last executing test programs: 3.910146385s ago: executing program 0 (id=533): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000200)={0x0, 0xd, 0xbb, {0xbb, 0xae8c418f1ab794d1, "d69b6807f410ec699038f51942555e2e956a4467bda7fc98d1bcfc50fc4182d0a0e58d700ea3075c595210e2031ab1ffa195b69a9b12ef7b72f90e0632e3cab4cc8f064fd7d508236a60df0f9b630944374d7c96517f5e8aeafd07b104254cea77348101b5fdbf2d419f15db711ccc3c785d337aa8321144c4d034a1410a5fe99889068db72028c5825909143e07ed13fb3e4e8b486dbb0efc50b09486ebcb9740178edcc022cf1492f14b07a3b9a8db28ad284ce62d9b57a6"}}, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.327427522s ago: executing program 0 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000001ac0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000001b00)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 2.573418536s ago: executing program 3 (id=539): socket(0x1e, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 2.023505521s ago: executing program 3 (id=541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000001ac0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000001b00)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 1.965668s ago: executing program 0 (id=543): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000000c0)=r2}, 0x1e) setsockopt(r2, 0xfff, 0xdb, 0x0, 0x0) close_range(r1, r1, 0x2) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff5e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) r6 = io_uring_setup(0x7a59, &(0x7f0000000200)={0x0, 0x743e, 0x80, 0x2, 0x3e0}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000280)=[{&(0x7f0000002940)=""/4095, 0x1ef6e3}], 0x100000000000011a) openat$dsp(0xffffff9c, &(0x7f0000003940), 0x101001, 0x0) sendmmsg(r5, &(0x7f0000003980), 0x307017fdb7a66cb, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f00000039c0)={{0x0, 0x3938700}}, 0x0) connect$unix(r7, &(0x7f0000003a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e) dup(r4) mount$9p_fd(0x0, &(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0), 0x0, &(0x7f0000003b00)=ANY=[]) r8 = syz_open_dev$usbfs(&(0x7f0000003b40), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000003b80)) syz_open_procfs(0x0, &(0x7f0000003bc0)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000003c00)='./nfs_mnt\x00', 0x1ff) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 1.653374811s ago: executing program 0 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b00"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r7, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r9 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1.333770713s ago: executing program 2 (id=552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2, &(0x7f0000000440)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace\x00', 0x1ff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0xfffffec1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000002ac0)="c608007e227f3ad7a9d7d1fc10a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/trace_clock\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='x86-tsc', 0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000008c0), 0x106, 0x3}}, 0x20) r4 = socket$kcm(0x1e, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@nfc={0x27, r5, 0x1, 0x1}, 0xfffffffffffffd89, &(0x7f00000000c0)}, 0x4844) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000a00), 0x86}], 0x2) write$P9_RRENAMEAT(r0, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7) 1.155323088s ago: executing program 3 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000640)={0x0, 0x30b8, 0x10000, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x1) r5 = openat$bsg(0xffffff9c, &(0x7f0000000300)='/dev/bsg/2:0:0:0\x00', 0x60002, 0x0) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f00000003c0)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000653000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r6, &(0x7f00000006c0)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800002, 0x2072, r6, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000780)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10080, &(0x7f0000000580)=@file={0x1, './config\x00'}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x992, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 965.02363ms ago: executing program 1 (id=556): mkdir(0x0, 0x12) chdir(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040)={0x480, 0x7, 0x12}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="5121f966cb47d6af"}}) mkdir(&(0x7f0000002000)='./bus\x00', 0x63) 959.775133ms ago: executing program 1 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='3', 0x4e) unshare(0x64000600) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000580)=0x1) 716.688409ms ago: executing program 0 (id=558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 674.324253ms ago: executing program 1 (id=559): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x100000, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/235, 0xeb}], 0x1, 0x8, 0x1) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 673.197859ms ago: executing program 0 (id=560): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20a02, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) r2 = getpid() r3 = socket$kcm(0x2, 0x3, 0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x10106, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) sendto$inet(r4, &(0x7f0000000440), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000480)='bbr', 0x3) recvfrom$inet(r4, &(0x7f00000004c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x9) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000540)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="260000000000000000000000b7cc953673e48f95dd9acf2f7f66652547ad317197f2126f899821e5ea0aeb6e91d20cdf72e440dd82e75cc1056a940610afa8dfb297be74d291d9d3d675f37c268be78ad6e07f4cbc64a08c0cf5265818d3000000009993e51f00000000000000d8f9361021c77ad6a717c539c8c912448b3531ab3bac99bff6103f718789315ed84dad4005bd5d7317029764d80e6e8061f2c5d500000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES16=r3], 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000000c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x777, 0x3}) 572.828641ms ago: executing program 1 (id=561): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x800, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/4, 0x100000}], 0x1, &(0x7f0000000140)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 487.058598ms ago: executing program 1 (id=562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 486.639926ms ago: executing program 2 (id=563): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r1, 0x800}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) 468.041311ms ago: executing program 1 (id=564): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000940), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40011) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='r', 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x0, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x6, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x10, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0xb, 0x200, 0x7, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x100007, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0xfb, 0xff, 0x1, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303f, 0xbe7, 0x631, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 464.636723ms ago: executing program 2 (id=565): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r1, 0x800}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) (fail_nth: 1) 413.398342ms ago: executing program 3 (id=566): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) 413.289077ms ago: executing program 2 (id=567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) (fail_nth: 1) 413.129045ms ago: executing program 3 (id=568): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x15) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000340)={0x2, 0x0, [0x1, 0x2, 0x2, 0x5, 0xfe46, 0x1, 0x1c400000, 0x1]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r1, 0x4004550c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x4) io_setup(0x6, &(0x7f0000000000)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0xd3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xfff7, r3, &(0x7f0000000140)="ce85d02b890748b44447e0a966c2b3e87602465576ff2d24ee64a405154d170ebd3b7c519b7abdddbc7bfa4292512d16613efd8a3d46db60ce248a2472e9e5cd796e68297cb662b50ad07f57e69d99c0cc1f36bd84b4e1139ef56aed95453744757b6960c23e6cab999633a592956dc686", 