-1: Manufacturer: Х [ 418.107112][ T3445] usb 1-1: SerialNumber: 멹㿞檄헡행​艽≰藗 [ 418.128524][ T5630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.432437][ T3445] usb 1-1: USB disconnect, device number 10 [ 418.562654][ T5637] fuse: Bad value for 'fd' [ 419.399273][ T5644] FAULT_INJECTION: forcing a failure. [ 419.399273][ T5644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.401588][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: syz.0.650 Not tainted syzkaller #0 PREEMPT [ 419.401744][ T5644] Hardware name: linux,dummy-virt (DT) [ 419.401791][ T5644] Call trace: [ 419.401828][ T5644] show_stack+0x18/0x24 (C) [ 419.401937][ T5644] dump_stack_lvl+0x60/0x80 [ 419.402013][ T5644] dump_stack+0x18/0x24 [ 419.402087][ T5644] should_fail_ex+0x1e0/0x238 [ 419.402174][ T5644] should_fail+0x14/0x40 [ 419.402246][ T5644] should_fail_usercopy+0x1c/0x40 [ 419.402327][ T5644] strncpy_from_user+0x24/0x1c0 [ 419.402394][ T5644] path_setxattrat+0x94/0x1e0 [ 419.402464][ T5644] __arm64_sys_fsetxattr+0x2c/0x40 [ 419.402530][ T5644] invoke_syscall+0x54/0x10c [ 419.402592][ T5644] el0_svc_common.constprop.0+0x40/0xe0 [ 419.402729][ T5644] do_el0_svc+0x1c/0x34 [ 419.402797][ T5644] el0_svc+0x38/0x1fc [ 419.402897][ T5644] el0t_64_sync_handler+0xa0/0xf0 [ 419.402969][ T5644] el0t_64_sync+0x1a4/0x1a8 [ 419.637242][ T5649] fuse: Bad value for 'fd' [ 424.137528][ T5672] fuse: Bad value for 'fd' [ 424.925824][ T5681] FAULT_INJECTION: forcing a failure. [ 424.925824][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 424.928025][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT [ 424.928165][ T5681] Hardware name: linux,dummy-virt (DT) [ 424.928208][ T5681] Call trace: [ 424.928243][ T5681] show_stack+0x18/0x24 (C) [ 424.928359][ T5681] dump_stack_lvl+0x60/0x80 [ 424.928439][ T5681] dump_stack+0x18/0x24 [ 424.928508][ T5681] should_fail_ex+0x1e0/0x238 [ 424.928625][ T5681] should_failslab+0x54/0x80 [ 424.928707][ T5681] kmem_cache_alloc_noprof+0x58/0x43c [ 424.928791][ T5681] skb_clone+0x60/0xc4 [ 424.928864][ T5681] __netlink_deliver_tap+0x1cc/0x294 [ 424.928942][ T5681] netlink_unicast+0x380/0x3ac [ 424.929015][ T5681] netlink_sendmsg+0x194/0x410 [ 424.929087][ T5681] __sock_sendmsg+0x54/0x60 [ 424.929163][ T5681] ____sys_sendmsg+0x250/0x2a8 [ 424.929237][ T5681] ___sys_sendmsg+0xb0/0x108 [ 424.929309][ T5681] __sys_sendmsg+0x9c/0x100 [ 424.929389][ T5681] __arm64_sys_sendmsg+0x24/0x38 [ 424.929481][ T5681] invoke_syscall+0x54/0x10c [ 424.929550][ T5681] el0_svc_common.constprop.0+0x40/0xe0 [ 424.929620][ T5681] do_el0_svc+0x1c/0x34 [ 424.929720][ T5681] el0_svc+0x38/0x1fc [ 424.929815][ T5681] el0t_64_sync_handler+0xa0/0xf0 [ 424.929883][ T5681] el0t_64_sync+0x1a4/0x1a8 [ 429.720034][ T5704] fuse: Bad value for 'fd' [ 429.810831][ T5706] fuse: Invalid rootmode [ 431.073134][ T5718] fuse: Bad value for 'rootmode' [ 436.188415][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.191067][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.270694][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.274072][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.095064][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 448.225217][ T11] usb 1-1: device descriptor read/64, error -71 [ 448.465009][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.594825][ T11] usb 1-1: device descriptor read/64, error -71 [ 448.705537][ T11] usb usb1-port1: attempt power cycle [ 449.066395][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 449.091633][ T11] usb 1-1: device descriptor read/8, error -71 [ 449.325000][ T11] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 449.347041][ T11] usb 1-1: device descriptor read/8, error -71 [ 449.466719][ T11] usb usb1-port1: unable to enumerate USB device [ 455.067826][ T5841] fuse: Bad value for 'fd' [ 457.563473][ T5851] fuse: Bad value for 'fd' [ 457.945822][ T5855] input: syz1 as /devices/virtual/input/input8 [ 460.104975][ T5866] fuse: Bad value for 'fd' [ 460.802576][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.803713][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.515196][ T3519] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 467.690545][ T3519] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.40 [ 467.701893][ T3519] usb 1-1: config 1 interface 0 has no altsetting 0 [ 467.731967][ T3519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.733434][ T3519] usb 1-1: Product: Ƕ呑э凣㺩튢䉍⭍热誨⋣✓⧞碘湕훵↧艳껲皍ഷ뙋⁹㇝䓤ꒅ푛ⱬ为䄋헩爑Ꙩ⑂䏨컶Ⳑꩍ箃㺰┏䅭礔､⯽殣侷꾖椴릧奵礙蟌볷ꭱ㎂⁲돠㵙ⷮ藓 [ 467.742569][ T3519] usb 1-1: SerialNumber: 肠奚꫸パ귑簛횃拝齱➭鎋땡ﱲ惣ਣ퐑괕艅⳦櫸㊛粺ꨯꟑ濁䜣䓶॰๽乒ӿﶧ香잤叽椞덳企鎘᧣ʜ㙖㬏ᳯꊯ㰣鱃꩓駜嘇ⴲ刜▽쏯탣藧壪ꆭ骖艌뜯쳂裇劍⢔畱䂠鱑‐〠Ḥ䙥㏔ᢪ䵁╒䝹뜄뒸匄溟鉰鐭磩奎ڼ琤鑌㸴낙⫫罴瘹䒣㬃ꔕ䎣ꃦ铆ࡋँҧ컣传ꈑ쪈‰⥄撝 [ 468.014319][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.023636][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.088199][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.136498][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.640722][ T3519] usbhid 1-1:1.0: can't add hid device: -71 [ 468.641285][ T3519] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 468.675076][ T3519] usb 1-1: USB disconnect, device number 15 [ 473.432712][ T5944] FAULT_INJECTION: forcing a failure. [ 473.432712][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.433073][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT [ 473.433153][ T5944] Hardware name: linux,dummy-virt (DT) [ 473.433196][ T5944] Call trace: [ 473.433229][ T5944] show_stack+0x18/0x24 (C) [ 473.433354][ T5944] dump_stack_lvl+0x60/0x80 [ 473.433439][ T5944] dump_stack+0x18/0x24 [ 473.433510][ T5944] should_fail_ex+0x1e0/0x238 [ 473.433593][ T5944] should_fail+0x14/0x40 [ 473.433673][ T5944] should_fail_usercopy+0x1c/0x40 [ 473.433774][ T5944] _inline_copy_from_user+0x24/0xa8 [ 473.433860][ T5944] copy_msghdr_from_user+0x58/0x160 [ 473.433951][ T5944] ___sys_sendmsg+0x90/0x108 [ 473.434024][ T5944] __sys_sendmsg+0x9c/0x100 [ 473.434094][ T5944] __arm64_sys_sendmsg+0x24/0x38 [ 473.434158][ T5944] invoke_syscall+0x54/0x10c [ 473.434268][ T5944] el0_svc_common.constprop.0+0x40/0xe0 [ 473.434346][ T5944] do_el0_svc+0x1c/0x34 [ 473.434418][ T5944] el0_svc+0x38/0x1fc [ 473.434540][ T5944] el0t_64_sync_handler+0xa0/0xf0 [ 473.434617][ T5944] el0t_64_sync+0x1a4/0x1a8 [ 482.854798][ T3445] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 483.014663][ T3445] usb 1-1: Using ep0 maxpacket: 16 [ 483.022492][ T3445] usb 1-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 483.031500][ T3445] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.032916][ T3445] usb 1-1: config 1 interface 0 has no altsetting 0 [ 483.049003][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.049762][ T3445] usb 1-1: Product:   [ 483.051030][ T3445] usb 1-1: Manufacturer: ᐌ [ 483.051997][ T3445] usb 1-1: SerialNumber: syz [ 483.312269][ T3445] usbhid 1-1:1.0: can't add hid device: -71 [ 483.313708][ T3445] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 483.334740][ T3445] usb 1-1: USB disconnect, device number 16 [ 484.210631][ T6035] FAULT_INJECTION: forcing a failure. [ 484.210631][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 484.211001][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT [ 484.211081][ T6035] Hardware name: linux,dummy-virt (DT) [ 484.211116][ T6035] Call trace: [ 484.211145][ T6035] show_stack+0x18/0x24 (C) [ 484.211239][ T6035] dump_stack_lvl+0x60/0x80 [ 484.211447][ T6035] dump_stack+0x18/0x24 [ 484.211717][ T6035] should_fail_ex+0x1e0/0x238 [ 484.211840][ T6035] should_failslab+0x54/0x80 [ 484.211939][ T6035] __kmalloc_cache_noprof+0x58/0x460 [ 484.212062][ T6035] __devm_add_action+0x3c/0xc0 [ 484.212171][ T6035] devm_pinctrl_get+0x40/0x68 [ 484.212294][ T6035] pinctrl_bind_pins+0x58/0x160 [ 484.212400][ T6035] really_probe+0x54/0x2bc [ 484.212500][ T6035] __driver_probe_device+0x118/0x16c [ 484.212671][ T6035] driver_probe_device+0x3c/0x120 [ 484.212759][ T6035] __driver_attach+0x90/0x180 [ 484.212864][ T6035] bus_for_each_dev+0x7c/0xdc [ 484.212938][ T6035] driver_attach+0x24/0x30 [ 484.213017][ T6035] bus_add_driver+0xe4/0x208 [ 484.213097][ T6035] driver_register+0x68/0x130 [ 484.213174][ T6035] usb_gadget_register_driver_owner+0x54/0xfc [ 484.213245][ T6035] raw_ioctl+0x728/0xd38 [ 484.213308][ T6035] __arm64_sys_ioctl+0xac/0x104 [ 484.213401][ T6035] invoke_syscall+0x54/0x10c [ 484.213531][ T6035] el0_svc_common.constprop.0+0x40/0xe0 [ 484.213595][ T6035] do_el0_svc+0x1c/0x34 [ 484.213666][ T6035] el0_svc+0x38/0x1fc [ 484.213757][ T6035] el0t_64_sync_handler+0xa0/0xf0 [ 484.213814][ T6035] el0t_64_sync+0x1a4/0x1a8 [ 484.474591][ T38] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 484.626559][ T38] usb 1-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 484.638936][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.639129][ T38] usb 1-1: Product: syz [ 484.639238][ T38] usb 1-1: Manufacturer: syz [ 484.639300][ T38] usb 1-1: SerialNumber: syz [ 484.955878][ T38] usb 1-1: USB disconnect, device number 17 [ 485.029760][ T5906] udevd[5906]: setting mode of /dev/bus/usb/001/017 to 020664 failed: No such file or directory [ 485.032319][ T5906] udevd[5906]: setting owner of /dev/bus/usb/001/017 to uid=0, gid=0 failed: No such file or directory [ 485.158613][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.978327][ T6069] FAULT_INJECTION: forcing a failure. [ 487.978327][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.978691][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.0.797 Not tainted syzkaller #0 PREEMPT [ 487.978783][ T6069] Hardware name: linux,dummy-virt (DT) [ 487.978821][ T6069] Call trace: [ 487.978855][ T6069] show_stack+0x18/0x24 (C) [ 487.978978][ T6069] dump_stack_lvl+0x60/0x80 [ 487.979051][ T6069] dump_stack+0x18/0x24 [ 487.979122][ T6069] should_fail_ex+0x1e0/0x238 [ 487.979209][ T6069] should_fail+0x14/0x40 [ 487.979326][ T6069] should_fail_usercopy+0x1c/0x40 [ 487.979430][ T6069] simple_read_from_buffer+0x5c/0x12c [ 487.979513][ T6069] proc_fail_nth_read+0xb4/0x140 [ 487.979590][ T6069] vfs_read+0xc4/0x31c [ 487.979663][ T6069] ksys_read+0x70/0x110 [ 487.979748][ T6069] __arm64_sys_read+0x1c/0x28 [ 487.979824][ T6069] invoke_syscall+0x54/0x10c [ 487.979903][ T6069] el0_svc_common.constprop.0+0x40/0xe0 [ 487.979981][ T6069] do_el0_svc+0x1c/0x34 [ 487.980054][ T6069] el0_svc+0x38/0x1fc [ 487.980131][ T6069] el0t_64_sync_handler+0xa0/0xf0 [ 487.980204][ T6069] el0t_64_sync+0x1a4/0x1a8 [ 488.380343][ T6076] fuse: Unknown parameter 'grou00000000000000000000' [ 490.003791][ T6094] fuse: Unknown parameter 'grou00000000000000000000' [ 495.638490][ T6105] FAULT_INJECTION: forcing a failure. [ 495.638490][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 495.638813][ T6105] CPU: 1 UID: 0 PID: 6105 Comm: syz.0.807 Not tainted syzkaller #0 PREEMPT [ 495.638925][ T6105] Hardware name: linux,dummy-virt (DT) [ 495.638965][ T6105] Call trace: [ 495.639002][ T6105] show_stack+0x18/0x24 (C) [ 495.639107][ T6105] dump_stack_lvl+0x60/0x80 [ 495.639181][ T6105] dump_stack+0x18/0x24 [ 495.639255][ T6105] should_fail_ex+0x1e0/0x238 [ 495.639334][ T6105] should_failslab+0x54/0x80 [ 495.639433][ T6105] kmem_cache_alloc_noprof+0x58/0x43c [ 495.639545][ T6105] vm_area_alloc+0x24/0x70 [ 495.639664][ T6105] __mmap_region+0x410/0xaac [ 495.639740][ T6105] mmap_region+0x90/0x1a0 [ 495.639814][ T6105] do_mmap+0x364/0x5c4 [ 495.639896][ T6105] vm_mmap_pgoff+0x120/0x198 [ 495.640032][ T6105] ksys_mmap_pgoff+0x50/0x1f8 [ 495.640139][ T6105] __arm64_sys_mmap+0x2c/0x40 [ 495.640212][ T6105] invoke_syscall+0x54/0x10c [ 495.640306][ T6105] el0_svc_common.constprop.0+0x40/0xe0 [ 495.640387][ T6105] do_el0_svc+0x1c/0x34 [ 495.640459][ T6105] el0_svc+0x38/0x1fc [ 495.640537][ T6105] el0t_64_sync_handler+0xa0/0xf0 [ 495.640618][ T6105] el0t_64_sync+0x1a4/0x1a8 [ 496.707952][ T6111] fuse: Unknown parameter 'grou00000000000000000000' [ 497.649624][ T6131] fuse: Unknown parameter 'group_i00000000000000000000' [ 499.035388][ T6150] fuse: Unknown parameter 'group_i00000000000000000000' [ 500.769143][ T6167] fuse: Unknown parameter 'group_i00000000000000000000' [ 501.535322][ T6154] FAULT_INJECTION: forcing a failure. [ 501.535322][ T6154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.535722][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT [ 501.535833][ T6154] Hardware name: linux,dummy-virt (DT) [ 501.535901][ T6154] Call trace: [ 501.535937][ T6154] show_stack+0x18/0x24 (C) [ 501.536091][ T6154] dump_stack_lvl+0x60/0x80 [ 501.536161][ T6154] dump_stack+0x18/0x24 [ 501.536259][ T6154] should_fail_ex+0x1e0/0x238 [ 501.536388][ T6154] should_fail+0x14/0x40 [ 501.536477][ T6154] should_fail_usercopy+0x1c/0x40 [ 501.536588][ T6154] strncpy_from_user+0x24/0x1c0 [ 501.536658][ T6154] do_getname+0x5c/0x1a0 [ 501.536732][ T6154] getname_flags+0x14/0x20 [ 501.536848][ T6154] do_sys_openat2+0x5c/0x104 [ 501.536935][ T6154] __arm64_sys_openat+0x64/0xc0 [ 501.537010][ T6154] invoke_syscall+0x54/0x10c [ 501.537079][ T6154] el0_svc_common.constprop.0+0x40/0xe0 [ 501.537154][ T6154] do_el0_svc+0x1c/0x34 [ 501.537224][ T6154] el0_svc+0x38/0x1fc [ 501.537298][ T6154] el0t_64_sync_handler+0xa0/0xf0 [ 501.537370][ T6154] el0t_64_sync+0x1a4/0x1a8 [ 503.586798][ T6188] fuse: Unknown parameter 'group_id00000000000000000000' [ 508.915831][ T6211] fuse: Unknown parameter 'group_id00000000000000000000' [ 512.203571][ T6233] fuse: Unknown parameter 'group_id00000000000000000000' [ 512.321992][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.323071][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.931792][ T6250] fuse: Bad value for 'user_id' [ 512.932491][ T6250] fuse: Bad value for 'user_id' [ 516.672867][ T6281] fuse: Bad value for 'fd' [ 516.794635][ T6283] fuse: Bad value for 'user_id' [ 516.795736][ T6283] fuse: Bad value for 'user_id' [ 518.592511][ T6308] fuse: Bad value for 'user_id' [ 518.592769][ T6308] fuse: Bad value for 'user_id' [ 518.730617][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.737594][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.919809][ T6318] input: syz0 as /devices/virtual/input/input10 [ 522.100418][ T6335] fuse: Bad value for 'fd' [ 523.416559][ T6354] fuse: Bad value for 'fd' [ 523.673156][ T6360] FAULT_INJECTION: forcing a failure. [ 523.673156][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.685181][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.0.869 Not tainted syzkaller #0 PREEMPT [ 523.685343][ T6360] Hardware name: linux,dummy-virt (DT) [ 523.685396][ T6360] Call trace: [ 523.685430][ T6360] show_stack+0x18/0x24 (C) [ 523.685538][ T6360] dump_stack_lvl+0x60/0x80 [ 523.685610][ T6360] dump_stack+0x18/0x24 [ 523.685677][ T6360] should_fail_ex+0x1e0/0x238 [ 523.685793][ T6360] should_fail+0x14/0x40 [ 523.685878][ T6360] should_fail_usercopy+0x1c/0x40 [ 523.685955][ T6360] simple_read_from_buffer+0x5c/0x12c [ 523.686028][ T6360] proc_fail_nth_read+0xb4/0x140 [ 523.686103][ T6360] vfs_read+0xc4/0x31c [ 523.686176][ T6360] ksys_read+0x70/0x110 [ 523.686239][ T6360] __arm64_sys_read+0x1c/0x28 [ 523.686302][ T6360] invoke_syscall+0x54/0x10c [ 523.686380][ T6360] el0_svc_common.constprop.0+0x40/0xe0 [ 523.686445][ T6360] do_el0_svc+0x1c/0x34 [ 523.686511][ T6360] el0_svc+0x38/0x1fc [ 523.686579][ T6360] el0t_64_sync_handler+0xa0/0xf0 [ 523.686647][ T6360] el0t_64_sync+0x1a4/0x1a8 [ 523.811011][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.811912][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.839465][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.840238][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.086230][ T3520] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 524.204048][ T6366] fuse: Bad value for 'fd' [ 524.225138][ T3520] usb 1-1: device descriptor read/64, error -71 [ 524.478394][ T3520] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 524.615222][ T3520] usb 1-1: device descriptor read/64, error -71 [ 524.726794][ T3520] usb usb1-port1: attempt power cycle [ 525.064826][ T3520] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 525.090950][ T3520] usb 1-1: device descriptor read/8, error -71 [ 525.335128][ T3520] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 525.377733][ T3520] usb 1-1: device descriptor read/8, error -71 [ 525.496749][ T3520] usb usb1-port1: unable to enumerate USB device [ 527.243989][ T6376] fuse: Bad value for 'fd' [ 537.969989][ T6433] FAULT_INJECTION: forcing a failure. [ 537.969989][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.970350][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT [ 537.970446][ T6433] Hardware name: linux,dummy-virt (DT) [ 537.970484][ T6433] Call trace: [ 537.970518][ T6433] show_stack+0x18/0x24 (C) [ 537.970627][ T6433] dump_stack_lvl+0x60/0x80 [ 537.970700][ T6433] dump_stack+0x18/0x24 [ 537.970777][ T6433] should_fail_ex+0x1e0/0x238 [ 537.970878][ T6433] should_fail+0x14/0x40 [ 537.970952][ T6433] should_fail_usercopy+0x1c/0x40 [ 537.971028][ T6433] _copy_from_iter+0x60/0x6a0 [ 537.971102][ T6433] isotp_sendmsg+0x1dc/0xb54 [ 537.971206][ T6433] __sock_sendmsg+0x54/0x60 [ 