last executing test programs: 3.120564843s ago: executing program 0 (id=362): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r5 = memfd_create(&(0x7f00000003c0)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000540)={r5, 0x1f, 0x0, 0x1000000}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4000000005000140000000", 0xb) poll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x18}], 0x1, 0xfff80000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000880)=0x1) 2.251723717s ago: executing program 0 (id=373): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24040084) listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x0) 1.890990973s ago: executing program 1 (id=377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x64) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.821446803s ago: executing program 3 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.821142566s ago: executing program 1 (id=379): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x40, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x40}}, 0x0) 1.820794793s ago: executing program 3 (id=380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x145902) 1.820626149s ago: executing program 1 (id=381): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r5 = memfd_create(&(0x7f00000003c0)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000540)={r5, 0x1f, 0x0, 0x1000000}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) poll(&(0x7f0000000500)=[{r6, 0x18}], 0x1, 0xfff80000) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000880)=0x1) 1.751619837s ago: executing program 3 (id=382): socket$key(0xf, 0x3, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', 0x0, 0x0, 0x0) sigaltstack(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/trace\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f00000004c0)=""/9, 0x9, 0x720, 0x0, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303028303053a25f7f3030303030300a0000000000007acc952a2ffd"], 0x2a) close(r8) 1.631749084s ago: executing program 2 (id=383): openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000500)=0x0) io_submit(r0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0]) 1.511289658s ago: executing program 2 (id=384): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001880)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001900), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001940), 0x10106, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000001980), &(0x7f00000019c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001a40)='./tracefs_dir\x00', &(0x7f0000001a80)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r4, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000280), 0x2) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4107, 0x100b}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001340)={0x62e, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x8000}) socket(0x23, 0x3, 0x5) r5 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.321704602s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a40)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) 891.290615ms ago: executing program 1 (id=386): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 890.552126ms ago: executing program 3 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x80, &(0x7f00000015c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003780)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000003840)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005900)={0x20, 0x0, 0x0, {0x0, 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000005940)="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", 0x2000, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007a00)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff030000200000000005000000000000000400000000000000080000000000000088bc000009000000040000000000000005000000000000000500000000000000060000000000000003000000000000002e010000000000000700000008000000fafffff700c0000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="800000000800000000000000ffffffffffdfffff010400000001000006000000280010089eaf82a713260000b95bb0"], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007ac0)={0x2020}, 0x2020) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000009b00)=ANY=[@ANYBLOB="2f0000000600000000000000000000000100000000000000020000000000000006000000000000009eaf82a71326"], 0x2f) 620.366174ms ago: executing program 2 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x8050) 539.960316ms ago: executing program 2 (id=389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x64) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 539.700298ms ago: executing program 2 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 538.192193ms ago: executing program 2 (id=391): socket$key(0xf, 0x3, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) sigaltstack(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/trace\x00', 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f00000004c0)=""/9, 0x9, 0x720, 0x0, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303028303053a25f7f3030303030300a0000000000007acc952a2ffd"], 0x2a) close(r8) 340.894506ms ago: executing program 0 (id=392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x40, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x40}}, 0x0) 340.649233ms ago: executing program 1 (id=393): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x145902) 281.603132ms ago: executing program 1 (id=394): syz_open_dev$admmidi(&(0x7f0000000280), 0x20, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x40400) pselect6(0x40, &(0x7f0000000780)={0x0, 0x3, 0x0, 0x100, 0x8000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 281.202873ms ago: executing program 0 (id=395): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, 0x0, &(0x7f0000000140)='ntfs3\x00', r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x47ecf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 210.800322ms ago: executing program 0 (id=396): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f00000006c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e050847"], 0x8) 137.62µs ago: executing program 3 (id=397): r0 = syz_pidfd_open(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000d40)=@ocfs2={0xc, 0xfe, {0x3, 0x0, 0x7}}, 0x0) 0s ago: executing program 3 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff0010a5") ioctl(r2, 0xc048aeca, &(0x7f00000000c0)='\a\x00'/38) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21875' (ED25519) to the list of known hosts. [ 41.884105][ T5723] cgroup: Unknown subsys name 'net' [ 42.007848][ T5723] cgroup: Unknown subsys name 'cpuset' [ 42.010592][ T5723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.877483][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.048142][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.049939][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.050555][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.051316][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.051874][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.055339][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.056685][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.057078][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.057852][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.060783][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.061509][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.062684][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.063093][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.071956][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.072179][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.080338][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.084686][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.086853][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.092512][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.096621][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.794784][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.794831][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.794894][ T5740] bridge_slave_0: entered allmulticast mode [ 47.795797][ T5740] bridge_slave_0: entered promiscuous mode [ 47.802383][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.802427][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.802503][ T5744] bridge_slave_0: entered allmulticast mode [ 47.803209][ T5744] bridge_slave_0: entered promiscuous mode [ 47.828060][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.828237][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.828298][ T5740] bridge_slave_1: entered allmulticast mode [ 47.829878][ T5740] bridge_slave_1: entered promiscuous mode [ 47.831148][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.831218][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.831296][ T5744] bridge_slave_1: entered allmulticast mode [ 47.832412][ T5744] bridge_slave_1: entered promiscuous mode [ 47.870966][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.871113][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.871216][ T5738] bridge_slave_0: entered allmulticast mode [ 47.872615][ T5738] bridge_slave_0: entered promiscuous mode [ 47.875354][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.875395][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.875458][ T5738] bridge_slave_1: entered allmulticast mode [ 47.877289][ T5738] bridge_slave_1: entered promiscuous mode [ 47.912984][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.914346][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.936063][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.949456][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.979274][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.979319][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.979372][ T5734] bridge_slave_0: entered allmulticast mode [ 47.980077][ T5734] bridge_slave_0: entered promiscuous mode [ 47.989678][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.991232][ T5744] team0: Port device team_slave_0 added [ 47.992656][ T5744] team0: Port device team_slave_1 added [ 47.992753][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.992794][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.992849][ T5734] bridge_slave_1: entered allmulticast mode [ 47.993583][ T5734] bridge_slave_1: entered promiscuous mode [ 48.007762][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.050228][ T5740] team0: Port device team_slave_0 added [ 48.052715][ T5740] team0: Port device team_slave_1 added [ 48.068534][ T5738] team0: Port device team_slave_0 added [ 48.069893][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.069907][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.069928][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.073317][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.097032][ T5738] team0: Port device team_slave_1 added [ 48.097737][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.097750][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.097771][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.098542][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.098553][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.098572][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.109254][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.120924][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.120938][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.120959][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.171308][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.171326][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.171346][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.175303][ T5734] team0: Port device team_slave_0 added [ 48.183276][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.183291][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.183311][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.186786][ T5744] hsr_slave_0: entered promiscuous mode [ 48.187292][ T5744] hsr_slave_1: entered promiscuous mode [ 48.199315][ T5734] team0: Port device team_slave_1 added [ 48.225050][ T5740] hsr_slave_0: entered promiscuous mode [ 48.225518][ T5740] hsr_slave_1: entered promiscuous mode [ 48.225822][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.225869][ T5740] Cannot create hsr debugfs directory [ 48.261242][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.261258][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.261277][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.283610][ T5738] hsr_slave_0: entered promiscuous mode [ 48.284353][ T5738] hsr_slave_1: entered promiscuous mode [ 48.285160][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.285178][ T5738] Cannot create hsr debugfs directory [ 48.285667][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.285676][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.285688][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.404922][ T5734] hsr_slave_0: entered promiscuous mode [ 48.405715][ T5734] hsr_slave_1: entered promiscuous mode [ 48.406189][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.406205][ T5734] Cannot create hsr debugfs directory [ 48.580799][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.587554][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.613633][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.618385][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.635176][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.638415][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.660132][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.662593][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.691537][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.696880][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.697279][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.698889][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.706706][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.712934][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.713820][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.717166][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.769078][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.772841][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.784112][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.789428][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.790145][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.795517][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.802751][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.808398][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.839073][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.842680][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.843430][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.846696][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.854615][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.857774][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.858518][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.861238][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.888972][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.940189][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.948253][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.948608][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.950937][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.962883][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.962965][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.003277][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.019360][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.019438][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.021460][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.021503][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.033126][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.070420][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.072610][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.081930][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.089860][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.089945][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.098976][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.099024][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.111580][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.111660][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.113234][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.113311][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.125647][ T5096] Bluetooth: hci2: command tx timeout [ 49.135232][ T5096] Bluetooth: hci3: command tx timeout [ 49.135378][ T5096] Bluetooth: hci0: command tx timeout [ 49.135459][ T5096] Bluetooth: hci1: command tx timeout [ 49.470588][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.486121][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.539332][ T5740] veth0_vlan: entered promiscuous mode [ 49.549668][ T5740] veth1_vlan: entered promiscuous mode [ 49.566061][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.568525][ T5744] veth0_vlan: entered promiscuous mode [ 49.581231][ T5744] veth1_vlan: entered promiscuous mode [ 49.583666][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.614415][ T5740] veth0_macvtap: entered promiscuous mode [ 49.628061][ T5740] veth1_macvtap: entered promiscuous mode [ 49.638052][ T5744] veth0_macvtap: entered promiscuous mode [ 49.638853][ T5738] veth0_vlan: entered promiscuous mode [ 49.640404][ T5744] veth1_macvtap: entered promiscuous mode [ 49.653408][ T5738] veth1_vlan: entered promiscuous mode [ 49.657860][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.669701][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.674618][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.678936][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.695428][ T5734] veth0_vlan: entered promiscuous mode [ 49.716420][ T5734] veth1_vlan: entered promiscuous mode [ 49.727139][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.727308][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.727340][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.733575][ T5738] veth0_macvtap: entered promiscuous mode [ 49.770253][ T5738] veth1_macvtap: entered promiscuous mode [ 49.811688][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.816088][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.816106][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.831646][ T5734] veth0_macvtap: entered promiscuous mode [ 49.833277][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.833427][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.833438][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.843699][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.843711][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.852431][ T5734] veth1_macvtap: entered promiscuous mode [ 49.874330][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.874343][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.887695][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.902333][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.925327][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.925762][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.925843][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.925903][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.925965][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926037][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926107][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.935745][ T5744] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.946793][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.946805][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.971321][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.975585][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.976219][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.978730][ T5604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978768][ T5604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978787][ T5604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978806][ T5604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978824][ T5604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978842][ T5604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.980878][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.980890][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.999525][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.999537][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.012009][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.033532][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.033545][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.182267][ T5889] FAULT_INJECTION: forcing a failure. [ 50.182267][ T5889] name failslab, interval 1, probability 0, space 0, times 1 [ 50.182289][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 50.182302][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.182308][ T5889] Call Trace: [ 50.182312][ T5889] [ 50.182317][ T5889] dump_stack_lvl+0x100/0x190 [ 50.182338][ T5889] should_fail_ex.cold+0x5/0xa [ 50.182354][ T5889] should_failslab+0xc2/0x120 [ 50.182374][ T5889] __kmalloc_node_noprof+0xff/0x880 [ 50.182390][ T5889] ? __kmalloc_noprof+0x350/0x840 [ 50.182405][ T5889] ? get_callchain_buffers+0x1e5/0x380 [ 50.182422][ T5889] get_callchain_buffers+0x1e5/0x380 [ 50.182457][ T5889] ? security_capable+0x80/0x260 [ 50.182478][ T5889] stack_map_alloc+0x316/0x610 [ 50.182493][ T5889] map_create+0x874/0x30d0 [ 50.182507][ T5889] ? __lock_acquire+0x5c0/0x1f40 [ 50.182529][ T5889] ? __pfx_map_create+0x10/0x10 [ 50.182542][ T5889] ? lock_acquire+0x1d1/0x380 [ 50.182558][ T5889] ? __might_fault+0xc5/0x140 [ 50.182572][ T5889] ? __might_fault+0xc5/0x140 [ 50.182590][ T5889] __sys_bpf+0x12a0/0x4a30 [ 50.182607][ T5889] ? __pfx___sys_bpf+0x10/0x10 [ 50.182619][ T5889] ? find_held_lock+0x2b/0x80 [ 50.182638][ T5889] ? futex_wake+0x4ea/0x5e0 [ 50.182665][ T5889] ? rcu_read_lock_any_held+0x6a/0x90 [ 50.182681][ T5889] ? find_held_lock+0x2b/0x80 [ 50.182694][ T5889] ? ksys_write+0x190/0x250 [ 50.182709][ T5889] ? ksys_write+0x190/0x250 [ 50.182732][ T5889] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 50.182749][ T5889] ? xfd_validate_state+0x129/0x190 [ 50.182770][ T5889] ? __ia32_sys_bpf+0xcc/0x170 [ 50.182783][ T5889] __ia32_sys_bpf+0xcc/0x170 [ 50.182797][ T5889] ? __do_fast_syscall_32+0xb3/0x8b0 [ 50.182811][ T5889] __do_fast_syscall_32+0x13a/0x8b0 [ 50.182825][ T5889] do_fast_syscall_32+0x32/0x70 [ 50.182836][ T5889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.182851][ T5889] RIP: 0023:0xf749efec [ 50.182864][ T5889] Code: Unable to access opcode bytes at 0xf749efc2. [ 50.182870][ T5889] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 50.182881][ T5889] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000380 [ 50.182888][ T5889] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.182895][ T5889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.182901][ T5889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.182907][ T5889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.182921][ T5889] [ 50.352186][ T5894] FAULT_INJECTION: forcing a failure. [ 50.352186][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 50.352205][ T5894] CPU: 2 UID: 0 PID: 5894 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.352219][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.352226][ T5894] Call Trace: [ 50.352230][ T5894] [ 50.352235][ T5894] dump_stack_lvl+0x100/0x190 [ 50.352255][ T5894] should_fail_ex.cold+0x5/0xa [ 50.352270][ T5894] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.352290][ T5894] should_failslab+0xc2/0x120 [ 50.352308][ T5894] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.352324][ T5894] ? do_raw_spin_lock+0x128/0x260 [ 50.352337][ T5894] ? inet_bind_bucket_create+0x2d/0x280 [ 50.352353][ T5894] inet_bind_bucket_create+0x2d/0x280 [ 50.352366][ T5894] inet_csk_get_port+0x153f/0x28e0 [ 50.352388][ T5894] ? __pfx_inet_csk_get_port+0x10/0x10 [ 50.352403][ T5894] inet_csk_listen_start+0x205/0x450 [ 50.352419][ T5894] __inet_listen_sk+0x20f/0x510 [ 50.352437][ T5894] ? __pfx___inet_listen_sk+0x10/0x10 [ 50.352456][ T5894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 50.352471][ T5894] ? __local_bh_enable_ip+0xa5/0x120 [ 50.352491][ T5894] inet_listen+0x93/0xd0 [ 50.352508][ T5894] __sys_listen_socket+0x108/0x150 [ 50.352520][ T5894] __sys_listen+0xa7/0x130 [ 50.352531][ T5894] __ia32_sys_listen+0x53/0x80 [ 50.352542][ T5894] __do_fast_syscall_32+0x13a/0x8b0 [ 50.352561][ T5894] do_fast_syscall_32+0x32/0x70 [ 50.352573][ T5894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.352589][ T5894] RIP: 0023:0xf749efec [ 50.352602][ T5894] Code: Unable to access opcode bytes at 0xf749efc2. [ 50.352608][ T5894] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000016b [ 50.352620][ T5894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000004000000 [ 50.352628][ T5894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.352636][ T5894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.352643][ T5894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.352651][ T5894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.352665][ T5894] [ 50.434758][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 50.500332][ T5897] loop0: detected capacity change from 0 to 3904 [ 50.566520][ T5897] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 50.567112][ T5897] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 50.567128][ T5897] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 50.567184][ T5897] loop0: [ 50.617900][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 50.617939][ T9] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 50.621141][ T9] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 50.621169][ T9] usb 6-1: config 142 has no interface number 0 [ 50.621199][ T9] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 50.621218][ T9] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 50.621235][ T9] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 50.621252][ T9] usb 6-1: config 142 interface 251 has no altsetting 0 [ 50.624425][ T9] usb 6-1: string descriptor 0 read error: -22 [ 50.624684][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.661756][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.661861][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.671741][ T9] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 50.695726][ T9] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 50.900082][ T43] audit: type=1326 audit(1791829074.391:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.3.4" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73eefec code=0x0 [ 50.939862][ T5899] can0: slcan on ptm0. [ 51.009159][ T5905] Bluetooth: MGMT ver 1.23 [ 51.198547][ C0] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 51.198575][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 51.201904][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 51.204537][ T5746] Bluetooth: hci1: command tx timeout [ 51.204557][ T5746] Bluetooth: hci0: command tx timeout [ 51.204569][ T5746] Bluetooth: hci3: command tx timeout [ 51.204581][ T5746] Bluetooth: hci2: command tx timeout [ 51.400727][ T5891] can0 (unregistered): slcan off ptm0. [ 51.699402][ T5879] usb 6-1: USB disconnect, device number 2 [ 51.747350][ T5879] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 51.765275][ T5879] cypress_m8 6-1:142.251: device disconnected [ 51.845406][ T9] kernel read not supported for file /cpu/0/msr (pid: 9 comm: kworker/0:0) [ 52.354855][ T5929] input: syz1 as /devices/virtual/input/input5 [ 52.724616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 52.776172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 52.953235][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.953257][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 53.294618][ T5746] Bluetooth: hci3: command tx timeout [ 53.294639][ T5746] Bluetooth: hci0: command tx timeout [ 53.294650][ T5746] Bluetooth: hci1: command tx timeout [ 53.294733][ T5096] Bluetooth: hci2: command tx timeout [ 53.414563][ T5879] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.574583][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 53.576746][ T5879] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 53.579410][ T5879] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 53.579448][ T5879] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 53.579495][ T5879] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.579516][ T5879] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 53.612626][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.612648][ T5879] usb 8-1: Product: syz [ 53.612658][ T5879] usb 8-1: Manufacturer: syz [ 53.612669][ T5879] usb 8-1: SerialNumber: syz [ 53.646798][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 53.663077][ T5879] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input6 [ 53.820377][ T5950] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 53.820395][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.821980][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 53.884585][ T5879] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 53.884597][ T5879] (id 0x00) [ 54.006323][ T1361] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 54.067484][ T2359] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 54.104534][ T5879] rc_core: IR keymap rc-imon-pad not found [ 54.104547][ T5879] Registered IR keymap rc-empty [ 54.104584][ T5879] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 54.104593][ T5879] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 54.125774][ T5879] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 54.126662][ T5879] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input7 [ 54.149471][ T5879] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 54.169991][ T1361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.170016][ T1361] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 54.170821][ T1361] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 54.170834][ T1361] usb 5-1: config 142 has no interface number 0 [ 54.170851][ T1361] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 54.170864][ T1361] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 54.170876][ T1361] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 54.170886][ T1361] usb 5-1: config 142 interface 251 has no altsetting 0 [ 54.174559][ T1361] usb 5-1: string descriptor 0 read error: -22 [ 54.174613][ T1361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.179896][ T5952] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.180001][ T5952] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.183517][ T1361] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 54.207377][ T1361] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 54.455727][ T5943] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 54.487618][ T5943] imon:send_packet: task interrupted [ 54.487676][ T5943] imon:send_packet: packet tx failed (-512) [ 54.488153][ T5943] imon:vfd_write: send packet #0 failed [ 54.488501][ T5943] imon:send_packet: packet tx failed (-32) [ 54.506158][ T5943] imon:vfd_write: send packet #0 failed [ 54.507901][ T5879] usb 8-1: USB disconnect, device number 2 [ 54.562703][ T5958] FAULT_INJECTION: forcing a failure. [ 54.562703][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.562734][ T5958] CPU: 3 UID: 0 PID: 5958 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) [ 54.562774][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.562785][ T5958] Call Trace: [ 54.562791][ T5958] [ 54.562799][ T5958] dump_stack_lvl+0x100/0x190 [ 54.562830][ T5958] should_fail_ex.cold+0x5/0xa [ 54.562856][ T5958] copy_folio_from_iter_atomic+0x6c9/0x2000 [ 54.562890][ T5958] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 54.562911][ T5958] ? shmem_write_begin+0x1ba/0x420 [ 54.562934][ T5958] ? __pfx_shmem_write_begin+0x10/0x10 [ 54.562957][ T5958] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 54.562985][ T5958] generic_perform_write+0x4cb/0xa40 [ 54.563019][ T5958] ? __pfx_generic_perform_write+0x10/0x10 [ 54.563052][ T5958] ? file_update_time_flags+0x38c/0x520 [ 54.563074][ T5958] shmem_file_write_iter+0x10e/0x140 [ 54.563101][ T5958] do_iter_readv_writev+0x6f7/0x930 [ 54.563126][ T5958] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 54.563165][ T5958] ? lock_acquire+0x1d1/0x380 [ 54.563206][ T5958] vfs_writev+0x360/0xdd0 [ 54.563239][ T5958] ? __pfx_vfs_writev+0x10/0x10 [ 54.563261][ T5958] ? __pfx_futex_wait+0x10/0x10 [ 54.563291][ T5958] ? lock_acquire+0x1d1/0x380 [ 54.563322][ T5958] ? __fget_files+0x34/0x3d0 [ 54.563356][ T5958] ? __fget_files+0x21f/0x3d0 [ 54.563389][ T5958] ? do_pwritev+0x1ac/0x270 [ 54.563411][ T5958] do_pwritev+0x1ac/0x270 [ 54.563435][ T5958] ? __pfx_do_pwritev+0x10/0x10 [ 54.563479][ T5958] ? xfd_validate_state+0x129/0x190 [ 54.563522][ T5958] __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 54.563555][ T5958] __do_fast_syscall_32+0x13a/0x8b0 [ 54.563580][ T5958] do_fast_syscall_32+0x32/0x70 [ 54.563600][ T5958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.563626][ T5958] RIP: 0023:0xf73cefec [ 54.563645][ T5958] Code: Unable to access opcode bytes at 0xf73cefc2. [ 54.563653][ T5958] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000017b [ 54.563673][ T5958] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 54.563686][ T5958] RDX: 0000000000000014 RSI: 0000000000007800 RDI: 0000000000000000 [ 54.563698][ T5958] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 54.563709][ T5958] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.563721][ T5958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.563747][ T5958] [ 54.746604][ T5900] syz.0.5 (5900) used greatest stack depth: 19272 bytes left [ 54.785417][ C3] usb 5-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 54.785434][ C3] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 54.785450][ C3] usb 5-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 55.131560][ C3] Illegal XDP return value 16128 on prog (id 4) dev lo, expect packet loss! [ 55.265605][ T5882] usb 5-1: USB disconnect, device number 2 [ 55.272780][ T5953] vhci_hcd: connection reset by peer [ 55.275349][ T5810] vhci_hcd vhci_hcd.2: stop threads [ 55.275620][ T5810] vhci_hcd vhci_hcd.2: release socket [ 55.276086][ T5810] vhci_hcd vhci_hcd.2: disconnect device [ 55.297776][ T5882] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 55.299089][ T5882] cypress_m8 5-1:142.251: device disconnected [ 55.364664][ T5743] Bluetooth: hci1: command tx timeout [ 55.364691][ T5743] Bluetooth: hci0: command tx timeout [ 55.364703][ T5743] Bluetooth: hci3: command tx timeout [ 55.364732][ T5096] Bluetooth: hci2: command tx timeout [ 58.392981][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 58.414674][ T35] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 58.576761][ T35] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 58.585392][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.585442][ T35] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.585460][ T35] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 58.585499][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.103493][ T35] dvb_ttusb_budget: ttusb_init_controller: error [ 59.103554][ T35] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 59.205037][ T2359] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 59.298625][ T35] DVB: Unable to find symbol stv0299_attach() [ 59.455523][ T35] DVB: Unable to find symbol tda8083_attach() [ 59.455537][ T35] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 59.478646][ T35] usb 8-1: USB disconnect, device number 3 [ 61.041310][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'. [ 61.824535][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.975057][ T5817] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.975995][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.976012][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.976023][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.976041][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.980991][ T5817] usb 6-1: config 0 descriptor?? [ 62.274394][ T6033] misc userio: Invalid payload size [ 62.383732][ T6037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.418517][ T5817] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.560379][ T6043] misc userio: No port type given on /dev/userio [ 63.744909][ T25] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 63.875083][ T25] usb 6-1: device descriptor read/64, error -32 [ 64.114688][ T25] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 64.184632][ T2359] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.245594][ T25] usb 6-1: device descriptor read/64, error -32 [ 64.347496][ T2359] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 64.348819][ T2359] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.348840][ T2359] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 64.351032][ T2359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.351056][ T2359] usb 7-1: Product: syz [ 64.351067][ T2359] usb 7-1: Manufacturer: syz [ 64.351116][ T2359] usb 7-1: SerialNumber: syz [ 64.487508][ T25] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 64.504978][ T25] usb 6-1: device descriptor read/8, error -32 [ 64.571167][ T2359] usblp 7-1:1.