0x71, 0x0, 0x0, 0x1, r3}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) 333.591704ms ago: executing program 2 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40a01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0xfffffffffffffff8, 0x0, 0x5}, &(0x7f0000000180)=[{}, {}, {}, {}, {}]) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x4, 0x0) read$msr(r4, &(0x7f0000001080)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001a080)='./config\x00', 0x1ff) mount(0x0, &(0x7f000001a0c0)='./config\x00', &(0x7f000001a100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001a180)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000001a1c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f000001a200)={0x0, 0x0, &(0x7f000001a240)={&(0x7f000001a280)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f000001a300)={0x0, 0x0, &(0x7f000001a340)={&(0x7f000001a380)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000001a400)={0x0, 0x0, &(0x7f000001a440)={&(0x7f000001a480)=ANY=[@ANYBLOB], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001a4c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f000001a500)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r6, &(0x7f000001a540)='rd_pages=6', 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaa171efb07c030e0cdaa27b872b1c98f2113e65f86dd63ab5f8300081101fe88000050cf86c5459676d01a15635aebb426bcd809694041624e00000000010100000000000000000000ffffe00000014e224e2100089078"], 0x0) write$tun(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 76.6683ms ago: executing program 3 (id=570): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) close(0xffffffffffffffff) 0s ago: executing program 2 (id=571): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0 0 0 0\n', 0x8) (async) close(r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='0\n\x00', 0x2) (async) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000780)) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='test,0x8000000000000000,0x1000\x00', 0x1e) (async) close(r5) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000640)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) bind$rxrpc(r1, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r7, @ANYBLOB="eb91"], 0x40c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="9030040000000000bdaac974100004800c4008800800010070000000"], 0x34}, 0x1, 0x0, 0x0, 0x800c800}, 0x0) kernel console output (not intermixed with test programs): c: Enabled bearer , priority 0 [ 48.799207][ T6229] tipc: Resetting bearer [ 48.822260][ T6229] tipc: Disabling bearer [ 49.270855][ T1040] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.774310][ T6272] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.054181][ T6290] Zero length message leads to an empty skb [ 50.305584][ T6296] create_pit_timer: 9 callbacks suppressed [ 50.305597][ T6296] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 50.326764][ T6300] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 50.563388][ T6310] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 50.816815][ T6320] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.911239][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 51.167032][ T6331] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 51.283272][ T6336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.91'. [ 51.283287][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.91'. [ 51.288008][ T5794] Bluetooth: unknown link type 128 [ 51.402981][ T6339] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 51.843776][ T6354] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 52.255766][ T6361] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 52.467289][ T6370] syz.3.98 (pid 6370) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 52.469974][ T6370] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-lib" [ 52.659109][ T6370] fscrypt: AES-128-CBC-ESSIV using blk-crypto-fallback [ 53.296155][ T5794] Bluetooth: hci3: command tx timeout [ 55.006715][ T6402] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.194520][ T6407] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.323309][ T6413] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.374876][ T5794] Bluetooth: hci3: command tx timeout [ 55.450737][ T6417] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.847799][ T6431] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.949771][ T6438] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 55.995134][ T6436] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 56.578476][ T6469] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.251274][ T6488] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 57.251529][ T6486] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 57.662664][ T6507] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.027015][ T43] audit: type=1326 audit(1794045238.071:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027046][ T43] audit: type=1326 audit(1794045238.081:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027066][ T43] audit: type=1326 audit(1794045238.081:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027087][ T43] audit: type=1326 audit(1794045238.081:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027107][ T43] audit: type=1326 audit(1794045238.081:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027127][ T43] audit: type=1326 audit(1794045238.081:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027148][ T43] audit: type=1326 audit(1794045238.081:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027168][ T43] audit: type=1326 audit(1794045238.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027188][ T43] audit: type=1326 audit(1794045238.081:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.027208][ T43] audit: type=1326 audit(1794045238.081:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 58.082736][ T6524] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 58.259287][ T6537] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.300918][ T6535] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 58.429751][ T6543] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 58.541273][ T6547] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.447896][ T6575] syzkaller0: entered promiscuous mode [ 59.447917][ T6575] syzkaller0: entered allmulticast mode [ 60.968721][ T6519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.004721][ T6601] create_pit_timer: 3 callbacks suppressed [ 61.004741][ T6601] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 61.065546][ T6608] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.071819][ T6604] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 61.806402][ T6633] FAULT_INJECTION: forcing a failure. [ 61.806402][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 61.806421][ T6633] CPU: 2 UID: 0 PID: 6633 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 61.806437][ T6633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.806445][ T6633] Call Trace: [ 61.806449][ T6633] [ 61.806454][ T6633] dump_stack_lvl+0x100/0x190 [ 61.806477][ T6633] should_fail_ex.cold+0x5/0xa [ 61.806496][ T6633] should_failslab+0xc2/0x120 [ 61.806513][ T6633] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.806526][ T6633] ? __proc_create+0xc1/0x8f0 [ 61.806539][ T6633] ? __proc_create+0x247/0x8f0 [ 61.806553][ T6633] __proc_create+0x247/0x8f0 [ 61.806566][ T6633] ? __pfx___proc_create+0x10/0x10 [ 61.806580][ T6633] ? _raw_write_unlock+0x28/0x50 [ 61.806596][ T6633] ? proc_register+0x56d/0x910 [ 61.806612][ T6633] proc_create_reg+0x75/0x170 [ 61.806626][ T6633] ? __pfx_rt6_stats_seq_show+0x10/0x10 [ 61.806640][ T6633] proc_create_net_single+0x86/0x180 [ 61.806653][ T6633] ? __pfx_proc_create_net_single+0x10/0x10 [ 61.806667][ T6633] ? fib_default_rule_add+0x341/0x420 [ 61.806686][ T6633] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 61.806700][ T6633] ip6_route_net_init_late+0x9c/0x110 [ 61.806712][ T6633] ops_init+0x1e2/0x5f0 [ 61.806726][ T6633] setup_net+0x118/0x3a0 [ 61.806738][ T6633] ? __pfx_setup_net+0x10/0x10 [ 61.806750][ T6633] ? bpf_lsm_namespace_init+0x9/0x10 [ 61.806768][ T6633] copy_net_ns+0x340/0x7a0 [ 61.806783][ T6633] create_new_namespaces+0x3ea/0xac0 [ 61.806799][ T6633] unshare_nsproxy_namespaces+0xf6/0x210 [ 61.806815][ T6633] ksys_unshare+0x44f/0x980 [ 61.806830][ T6633] ? __pfx_ksys_unshare+0x10/0x10 [ 61.806846][ T6633] ? __might_fault+0xc5/0x140 [ 61.806866][ T6633] __ia32_sys_unshare+0x30/0x40 [ 61.806879][ T6633] __do_fast_syscall_32+0x14b/0x8c0 [ 61.806900][ T6633] do_fast_syscall_32+0x32/0x70 [ 61.806918][ T6633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.806933][ T6633] RIP: 0023:0xf7f94fbc [ 61.806944][ T6633] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 61.806955][ T6633] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 61.806967][ T6633] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 61.806974][ T6633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.806981][ T6633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.806988][ T6633] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.806995][ T6633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.807009][ T6633] [ 61.869339][ T6623] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 62.190310][ T6638] FAULT_INJECTION: forcing a failure. [ 62.190310][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 62.190330][ T6638] CPU: 2 UID: 0 PID: 6638 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 62.190345][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.190352][ T6638] Call Trace: [ 62.190357][ T6638] [ 62.190362][ T6638] dump_stack_lvl+0x100/0x190 [ 62.190386][ T6638] should_fail_ex.cold+0x5/0xa [ 62.190404][ T6638] should_failslab+0xc2/0x120 [ 62.190422][ T6638] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.190435][ T6638] ? __proc_create+0xc1/0x8f0 [ 62.190447][ T6638] ? __proc_create+0x247/0x8f0 [ 62.190461][ T6638] __proc_create+0x247/0x8f0 [ 62.190473][ T6638] ? __pfx___proc_create+0x10/0x10 [ 62.190491][ T6638] proc_create_reg+0x75/0x170 [ 62.190505][ T6638] proc_create_net_data+0x8e/0x1c0 [ 62.190518][ T6638] ? __pfx_proc_create_net_data+0x10/0x10 [ 62.190532][ T6638] ? fib_default_rule_add+0x341/0x420 [ 62.190551][ T6638] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 62.190565][ T6638] ip6_route_net_init_late+0x55/0x110 [ 62.190579][ T6638] ops_init+0x1e2/0x5f0 [ 62.190594][ T6638] setup_net+0x118/0x3a0 [ 62.190607][ T6638] ? __pfx_setup_net+0x10/0x10 [ 62.190620][ T6638] ? bpf_lsm_namespace_init+0x9/0x10 [ 62.190637][ T6638] copy_net_ns+0x340/0x7a0 [ 62.190652][ T6638] create_new_namespaces+0x3ea/0xac0 [ 62.190670][ T6638] unshare_nsproxy_namespaces+0xf6/0x210 [ 62.190684][ T6638] ksys_unshare+0x44f/0x980 [ 62.190699][ T6638] ? __pfx_ksys_unshare+0x10/0x10 [ 62.190714][ T6638] ? __might_fault+0xc5/0x140 [ 62.190733][ T6638] __ia32_sys_unshare+0x30/0x40 [ 62.190747][ T6638] __do_fast_syscall_32+0x14b/0x8c0 [ 62.190768][ T6638] do_fast_syscall_32+0x32/0x70 [ 62.190786][ T6638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.190802][ T6638] RIP: 0023:0xf73defbc [ 62.190813][ T6638] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.190824][ T6638] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 62.190836][ T6638] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 62.190843][ T6638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.190850][ T6638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.190857][ T6638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.190864][ T6638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.190878][ T6638] [ 62.673731][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.910771][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.582254][ T6671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.190'. [ 63.865044][ T859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.874938][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.014888][ T859] usb 5-1: Using ep0 maxpacket: 32 [ 64.016005][ T859] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 64.017294][ T859] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.017308][ T859] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.017319][ T859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.017328][ T859] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.017349][ T859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.017361][ T859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 64.017381][ T859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.019626][ T859] usb 5-1: config 0 descriptor?? [ 64.024944][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 64.031624][ T10] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 64.044444][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.044461][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.044474][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.044486][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.044514][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.044532][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 64.044559][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.094022][ T10] usb 7-1: config 0 descriptor?? [ 64.264302][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 64.606911][ T6687] FAULT_INJECTION: forcing a failure. [ 64.606911][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 64.606939][ T6687] CPU: 2 UID: 0 PID: 6687 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 64.606960][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.606970][ T6687] Call Trace: [ 64.606974][ T6687] [ 64.606979][ T6687] dump_stack_lvl+0x100/0x190 [ 64.607018][ T6687] should_fail_ex.cold+0x5/0xa [ 64.607038][ T6687] should_failslab+0xc2/0x120 [ 64.607054][ T6687] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.607073][ T6687] ? sctp_transport_new+0xa4/0x760 [ 64.607108][ T6687] sctp_transport_new+0xa4/0x760 [ 64.607126][ T6687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.607151][ T6687] sctp_assoc_add_peer+0x34b/0x1550 [ 64.607173][ T6687] sctp_connect_new_asoc+0x1f8/0x770 [ 64.607194][ T6687] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 64.607217][ T6687] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 64.607251][ T6687] sctp_sendmsg+0x1743/0x22e0 [ 64.607274][ T6687] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.607294][ T6687] ? __lock_acquire+0x5c0/0x1f40 [ 64.607317][ T6687] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 64.607345][ T6687] ? aa_sock_msg_perm+0x11e/0x200 [ 64.607362][ T6687] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.607381][ T6687] inet_sendmsg+0x11c/0x140 [ 64.607403][ T6687] ____sys_sendmsg+0xa23/0xc30 [ 64.607418][ T6687] ? __pfx_inet_sendmsg+0x10/0x10 [ 64.607439][ T6687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.607460][ T6687] ___sys_sendmsg+0x190/0x1e0 [ 64.607480][ T6687] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.607495][ T6687] ? futex_wait+0x11e/0x370 [ 64.607513][ T6687] ? percpu_counter_add_batch+0xb9/0x230 [ 64.607547][ T6687] ? __lock_acquire+0x5c0/0x1f40 [ 64.607562][ T6687] ? fd_install+0x223/0x580 [ 64.607587][ T6687] __sys_sendmsg+0x160/0x210 [ 64.607606][ T6687] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.607634][ T6687] __do_fast_syscall_32+0x14b/0x8c0 [ 64.607657][ T6687] do_fast_syscall_32+0x32/0x70 [ 64.607676][ T6687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.607692][ T6687] RIP: 0023:0xf7f94fbc [ 64.607703][ T6687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.607714][ T6687] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 64.607726][ T6687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 64.607734][ T6687] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.607741][ T6687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.607747][ T6687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.607754][ T6687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.607769][ T6687] [ 64.670380][ T6688] FAULT_INJECTION: forcing a failure. [ 64.670380][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 64.670400][ T6688] CPU: 3 UID: 0 PID: 6688 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 64.670414][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.670421][ T6688] Call Trace: [ 64.670425][ T6688] [ 64.670431][ T6688] dump_stack_lvl+0x100/0x190 [ 64.670453][ T6688] should_fail_ex.cold+0x5/0xa [ 64.670472][ T6688] should_failslab+0xc2/0x120 [ 64.670488][ T6688] __kmalloc_flags_noprof+0x122/0x8e0 [ 64.670505][ T6688] ? find_held_lock+0x2b/0x80 [ 64.670537][ T6688] ? __pcs_replace_empty_main+0x132/0x650 [ 