537.971321][ T6433] ____sys_sendmsg+0x250/0x2a8 [ 537.971428][ T6433] ___sys_sendmsg+0xb0/0x108 [ 537.971508][ T6433] __sys_sendmsg+0x9c/0x100 [ 537.971697][ T6433] __arm64_sys_sendmsg+0x24/0x38 [ 537.971770][ T6433] invoke_syscall+0x54/0x10c [ 537.971846][ T6433] el0_svc_common.constprop.0+0x40/0xe0 [ 537.971913][ T6433] do_el0_svc+0x1c/0x34 [ 537.971979][ T6433] el0_svc+0x38/0x1fc [ 537.972054][ T6433] el0t_64_sync_handler+0xa0/0xf0 [ 537.972127][ T6433] el0t_64_sync+0x1a4/0x1a8 [ 538.185965][ T6435] "syz.1.895" (6435) uses obsolete ecb(arc4) skcipher [ 540.212652][ T6440] syz.0.896 uses obsolete (PF_INET,SOCK_PACKET) [ 540.565039][ T11] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 540.724910][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 540.730210][ T11] usb 1-1: New USB device found, idVendor=1b80, idProduct=a340, bcdDevice=ac.2d [ 540.753610][ T11] usb 1-1: config 2 has an invalid interface number: 251 but max is 0 [ 540.754069][ T11] usb 1-1: config 2 has no interface number 0 [ 540.754738][ T11] usb 1-1: config 2 interface 251 altsetting 6 endpoint 0xD has invalid maxpacket 1648, setting to 64 [ 540.754942][ T11] usb 1-1: config 2 interface 251 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 540.755182][ T11] usb 1-1: config 2 interface 251 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 540.755329][ T11] usb 1-1: config 2 interface 251 has no altsetting 0 [ 540.802164][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.802448][ T11] usb 1-1: Product: syz [ 540.804057][ T11] usb 1-1: Manufacturer: syz [ 540.806938][ T11] usb 1-1: SerialNumber: syz [ 541.692814][ T11] usb 1-1: USB disconnect, device number 22 [ 542.424481][ T6445] FAULT_INJECTION: forcing a failure. [ 542.424481][ T6445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.424802][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.897 Not tainted syzkaller #0 PREEMPT [ 542.424866][ T6445] Hardware name: linux,dummy-virt (DT) [ 542.424888][ T6445] Call trace: [ 542.424906][ T6445] show_stack+0x18/0x24 (C) [ 542.425001][ T6445] dump_stack_lvl+0x60/0x80 [ 542.425040][ T6445] dump_stack+0x18/0x24 [ 542.425074][ T6445] should_fail_ex+0x1e0/0x238 [ 542.425152][ T6445] should_fail+0x14/0x40 [ 542.425256][ T6445] should_fail_usercopy+0x1c/0x40 [ 542.425339][ T6445] _copy_from_iter+0x60/0x6a0 [ 542.425427][ T6445] isotp_sendmsg+0x1dc/0xb54 [ 542.425541][ T6445] __sock_sendmsg+0x54/0x60 [ 542.425699][ T6445] ____sys_sendmsg+0x250/0x2a8 [ 542.425853][ T6445] ___sys_sendmsg+0xb0/0x108 [ 542.425976][ T6445] __sys_sendmsg+0x9c/0x100 [ 542.426107][ T6445] __arm64_sys_sendmsg+0x24/0x38 [ 542.426180][ T6445] invoke_syscall+0x54/0x10c [ 542.426276][ T6445] el0_svc_common.constprop.0+0x40/0xe0 [ 542.426357][ T6445] do_el0_svc+0x1c/0x34 [ 542.426546][ T6445] el0_svc+0x38/0x1fc [ 542.426662][ T6445] el0t_64_sync_handler+0xa0/0xf0 [ 542.426765][ T6445] el0t_64_sync+0x1a4/0x1a8 [ 550.350782][ T6498] FAULT_INJECTION: forcing a failure. [ 550.350782][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 550.351963][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.1.910 Not tainted syzkaller #0 PREEMPT [ 550.352043][ T6498] Hardware name: linux,dummy-virt (DT) [ 550.352066][ T6498] Call trace: [ 550.352085][ T6498] show_stack+0x18/0x24 (C) [ 550.352144][ T6498] dump_stack_lvl+0x60/0x80 [ 550.352182][ T6498] dump_stack+0x18/0x24 [ 550.352216][ T6498] should_fail_ex+0x1e0/0x238 [ 550.352263][ T6498] should_failslab+0x54/0x80 [ 550.352338][ T6498] kmem_cache_alloc_noprof+0x58/0x43c [ 550.352385][ T6498] skb_clone+0x60/0xc4 [ 550.352422][ T6498] __netlink_deliver_tap+0x1cc/0x294 [ 550.352462][ T6498] netlink_unicast+0x380/0x3ac [ 550.352498][ T6498] netlink_sendmsg+0x194/0x410 [ 550.352535][ T6498] __sock_sendmsg+0x54/0x60 [ 550.352574][ T6498] ____sys_sendmsg+0x250/0x2a8 [ 550.352613][ T6498] ___sys_sendmsg+0xb0/0x108 [ 550.352651][ T6498] __sys_sendmsg+0x9c/0x100 [ 550.352683][ T6498] __arm64_sys_sendmsg+0x24/0x38 [ 550.352716][ T6498] invoke_syscall+0x54/0x10c [ 550.352759][ T6498] el0_svc_common.constprop.0+0x40/0xe0 [ 550.352794][ T6498] do_el0_svc+0x1c/0x34 [ 550.352827][ T6498] el0_svc+0x38/0x1fc [ 550.352862][ T6498] el0t_64_sync_handler+0xa0/0xf0 [ 550.352897][ T6498] el0t_64_sync+0x1a4/0x1a8 [ 561.469436][ T6538] FAULT_INJECTION: forcing a failure. [ 561.469436][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.469830][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.0.921 Not tainted syzkaller #0 PREEMPT [ 561.469938][ T6538] Hardware name: linux,dummy-virt (DT) [ 561.469979][ T6538] Call trace: [ 561.470012][ T6538] show_stack+0x18/0x24 (C) [ 561.470113][ T6538] dump_stack_lvl+0x60/0x80 [ 561.470186][ T6538] dump_stack+0x18/0x24 [ 561.470284][ T6538] should_fail_ex+0x1e0/0x238 [ 561.470371][ T6538] should_fail+0x14/0x40 [ 561.470450][ T6538] should_fail_usercopy+0x1c/0x40 [ 561.470570][ T6538] _inline_copy_from_user+0x24/0xa8 [ 561.470673][ T6538] kstrtouint_from_user+0x68/0xdc [ 561.470746][ T6538] proc_fail_nth_write+0x44/0x11c [ 561.470866][ T6538] vfs_write+0xd4/0x36c [ 561.470977][ T6538] ksys_write+0x70/0x108 [ 561.471068][ T6538] __arm64_sys_write+0x1c/0x30 [ 561.471141][ T6538] invoke_syscall+0x54/0x10c [ 561.471224][ T6538] el0_svc_common.constprop.0+0x40/0xe0 [ 561.471299][ T6538] do_el0_svc+0x1c/0x34 [ 561.471365][ T6538] el0_svc+0x38/0x1fc [ 561.471440][ T6538] el0t_64_sync_handler+0xa0/0xf0 [ 561.471564][ T6538] el0t_64_sync+0x1a4/0x1a8 [ 564.445497][ T3437] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 564.610402][ T3437] usb 1-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice=bf.7d [ 564.628721][ T3437] usb 1-1: config 51 has an invalid