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 64.711858][ T6068] input: syz0 as /devices/virtual/input/input8 [ 65.025853][ T2359] usb 7-1: USB disconnect, device number 2 [ 65.028595][ T2359] usblp1: removed [ 65.244583][ T25] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 65.265664][ T25] usb 6-1: device reset changed ep0 maxpacket size! [ 65.267706][ T63] usb 6-1: USB disconnect, device number 3 [ 65.424516][ T63] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.561461][ T6091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.57'. [ 65.594646][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 65.598697][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 65.598722][ T63] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 65.599568][ T63] usb 6-1: too many endpoints for config 4 interface 0 altsetting 48: 49, using maximum allowed: 30 [ 65.599587][ T63] usb 6-1: config 4 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 65.599600][ T63] usb 6-1: config 4 interface 0 has no altsetting 0 [ 65.601480][ T63] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 65.601492][ T63] usb 6-1: Manufacturer: syz [ 65.601499][ T63] usb 6-1: SerialNumber: syz [ 65.920049][ T6099] kAFS: unable to lookup cell '(G' [ 65.994577][ T30] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.005660][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.029299][ T63] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 66.033658][ T63] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 66.033805][ T63] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 66.033825][ T63] usb 6-1: media controller created [ 66.039921][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.047695][ T63] zl10353_read_register: readreg error (reg=127, ret==0) [ 66.065207][ T63] usb 6-1: USB disconnect, device number 4 [ 66.144928][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 66.145814][ T30] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.145838][ T30] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.147114][ T30] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 66.147126][ T30] usb 5-1: Product: syz [ 66.147134][ T30] usb 5-1: Manufacturer: syz [ 66.151704][ T30] hub 5-1:4.0: USB hub found [ 66.154535][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 66.155946][ T42] usb 8-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 66.157256][ T42] usb 8-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 66.157275][ T42] usb 8-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 66.159748][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.159760][ T42] usb 8-1: Product: syz [ 66.159768][ T42] usb 8-1: Manufacturer: syz [ 66.159775][ T42] usb 8-1: SerialNumber: syz [ 66.367337][ T30] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 66.385711][ T30] usb 5-1: USB disconnect, device number 3 [ 66.576444][ T6107] syz.2.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.725470][ T42] apple-mfi-fastcharge 8-1: USB disconnect, device number 4 [ 66.730282][ T6108] virtio_blk virtio2: 1/0/0 default/read/poll queues [ 66.733120][ T6108] virtio_blk virtio2: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 67.019891][ T43] audit: type=1800 audit(1791829090.511:3): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="syzkaller0" dev="sda1" ino=2038 res=0 errno=0 [ 67.096434][ T6124] Cannot find del_set index 14804 as target [ 67.101367][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 68.013483][ T43] audit: type=1326 audit(1791829091.501:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.013652][ T43] audit: type=1326 audit(1791829091.501:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.014773][ T43] audit: type=1326 audit(1791829091.501:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.014798][ T43] audit: type=1326 audit(1791829091.501:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.014818][ T43] audit: type=1326 audit(1791829091.511:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.022064][ T43] audit: type=1326 audit(1791829091.511:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.022091][ T43] audit: type=1326 audit(1791829091.511:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.024172][ T43] audit: type=1326 audit(1791829091.511:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.025314][ T43] audit: type=1326 audit(1791829091.511:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf749efec code=0x7ffc0000 [ 68.157718][ T6145] Bluetooth: MGMT ver 1.23 [ 68.700765][ T6157] Zero length message leads to an empty skb [ 70.128123][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.128144][ T6177] netlink: 288 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.888996][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.889033][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.929925][ T3371] cfg80211: failed to load regulatory.db [ 71.261326][ T6189] 9p: Bad value for 'rfdno' [ 72.382710][ T6194] printk: console [ttyS0] disabled [ 72.616302][ T6196] printk: console [ttyS0] enabled [ 73.097126][ T6133] syz.0.69 (6133) used greatest stack depth: 18696 bytes left [ 73.536850][ T6161] syz.2.77 (6161) used greatest stack depth: 18576 bytes left [ 74.274157][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 90.673660][ T6183] syz.0.80 (6183) used greatest stack depth: 17160 bytes left [ 91.557968][ T6277] process 'syz.3.108' launched '/dev/fd/6' with NULL argv: empty string added [ 91.558561][ T6281] hub 5-0:1.0: USB hub found [ 91.562157][ T6281] hub 5-0:1.0: 1 port detected [ 91.774652][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 91.774669][ T43] audit: type=1800 audit(1791829115.261:74): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.112" name="file0" dev="overlay" ino=184 res=0 errno=0 [ 94.791335][ T43] audit: type=1326 audit(1791829118.281:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.791489][ T43] audit: type=1326 audit(1791829118.281:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.792271][ T43] audit: type=1326 audit(1791829118.281:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.792896][ T43] audit: type=1326 audit(1791829118.281:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.792920][ T43] audit: type=1326 audit(1791829118.281:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.792939][ T43] audit: type=1326 audit(1791829118.281:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.793050][ T43] audit: type=1326 audit(1791829118.281:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.793508][ T43] audit: type=1326 audit(1791829118.281:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.794067][ T43] audit: type=1326 audit(1791829118.281:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf749efec code=0x7ffc0000 [ 94.890061][ T6327] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 94.890087][ T6327] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 94.890112][ T6327] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 94.890130][ T6327] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 94.890141][ T6327] page dumped because: unmovable page [ 94.890150][ T6327] page_owner tracks the page as allocated [ 94.890157][ T6327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 1, tgid 1 (swapper/0), ts 8671846662 [ 94.890179][ T6327] post_alloc_hook+0xfd/0x120 [ 94.890202][ T6327] get_page_from_freelist+0x110d/0x35d0 [ 94.890224][ T6327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 94.890245][ T6327] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 94.890268][ T6327] __kasan_populate_vmalloc+0xf0/0x210 [ 94.890289][ T6327] alloc_vmap_area+0x95d/0x2bb0 [ 94.890312][ T6327] __get_vm_area_node+0x1ed/0x350 [ 94.890337][ T6327] __vmalloc_node_range_noprof+0x268/0x1420 [ 94.890365][ T6327] __vmalloc_node_noprof+0xad/0xf0 [ 94.890396][ T6327] tpg_alloc+0xbd/0x9b0 [ 94.890419][ T6327] vivid_probe.cold+0x2166/0x921e [ 94.890441][ T6327] platform_probe+0x106/0x1d0 [ 94.890467][ T6327] really_probe+0x241/0xa60 [ 94.890485][ T6327] __driver_probe_device+0x210/0x460 [ 94.890505][ T6327] driver_probe_device+0x4a/0x140 [ 94.890520][ T6327] __driver_attach+0x21f/0x5b0 [ 94.890538][ T6327] page_owner free stack trace missing [ 95.437391][ T6339] netlink: 'syz.2.129': attribute type 12 has an invalid length. [ 96.201720][ T6343] FAULT_INJECTION: forcing a failure. [ 96.201720][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 96.201741][ T6343] CPU: 2 UID: 0 PID: 6343 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 96.201755][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.201762][ T6343] Call Trace: [ 96.201766][ T6343] [ 96.201771][ T6343] dump_stack_lvl+0x100/0x190 [ 96.201790][ T6343] should_fail_ex.cold+0x5/0xa [ 96.201805][ T6343] should_failslab+0xc2/0x120 [ 96.201825][ T6343] __kmalloc_cache_noprof+0x91/0x6d0 [ 96.201839][ T6343] ? ioprio_alloc_cpd+0x96/0x150 [ 96.201857][ T6343] ioprio_alloc_cpd+0x96/0x150 [ 96.201873][ T6343] blkcg_css_alloc+0x273/0x8c0 [ 96.201913][ T6343] ? __pfx_ioprio_alloc_cpd+0x10/0x10 [ 96.201931][ T6343] cgroup_apply_control_enable+0x602/0xdd0 [ 96.201950][ T6343] ? css_populate_dir+0x233/0x590 [ 96.201965][ T6343] cgroup_mkdir+0x57f/0x1330 [ 96.201984][ T6343] ? __pfx_cgroup_mkdir+0x10/0x10 [ 96.202002][ T6343] kernfs_iop_mkdir+0x111/0x190 [ 96.202014][ T6343] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 96.202031][ T6343] vfs_mkdir+0x364/0x850 [ 96.202046][ T6343] filename_mkdirat+0x48b/0x5e0 [ 96.202064][ T6343] ? __pfx_filename_mkdirat+0x10/0x10 [ 96.202081][ T6343] ? strncpy_from_user+0x19d/0x2d0 [ 96.202096][ T6343] ? do_getname+0x191/0x390 [ 96.202109][ T6343] __ia32_sys_mkdirat+0x88/0xc0 [ 96.202126][ T6343] __do_fast_syscall_32+0x13a/0x8b0 [ 96.202142][ T6343] do_fast_syscall_32+0x32/0x70 [ 96.202153][ T6343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.202168][ T6343] RIP: 0023:0xf749efec [ 96.202180][ T6343] Code: Unable to access opcode bytes at 0xf749efc2. [ 96.202186][ T6343] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 96.202197][ T6343] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 96.202204][ T6343] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 96.202211][ T6343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.202218][ T6343] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.202224][ T6343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.202240][ T6343] [ 96.370058][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 96.775683][ T6362] ALSA: mixer_oss: invalid OSS volume '' [ 97.319559][ T6373] FAULT_INJECTION: forcing a failure. [ 97.319559][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 97.319579][ T6373] CPU: 3 UID: 0 PID: 6373 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 97.319593][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.319600][ T6373] Call Trace: [ 97.319604][ T6373] [ 97.319609][ T6373] dump_stack_lvl+0x100/0x190 [ 97.319628][ T6373] should_fail_ex.cold+0x5/0xa [ 97.319644][ T6373] should_failslab+0xc2/0x120 [ 97.319662][ T6373] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.319677][ T6373] ? ioprio_alloc_cpd+0x96/0x150 [ 97.319695][ T6373] ioprio_alloc_cpd+0x96/0x150 [ 97.319710][ T6373] blkcg_css_alloc+0x273/0x8c0 [ 97.319727][ T6373] ? __pfx_ioprio_alloc_cpd+0x10/0x10 [ 97.319745][ T6373] cgroup_apply_control_enable+0x602/0xdd0 [ 97.319764][ T6373] ? css_populate_dir+0x233/0x590 [ 97.319777][ T6373] cgroup_mkdir+0x57f/0x1330 [ 97.319796][ T6373] ? __pfx_cgroup_mkdir+0x10/0x10 [ 97.319814][ T6373] kernfs_iop_mkdir+0x111/0x190 [ 97.319825][ T6373] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 97.319843][ T6373] vfs_mkdir+0x364/0x850 [ 97.319858][ T6373] filename_mkdirat+0x48b/0x5e0 [ 97.319877][ T6373] ? __pfx_filename_mkdirat+0x10/0x10 [ 97.319893][ T6373] ? strncpy_from_user+0x19d/0x2d0 [ 97.319908][ T6373] ? do_getname+0x191/0x390 [ 97.319921][ T6373] __ia32_sys_mkdirat+0x88/0xc0 [ 97.319938][ T6373] __do_fast_syscall_32+0x13a/0x8b0 [ 97.319953][ T6373] do_fast_syscall_32+0x32/0x70 [ 97.319965][ T6373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.319980][ T6373] RIP: 0023:0xf73cefec [ 97.319992][ T6373] Code: Unable to access opcode bytes at 0xf73cefc2. [ 97.319997][ T6373] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 97.320008][ T6373] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 97.320015][ T6373] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 97.320022][ T6373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.320028][ T6373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.320034][ T6373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.320049][ T6373] [ 97.409650][ T6378] FAULT_INJECTION: forcing a failure. [ 97.409650][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 97.409669][ T6378] CPU: 3 UID: 0 PID: 6378 Comm: syz.1.143 Not tainted syzkaller #0 PREEMPT(full) [ 97.409683][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.409690][ T6378] Call Trace: [ 97.409694][ T6378] [ 97.409699][ T6378] dump_stack_lvl+0x100/0x190 [ 97.409719][ T6378] should_fail_ex.cold+0x5/0xa [ 97.409735][ T6378] should_failslab+0xc2/0x120 [ 97.409755][ T6378] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.409771][ T6378] ? __proc_create+0xc1/0x8f0 [ 97.409783][ T6378] ? __proc_create+0x247/0x8f0 [ 97.409798][ T6378] __proc_create+0x247/0x8f0 [ 97.409810][ T6378] ? __pfx___proc_create+0x10/0x10 [ 97.409828][ T6378] proc_mkdir+0x81/0x170 [ 97.409840][ T6378] ? __pfx_proc_mkdir+0x10/0x10 [ 97.409851][ T6378] ? cache_register_net+0x137/0x5e0 [ 97.409868][ T6378] ? cache_register_net+0x137/0x5e0 [ 97.409884][ T6378] cache_register_net+0x18f/0x5e0 [ 97.409901][ T6378] nfsd_idmap_init+0x16e/0x250 [ 97.409917][ T6378] ? __pfx_nfsd_net_init+0x10/0x10 [ 97.409934][ T6378] nfsd_net_init+0x85/0x480 [ 97.409951][ T6378] ? __pfx_nfsd_net_init+0x10/0x10 [ 97.409967][ T6378] ops_init+0x1e2/0x5f0 [ 97.409985][ T6378] setup_net+0x118/0x3a0 [ 97.409999][ T6378] ? __pfx_setup_net+0x10/0x10 [ 97.410018][ T6378] copy_net_ns+0x345/0x7a0 [ 97.410035][ T6378] create_new_namespaces+0x3ea/0xac0 [ 97.410055][ T6378] unshare_nsproxy_namespaces+0xf2/0x220 [ 97.410074][ T6378] ksys_unshare+0x4a2/0xb30 [ 97.410086][ T6378] ? __pfx_ksys_unshare+0x10/0x10 [ 97.410103][ T6378] __ia32_sys_unshare+0x30/0x40 [ 97.410115][ T6378] __do_fast_syscall_32+0x13a/0x8b0 [ 97.410126][ T6378] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.410145][ T6378] do_fast_syscall_32+0x32/0x70 [ 97.410157][ T6378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.410171][ T6378] RIP: 0023:0xf73cefec [ 97.410184][ T6378] Code: Unable to access opcode bytes at 0xf73cefc2. [ 97.410189][ T6378] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 97.410200][ T6378] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 97.410209][ T6378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.410216][ T6378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.410223][ T6378] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.410229][ T6378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.410245][ T6378] [ 97.524960][ T6383] ALSA: mixer_oss: invalid OSS volume '' [ 97.537273][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 97.537289][ T43] audit: type=1326 audit(1791829121.031:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.1.145" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x0 [ 98.398533][ T6411] misc userio: Invalid payload size [ 98.625739][ T6413] misc userio: No port type given on /dev/userio [ 98.649484][ T6415] FAULT_INJECTION: forcing a failure. [ 98.649484][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 98.649503][ T6415] CPU: 2 UID: 0 PID: 6415 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 98.649517][ T6415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.649523][ T6415] Call Trace: [ 98.649527][ T6415] [ 98.649532][ T6415] dump_stack_lvl+0x100/0x190 [ 98.649553][ T6415] should_fail_ex.cold+0x5/0xa [ 98.649569][ T6415] should_failslab+0xc2/0x120 [ 98.649588][ T6415] kmem_cache_alloc_noprof+0x92/0x6a0 [ 98.649604][ T6415] ? __proc_create+0xc1/0x8f0 [ 98.649616][ T6415] ? __proc_create+0x247/0x8f0 [ 98.649630][ T6415] __proc_create+0x247/0x8f0 [ 98.649642][ T6415] ? __pfx___proc_create+0x10/0x10 [ 98.649656][ T6415] ? _raw_write_unlock+0x28/0x50 [ 98.649675][ T6415] proc_create_reg+0x75/0x170 [ 98.649689][ T6415] proc_create_data+0x86/0x110 [ 98.649702][ T6415] ? __pfx_proc_create_data+0x10/0x10 [ 98.649714][ T6415] ? cache_register_net+0x137/0x5e0 [ 98.649728][ T6415] ? cache_register_net+0x137/0x5e0 [ 98.649744][ T6415] cache_register_net+0x1e0/0x5e0 [ 98.649758][ T6415] nfsd_idmap_init+0xb6/0x250 [ 98.649773][ T6415] ? __pfx_nfsd_net_init+0x10/0x10 [ 98.649789][ T6415] nfsd_net_init+0x85/0x480 [ 98.649806][ T6415] ? __pfx_nfsd_net_init+0x10/0x10 [ 98.649822][ T6415] ops_init+0x1e2/0x5f0 [ 98.649838][ T6415] setup_net+0x118/0x3a0 [ 98.649868][ T6415] ? __pfx_setup_net+0x10/0x10 [ 98.649888][ T6415] copy_net_ns+0x345/0x7a0 [ 98.649905][ T6415] create_new_namespaces+0x3ea/0xac0 [ 98.649927][ T6415] unshare_nsproxy_namespaces+0xf2/0x220 [ 98.649947][ T6415] ksys_unshare+0x4a2/0xb30 [ 98.649966][ T6415] ? __pfx_ksys_unshare+0x10/0x10 [ 98.649985][ T6415] __ia32_sys_unshare+0x30/0x40 [ 98.649997][ T6415] __do_fast_syscall_32+0x13a/0x8b0 [ 98.650009][ T6415] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.650029][ T6415] do_fast_syscall_32+0x32/0x70 [ 98.650041][ T6415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.650057][ T6415] RIP: 0023:0xf7fd2fec [ 98.650071][ T6415] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 98.650076][ T6415] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 98.650087][ T6415] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 98.650095][ T6415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.650101][ T6415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.650107][ T6415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.650114][ T6415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.650128][ T6415] [ 98.928236][ T6432] ALSA: mixer_oss: invalid OSS volume '' [ 99.822836][ T6469] misc userio: Invalid payload size [ 100.019164][ T6475] misc userio: No port type given on /dev/userio [ 100.343007][ T6484] FAULT_INJECTION: forcing a failure. [ 100.343007][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 100.343037][ T6484] CPU: 2 UID: 0 PID: 6484 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) [ 100.343056][ T6484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.343063][ T6484] Call Trace: [ 100.343067][ T6484] [ 100.343072][ T6484] dump_stack_lvl+0x100/0x190 [ 100.343092][ T6484] should_fail_ex.cold+0x5/0xa [ 100.343108][ T6484] should_failslab+0xc2/0x120 [ 100.343127][ T6484] __kmalloc_noprof+0xfc/0x840 [ 100.343144][ T6484] ? cache_create_net+0xa2/0x1f0 [ 100.343167][ T6484] cache_create_net+0xa2/0x1f0 [ 100.343189][ T6484] nfsd_idmap_init+0x11f/0x250 [ 100.343216][ T6484] ? __pfx_nfsd_net_init+0x10/0x10 [ 100.343267][ T6484] nfsd_net_init+0x85/0x480 [ 100.343297][ T6484] ? __pfx_nfsd_net_init+0x10/0x10 [ 100.343320][ T6484] ops_init+0x1e2/0x5f0 [ 100.343339][ T6484] setup_net+0x118/0x3a0 [ 100.343354][ T6484] ? __pfx_setup_net+0x10/0x10 [ 100.343372][ T6484] copy_net_ns+0x345/0x7a0 [ 100.343394][ T6484] create_new_namespaces+0x3ea/0xac0 [ 100.343417][ T6484] unshare_nsproxy_namespaces+0xf2/0x220 [ 100.343436][ T6484] ksys_unshare+0x4a2/0xb30 [ 100.343449][ T6484] ? __pfx_ksys_unshare+0x10/0x10 [ 100.343467][ T6484] __ia32_sys_unshare+0x30/0x40 [ 100.343479][ T6484] __do_fast_syscall_32+0x13a/0x8b0 [ 100.343491][ T6484] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.343510][ T6484] do_fast_syscall_32+0x32/0x70 [ 100.343522][ T6484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.343536][ T6484] RIP: 0023:0xf73cefec [ 100.343550][ T6484] Code: Unable to access opcode bytes at 0xf73cefc2. [ 100.343555][ T6484] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 100.343566][ T6484] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 100.343573][ T6484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.343580][ T6484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.343586][ T6484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.343593][ T6484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.343609][ T6484] [ 100.788264][ T6505] FAULT_INJECTION: forcing a failure. [ 100.788264][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 100.788294][ T6505] CPU: 3 UID: 0 PID: 6505 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(full) [ 100.788318][ T6505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.788329][ T6505] Call Trace: [ 100.788335][ T6505] [ 100.788343][ T6505] dump_stack_lvl+0x100/0x190 [ 100.788374][ T6505] should_fail_ex.cold+0x5/0xa [ 100.788419][ T6505] should_failslab+0xc2/0x120 [ 100.788451][ T6505] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.788479][ T6505] ? __proc_create+0xc1/0x8f0 [ 100.788498][ T6505] ? __proc_create+0x247/0x8f0 [ 100.788522][ T6505] __proc_create+0x247/0x8f0 [ 100.788544][ T6505] ? __pfx___proc_create+0x10/0x10 [ 100.788569][ T6505] ? _raw_write_unlock+0x28/0x50 [ 100.788603][ T6505] proc_create_reg+0x75/0x170 [ 100.788627][ T6505] proc_create_data+0x86/0x110 [ 100.788648][ T6505] ? __pfx_proc_create_data+0x10/0x10 [ 100.788668][ T6505] ? cache_register_net+0x137/0x5e0 [ 100.788691][ T6505] ? cache_register_net+0x137/0x5e0 [ 100.788718][ T6505] cache_register_net+0x1e0/0x5e0 [ 100.788742][ T6505] nfsd_idmap_init+0xb6/0x250 [ 100.788768][ T6505] ? __pfx_nfsd_net_init+0x10/0x10 [ 100.788795][ T6505] nfsd_net_init+0x85/0x480 [ 100.788823][ T6505] ? __pfx_nfsd_net_init+0x10/0x10 [ 100.788849][ T6505] ops_init+0x1e2/0x5f0 [ 100.788877][ T6505] setup_net+0x118/0x3a0 [ 100.788902][ T6505] ? __pfx_setup_net+0x10/0x10 [ 100.788935][ T6505] copy_net_ns+0x345/0x7a0 [ 100.788969][ T6505] create_new_namespaces+0x3ea/0xac0 [ 100.789004][ T6505] unshare_nsproxy_namespaces+0xf2/0x220 [ 100.789038][ T6505] ksys_unshare+0x4a2/0xb30 [ 100.789061][ T6505] ? __pfx_ksys_unshare+0x10/0x10 [ 100.789093][ T6505] __ia32_sys_unshare+0x30/0x40 [ 100.789113][ T6505] __do_fast_syscall_32+0x13a/0x8b0 [ 100.789132][ T6505] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.789163][ T6505] do_fast_syscall_32+0x32/0x70 [ 100.789183][ T6505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.789208][ T6505] RIP: 0023:0xf73cefec [ 100.789229][ T6505] Code: Unable to access opcode bytes at 0xf73cefc2. [ 100.789238][ T6505] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 100.789257][ T6505] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 100.789268][ T6505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.789280][ T6505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.789290][ T6505] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.789301][ T6505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.789328][ T6505] [ 101.452611][ T6523] misc userio: Invalid payload size [ 101.653243][ T6529] misc userio: No port type given on /dev/userio [ 102.057987][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 102.669958][ T6566] ALSA: mixer_oss: invalid OSS volume '' [ 102.717400][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 102.978912][ T6584] FAULT_INJECTION: forcing a failure. [ 102.978912][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 102.978932][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.0.217 Not tainted syzkaller #0 PREEMPT(full) [ 102.978946][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.978953][ T6584] Call Trace: [ 102.978957][ T6584] [ 102.978962][ T6584] dump_stack_lvl+0x100/0x190 [ 102.978981][ T6584] should_fail_ex.cold+0x5/0xa [ 102.978998][ T6584] should_failslab+0xc2/0x120 [ 102.979017][ T6584] __kvmalloc_node_noprof+0x113/0x9b0 [ 102.979033][ T6584] ? __pfx___mutex_lock+0x10/0x10 [ 102.979045][ T6584] ? nf_hook_entries_grow+0x6b9/0x870 [ 102.979060][ T6584] nf_hook_entries_grow+0x6b9/0x870 [ 102.979072][ T6584] ? __pfx___debug_object_init+0x10/0x10 [ 102.979091][ T6584] __nf_register_net_hook+0x112/0x780 [ 102.979106][ T6584] nf_register_net_hook+0xdb/0x170 [ 102.979119][ T6584] nf_register_net_hooks+0x5d/0xd0 [ 102.979133][ T6584] ? __pfx_apparmor_nf_register+0x10/0x10 [ 102.979152][ T6584] ops_init+0x1e2/0x5f0 [ 102.979168][ T6584] setup_net+0x118/0x3a0 [ 102.979183][ T6584] ? __pfx_setup_net+0x10/0x10 [ 102.979201][ T6584] copy_net_ns+0x345/0x7a0 [ 102.979219][ T6584] create_new_namespaces+0x3ea/0xac0 [ 102.979265][ T6584] unshare_nsproxy_namespaces+0xf2/0x220 [ 102.979286][ T6584] ksys_unshare+0x4a2/0xb30 [ 102.979300][ T6584] ? __pfx_ksys_unshare+0x10/0x10 [ 102.979319][ T6584] __ia32_sys_unshare+0x30/0x40 [ 102.979332][ T6584] __do_fast_syscall_32+0x13a/0x8b0 [ 102.979344][ T6584] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.979364][ T6584] do_fast_syscall_32+0x32/0x70 [ 102.979376][ T6584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.979391][ T6584] RIP: 0023:0xf7fd2fec [ 102.979404][ T6584] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 102.979409][ T6584] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 102.979421][ T6584] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 102.979428][ T6584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.979434][ T6584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.979441][ T6584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.979447][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.979462][ T6584] [ 103.220171][ T6593] FAULT_INJECTION: forcing a failure. [ 103.220171][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 103.220199][ T6593] CPU: 2 UID: 0 PID: 6593 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 103.220219][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.220230][ T6593] Call Trace: [ 103.220236][ T6593] [ 103.220243][ T6593] dump_stack_lvl+0x100/0x190 [ 103.220273][ T6593] should_fail_ex.cold+0x5/0xa [ 103.220299][ T6593] should_failslab+0xc2/0x120 [ 103.220330][ T6593] __kmalloc_node_noprof+0xff/0x880 [ 103.220356][ T6593] ? get_callchain_buffers+0x1e5/0x380 [ 103.220385][ T6593] get_callchain_buffers+0x1e5/0x380 [ 103.220408][ T6593] ? security_capable+0x80/0x260 [ 103.220447][ T6593] stack_map_alloc+0x316/0x610 [ 103.220470][ T6593] map_create+0x874/0x30d0 [ 103.220494][ T6593] ? __lock_acquire+0x5c0/0x1f40 [ 103.220530][ T6593] ? __pfx_map_create+0x10/0x10 [ 103.220552][ T6593] ? lock_acquire+0x1d1/0x380 [ 103.220578][ T6593] ? __might_fault+0xc5/0x140 [ 103.220599][ T6593] ? __might_fault+0xc5/0x140 [ 103.220632][ T6593] __sys_bpf+0x12a0/0x4a30 [ 103.220662][ T6593] ? __pfx___sys_bpf+0x10/0x10 [ 103.220698][ T6593] ? find_held_lock+0x2b/0x80 [ 103.220720][ T6593] ? futex_wake+0x4ea/0x5e0 [ 103.220766][ T6593] ? rcu_read_lock_any_held+0x6a/0x90 [ 103.220790][ T6593] ? find_held_lock+0x2b/0x80 [ 103.220811][ T6593] ? ksys_write+0x190/0x250 [ 103.220835][ T6593] ? ksys_write+0x190/0x250 [ 103.220876][ T6593] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 103.220899][ T6593] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 103.220924][ T6593] ? fput+0x7c/0x100 [ 103.220950][ T6593] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 103.220974][ T6593] ? ksys_write+0x1ac/0x250 [ 103.221001][ T6593] ? __ia32_sys_bpf+0xcc/0x170 [ 103.221022][ T6593] __ia32_sys_bpf+0xcc/0x170 [ 103.221046][ T6593] ? __do_fast_syscall_32+0xb3/0x8b0 [ 103.221068][ T6593] __do_fast_syscall_32+0x13a/0x8b0 [ 103.221092][ T6593] do_fast_syscall_32+0x32/0x70 [ 103.221112][ T6593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.221137][ T6593] RIP: 0023:0xf7fd2fec [ 103.221156][ T6593] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 103.221164][ T6593] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 103.221183][ T6593] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000380 [ 103.221194][ T6593] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.221206][ T6593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.221218][ T6593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.221229][ T6593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.221256][ T6593] [ 103.372394][ T6601] FAULT_INJECTION: forcing a failure. [ 103.372394][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 103.372414][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(full) [ 103.372427][ T6601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.372434][ T6601] Call Trace: [ 103.372438][ T6601] [ 103.372443][ T6601] dump_stack_lvl+0x100/0x190 [ 103.372463][ T6601] should_fail_ex.cold+0x5/0xa [ 103.372480][ T6601] should_failslab+0xc2/0x120 [ 103.372505][ T6601] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 103.372525][ T6601] ? kstrdup_const+0x63/0x80 [ 103.372542][ T6601] kstrdup+0x51/0xe0 [ 103.372555][ T6601] kstrdup_const+0x63/0x80 [ 103.372569][ T6601] __kernfs_new_node+0x9b/0xa10 [ 103.372583][ T6601] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.372596][ T6601] ? lock_acquire+0x1d1/0x380 [ 103.372614][ T6601] ? kernfs_root+0x23/0x2a0 [ 103.372630][ T6601] ? find_held_lock+0x2b/0x80 [ 103.372643][ T6601] ? kernfs_root+0xee/0x2a0 [ 103.372659][ T6601] ? kernfs_root+0xee/0x2a0 [ 103.372678][ T6601] kernfs_new_node+0x117/0x150 [ 103.372692][ T6601] __kernfs_create_file+0x53/0x350 [ 103.372708][ T6601] cgroup_addrm_files+0x4ef/0xdb0 [ 103.372728][ T6601] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 103.372746][ T6601] ? idr_replace+0xfa/0x170 [ 103.372761][ T6601] css_populate_dir+0x161/0x590 [ 103.372775][ T6601] cgroup_apply_control_enable+0x441/0xdd0 [ 103.372796][ T6601] cgroup_mkdir+0x57f/0x1330 [ 103.372815][ T6601] ? __pfx_cgroup_mkdir+0x10/0x10 [ 103.372832][ T6601] kernfs_iop_mkdir+0x111/0x190 [ 103.372843][ T6601] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 103.372860][ T6601] vfs_mkdir+0x364/0x850 [ 103.372875][ T6601] filename_mkdirat+0x48b/0x5e0 [ 103.372894][ T6601] ? __pfx_filename_mkdirat+0x10/0x10 [ 103.372912][ T6601] ? strncpy_from_user+0x19d/0x2d0 [ 103.372927][ T6601] ? do_getname+0x191/0x390 [ 103.372940][ T6601] __ia32_sys_mkdirat+0x88/0xc0 [ 103.372957][ T6601] __do_fast_syscall_32+0x13a/0x8b0 [ 103.372971][ T6601] do_fast_syscall_32+0x32/0x70 [ 103.372983][ T6601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.372998][ T6601] RIP: 0023:0xf749efec [ 103.373011][ T6601] Code: Unable to access opcode bytes at 0xf749efc2. [ 103.373016][ T6601] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 103.373028][ T6601] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 103.373035][ T6601] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 103.373041][ T6601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.373047][ T6601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.373054][ T6601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.373068][ T6601] [ 103.373073][ T6601] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 103.397361][ T6603] FAULT_INJECTION: forcing a failure. [ 103.397361][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 103.397383][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.0.226 Not tainted syzkaller #0 PREEMPT(full) [ 103.397397][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.397404][ T6603] Call Trace: [ 103.397408][ T6603] [ 103.397413][ T6603] dump_stack_lvl+0x100/0x190 [ 103.397433][ T6603] should_fail_ex.cold+0x5/0xa [ 103.397449][ T6603] should_failslab+0xc2/0x120 [ 103.397468][ T6603] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.397484][ T6603] ? __proc_create+0xc1/0x8f0 [ 103.397501][ T6603] ? __proc_create+0x247/0x8f0 [ 103.397515][ T6603] __proc_create+0x247/0x8f0 [ 103.397527][ T6603] ? __pfx___proc_create+0x10/0x10 [ 103.397546][ T6603] proc_mkdir+0x81/0x170 [ 103.397558][ T6603] ? __pfx_proc_mkdir+0x10/0x10 [ 103.397570][ T6603] ? cache_register_net+0x137/0x5e0 [ 103.397584][ T6603] ? cache_register_net+0x137/0x5e0 [ 103.397601][ T6603] cache_register_net+0x18f/0x5e0 [ 103.397616][ T6603] nfsd_idmap_init+0x16e/0x250 [ 103.397631][ T6603] ? __pfx_nfsd_net_init+0x10/0x10 [ 103.397647][ T6603] nfsd_net_init+0x85/0x480 [ 103.397663][ T6603] ? __pfx_nfsd_net_init+0x10/0x10 [ 103.397680][ T6603] ops_init+0x1e2/0x5f0 [ 103.397696][ T6603] setup_net+0x118/0x3a0 [ 103.397711][ T6603] ? __pfx_setup_net+0x10/0x10 [ 103.397729][ T6603] copy_net_ns+0x345/0x7a0 [ 103.397746][ T6603] create_new_namespaces+0x3ea/0xac0 [ 103.397768][ T6603] unshare_nsproxy_namespaces+0xf2/0x220 [ 103.397787][ T6603] ksys_unshare+0x4a2/0xb30 [ 103.397799][ T6603] ? __pfx_ksys_unshare+0x10/0x10 [ 103.397817][ T6603] __ia32_sys_unshare+0x30/0x40 [ 103.397829][ T6603] __do_fast_syscall_32+0x13a/0x8b0 [ 103.397841][ T6603] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.397860][ T6603] do_fast_syscall_32+0x32/0x70 [ 103.397871][ T6603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.397885][ T6603] RIP: 0023:0xf7fd2fec [ 103.397899][ T6603] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 103.397904][ T6603] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 103.397915][ T6603] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 103.397922][ T6603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.397929][ T6603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.397935][ T6603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.397942][ T6603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.397956][ T6603] [ 103.474549][ T6611] FAULT_INJECTION: forcing a failure. [ 103.474549][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 103.474570][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 103.474583][ T6611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.474589][ T6611] Call Trace: [ 103.474593][ T6611] [ 103.474598][ T6611] dump_stack_lvl+0x100/0x190 [ 103.474618][ T6611] should_fail_ex.cold+0x5/0xa [ 103.474640][ T6611] should_failslab+0xc2/0x120 [ 103.474662][ T6611] __kmalloc_node_noprof+0xff/0x880 [ 103.474680][ T6611] ? get_callchain_buffers+0x1e5/0x380 [ 103.474699][ T6611] get_callchain_buffers+0x1e5/0x380 [ 103.474714][ T6611] ? security_capable+0x80/0x260 [ 103.474733][ T6611] stack_map_alloc+0x316/0x610 [ 103.474748][ T6611] map_create+0x874/0x30d0 [ 103.474762][ T6611] ? __lock_acquire+0x5c0/0x1f40 [ 103.474783][ T6611] ? __pfx_map_create+0x10/0x10 [ 103.474796][ T6611] ? lock_acquire+0x1d1/0x380 [ 103.474811][ T6611] ? __might_fault+0xc5/0x140 [ 103.474825][ T6611] ? __might_fault+0xc5/0x140 [ 103.474844][ T6611] __sys_bpf+0x12a0/0x4a30 [ 103.474862][ T6611] ? __pfx___sys_bpf+0x10/0x10 [ 103.474875][ T6611] ? find_held_lock+0x2b/0x80 [ 103.474889][ T6611] ? futex_wake+0x4ea/0x5e0 [ 103.474913][ T6611] ? rcu_read_lock_any_held+0x6a/0x90 [ 103.474928][ T6611] ? find_held_lock+0x2b/0x80 [ 103.474940][ T6611] ? ksys_write+0x190/0x250 [ 103.474954][ T6611] ? ksys_write+0x190/0x250 [ 103.474976][ T6611] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 103.474992][ T6611] ? xfd_validate_state+0x129/0x190 [ 103.475013][ T6611] ? __ia32_sys_bpf+0xcc/0x170 [ 103.475025][ T6611] __ia32_sys_bpf+0xcc/0x170 [ 103.475040][ T6611] ? __do_fast_syscall_32+0xb3/0x8b0 [ 103.475053][ T6611] __do_fast_syscall_32+0x13a/0x8b0 [ 103.475066][ T6611] do_fast_syscall_32+0x32/0x70 [ 103.475078][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.475092][ T6611] RIP: 0023:0xf7fd2fec [ 103.475105][ T6611] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 103.475110][ T6611] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 103.475121][ T6611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000380 [ 103.475128][ T6611] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.475150][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.475159][ T6611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.475166][ T6611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.475182][ T6611] [ 103.570770][ T6626] FAULT_INJECTION: forcing a failure. [ 103.570770][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 103.570790][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 103.570804][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.570811][ T6626] Call Trace: [ 103.570815][ T6626] [ 103.570819][ T6626] dump_stack_lvl+0x100/0x190 [ 103.570839][ T6626] should_fail_ex.cold+0x5/0xa [ 103.570854][ T6626] should_failslab+0xc2/0x120 [ 103.570872][ T6626] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 103.570890][ T6626] ? kstrdup_const+0x63/0x80 [ 103.570906][ T6626] kstrdup+0x51/0xe0 [ 103.570919][ T6626] kstrdup_const+0x63/0x80 [ 103.570932][ T6626] __kernfs_new_node+0x9b/0xa10 [ 103.570946][ T6626] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.570958][ T6626] ? lock_acquire+0x1d1/0x380 [ 103.570974][ T6626] ? kernfs_root+0x23/0x2a0 [ 103.570991][ T6626] ? find_held_lock+0x2b/0x80 [ 103.571004][ T6626] ? kernfs_root+0xee/0x2a0 [ 103.571019][ T6626] ? kernfs_root+0xee/0x2a0 [ 103.571038][ T6626] kernfs_new_node+0x117/0x150 [ 103.571052][ T6626] __kernfs_create_file+0x53/0x350 [ 103.571068][ T6626] cgroup_addrm_files+0x4ef/0xdb0 [ 103.571087][ T6626] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 103.571105][ T6626] ? idr_replace+0xfa/0x170 [ 103.571119][ T6626] css_populate_dir+0x161/0x590 [ 103.571133][ T6626] cgroup_apply_control_enable+0x441/0xdd0 [ 103.571154][ T6626] cgroup_mkdir+0x57f/0x1330 [ 103.571173][ T6626] ? __pfx_cgroup_mkdir+0x10/0x10 [ 103.571190][ T6626] kernfs_iop_mkdir+0x111/0x190 [ 103.571200][ T6626] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 103.571217][ T6626] vfs_mkdir+0x364/0x850 [ 103.571260][ T6626] filename_mkdirat+0x48b/0x5e0 [ 103.571290][ T6626] ? __pfx_filename_mkdirat+0x10/0x10 [ 103.571314][ T6626] ? strncpy_from_user+0x19d/0x2d0 [ 103.571329][ T6626] ? do_getname+0x191/0x390 [ 103.571349][ T6626] __ia32_sys_mkdirat+0x88/0xc0 [ 103.571367][ T6626] __do_fast_syscall_32+0x13a/0x8b0 [ 103.571383][ T6626] do_fast_syscall_32+0x32/0x70 [ 103.571395][ T6626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.571411][ T6626] RIP: 0023:0xf73cefec [ 103.571424][ T6626] Code: Unable to access opcode bytes at 0xf73cefc2. [ 103.571429][ T6626] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 103.571440][ T6626] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 103.571447][ T6626] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 103.571454][ T6626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.571460][ T6626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.571467][ T6626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.571481][ T6626] [ 103.571487][ T6626] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 103.617209][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 103.787435][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 104.000334][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 104.090432][ T6700] misc userio: Invalid payload size [ 104.117126][ T6702] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.349115][ T6707] misc userio: No port type given on /dev/userio [ 105.072593][ T6723] fuse: Bad value for 'fd' [ 105.356006][ T6736] ALSA: mixer_oss: invalid OSS volume '' [ 106.076462][ T6744] misc userio: Invalid payload size [ 106.224341][ T6750] ALSA: mixer_oss: invalid OSS volume '' [ 106.236807][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'. [ 106.281494][ T6755] misc userio: No port type given on /dev/userio [ 106.784988][ T6764] FAULT_INJECTION: forcing a failure. [ 106.784988][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 106.785008][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 106.785021][ T6764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.785028][ T6764] Call Trace: [ 106.785032][ T6764] [ 106.785037][ T6764] dump_stack_lvl+0x100/0x190 [ 106.785057][ T6764] should_fail_ex.cold+0x5/0xa [ 106.785073][ T6764] should_failslab+0xc2/0x120 [ 106.785092][ T6764] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 106.785109][ T6764] ? find_held_lock+0x2b/0x80 [ 106.785122][ T6764] ? sock_alloc_inode+0x26/0x2c0 [ 106.785139][ T6764] ? __pfx_sock_alloc_inode+0x10/0x10 [ 106.785156][ T6764] sock_alloc_inode+0x26/0x2c0 [ 106.785172][ T6764] ? __pfx_sock_alloc_inode+0x10/0x10 [ 106.785186][ T6764] alloc_inode+0x68/0x250 [ 106.785198][ T6764] sock_alloc+0x44/0x280 [ 106.785211][ T6764] ? security_socket_create+0x7f/0x250 [ 106.785225][ T6764] __sock_create+0xc2/0x860 [ 106.785245][ T6764] __sys_socket+0x14d/0x260 [ 106.785261][ T6764] ? fput+0x7c/0x100 [ 106.785277][ T6764] ? __pfx___sys_socket+0x10/0x10 [ 106.785293][ T6764] ? ksys_write+0x1ac/0x250 [ 106.785308][ T6764] ? __pfx_ksys_write+0x10/0x10 [ 106.785325][ T6764] __ia32_sys_socket+0x72/0xb0 [ 106.785335][ T6764] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.785353][ T6764] __do_fast_syscall_32+0x13a/0x8b0 [ 106.785366][ T6764] do_fast_syscall_32+0x32/0x70 [ 106.785378][ T6764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.785392][ T6764] RIP: 0023:0xf7fd2fec [ 106.785405][ T6764] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 106.785411][ T6764] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 106.785427][ T6764] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 106.785434][ T6764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.785440][ T6764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.785447][ T6764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.785454][ T6764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.785469][ T6764] [ 106.785475][ T6764] socket: no more sockets [ 107.143966][ T6769] ALSA: mixer_oss: invalid OSS volume '' [ 107.174746][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 107.502744][ T6797] ALSA: mixer_oss: invalid OSS volume '' [ 107.739812][ T6799] FAULT_INJECTION: forcing a failure. [ 107.739812][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 107.739837][ T6799] CPU: 3 UID: 0 PID: 6799 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(full) [ 107.739850][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.739857][ T6799] Call Trace: [ 107.739861][ T6799] [ 107.739866][ T6799] dump_stack_lvl+0x100/0x190 [ 107.739885][ T6799] should_fail_ex.cold+0x5/0xa [ 107.739901][ T6799] should_failslab+0xc2/0x120 [ 107.739919][ T6799] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 107.739935][ T6799] ? find_held_lock+0x2b/0x80 [ 107.739949][ T6799] ? sock_alloc_inode+0x26/0x2c0 [ 107.739966][ T6799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 107.739982][ T6799] sock_alloc_inode+0x26/0x2c0 [ 107.739997][ T6799] ? __pfx_sock_alloc_inode+0x10/0x10 [ 107.740012][ T6799] alloc_inode+0x68/0x250 [ 107.740024][ T6799] sock_alloc+0x44/0x280 [ 107.740037][ T6799] ? security_socket_create+0x7f/0x250 [ 107.740051][ T6799] __sock_create+0xc2/0x860 [ 107.740070][ T6799] __sys_socket+0x14d/0x260 [ 107.740087][ T6799] ? fput+0x7c/0x100 [ 107.740102][ T6799] ? __pfx___sys_socket+0x10/0x10 [ 107.740119][ T6799] ? ksys_write+0x1ac/0x250 [ 107.740133][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 107.740150][ T6799] __ia32_sys_socket+0x72/0xb0 [ 107.740160][ T6799] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.740178][ T6799] __do_fast_syscall_32+0x13a/0x8b0 [ 107.740191][ T6799] do_fast_syscall_32+0x32/0x70 [ 107.740203][ T6799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.740217][ T6799] RIP: 0023:0xf73eefec [ 107.740229][ T6799] Code: Unable to access opcode bytes at 0xf73eefc2. [ 107.740234][ T6799] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 107.740245][ T6799] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 107.740252][ T6799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.740259][ T6799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.740265][ T6799] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.740271][ T6799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.740285][ T6799] [ 107.740291][ T6799] socket: no more sockets [ 107.768255][ T6801] misc userio: Invalid payload size [ 107.983890][ T6807] misc userio: No port type given on /dev/userio [ 108.172749][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 108.480896][ T6821] ALSA: mixer_oss: invalid OSS volume '' [ 109.030973][ T6834] FAULT_INJECTION: forcing a failure. [ 109.030973][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 109.030993][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(full) [ 109.031007][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.031013][ T6834] Call Trace: [ 109.031017][ T6834] [ 109.031022][ T6834] dump_stack_lvl+0x100/0x190 [ 109.031041][ T6834] should_fail_ex.cold+0x5/0xa [ 109.031058][ T6834] should_failslab+0xc2/0x120 [ 109.031076][ T6834] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 109.031093][ T6834] ? find_held_lock+0x2b/0x80 [ 109.031106][ T6834] ? sock_alloc_inode+0x26/0x2c0 [ 109.031123][ T6834] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.031139][ T6834] sock_alloc_inode+0x26/0x2c0 [ 109.031154][ T6834] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.031170][ T6834] alloc_inode+0x68/0x250 [ 109.031183][ T6834] sock_alloc+0x44/0x280 [ 109.031196][ T6834] ? security_socket_create+0x7f/0x250 [ 109.031229][ T6834] __sock_create+0xc2/0x860 [ 109.031250][ T6834] __sys_socket+0x14d/0x260 [ 109.031267][ T6834] ? fput+0x7c/0x100 [ 109.031284][ T6834] ? __pfx___sys_socket+0x10/0x10 [ 109.031302][ T6834] ? ksys_write+0x1ac/0x250 [ 109.031317][ T6834] ? __pfx_ksys_write+0x10/0x10 [ 109.031336][ T6834] __ia32_sys_socket+0x72/0xb0 [ 109.031346][ T6834] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.031364][ T6834] __do_fast_syscall_32+0x13a/0x8b0 [ 109.031378][ T6834] do_fast_syscall_32+0x32/0x70 [ 109.031389][ T6834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.031403][ T6834] RIP: 0023:0xf73cefec [ 109.031417][ T6834] Code: Unable to access opcode bytes at 0xf73cefc2. [ 109.031422][ T6834] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 109.031434][ T6834] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 109.031442][ T6834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.031448][ T6834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.031460][ T6834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.031467][ T6834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.031481][ T6834] [ 109.031488][ T6834] socket: no more sockets [ 109.216477][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 109.381325][ T6855] ALSA: mixer_oss: invalid OSS volume '' [ 109.578607][ T6859] misc userio: Invalid payload size [ 109.785086][ T6861] misc userio: No port type given on /dev/userio [ 110.224626][ T6872] FAULT_INJECTION: forcing a failure. [ 110.224626][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 110.224648][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(full) [ 110.224661][ T6872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.224668][ T6872] Call Trace: [ 110.224672][ T6872] [ 110.224677][ T6872] dump_stack_lvl+0x100/0x190 [ 110.224697][ T6872] should_fail_ex.cold+0x5/0xa [ 110.224712][ T6872] should_failslab+0xc2/0x120 [ 110.224730][ T6872] kmem_cache_alloc_noprof+0x92/0x6a0 [ 110.224746][ T6872] ? __pfx_map_id_range_down+0x10/0x10 [ 110.224763][ T6872] ? rcu_is_watching+0x13/0xc0 [ 110.224776][ T6872] ? security_inode_alloc+0x3b/0x2c0 [ 110.224791][ T6872] security_inode_alloc+0x3b/0x2c0 [ 110.224803][ T6872] inode_init_always_gfp+0xc6f/0xfb0 [ 110.224821][ T6872] alloc_inode+0x8e/0x250 [ 110.224833][ T6872] sock_alloc+0x44/0x280 [ 110.224850][ T6872] ? security_socket_create+0x7f/0x250 [ 110.224863][ T6872] __sock_create+0xc2/0x860 [ 110.224882][ T6872] __sys_socket+0x14d/0x260 [ 110.224898][ T6872] ? xfd_validate_state+0x129/0x190 [ 110.224915][ T6872] ? __pfx___sys_socket+0x10/0x10 [ 110.224936][ T6872] __ia32_sys_socket+0x72/0xb0 [ 110.224946][ T6872] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.224964][ T6872] __do_fast_syscall_32+0x13a/0x8b0 [ 110.224977][ T6872] do_fast_syscall_32+0x32/0x70 [ 110.224989][ T6872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.225004][ T6872] RIP: 0023:0xf73cefec [ 110.225016][ T6872] Code: Unable to access opcode bytes at 0xf73cefc2. [ 110.225021][ T6872] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 110.225032][ T6872] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 110.225040][ T6872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.225046][ T6872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.225052][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.225059][ T6872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.225072][ T6872] [ 110.225086][ T6872] socket: no more sockets [ 110.261505][ T6877] ALSA: mixer_oss: invalid OSS volume '' [ 110.309129][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 110.548976][ T6895] ALSA: mixer_oss: invalid OSS volume '' [ 111.243091][ T6907] FAULT_INJECTION: forcing a failure. [ 111.243091][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 111.243110][ T6907] CPU: 2 UID: 0 PID: 6907 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT(full) [ 111.243123][ T6907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.243129][ T6907] Call Trace: [ 111.243134][ T6907] [ 111.243139][ T6907] dump_stack_lvl+0x100/0x190 [ 111.243158][ T6907] should_fail_ex.cold+0x5/0xa [ 111.243174][ T6907] should_failslab+0xc2/0x120 [ 111.243217][ T6907] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 111.243240][ T6907] ? find_held_lock+0x2b/0x80 [ 111.243257][ T6907] ? sock_alloc_inode+0x26/0x2c0 [ 111.243285][ T6907] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.243307][ T6907] sock_alloc_inode+0x26/0x2c0 [ 111.243328][ T6907] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.243348][ T6907] alloc_inode+0x68/0x250 [ 111.243364][ T6907] sock_alloc+0x44/0x280 [ 111.243380][ T6907] ? security_socket_create+0x7f/0x250 [ 111.243397][ T6907] __sock_create+0xc2/0x860 [ 111.243422][ T6907] __sys_socket+0x14d/0x260 [ 111.243443][ T6907] ? fput+0x7c/0x100 [ 111.243463][ T6907] ? __pfx___sys_socket+0x10/0x10 [ 111.243484][ T6907] ? ksys_write+0x1ac/0x250 [ 111.243502][ T6907] ? __pfx_ksys_write+0x10/0x10 [ 111.243524][ T6907] __ia32_sys_socket+0x72/0xb0 [ 111.243537][ T6907] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.243560][ T6907] __do_fast_syscall_32+0x13a/0x8b0 [ 111.243579][ T6907] do_fast_syscall_32+0x32/0x70 [ 111.243595][ T6907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.243615][ T6907] RIP: 0023:0xf73cefec [ 111.243632][ T6907] Code: Unable to access opcode bytes at 0xf73cefc2. [ 111.243638][ T6907] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 111.243653][ T6907] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 111.243663][ T6907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.243672][ T6907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.243680][ T6907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.243688][ T6907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.243708][ T6907] [ 111.243715][ T6907] socket: no more sockets [ 111.259865][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'. [ 111.279732][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 111.281651][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 111.394592][ T6920] misc userio: Invalid payload size [ 111.478757][ T6926] ALSA: mixer_oss: invalid OSS volume '' [ 111.589549][ T6930] misc userio: No port type given on /dev/userio [ 112.089916][ T6944] ALSA: mixer_oss: invalid OSS volume '' [ 112.202104][ T6946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.347'. [ 112.228085][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 112.229867][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 112.286684][ T6952] FAULT_INJECTION: forcing a failure. [ 112.286684][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 112.286706][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(full) [ 112.286719][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.286727][ T6952] Call Trace: [ 112.286731][ T6952] [ 112.286736][ T6952] dump_stack_lvl+0x100/0x190 [ 112.286756][ T6952] should_fail_ex.cold+0x5/0xa [ 112.286773][ T6952] should_failslab+0xc2/0x120 [ 112.286799][ T6952] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 112.286817][ T6952] ? find_held_lock+0x2b/0x80 [ 112.286831][ T6952] ? sock_alloc_inode+0x26/0x2c0 [ 112.286849][ T6952] ? __pfx_sock_alloc_inode+0x10/0x10 [ 112.286866][ T6952] sock_alloc_inode+0x26/0x2c0 [ 112.286882][ T6952] ? __pfx_sock_alloc_inode+0x10/0x10 [ 112.286898][ T6952] alloc_inode+0x68/0x250 [ 112.286911][ T6952] sock_alloc+0x44/0x280 [ 112.286927][ T6952] ? security_socket_create+0x7f/0x250 [ 112.286942][ T6952] __sock_create+0xc2/0x860 [ 112.286962][ T6952] __sys_socket+0x14d/0x260 [ 112.286980][ T6952] ? fput+0x7c/0x100 [ 112.286997][ T6952] ? __pfx___sys_socket+0x10/0x10 [ 112.287014][ T6952] ? ksys_write+0x1ac/0x250 [ 112.287029][ T6952] ? __pfx_ksys_write+0x10/0x10 [ 112.287047][ T6952] __ia32_sys_socket+0x72/0xb0 [ 112.287057][ T6952] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.287076][ T6952] __do_fast_syscall_32+0x13a/0x8b0 [ 112.287091][ T6952] do_fast_syscall_32+0x32/0x70 [ 112.287103][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.287118][ T6952] RIP: 0023:0xf7fd2fec [ 112.287132][ T6952] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 112.287138][ T6952] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 112.287166][ T6952] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 112.287174][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.287181][ T6952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.287208][ T6952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.287216][ T6952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.287232][ T6952] [ 112.287274][ T6952] socket: no more sockets [ 112.674757][ T6969] ALSA: mixer_oss: invalid OSS volume '' [ 112.736024][ T6973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.357'. [ 112.829892][ T6979] FAULT_INJECTION: forcing a failure. [ 112.829892][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 112.829912][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(full) [ 112.829927][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.829933][ T6979] Call Trace: [ 112.829938][ T6979] [ 112.829943][ T6979] dump_stack_lvl+0x100/0x190 [ 112.829962][ T6979] should_fail_ex.cold+0x5/0xa [ 112.829978][ T6979] should_failslab+0xc2/0x120 [ 112.829998][ T6979] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 112.830014][ T6979] ? find_held_lock+0x2b/0x80 [ 112.830027][ T6979] ? sock_alloc_inode+0x26/0x2c0 [ 112.830044][ T6979] ? __pfx_sock_alloc_inode+0x10/0x10 [ 112.830060][ T6979] sock_alloc_inode+0x26/0x2c0 [ 112.830075][ T6979] ? __pfx_sock_alloc_inode+0x10/0x10 [ 112.830090][ T6979] alloc_inode+0x68/0x250 [ 112.830102][ T6979] sock_alloc+0x44/0x280 [ 112.830116][ T6979] ? security_socket_create+0x7f/0x250 [ 112.830130][ T6979] __sock_create+0xc2/0x860 [ 112.830149][ T6979] __sys_socket+0x14d/0x260 [ 112.830181][ T6979] ? xfd_validate_state+0x129/0x190 [ 112.830201][ T6979] ? __pfx___sys_socket+0x10/0x10 [ 112.830223][ T6979] __ia32_sys_socket+0x72/0xb0 [ 112.830234][ T6979] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.830254][ T6979] __do_fast_syscall_32+0x13a/0x8b0 [ 112.830269][ T6979] do_fast_syscall_32+0x32/0x70 [ 112.830281][ T6979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.830297][ T6979] RIP: 0023:0xf749efec [ 112.830309][ T6979] Code: Unable to access opcode bytes at 0xf749efc2. [ 112.830315][ T6979] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 112.830326][ T6979] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 112.830333][ T6979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.830340][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.830346][ T6979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.830352][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.830367][ T6979] [ 112.830405][ T6979] socket: no more sockets [ 112.865957][ T6981] misc userio: Invalid payload size [ 113.062620][ T6983] misc userio: No port type given on /dev/userio [ 113.488192][ T7001] __nla_validate_parse: 2 callbacks suppressed [ 113.488205][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 113.529012][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 113.560314][ T7007] ALSA: mixer_oss: invalid OSS volume '' [ 113.777842][ T7013] FAULT_INJECTION: forcing a failure. [ 113.777842][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 113.777862][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 113.777875][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.777882][ T7013] Call Trace: [ 113.777886][ T7013] [ 113.777891][ T7013] dump_stack_lvl+0x100/0x190 [ 113.777929][ T7013] should_fail_ex.cold+0x5/0xa [ 113.777945][ T7013] should_failslab+0xc2/0x120 [ 113.777965][ T7013] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 113.777981][ T7013] ? find_held_lock+0x2b/0x80 [ 113.777994][ T7013] ? sock_alloc_inode+0x26/0x2c0 [ 113.778011][ T7013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 113.778028][ T7013] sock_alloc_inode+0x26/0x2c0 [ 113.778044][ T7013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 113.778058][ T7013] alloc_inode+0x68/0x250 [ 113.778070][ T7013] sock_alloc+0x44/0x280 [ 113.778084][ T7013] ? security_socket_create+0x7f/0x250 [ 113.778096][ T7013] __sock_create+0xc2/0x860 [ 113.778116][ T7013] __sys_socket+0x14d/0x260 [ 113.778132][ T7013] ? xfd_validate_state+0x129/0x190 [ 113.778149][ T7013] ? __pfx___sys_socket+0x10/0x10 [ 113.778170][ T7013] __ia32_sys_socket+0x72/0xb0 [ 113.778180][ T7013] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.778198][ T7013] __do_fast_syscall_32+0x13a/0x8b0 [ 113.778212][ T7013] do_fast_syscall_32+0x32/0x70 [ 113.778223][ T7013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.778238][ T7013] RIP: 0023:0xf749efec [ 113.778250][ T7013] Code: Unable to access opcode bytes at 0xf749efc2. [ 113.778256][ T7013] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 113.778268][ T7013] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 113.778276][ T7013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.778283][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.778289][ T7013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.778295][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.778310][ T7013] [ 113.778359][ T7013] socket: no more sockets [ 114.082093][ T7016] ALSA: mixer_oss: invalid OSS volume '' [ 114.453924][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'. [ 114.488372][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 114.532500][ T7038] FAULT_INJECTION: forcing a failure. [ 114.532500][ T7038] name failslab, interval 1, probability 0, space 0, times 0 [ 114.532533][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) [ 114.532554][ T7038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.532566][ T7038] Call Trace: [ 114.532573][ T7038] [ 114.532581][ T7038] dump_stack_lvl+0x100/0x190 [ 114.532612][ T7038] should_fail_ex.cold+0x5/0xa [ 114.532638][ T7038] should_failslab+0xc2/0x120 [ 114.532669][ T7038] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 114.532713][ T7038] ? find_held_lock+0x2b/0x80 [ 114.532737][ T7038] ? sock_alloc_inode+0x26/0x2c0 [ 114.532765][ T7038] ? __pfx_sock_alloc_inode+0x10/0x10 [ 114.532792][ T7038] sock_alloc_inode+0x26/0x2c0 [ 114.532818][ T7038] ? __pfx_sock_alloc_inode+0x10/0x10 [ 114.532842][ T7038] alloc_inode+0x68/0x250 [ 114.532863][ T7038] sock_alloc+0x44/0x280 [ 114.532885][ T7038] ? security_socket_create+0x7f/0x250 [ 114.532907][ T7038] __sock_create+0xc2/0x860 [ 114.532940][ T7038] __sys_socket+0x14d/0x260 [ 114.532968][ T7038] ? fput+0x7c/0x100 [ 114.532997][ T7038] ? __pfx___sys_socket+0x10/0x10 [ 114.533027][ T7038] ? ksys_write+0x1ac/0x250 [ 114.533052][ T7038] ? __pfx_ksys_write+0x10/0x10 [ 114.533082][ T7038] __ia32_sys_socket+0x72/0xb0 [ 114.533099][ T7038] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.533130][ T7038] __do_fast_syscall_32+0x13a/0x8b0 [ 114.533154][ T7038] do_fast_syscall_32+0x32/0x70 [ 114.533174][ T7038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.533200][ T7038] RIP: 0023:0xf73eefec [ 114.533221][ T7038] Code: Unable to access opcode bytes at 0xf73eefc2. [ 114.533230][ T7038] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 114.533249][ T7038] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 114.533261][ T7038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.533272][ T7038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.533289][ T7038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.533300][ T7038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.533327][ T7038] [ 114.533466][ T7038] socket: no more sockets [ 114.807779][ T7053] misc userio: Invalid payload size [ 114.860643][ T7054] ALSA: mixer_oss: invalid OSS volume '' [ 115.004598][ T7059] misc userio: No port type given on /dev/userio [ 115.796509][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.390'. [ 115.934155][ T7079] ALSA: mixer_oss: invalid OSS volume '' [ 115.997602][ T7083] FAULT_INJECTION: forcing a failure. [ 115.997602][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 115.997621][ T7083] CPU: 3 UID: 0 PID: 7083 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 115.997635][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.997641][ T7083] Call Trace: [ 115.997645][ T7083] [ 115.997650][ T7083] dump_stack_lvl+0x100/0x190 [ 115.997670][ T7083] should_fail_ex.cold+0x5/0xa [ 115.997685][ T7083] should_failslab+0xc2/0x120 [ 115.997704][ T7083] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 115.997721][ T7083] ? find_held_lock+0x2b/0x80 [ 115.997734][ T7083] ? sock_alloc_inode+0x26/0x2c0 [ 115.997751][ T7083] ? __pfx_sock_alloc_inode+0x10/0x10 [ 115.997773][ T7083] sock_alloc_inode+0x26/0x2c0 [ 115.997789][ T7083] ? __pfx_sock_alloc_inode+0x10/0x10 [ 115.997805][ T7083] alloc_inode+0x68/0x250 [ 115.997817][ T7083] sock_alloc+0x44/0x280 [ 115.997831][ T7083] ? security_socket_create+0x7f/0x250 [ 115.997845][ T7083] __sock_create+0xc2/0x860 [ 115.997865][ T7083] __sys_socket+0x14d/0x260 [ 115.997882][ T7083] ? xfd_validate_state+0x129/0x190 [ 115.997899][ T7083] ? __pfx___sys_socket+0x10/0x10 [ 115.997920][ T7083] __ia32_sys_socket+0x72/0xb0 [ 115.997929][ T7083] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.997947][ T7083] __do_fast_syscall_32+0x13a/0x8b0 [ 115.997961][ T7083] do_fast_syscall_32+0x32/0x70 [ 115.997972][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.997987][ T7083] RIP: 0023:0xf73cefec [ 115.998000][ T7083] Code: Unable to access opcode bytes at 0xf73cefc2. [ 115.998005][ T7083] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 115.998020][ T7083] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 115.998027][ T7083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.998034][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.998044][ T7083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.998053][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.998075][ T7083] [ 115.998084][ T7083] socket: no more sockets [ 116.364313][ C1] [ 116.365179][ C1] ============================= [ 116.366743][ C1] [ BUG: Invalid wait context ] [ 116.368742][ C1] syzkaller #0 Not tainted [ 116.370886][ C1] ----------------------------- [ 116.372769][ C1] swapper/1/0 is trying to lock: [ 116.374382][ C1] ffff888070d8dbb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 116.377382][ C1] other info that might help us debug this: [ 116.379296][ C1] context-{2:2} [ 116.380711][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 116.383200][ C1] #0: ffff888070d8e110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 116.387385][ C1] stack backtrace: [ 116.389003][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 116.392784][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.397034][ C1] Call Trace: [ 116.398481][ C1] [ 116.399740][ C1] dump_stack_lvl+0x100/0x190 [ 116.401513][ C1] __lock_acquire+0xfcc/0x1f40 [ 116.403269][ C1] ? xa_load+0x149/0x2c0 [ 116.404774][ C1] ? xa_load+0x149/0x2c0 [ 116.406591][ C1] lock_acquire+0x1d1/0x380 [ 116.408553][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 116.410949][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 116.413172][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 116.415620][ C1] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 116.417905][ C1] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 116.420172][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 116.422616][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.424632][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.426487][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 116.428249][ C1] xen_timer_callback+0x1db/0x2a0 [ 116.429842][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 116.431612][ C1] ? __hrtimer_run_queues+0x37b/0x9c0 [ 116.433654][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 116.435769][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 116.437716][ C1] __hrtimer_run_queues+0x13f/0x9c0 [ 116.439506][ C1] hrtimer_interrupt+0x441/0xaa0 [ 116.441332][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 116.443368][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 116.445519][ C1] [ 116.446678][ C1] [ 116.447811][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.450010][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 116.452142][ C1] Code: 47 98 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 46 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 116.459194][ C1] RSP: 0018:ffffc9000047fe00 EFLAGS: 00000202 [ 116.461809][ C1] RAX: 000000000019cfe3 RBX: ffff88801dbfcb00 RCX: ffffffff8bd27235 [ 116.465163][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e0f3d RDI: ffffffff8c625a80 [ 116.468508][ C1] RBP: ffffed1003b7f960 R08: 0000000000000001 R09: ffffed10056267bd [ 116.471480][ C1] R10: ffff88802b133deb R11: 0000000000000001 R12: 0000000000000000 [ 116.474595][ C1] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 116.477229][ C1] ? ct_kernel_exit+0x125/0x180 [ 116.478765][ C1] default_idle+0x9/0x10 [ 116.480365][ C1] default_idle_call+0x6c/0xb0 [ 116.481964][ C1] do_idle+0x3ae/0x5b0 [ 116.483257][ C1] ? __pfx_do_idle+0x10/0x10 [ 116.484919][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 116.486808][ C1] cpu_startup_entry+0x4f/0x60 [ 116.488331][ C1] start_secondary+0x21d/0x2d0 [ 116.489866][ C1] ? __pfx_start_secondary+0x10/0x10 [ 116.491615][ C1] common_startup_64+0x13e/0x158 [ 116.493208][ C1]