64.670554][ T6688] ? __pcs_replace_empty_main+0x3fa/0x650 [ 64.670575][ T6688] __pcs_replace_empty_main+0x3fa/0x650 [ 64.670594][ T6688] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 64.670606][ T6688] ? __alloc_skb+0x5b7/0x710 [ 64.670625][ T6688] ? sctp_chunkify+0x51/0x2f0 [ 64.670640][ T6688] sctp_chunkify+0x51/0x2f0 [ 64.670652][ T6688] _sctp_make_chunk+0x148/0x270 [ 64.670666][ T6688] sctp_make_init+0x6d0/0xdb0 [ 64.670683][ T6688] ? __pfx_sctp_make_init+0x10/0x10 [ 64.670699][ T6688] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.670715][ T6688] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.670733][ T6688] ? sctp_sm_lookup_event+0x10e/0x520 [ 64.670746][ T6688] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 64.670762][ T6688] sctp_sf_do_prm_asoc+0xbf/0x360 [ 64.670779][ T6688] ? __pfx_sctp_pname+0x10/0x10 [ 64.670792][ T6688] sctp_do_sm+0x17a/0x5c30 [ 64.670804][ T6688] ? __sys_sendmsg+0x160/0x210 [ 64.670821][ T6688] ? __do_fast_syscall_32+0x14b/0x8c0 [ 64.670842][ T6688] ? __pfx_sctp_do_sm+0x10/0x10 [ 64.670869][ T6688] ? __genradix_ptr+0x122/0x180 [ 64.670889][ T6688] ? __sk_mem_raise_allocated+0x789/0x1570 [ 64.670912][ T6688] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 64.670933][ T6688] sctp_sendmsg_to_asoc+0x8a8/0x1b60 [ 64.670954][ T6688] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 64.670977][ T6688] ? sctp_connect_new_asoc+0x41e/0x770 [ 64.670997][ T6688] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 64.671019][ T6688] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 64.671038][ T6688] sctp_sendmsg+0x1144/0x22e0 [ 64.671060][ T6688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.671080][ T6688] ? __lock_acquire+0x5c0/0x1f40 [ 64.671096][ T6688] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 64.671114][ T6688] ? aa_sock_msg_perm+0x11e/0x200 [ 64.671132][ T6688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.671151][ T6688] inet_sendmsg+0x11c/0x140 [ 64.671171][ T6688] ____sys_sendmsg+0xa23/0xc30 [ 64.671184][ T6688] ? __pfx_inet_sendmsg+0x10/0x10 [ 64.671204][ T6688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.671225][ T6688] ___sys_sendmsg+0x190/0x1e0 [ 64.671240][ T6688] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.671255][ T6688] ? futex_wait+0x11e/0x370 [ 64.671290][ T6688] ? percpu_counter_add_batch+0xb9/0x230 [ 64.671311][ T6688] ? __lock_acquire+0x5c0/0x1f40 [ 64.671325][ T6688] ? fd_install+0x223/0x580 [ 64.671341][ T6688] __sys_sendmsg+0x160/0x210 [ 64.671361][ T6688] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.671388][ T6688] __do_fast_syscall_32+0x14b/0x8c0 [ 64.671408][ T6688] do_fast_syscall_32+0x32/0x70 [ 64.671426][ T6688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.671442][ T6688] RIP: 0023:0xf7f32fbc [ 64.671453][ T6688] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.671464][ T6688] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 64.671477][ T6688] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 64.671484][ T6688] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.671491][ T6688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.671497][ T6688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.671504][ T6688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.671518][ T6688] [ 65.724979][ T1040] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.884883][ T1040] usb 6-1: Using ep0 maxpacket: 32 [ 65.885406][ T1040] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 65.886233][ T1040] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 65.886247][ T1040] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 65.886258][ T1040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.886268][ T1040] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 65.886288][ T1040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.886300][ T1040] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 65.886320][ T1040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.889342][ T1040] usb 6-1: config 0 descriptor?? [ 66.282646][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.457924][ T6700] FAULT_INJECTION: forcing a failure. [ 66.457924][ T6700] name fail_futex, interval 1, probability 0, space 0, times 1 [ 66.457945][ T6700] CPU: 3 UID: 0 PID: 6700 Comm: syz.1.197 Not tainted syzkaller #0 PREEMPT(full) [ 66.457960][ T6700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.457967][ T6700] Call Trace: [ 66.457972][ T6700] [ 66.457976][ T6700] dump_stack_lvl+0x100/0x190 [ 66.458000][ T6700] should_fail_ex.cold+0x5/0xa [ 66.458019][ T6700] get_futex_key+0x1c9/0x13e0 [ 66.458039][ T6700] ? __pfx_get_futex_key+0x10/0x10 [ 66.458056][ T6700] ? ___sys_sendmsg+0x127/0x1e0 [ 66.458073][ T6700] futex_wake+0xf4/0x5e0 [ 66.458084][ T6700] ? futex_wait+0x11e/0x370 [ 66.458097][ T6700] ? __pfx_futex_wake+0x10/0x10 [ 66.458111][ T6700] ? percpu_counter_add_batch+0xb9/0x230 [ 66.458130][ T6700] do_futex+0x2b2/0x440 [ 66.458149][ T6700] ? __pfx_do_futex+0x10/0x10 [ 66.458167][ T6700] ? fd_install+0x223/0x580 [ 66.458184][ T6700] __ia32_sys_futex_time32+0x2f4/0x470 [ 66.458206][ T6700] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 66.458227][ T6700] ? __might_fault+0xc5/0x140 [ 66.458246][ T6700] __do_fast_syscall_32+0x14b/0x8c0 [ 66.458267][ T6700] do_fast_syscall_32+0x32/0x70 [ 66.458286][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.458302][ T6700] RIP: 0023:0xf740efbc [ 66.458313][ T6700] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 66.458324][ T6700] RSP: 002b:00000000f54055cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 66.458336][ T6700] RAX: ffffffffffffffda RBX: 00000000f7435024 RCX: 0000000000000081 [ 66.458344][ T6700] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 66.458351][ T6700] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 66.458358][ T6700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.458364][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.458379][ T6700] [ 66.632971][ T5788] usb 5-1: USB disconnect, device number 2 [ 66.652520][ T5159] usb 7-1: USB disconnect, device number 2 [ 67.317985][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 67.317998][ T43] audit: type=1326 audit(1794045247.371:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.318147][ T43] audit: type=1326 audit(1794045247.371:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.319356][ T43] audit: type=1326 audit(1794045247.371:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.319494][ T43] audit: type=1326 audit(1794045247.371:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.319614][ T43] audit: type=1326 audit(1794045247.371:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.320197][ T43] audit: type=1326 audit(1794045247.371:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.320317][ T43] audit: type=1326 audit(1794045247.371:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.320434][ T43] audit: type=1326 audit(1794045247.371:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.320726][ T43] audit: type=1326 audit(1794045247.371:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.321081][ T43] audit: type=1326 audit(1794045247.371:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 67.659916][ T6725] device-mapper: raid: Choosing default region size of 4MiB [ 68.341001][ T6725] device-mapper: table: 248:1: raid: Not enough devices to satisfy specification (-EINVAL) [ 68.341068][ T6725] device-mapper: ioctl: error adding target to table [ 68.876483][ T35] usb 6-1: USB disconnect, device number 2 [ 69.655542][ T6759] FAULT_INJECTION: forcing a failure. [ 69.655542][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 69.655564][ T6759] CPU: 3 UID: 0 PID: 6759 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 69.655579][ T6759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.655587][ T6759] Call Trace: [ 69.655591][ T6759] [ 69.655596][ T6759] dump_stack_lvl+0x100/0x190 [ 69.655630][ T6759] should_fail_ex.cold+0x5/0xa [ 69.655652][ T6759] should_failslab+0xc2/0x120 [ 69.655668][ T6759] __kmalloc_noprof+0xfc/0x840 [ 69.655680][ T6759] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 69.655698][ T6759] ? mpi_alloc_limb_space+0x31/0x60 [ 69.655715][ T6759] mpi_alloc_limb_space+0x31/0x60 [ 69.655728][ T6759] mpi_alloc+0x199/0x230 [ 69.655740][ T6759] mpi_read_raw_from_sgl+0x251/0x620 [ 69.655764][ T6759] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 