interface number: 145 but max is 1 [ 564.629144][ T3437] usb 1-1: config 51 has an invalid interface descriptor of length 4, skipping [ 564.629462][ T3437] usb 1-1: config 51 has an invalid interface association descriptor of length 5, skipping [ 564.629614][ T3437] usb 1-1: config 51 contains an unexpected descriptor of type 0x1, skipping [ 564.629807][ T3437] usb 1-1: config 51 has an invalid descriptor of length 208, skipping remainder of the config [ 564.629966][ T3437] usb 1-1: config 51 has 1 interface, different from the descriptor's value: 2 [ 564.630092][ T3437] usb 1-1: config 51 has no interface number 0 [ 564.630374][ T3437] usb 1-1: config 51 interface 145 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 564.630521][ T3437] usb 1-1: config 51 interface 145 altsetting 12 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 564.630649][ T3437] usb 1-1: config 51 interface 145 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 564.630806][ T3437] usb 1-1: config 51 interface 145 altsetting 12 has an invalid endpoint descriptor of length 2, skipping [ 564.630952][ T3437] usb 1-1: config 51 interface 145 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 564.649753][ T3437] usb 1-1: config 51 interface 145 has no altsetting 0 [ 564.675596][ T3437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.677481][ T3437] usb 1-1: Product: 㐁 [ 564.681648][ T3437] usb 1-1: SerialNumber: syz [ 564.945653][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.950442][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.992070][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.996506][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.656057][ T3437] usb 1-1: USB disconnect, device number 23 [ 565.765197][ T6390] udevd[6390]: setting owner of /dev/bus/usb/001/023 to uid=0, gid=0 failed: No such file or directory [ 565.891275][ T6390] udevd[6390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:51.145/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.651438][ T6602] FAULT_INJECTION: forcing a failure. [ 573.651438][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.653433][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.1.942 Not tainted syzkaller #0 PREEMPT [ 573.653580][ T6602] Hardware name: linux,dummy-virt (DT) [ 573.653628][ T6602] Call trace: [ 573.653667][ T6602] show_stack+0x18/0x24 (C) [ 573.653814][ T6602] dump_stack_lvl+0x60/0x80 [ 573.653905][ T6602] dump_stack+0x18/0x24 [ 573.653977][ T6602] should_fail_ex+0x1e0/0x238 [ 573.654063][ T6602] should_fail+0x14/0x40 [ 573.654141][ T6602] should_fail_usercopy+0x1c/0x40 [ 573.654219][ T6602] _inline_copy_from_user+0x24/0xa8 [ 573.654488][ T6602] copy_msghdr_from_user+0x58/0x160 [ 573.654638][ T6602] ___sys_sendmsg+0x90/0x108 [ 573.654720][ T6602] __sys_sendmsg+0x9c/0x100 [ 573.654789][ T6602] __arm64_sys_sendmsg+0x24/0x38 [ 573.654920][ T6602] invoke_syscall+0x54/0x10c [ 573.654989][ T6602] el0_svc_common.constprop.0+0x40/0xe0 [ 573.655056][ T6602] do_el0_svc+0x1c/0x34 [ 573.655121][ T6602] el0_svc+0x38/0x1fc [ 573.655196][ T6602] el0t_64_sync_handler+0xa0/0xf0 [ 573.655262][ T6602] el0t_64_sync+0x1a4/0x1a8 [ 580.138058][ T6629] fuse: Unknown parameter '00000000000000000003' [ 580.500631][ T6643] fuse: Unknown parameter 'fd00000000000000000003' [ 580.599315][ T6645] fuse: Bad value for 'fd' [ 580.980792][ T6659] fuse: Unknown parameter 'fd00000000000000000003' [ 580.997845][ T6660] fuse: Bad value for 'fd' [ 581.274829][ T6673] fuse: Bad value for 'fd' [ 581.283353][ T6674] fuse: Unknown parameter 'fd00000000000000000003' [ 581.666927][ T6686] fuse: Bad value for 'fd' [ 583.179998][ T6703] fuse: Bad value for 'fd' [ 587.053660][ T6764] fuse: Invalid rootmode [ 593.939985][ T6778] fuse: Invalid rootmode [ 615.352421][ T6844] fuse: Bad value for 'fd' [ 615.783611][ T6846] fuse: Unknown parameter 'use00000000000000000000' [ 619.190976][ T6864] fuse: Unknown parameter 'use00000000000000000000' [ 624.089093][ T6875] capability: warning: `syz.1.1012' uses 32-bit capabilities (legacy support in use) [ 625.356074][ T6887] fuse: Unknown parameter 'use00000000000000000000' [ 628.988221][ T6910] fuse: Unknown parameter 'user_i00000000000000000000' [ 630.742651][ T6925] fuse: Unknown parameter 'user_i00000000000000000000' [ 633.909987][ T6943] fuse: Unknown parameter 'user_i00000000000000000000' [ 643.143537][ T7019] input: syz0 as /devices/virtual/input/input13 [ 671.912619][ T7140] FAULT_INJECTION: forcing a failure. [ 671.912619][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.913004][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.0.1082 Not tainted syzkaller #0 PREEMPT [ 671.913087][ T7140] Hardware name: linux,dummy-virt (DT) [ 671.913163][ T7140] Call trace: [ 671.913197][ T7140] show_stack+0x18/0x24 (C) [ 671.913328][ T7140] dump_stack_lvl+0x60/0x80 [ 671.913420][ T7140] dump_stack+0x18/0x24 [ 671.913487][ T7140] should_fail_ex+0x1e0/0x238 [ 671.913575][ T7140] should_fail+0x14/0x40 [ 671.913720][ T7140] should_fail_usercopy+0x1c/0x40 [ 671.913796][ T7140] _inline_copy_from_user+0x24/0xa8 [ 671.913890][ T7140] copy_msghdr_from_user+0x58/0x160 [ 671.913976][ T7140] ___sys_sendmsg+0x90/0x108 [ 671.914052][ T7140] __sys_sendmsg+0x9c/0x100 [ 671.914157][ T7140] __arm64_sys_sendmsg+0x24/0x38 [ 671.914239][ T7140] invoke_syscall+0x54/0x10c [ 671.914307][ T7140] el0_svc_common.constprop.0+0x40/0xe0 [ 671.914423][ T7140] do_el0_svc+0x1c/0x34 [ 671.914489][ T7140] el0_svc+0x38/0x1fc [ 671.914556][ T7140] el0t_64_sync_handler+0xa0/0xf0 [ 671.914628][ T7140] el0t_64_sync+0x1a4/0x1a8 [ 676.362083][ T7171] FAULT_INJECTION: forcing a failure. [ 676.362083][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 676.362408][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT [ 676.362508][ T7171] Hardware name: linux,dummy-virt (DT) [ 676.362551][ T7171] Call trace: [ 676.362605][ T7171] show_stack+0x18/0x24 (C) [ 676.362735][ T7171] dump_stack_lvl+0x60/0x80 [ 676.362848][ T7171] dump_stack+0x18/0x24 [ 676.362992][ T7171] should_fail_ex+0x1e0/0x238 [ 676.363114][ T7171] should_failslab+0x54/0x80 [ 676.363200][ T7171] __kmalloc_node_track_caller_noprof+0xb0/0x538 [ 676.363292][ T7171] kstrdup+0x48/0xa0 [ 676.363405][ T7171] kstrdup_const+0x40/0x4c [ 676.363528][ T7171] __kernfs_new_node+0x54/0x254 [ 676.363659][ T7171] kernfs_new_node+0x88/0xa4 [ 676.363742][ T7171] kernfs_create_link+0xc0/0x100 [ 676.363811][ T7171] sysfs_do_create_link_sd+0x6c/0x100 [ 676.363899][ T7171] sysfs_create_link+0x20/0x40 [ 676.364012][ T7171] driver_sysfs_add+0x30/0xec [ 676.364207][ T7171] really_probe+0x80/0x2bc [ 676.364298][ T7171] __driver_probe_device+0x118/0x16c [ 676.364382][ T7171] driver_probe_device+0x3c/0x120 [ 676.364472][ T7171] __driver_attach+0x90/0x180 [ 676.364544][ T7171] bus_for_each_dev+0x7c/0xdc [ 676.364630][ T7171] driver_attach+0x24/0x30 [ 676.364695][ T7171] bus_add_driver+0xe4/0x208 [ 676.364807][ T7171] driver_register+0x68/0x130 [ 676.364884][ T7171] usb_gadget_register_driver_owner+0x54/0xfc [ 676.364959][ T7171] raw_ioctl+0x728/0xd38 [ 676.365058][ T7171] __arm64_sys_ioctl+0xac/0x104 [ 676.365166][ T7171] invoke_syscall+0x54/0x10c [ 676.365250][ T7171] el0_svc_common.constprop.0+0x40/0xe0 [ 676.365315][ T7171] do_el0_svc+0x1c/0x34 [ 676.365403][ T7171] el0_svc+0x38/0x1fc [ 676.365477][ T7171] el0t_64_sync_handler+0xa0/0xf0 [ 676.365555][ T7171] el0t_64_sync+0x1a4/0x1a8 [ 676.370305][ T7171] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 676.389952][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.391446][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.500357][ T7183] FAULT_INJECTION: forcing a failure. [ 677.500357][ T7183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.501670][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.1.1093 Not tainted syzkaller #0 PREEMPT [ 677.501798][ T7183] Hardware name: linux,dummy-virt (DT) [ 677.501822][ T7183] Call trace: [ 677.501841][ T7183] show_stack+0x18/0x24 (C) [ 677.501902][ T7183] dump_stack_lvl+0x60/0x80 [ 677.501975][ T7183] dump_stack+0x18/0x24 [ 677.502023][ T7183] should_fail_ex+0x1e0/0x238 [ 677.502066][ T7183] should_fail+0x14/0x40 [ 677.502104][ T7183] should_fail_usercopy+0x1c/0x40 [ 677.502144][ T7183] preserve_sve_context+0x148/0x2b0 [ 677.502183][ T7183] setup_rt_frame+0x828/0x1120 [ 677.502218][ T7183] arch_do_signal_or_restart+0x220/0x3dc [ 677.502254][ T7183] exit_to_user_mode_loop+0x114/0x19c [ 677.502292][ T7183] el0_svc+0x1f0/0x1fc [ 677.502329][ T7183] el0t_64_sync_handler+0xa0/0xf0 [ 677.502365][ T7183] el0t_64_sync+0x1a4/0x1a8 [ 684.546087][ T7208] FAULT_INJECTION: forcing a failure. [ 684.546087][ T7208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.548669][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.0.1101 Not tainted syzkaller #0 PREEMPT [ 684.548806][ T7208] Hardware name: linux,dummy-virt (DT) [ 684.548850][ T7208] Call trace: [ 684.548888][ T7208] show_stack+0x18/0x24 (C) [ 684.549011][ T7208] dump_stack_lvl+0x60/0x80 [ 684.549085][ T7208] dump_stack+0x18/0x24 [ 684.549155][ T7208] should_fail_ex+0x1e0/0x238 [ 684.549237][ T7208] should_fail+0x14/0x40 [ 684.549311][ T7208] should_fail_usercopy+0x1c/0x40 [ 684.549386][ T7208] simple_read_from_buffer+0x5c/0x12c [ 684.549479][ T7208] proc_fail_nth_read+0xb4/0x140 [ 684.549555][ T7208] vfs_read+0xc4/0x31c [ 684.549620][ T7208] ksys_read+0x70/0x110 [ 684.549708][ T7208] __arm64_sys_read+0x1c/0x28 [ 684.549773][ T7208] invoke_syscall+0x54/0x10c [ 684.549836][ T7208] el0_svc_common.constprop.0+0x40/0xe0 [ 684.549908][ T7208] do_el0_svc+0x1c/0x34 [ 684.549977][ T7208] el0_svc+0x38/0x1fc [ 684.550050][ T7208] el0t_64_sync_handler+0xa0/0xf0 [ 684.550119][ T7208] el0t_64_sync+0x1a4/0x1a8 [ 684.672096][ T7221] fuse: Bad value for 'user_id' [ 684.673349][ T7221] fuse: Bad value for 'user_id' [ 691.171208][ T7238] fuse: Bad value for 'user_id' [ 691.172313][ T7238] fuse: Bad value for 'user_id' [ 691.847972][ T7240] FAULT_INJECTION: forcing a failure. [ 691.847972][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 691.849351][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.1.1109 Not tainted syzkaller #0 PREEMPT [ 691.849453][ T7240] Hardware name: linux,dummy-virt (DT) [ 691.849502][ T7240] Call trace: [ 691.849589][ T7240] show_stack+0x18/0x24 (C) [ 691.849655][ T7240] dump_stack_lvl+0x60/0x80 [ 691.849733][ T7240] dump_stack+0x18/0x24 [ 691.849774][ T7240] should_fail_ex+0x1e0/0x238 [ 691.849816][ T7240] should_failslab+0x54/0x80 [ 691.849854][ T7240] __kmalloc_noprof+0xac/0x528 [ 691.849896][ T7240] tomoyo_encode2+0x7c/0x13c [ 691.849934][ T7240] tomoyo_encode+0x28/0x40 [ 691.849970][ T7240] tomoyo_realpath_from_path+0x100/0x1d4 [ 691.850008][ T7240] tomoyo_path_number_perm+0xe0/0x21c [ 691.850044][ T7240] tomoyo_file_ioctl+0x1c/0x30 [ 691.850081][ T7240] security_file_ioctl+0x8c/0x19c [ 691.850121][ T7240] __arm64_sys_ioctl+0x48/0x104 [ 691.850161][ T7240] invoke_syscall+0x54/0x10c [ 691.850204][ T7240] el0_svc_common.constprop.0+0x40/0xe0 [ 691.850241][ T7240] do_el0_svc+0x1c/0x34 [ 691.850277][ T7240] el0_svc+0x38/0x1fc [ 691.850345][ T7240] el0t_64_sync_handler+0xa0/0xf0 [ 691.850404][ T7240] el0t_64_sync+0x1a4/0x1a8 [ 691.861396][ T7240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.865500][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.867054][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.709999][ T7251] FAULT_INJECTION: forcing a failure. [ 694.709999][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.712037][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.1.1112 Not tainted syzkaller #0 PREEMPT [ 694.712199][ T7251] Hardware name: linux,dummy-virt (DT) [ 694.712239][ T7251] Call trace: [ 694.712282][ T7251] show_stack+0x18/0x24 (C) [ 694.712381][ T7251] dump_stack_lvl+0x60/0x80 [ 694.712841][ T7251] dump_stack+0x18/0x24 [ 694.712908][ T7251] should_fail_ex+0x1e0/0x238 [ 694.712980][ T7251] should_fail+0x14/0x40 [ 694.713041][ T7251] should_fail_usercopy+0x1c/0x40 [ 694.713105][ T7251] _inline_copy_from_user+0x24/0xa8 [ 694.713197][ T7251] copy_msghdr_from_user+0x58/0x160 [ 694.713280][ T7251] ___sys_sendmsg+0x90/0x108 [ 694.713344][ T7251] __sys_sendmsg+0x9c/0x100 [ 694.713401][ T7251] __arm64_sys_sendmsg+0x24/0x38 [ 694.713461][ T7251] invoke_syscall+0x54/0x10c [ 694.713526][ T7251] el0_svc_common.constprop.0+0x40/0xe0 [ 694.713587][ T7251] do_el0_svc+0x1c/0x34 [ 694.713651][ T7251] el0_svc+0x38/0x1fc [ 694.713760][ T7251] el0t_64_sync_handler+0xa0/0xf0 [ 694.713859][ T7251] el0t_64_sync+0x1a4/0x1a8 [ 701.239654][ T3009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.350628][ T3009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.458519][ T3009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.598948][ T3009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.303973][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.357234][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.389598][ T3009] bond0 (unregistering): Released all slaves [ 702.526013][ T3009] hsr_slave_0: left promiscuous mode [ 702.528673][ T3009] hsr_slave_1: left promiscuous mode [ 702.550172][ T3009] veth1_macvtap: left promiscuous mode [ 702.550407][ T3009] veth0_macvtap: left promiscuous mode [ 702.550706][ T3009] veth1_vlan: left promiscuous mode [ 702.551005][ T3009] veth0_vlan: left promiscuous mode [ 703.609968][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 705.054080][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 705.431918][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.452293][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.368535][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.041663][ T7275] hsr_slave_0: entered promiscuous mode [ 707.049327][ T7275] hsr_slave_1: entered promiscuous mode [ 707.535395][ T3220] 8021q: adding VLAN 0 to HW filter on device eth4 [ 708.402628][ T7275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 708.437178][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.441351][ T7275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 708.478735][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.491405][ T7275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 708.514762][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.519745][ T7275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 708.565126][ T7275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.682408][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.407848][ T7388] PM: hibernation: hibernation entry [ 711.497374][ T3009] Filesystems sync: 0.036 seconds [ 711.550163][ T7388] Freezing user space processes [ 712.605861][ T7388] Freezing user space processes completed (elapsed 1.055 seconds) [ 712.606930][ T7388] OOM killer disabled. [ 712.608342][ T7388] Freezing remaining freezable tasks [ 712.611739][ T7388] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 712.620978][ T7388] PM: hibernation: Preallocating image memory [ 717.744535][ T7388] PM: hibernation: Allocated 75736 pages for snapshot [ 717.744818][ T7388] PM: hibernation: Allocated 302944 kbytes in 5.12 seconds (59.16 MB/s) [ 717.745013][ T7388] printk: Suspending console(s) (use no_console_suspend to debug) [ 717.925839][ T7388] Disabling non-boot CPUs ... [ 717.958988][ T7388] psci: CPU1 killed (polled 0 ms) [ 718.041768][ T7388] hibernate: Saved 0 MTE pages [ 718.041768][ T7388] ================================================================== [ 718.041768][ T7388] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 718.041768][ T7388] Read at addr f6f000000341f100 by task syz.1.1122/7388 [ 718.041768][ T7388] Pointer tag: [f6], memory tag: [fe] [ 718.041768][ T7388] [ 718.041768][ T7388] CPU: 0 UID: 0 PID: 7388 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT [ 718.041768][ T7388] Hardware name: linux,dummy-virt (DT) [ 718.041768][ T7388] Call trace: [ 718.041768][ T7388] show_stack+0x18/0x24 (C) [ 718.041768][ T7388] dump_stack_lvl+0x60/0x80 [ 718.041768][ T7388] print_report+0x1c4/0x4b0 [ 718.041768][ T7388] kasan_report+0x84/0xac [ 718.041768][ T7388] __do_kernel_fault+0x1b4/0x220 [ 718.041768][ T7388] do_bad_area+0x68/0x80 [ 718.041768][ T7388] do_tag_check_fault+0x34/0x44 [ 718.041768][ T7388] do_mem_abort+0x40/0x90 [ 718.041768][ T7388] el1_abort+0x44/0x64 [ 718.041768][ T7388] el1h_64_sync_handler+0x50/0xac [ 718.041768][ T7388] el1h_64_sync+0x6c/0x70 [ 718.041768][ T7388] swsusp_save+0x2cc/0x590 (P) [ 718.041768][ T7388] swsusp_arch_suspend+0x74/0x618 [ 718.041768][ T7388] hibernation_snapshot+0x208/0x438 [ 718.041768][ T7388] hibernate+0x1cc/0x3c0 [ 718.041768][ T7388] state_store+0xe8/0xf4 [ 718.041768][ T7388] kobj_attr_store+0x18/0x34 [ 718.041768][ T7388] sysfs_kf_write+0x7c/0x98 [ 718.041768][ T7388] kernfs_fop_write_iter+0x138/0x200 [ 718.041768][ T7388] vfs_write+0x244/0x36c [ 718.041768][ T7388] ksys_write+0x70/0x108 [ 718.041768][ T7388] __arm64_sys_write+0x1c/0x30 [ 718.041768][ T7388] invoke_syscall+0x54/0x10c [ 718.041768][ T7388] el0_svc_common.constprop.0+0x40/0xe0 [ 718.041768][ T7388] do_el0_svc+0x1c/0x34 [ 718.041768][ T7388] el0_svc+0x38/0x1fc [ 718.041768][ T7388] el0t_64_sync_handler+0xa0/0xf0 [ 718.041768][ T7388] el0t_64_sync+0x1a4/0x1a8 [ 718.041768][ T7388] [ 718.041768][ T7388] The buggy address belongs to the physical page: [ 718.041768][ T7388] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 718.041768][ T7388] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 718.041768][ T7388] flags: 0x1ffe40000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x9) [ 718.041768][ T7388] page_type: f8(unknown) [ 718.041768][ T7388] raw: 01ffe40000000040 0000000000000000 dead000000000122 0000000000000000 [ 718.041768][ T7388] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 718.041768][ T7388] head: 01ffe40000000040 0000000000000000 dead000000000122 0000000000000000 [ 718.041768][ T7388] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 718.041768][ T7388] head: 01ffe40000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 718.041768][ T7388] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 718.041768][ T7388] page dumped because: kasan: bad access detected [ 718.041768][ T7388] [ 718.041768][ T7388] Memory state around the buggy address: [ 718.041768][ T7388] fff000000341ef00: f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 [ 718.041768][ T7388] fff000000341f000: f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 [ 718.041768][ T7388] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 718.041768][ T7388] ^ [ 718.041768][ T7388] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 718.041768][ T7388] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 718.041768][ T7388] ================================================================== [ 718.041768][ T7388] Disabling lock debugging due to kernel taint [ 718.061697][ T7388] Enabling non-boot CPUs ... [ 718.075670][ T0] Detected PIPT I-cache on CPU1 [ 718.081535][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 718.105626][ T7388] CPU1 is up [ 718.191286][ T29] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 718.327884][ T7388] PM: Cannot find swap device, try swapon -a [ 718.328173][ T7388] PM: Cannot get swap writer [ 719.608873][ T7388] OOM killer enabled. [ 719.609093][ T7388] Restarting tasks: Starting [ 719.640544][ T7388] Restarting tasks: Done [ 719.641685][ T7388] PM: hibernation: hibernation exit SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 720.915668][ T6180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.003092][ T6180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.100777][ T6180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.195902][ T6180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.749191][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.792341][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.838772][ T6180] bond0 (unregistering): Released all slaves [ 721.951583][ T6180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.006623][ T6180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.048328][ T6180] bond0 (unregistering): Released all slaves [ 722.069064][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 722.155017][ T6180] hsr_slave_0: left promiscuous mode [ 722.157079][ T6180] hsr_slave_1: left promiscuous mode [ 722.173859][ T6180] hsr_slave_0: left promiscuous mode [ 722.176529][ T6180] hsr_slave_1: left promiscuous mode [ 722.194324][ T6180] veth1_macvtap: left promiscuous mode [ 722.195230][ T6180] veth0_macvtap: left promiscuous mode [ 722.197112][ T6180] veth1_vlan: left promiscuous mode [ 722.198177][ T6180] veth0_vlan: left promiscuous mode [ 723.608711][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 724.089148][ T3220] 8021q: adding VLAN 0 to HW filter on device eth4 [ 724.594129][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 724.997260][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 725.480984][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 726.215547][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 726.813439][ T3220] 8021q: adding VLAN 0 to HW filter on device eth8 VM DIAGNOSIS: 07:29:12 Registers: info registers vcpu 0 CPU#0 PC=ffff800081835448 X00=0000000000000008 X01=0000000000000008 X02=5552563412005452 X03=faf00000053c3728 X04=0000000000000000 X05=f4f0000007db6f40 X06=0000000000000000 X07=0000000000000140 X08=f3f0000004199ddc X09=0000000000000078 X10=f34ff401cd316d2f X11=00000000000000c0 X12=000000000000005a X13=0000000000000000 X14=ffffc1ffbf7a9d80 X15=0000000000000001 X16=ffff800082f08000 X17=fff07ffffcd77000 X18=0000000000000001 X19=f4f000000677aa00 X20=f1f00000040acb40 X21=f9f0000007f3e048 X22=0000000000000000 X23=f4f000000677aa28 X24=f1f00000040ac000 X25=ffffc1ffc0250800 X26=f1f00000040acb40 X27=0000000000000000 X28=f4f000000677aa00 X29=ffff800082f0bb50 X30=ffff800080dd6f44 SP=ffff800082f0bb50 PSTATE=20402009 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe84234c0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809b115c X00=0000000000000002 X01=0000000000000018 X02=ffff800082f31018 X03=ffff800082ccca88 X04=f0f0000003fb9880 X05=0000000000000031 X06=ffff800082cccb58 X07=0000000000000001 X08=fbf0000003690000 X09=000000000000079b X10=000000000000b6a0 X11=ffff800082b9ed68 X12=0000000000029da0 X13=ffff80008327bb58 X14=ffff80008327b9a0 X15=ffff80008327bb4d X16=f3f000000a4df2c0 X17=0000000000000000 X18=00000000ffffffff X19=f9f000000345800a X20=ffff8000809b1388 X21=f0f0000003fb9880 X22=f9f000000345800a X23=ffff8000809b1388 X24=000000000000003c X25=fbf0000003690000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008327bcc0 X30=ffff8000809b13b0 SP=ffff80008327bcc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000