69.655784][ T6759] ? kasan_save_track+0x14/0x30 [ 69.655801][ T6759] ? mpi_alloc+0x46/0x230 [ 69.655817][ T6759] rsa_enc+0x15d/0x3b0 [ 69.655859][ T6759] ? __pfx_rsa_enc+0x10/0x10 [ 69.655876][ T6759] ? crypto_akcipher_sync_prep+0x3d8/0x510 [ 69.655894][ T6759] crypto_akcipher_sync_encrypt+0x14a/0x1d0 [ 69.655910][ T6759] ? __pfx_crypto_akcipher_sync_encrypt+0x10/0x10 [ 69.655927][ T6759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.655954][ T6759] ? crypto_alloc_tfm_node+0x126/0x260 [ 69.655971][ T6759] software_key_eds_op+0x952/0xbf0 [ 69.655988][ T6759] ? __pfx_software_key_eds_op+0x10/0x10 [ 69.656010][ T6759] ? __kasan_kmalloc+0xaa/0xb0 [ 69.656023][ T6759] ? __kmalloc_noprof+0x350/0x840 [ 69.656034][ T6759] ? __pfx_software_key_eds_op+0x10/0x10 [ 69.656050][ T6759] asymmetric_key_eds_op+0x110/0x170 [ 69.656064][ T6759] keyctl_pkey_e_d_s+0x20c/0x360 [ 69.656077][ T6759] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 69.656093][ T6759] ? find_held_lock+0x2b/0x80 [ 69.656110][ T6759] ? __might_fault+0xc5/0x140 [ 69.656125][ T6759] ? __might_fault+0xc5/0x140 [ 69.656141][ T6759] __ia32_compat_sys_keyctl+0x2f2/0x550 [ 69.656162][ T6759] __do_fast_syscall_32+0x14b/0x8c0 [ 69.656183][ T6759] do_fast_syscall_32+0x32/0x70 [ 69.656201][ T6759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.656217][ T6759] RIP: 0023:0xf73defbc [ 69.656227][ T6759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.656240][ T6759] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 69.656252][ T6759] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000080000000 [ 69.656259][ T6759] RDX: 0000000000000000 RSI: 0000000080008540 RDI: 0000000000000000 [ 69.656266][ T6759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.656273][ T6759] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.656280][ T6759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.656295][ T6759] [ 70.774946][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 70.905558][ T6774] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.979517][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.979559][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.991198][ T25] cfg80211: failed to load regulatory.db [ 71.185163][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.341462][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 71.342079][ T35] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 71.342862][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.342875][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.342886][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.342895][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.342916][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.342927][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 71.342947][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.347865][ T35] usb 5-1: config 0 descriptor?? [ 71.718520][ T6798] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 72.144936][ T6782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.196213][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.231'. [ 72.226545][ T6808] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 72.246136][ T6812] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 72.419751][ T6821] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.023536][ T6804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.137758][ T6840] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 73.168094][ T6845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.243'. [ 73.221076][ T6842] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 73.370148][ T6859] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.430536][ T6857] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 73.538149][ T6862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.865820][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.252'. [ 73.898274][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 73.898290][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 73.964581][ T10] usb 5-1: USB disconnect, device number 3 [ 74.455057][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.542188][ T6898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.605901][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 74.606574][ T10] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 74.607552][ T10] usb 7-1: config 0 has no interfaces? [ 74.607569][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.608797][ T10] usb 7-1: config 0 descriptor?? [ 74.830035][ T6892] FAULT_INJECTION: forcing a failure. [ 74.830035][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 74.830055][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 74.830069][ T6892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.830076][ T6892] Call Trace: [ 74.830080][ T6892] [ 74.830085][ T6892] dump_stack_lvl+0x100/0x190 [ 74.830110][ T6892] should_fail_ex.cold+0x5/0xa [ 74.830128][ T6892] should_failslab+0xc2/0x120 [ 74.830145][ T6892] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.830164][ T6892] ? sctp_add_bind_addr+0xae/0x3e0 [ 74.830180][ T6892] sctp_add_bind_addr+0xae/0x3e0 [ 74.830195][ T6892] sctp_copy_local_addr_list+0x349/0x550 [ 74.830213][ T6892] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 74.830231][ T6892] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 74.830249][ T6892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.830266][ T6892] sctp_bind_addr_copy+0xe0/0x530 [ 74.830283][ T6892] sctp_connect_new_asoc+0x1c9/0x770 [ 74.830302][ T6892] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 74.830323][ T6892] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 74.830341][ T6892] sctp_sendmsg+0x1743/0x22e0 [ 74.830364][ T6892] ? __pfx_sctp_sendmsg+0x10/0x10 [ 74.830382][ T6892] ? __lock_acquire+0x5c0/0x1f40 [ 74.830398][ T6892] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 74.830415][ T6892] ? aa_sock_msg_perm+0x11e/0x200 [ 74.830431][ T6892] ? __pfx_sctp_sendmsg+0x10/0x10 [ 74.830450][ T6892] inet_sendmsg+0x11c/0x140 [ 74.830470][ T6892] ____sys_sendmsg+0xa23/0xc30 [ 74.830483][ T6892] ? __pfx_inet_sendmsg+0x10/0x10 [ 74.830505][ T6892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.830522][ T6892] ? plist_check_list+0x1b8/0x280 [ 74.830538][ T6892] ? plist_del+0x308/0x510 [ 74.830553][ T6892] ___sys_sendmsg+0x190/0x1e0 [ 74.830570][ T6892] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.830584][ T6892] ? futex_wake+0x220/0x5e0 [ 74.830603][ T6892] ? find_held_lock+0x2b/0x80 [ 74.830630][ T6892] __sys_sendmsg+0x160/0x210 [ 74.830649][ T6892] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.830675][ T6892] __do_fast_syscall_32+0x14b/0x8c0 [ 74.830695][ T6892] do_fast_syscall_32+0x32/0x70 [ 74.830714][ T6892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.830730][ T6892] RIP: 0023:0xf7f32fbc [ 74.830740][ T6892] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.830752][ T6892] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 74.830763][ T6892] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 74.830771][ T6892] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.830778][ T6892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.830784][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.830791][ T6892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.830806][ T6892] [ 74.843921][ T10] usb 7-1: USB disconnect, device number 3 [ 74.930725][ T6907] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 75.282879][ T6912] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 75.295938][ T6914] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 75.415641][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'. [ 75.527000][ T6933] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 75.635003][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.663140][ T6938] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 75.784890][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 75.785672][ T5891] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 75.787947][ T5891] usb 6-1: config 0 has no interfaces? [ 75.787990][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.792401][ T5891] usb 6-1: config 0 descriptor?? [ 76.000997][ T6929] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 76.004330][ T10] usb 6-1: USB disconnect, device number 3 [ 76.095268][ T6917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.225035][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.374922][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 76.375361][ T5891] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 76.376213][ T5891] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.376227][ T5891] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.376237][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.376247][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.376269][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.376281][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 76.376300][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.383322][ T5891] usb 5-1: config 0 descriptor?? [ 76.714944][ T6960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.791572][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'. [ 76.850415][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 77.095942][ T6973] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.421496][ T6981] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.465970][ T7001] create_pit_timer: 1 callbacks suppressed [ 78.465983][ T7001] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 78.497542][ T6985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.651700][ T7008] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.815003][ T42] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 78.964969][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 78.969881][ T42] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 78.992566][ T42] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 78.992584][ T42] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 78.992621][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.992836][ T42] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 78.992981][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.993021][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 78.993729][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.432662][ T42] usb 7-1: config 0 descriptor?? [ 79.486365][ T859] usb 5-1: USB disconnect, device number 4 [ 79.856942][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 80.032639][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.294'. [ 81.275501][ T7036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.342331][ T7056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.303'. [ 81.889364][ T66] usb 7-1: USB disconnect, device number 4 [ 84.466285][ T7077] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.644883][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 84.663526][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 84.754088][ T7083] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 85.520187][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 85.715630][ T7094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.774359][ T7116] FAULT_INJECTION: forcing a failure. [ 85.774359][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 85.774388][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(full) [ 85.774413][ T7116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.774426][ T7116] Call Trace: [ 85.774433][ T7116] [ 85.774441][ T7116] dump_stack_lvl+0x100/0x190 [ 85.774478][ T7116] should_fail_ex.cold+0x5/0xa [ 85.774508][ T7116] should_failslab+0xc2/0x120 [ 85.774551][ T7116] __kmalloc_cache_noprof+0x91/0x6d0 [ 85.774584][ T7116] ? ip6addrlbl_add+0x8c3/0xdb0 [ 85.774616][ T7116] ? ip6addrlbl_add+0xe0/0xdb0 [ 85.774652][ T7116] ip6addrlbl_add+0xe0/0xdb0 [ 85.774691][ T7116] ip6addrlbl_net_init+0x10a/0x330 [ 85.774725][ T7116] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 85.774757][ T7116] ops_init+0x1e2/0x5f0 [ 85.774781][ T7116] setup_net+0x118/0x3a0 [ 85.774802][ T7116] ? __pfx_setup_net+0x10/0x10 [ 85.774825][ T7116] ? bpf_lsm_namespace_init+0x9/0x10 [ 85.774854][ T7116] copy_net_ns+0x340/0x7a0 [ 85.774879][ T7116] create_new_namespaces+0x3ea/0xac0 [ 85.774907][ T7116] unshare_nsproxy_namespaces+0xf6/0x210 [ 85.774932][ T7116] ksys_unshare+0x44f/0x980 [ 85.774956][ T7116] ? __pfx_ksys_unshare+0x10/0x10 [ 85.774988][ T7116] ? __might_fault+0xc5/0x140 [ 85.775025][ T7116] __ia32_sys_unshare+0x30/0x40 [ 85.775049][ T7116] __do_fast_syscall_32+0x14b/0x8c0 [ 85.775086][ T7116] do_fast_syscall_32+0x32/0x70 [ 85.775119][ T7116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.775145][ T7116] RIP: 0023:0xf7f32fbc [ 85.775163][ T7116] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.775183][ T7116] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 85.775204][ T7116] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 85.775219][ T7116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.775231][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.775243][ T7116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.775254][ T7116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.775281][ T7116] [ 85.781824][ T7118] FAULT_INJECTION: forcing a failure. [ 85.781824][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 85.781843][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(full) [ 85.781857][ T7118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.781864][ T7118] Call Trace: [ 85.781869][ T7118] [ 85.781874][ T7118] dump_stack_lvl+0x100/0x190 [ 85.781895][ T7118] should_fail_ex.cold+0x5/0xa [ 85.781914][ T7118] should_failslab+0xc2/0x120 [ 85.781930][ T7118] __kmalloc_noprof+0xfc/0x840 [ 85.781943][ T7118] ? __register_sysctl_table+0xbc8/0x1650 [ 85.781956][ T7118] ? __register_sysctl_table+0xbe4/0x1650 [ 85.781971][ T7118] __register_sysctl_table+0xbe4/0x1650 [ 85.781987][ T7118] ? __pfx___register_sysctl_table+0x10/0x10 [ 85.781999][ T7118] ? is_module_address+0x5f/0xf0 [ 85.782028][ T7118] ? is_module_address+0x5f/0xf0 [ 85.782048][ T7118] register_net_sysctl_sz+0x325/0x420 [ 85.782073][ T7118] neigh_sysctl_register+0x326/0x660 [ 85.782090][ T7118] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 85.782111][ T7118] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 85.782127][ T7118] ? lockdep_init_map_type+0x5c/0x250 [ 85.782145][ T7118] ? neigh_table_register+0xd30/0x11b0 [ 85.782164][ T7118] ndisc_net_init+0x122/0x3e0 [ 85.782182][ T7118] ? __pfx_ndisc_net_init+0x10/0x10 [ 85.782200][ T7118] ? ac6_proc_init+0x5f/0x80 [ 85.782215][ T7118] ? inet6_net_init+0x76d/0xa20 [ 85.782229][ T7118] ? __pfx_ndisc_net_init+0x10/0x10 [ 85.782245][ T7118] ops_init+0x1e2/0x5f0 [ 85.782259][ T7118] setup_net+0x118/0x3a0 [ 85.782271][ T7118] ? __pfx_setup_net+0x10/0x10 [ 85.782283][ T7118] ? bpf_lsm_namespace_init+0x9/0x10 [ 85.782301][ T7118] copy_net_ns+0x340/0x7a0 [ 85.782315][ T7118] create_new_namespaces+0x3ea/0xac0 [ 85.782332][ T7118] unshare_nsproxy_namespaces+0xf6/0x210 [ 85.782347][ T7118] ksys_unshare+0x44f/0x980 [ 85.782361][ T7118] ? __pfx_ksys_unshare+0x10/0x10 [ 85.782380][ T7118] ? __might_fault+0xc5/0x140 [ 85.782401][ T7118] __ia32_sys_unshare+0x30/0x40 [ 85.782416][ T7118] __do_fast_syscall_32+0x14b/0x8c0 [ 85.782437][ T7118] do_fast_syscall_32+0x32/0x70 [ 85.782457][ T7118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.782472][ T7118] RIP: 0023:0xf7f94fbc [ 85.782483][ T7118] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.782494][ T7118] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 85.782506][ T7118] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 85.782513][ T7118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.782520][ T7118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.782526][ T7118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.782533][ T7118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.782548][ T7118] [ 85.782553][ T7118] sysctl could not get directory: /net/ipv6 -12 [ 85.870277][ T7120] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.146002][ T7134] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 88.308275][ T7156] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.915213][ T7174] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.269308][ T7160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.358861][ T7180] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.817089][ T7190] FAULT_INJECTION: forcing a failure. [ 89.817089][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 89.817109][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 89.817123][ T7190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.817130][ T7190] Call Trace: [ 89.817135][ T7190] [ 89.817140][ T7190] dump_stack_lvl+0x100/0x190 [ 89.817162][ T7190] should_fail_ex.cold+0x5/0xa [ 89.817180][ T7190] should_failslab+0xc2/0x120 [ 89.817197][ T7190] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 89.817212][ T7190] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.817230][ T7190] ? ip6_route_net_init+0x30f/0x8d0 [ 89.817246][ T7190] kmemdup_noprof+0x29/0x60 [ 89.817268][ T7190] ip6_route_net_init+0x30f/0x8d0 [ 89.817283][ T7190] ? __pfx_ip6_route_net_init+0x10/0x10 [ 89.817297][ T7190] ops_init+0x1e2/0x5f0 [ 89.817311][ T7190] setup_net+0x118/0x3a0 [ 89.817324][ T7190] ? __pfx_setup_net+0x10/0x10 [ 89.817337][ T7190] ? bpf_lsm_namespace_init+0x9/0x10 [ 89.817356][ T7190] copy_net_ns+0x340/0x7a0 [ 89.817371][ T7190] create_new_namespaces+0x3ea/0xac0 [ 89.817389][ T7190] unshare_nsproxy_namespaces+0xf6/0x210 [ 89.817404][ T7190] ksys_unshare+0x44f/0x980 [ 89.817418][ T7190] ? __pfx_ksys_unshare+0x10/0x10 [ 89.817434][ T7190] ? __might_fault+0xc5/0x140 [ 89.817470][ T7190] __ia32_sys_unshare+0x30/0x40 [ 89.817485][ T7190] __do_fast_syscall_32+0x14b/0x8c0 [ 89.817507][ T7190] do_fast_syscall_32+0x32/0x70 [ 89.817526][ T7190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.817543][ T7190] RIP: 0023:0xf7f32fbc [ 89.817554][ T7190] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.817566][ T7190] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 89.817578][ T7190] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 89.817586][ T7190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.817593][ T7190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.817599][ T7190] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.817606][ T7190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.817621][ T7190] [ 90.279271][ T7194] FAULT_INJECTION: forcing a failure. [ 90.279271][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 90.279296][ T7194] CPU: 3 UID: 0 PID: 7194 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT(full) [ 90.279315][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.279324][ T7194] Call Trace: [ 90.279330][ T7194] [ 90.279337][ T7194] dump_stack_lvl+0x100/0x190 [ 90.279366][ T7194] should_fail_ex.cold+0x5/0xa [ 90.279388][ T7194] should_failslab+0xc2/0x120 [ 90.279407][ T7194] __kmalloc_cache_noprof+0x91/0x6d0 [ 90.279429][ T7194] ? __virt_addr_valid+0x161/0x430 [ 90.279446][ T7194] ? mpi_alloc+0x46/0x230 [ 90.279466][ T7194] mpi_alloc+0x46/0x230 [ 90.279480][ T7194] ? lockdep_init_map_type+0x5c/0x250 [ 90.279507][ T7194] rsa_enc+0x88/0x3b0 [ 90.279530][ T7194] ? lockdep_init_map_type+0x5c/0x250 [ 90.279549][ T7194] ? __pfx_rsa_enc+0x10/0x10 [ 90.279572][ T7194] ? crypto_akcipher_sync_prep+0x3d8/0x510 [ 90.279594][ T7194] crypto_akcipher_sync_encrypt+0x14a/0x1d0 [ 90.279614][ T7194] ? __pfx_crypto_akcipher_sync_encrypt+0x10/0x10 [ 90.279633][ T7194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.279667][ T7194] ? crypto_alloc_tfm_node+0x126/0x260 [ 90.279687][ T7194] software_key_eds_op+0x952/0xbf0 [ 90.279709][ T7194] ? __pfx_software_key_eds_op+0x10/0x10 [ 90.279736][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 90.279754][ T7194] ? __kmalloc_noprof+0x350/0x840 [ 90.279769][ T7194] ? __pfx_software_key_eds_op+0x10/0x10 [ 90.279789][ T7194] asymmetric_key_eds_op+0x110/0x170 [ 90.279806][ T7194] keyctl_pkey_e_d_s+0x20c/0x360 [ 90.279824][ T7194] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 90.279844][ T7194] ? find_held_lock+0x2b/0x80 [ 90.279866][ T7194] ? __might_fault+0xc5/0x140 [ 90.279884][ T7194] ? __might_fault+0xc5/0x140 [ 90.279905][ T7194] __ia32_compat_sys_keyctl+0x2f2/0x550 [ 90.279932][ T7194] __do_fast_syscall_32+0x14b/0x8c0 [ 90.279959][ T7194] do_fast_syscall_32+0x32/0x70 [ 90.279983][ T7194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.280004][ T7194] RIP: 0023:0xf73defbc [ 90.280017][ T7194] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 90.280032][ T7194] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 90.280048][ T7194] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000080000000 [ 90.280058][ T7194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.280068][ T7194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.280078][ T7194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.280086][ T7194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.280107][ T7194] [ 90.560307][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.340'. [ 90.635000][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.784863][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 90.788278][ T35] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 90.793111][ T35] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.793292][ T35] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.793304][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.793314][ T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.793753][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.834949][ T35] usb 6-1: config 0 descriptor?? [ 91.175871][ T7196] FAULT_INJECTION: forcing a failure. [ 91.175871][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 91.175955][ T7196] CPU: 3 UID: 0 PID: 7196 Comm: syz.1.339 Not tainted syzkaller #0 PREEMPT(full) [ 91.175983][ T7196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.175991][ T7196] Call Trace: [ 91.175996][ T7196] [ 91.176002][ T7196] dump_stack_lvl+0x100/0x190 [ 91.176024][ T7196] should_fail_ex.cold+0x5/0xa [ 91.176044][ T7196] should_failslab+0xc2/0x120 [ 91.176071][ T7196] __kmalloc_cache_noprof+0x91/0x6d0 [ 91.176090][ T7196] ? sctp_stream_init_ext+0x4e/0x1b0 [ 91.176109][ T7196] sctp_stream_init_ext+0x4e/0x1b0 [ 91.176124][ T7196] sctp_sendmsg_check_stream+0x15b/0x190 [ 91.176142][ T7196] sctp_sendmsg_to_asoc+0x110/0x1b60 [ 91.176160][ T7196] ? sctp_assoc_add_peer+0x256/0x1550 [ 91.176181][ T7196] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 91.176196][ T7196] ? sctp_connect_new_asoc+0x41e/0x770 [ 91.176215][ T7196] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 91.176236][ T7196] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 91.176254][ T7196] sctp_sendmsg+0x1144/0x22e0 [ 91.176276][ T7196] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.176295][ T7196] ? __lock_acquire+0x5c0/0x1f40 [ 91.176310][ T7196] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 91.176328][ T7196] ? aa_sock_msg_perm+0x11e/0x200 [ 91.176343][ T7196] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.176362][ T7196] inet_sendmsg+0x11c/0x140 [ 91.176387][ T7196] ____sys_sendmsg+0xa23/0xc30 [ 91.176401][ T7196] ? __pfx_inet_sendmsg+0x10/0x10 [ 91.176422][ T7196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.176443][ T7196] ___sys_sendmsg+0x190/0x1e0 [ 91.176460][ T7196] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.176476][ T7196] ? futex_wait+0x11e/0x370 [ 91.176496][ T7196] ? find_held_lock+0x2b/0x80 [ 91.176525][ T7196] __sys_sendmsg+0x160/0x210 [ 91.176544][ T7196] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.176572][ T7196] __do_fast_syscall_32+0x14b/0x8c0 [ 91.176591][ T7196] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.176609][ T7196] do_fast_syscall_32+0x32/0x70 [ 91.176628][ T7196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.176644][ T7196] RIP: 0023:0xf740efbc [ 91.176655][ T7196] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 91.176666][ T7196] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 91.176678][ T7196] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 91.176686][ T7196] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.176693][ T7196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.176699][ T7196] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.176706][ T7196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.176721][ T7196] [ 91.224519][ T35] usb 6-1: USB disconnect, device number 4 [ 91.244994][ T7198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.985394][ T7236] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 92.613900][ T7249] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.906699][ T7280] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.090629][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 94.424048][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.374'. [ 95.695492][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.892552][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 95.894904][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 95.903155][ T42] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 95.915387][ T42] usb 6-1: config 0 has no interfaces? [ 95.916957][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.000124][ T42] usb 6-1: config 0 descriptor?? [ 96.418331][ T42] usb 6-1: USB disconnect, device number 5 [ 97.024189][ T7339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.222825][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 98.322657][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.406'. [ 98.779909][ T7372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.905570][ T7426] FAULT_INJECTION: forcing a failure. [ 99.905570][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.905590][ T7426] CPU: 3 UID: 0 PID: 7426 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 99.905604][ T7426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.905622][ T7426] Call Trace: [ 99.905628][ T7426] [ 99.905633][ T7426] dump_stack_lvl+0x100/0x190 [ 99.905655][ T7426] should_fail_ex.cold+0x5/0xa [ 99.905673][ T7426] _copy_from_user+0x2e/0xd0 [ 99.905694][ T7426] get_compat_msghdr+0xb3/0x480 [ 99.905710][ T7426] ? __pfx_get_compat_msghdr+0x10/0x10 [ 99.905731][ T7426] ___sys_sendmsg+0x1b6/0x1e0 [ 99.905747][ T7426] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.905768][ T7426] ? find_held_lock+0x2b/0x80 [ 99.905794][ T7426] __sys_sendmsg+0x160/0x210 [ 99.905812][ T7426] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.905838][ T7426] __do_fast_syscall_32+0x14b/0x8c0 [ 99.905856][ T7426] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.905873][ T7426] do_fast_syscall_32+0x32/0x70 [ 99.905891][ T7426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.905906][ T7426] RIP: 0023:0xf7f94fbc [ 99.905916][ T7426] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 99.905927][ T7426] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 99.905938][ T7426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 99.905945][ T7426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.905952][ T7426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.905958][ T7426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.905965][ T7426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.905979][ T7426] [ 99.947589][ T7433] netlink: 80 bytes leftover after parsing attributes in process `syz.2.422'. [ 99.947718][ T7433] openvswitch: netlink: Missing key (keys=40, expected=80) [ 100.009347][ T7442] FAULT_INJECTION: forcing a failure. [ 100.009347][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 100.009367][ T7442] CPU: 0 UID: 0 PID: 7442 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 100.009380][ T7442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.009387][ T7442] Call Trace: [ 100.009391][ T7442] [ 100.009396][ T7442] dump_stack_lvl+0x100/0x190 [ 100.009419][ T7442] should_fail_ex.cold+0x5/0xa [ 100.009442][ T7442] should_failslab+0xc2/0x120 [ 100.009471][ T7442] __kmalloc_noprof+0xfc/0x840 [ 100.009483][ T7442] ? rcu_is_watching+0x13/0xc0 [ 100.009501][ T7442] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.009596][ T7442] tomoyo_realpath_from_path+0xb6/0x690 [ 100.009612][ T7442] tomoyo_path_number_perm+0x23c/0x580 [ 100.009630][ T7442] ? tomoyo_path_number_perm+0x22e/0x580 [ 100.009648][ T7442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.009666][ T7442] ? get_pid_task+0x106/0x250 [ 100.009685][ T7442] ? __lock_acquire+0x5c0/0x1f40 [ 100.009705][ T7442] ? __fget_files+0x34/0x3d0 [ 100.009719][ T7442] ? find_held_lock+0x2b/0x80 [ 100.009736][ T7442] ? __fget_files+0x215/0x3d0 [ 100.009748][ T7442] ? hook_file_ioctl_common+0x140/0x440 [ 100.009767][ T7442] ? __fget_files+0x215/0x3d0 [ 100.009783][ T7442] ? __fget_files+0x21f/0x3d0 [ 100.009799][ T7442] security_file_ioctl_compat+0xd3/0x230 [ 100.009818][ T7442] __ia32_compat_sys_ioctl+0xc2/0x360 [ 100.009843][ T7442] __do_fast_syscall_32+0x14b/0x8c0 [ 100.009861][ T7442] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.009880][ T7442] do_fast_syscall_32+0x32/0x70 [ 100.009898][ T7442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.009913][ T7442] RIP: 0023:0xf73defbc [ 100.009923][ T7442] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.009934][ T7442] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 100.009945][ T7442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105512 [ 100.009953][ T7442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.009959][ T7442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.009966][ T7442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.009972][ T7442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.009987][ T7442] [ 100.010014][ T7442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.058851][ T7440] gadgetfs: bound to dummy_udc driver [ 100.151970][ T7453] FAULT_INJECTION: forcing a failure. [ 100.151970][ T7453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.151996][ T7453] CPU: 2 UID: 0 PID: 7453 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) [ 100.152016][ T7453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.152026][ T7453] Call Trace: [ 100.152032][ T7453] [ 100.152040][ T7453] dump_stack_lvl+0x100/0x190 [ 100.152071][ T7453] should_fail_ex.cold+0x5/0xa [ 100.152098][ T7453] _copy_from_user+0x2e/0xd0 [ 100.152127][ T7453] do_ip_setsockopt+0xb22/0x3200 [ 100.152159][ T7453] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 100.152193][ T7453] ? lock_acquire+0x1d1/0x380 [ 100.152225][ T7453] ? __fget_files+0x34/0x3d0 [ 100.152249][ T7453] ip_setsockopt+0x5a/0xf0 [ 100.152278][ T7453] raw_setsockopt+0x60/0x1b0 [ 100.152306][ T7453] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 100.152328][ T7453] do_sock_setsockopt+0xf3/0x1d0 [ 100.152350][ T7453] __sys_setsockopt+0x119/0x190 [ 100.152380][ T7453] __ia32_sys_setsockopt+0xbc/0x160 [ 100.152404][ T7453] ? __might_fault+0x111/0x140 [ 100.152429][ T7453] __do_fast_syscall_32+0x14b/0x8c0 [ 100.152455][ T7453] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.152481][ T7453] do_fast_syscall_32+0x32/0x70 [ 100.152507][ T7453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.152529][ T7453] RIP: 0023:0xf7f32fbc [ 100.152544][ T7453] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.152560][ T7453] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 100.152578][ T7453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 100.152589][ T7453] RDX: 000000000000000a RSI: 00000000800004c0 RDI: 0000000000000004 [ 100.152599][ T7453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.152609][ T7453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.152619][ T7453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.152641][ T7453] [ 100.345009][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 100.350743][ T7465] netlink: 140 bytes leftover after parsing attributes in process `syz.2.437'. [ 100.351481][ T7465] bond0: Error: CAN devices cannot be enslaved [ 100.460784][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.592710][ T7460] capability: warning: `syz.0.435' uses 32-bit capabilities (legacy support in use) [ 100.639974][ T42] usb 8-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 100.677103][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.677152][ T42] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.683365][ T7470] FAULT_INJECTION: forcing a failure. [ 100.683365][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 100.683386][ T7470] CPU: 3 UID: 0 PID: 7470 Comm: syz.0.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.683402][ T7470] Tainted: [L]=SOFTLOCKUP [ 100.683406][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.683413][ T7470] Call Trace: [ 100.683418][ T7470] [ 100.683422][ T7470] dump_stack_lvl+0x100/0x190 [ 100.683444][ T7470] should_fail_ex.cold+0x5/0xa [ 100.683462][ T7470] should_failslab+0xc2/0x120 [ 100.683477][ T7470] __kmalloc_noprof+0xfc/0x840 [ 100.683489][ T7470] ? rcu_is_watching+0x13/0xc0 [ 100.683506][ T7470] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.683522][ T7470] tomoyo_realpath_from_path+0xb6/0x690 [ 100.683538][ T7470] tomoyo_path_number_perm+0x23c/0x580 [ 100.683555][ T7470] ? tomoyo_path_number_perm+0x22e/0x580 [ 100.683573][ T7470] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.683591][ T7470] ? get_pid_task+0x106/0x250 [ 100.683610][ T7470] ? __lock_acquire+0x5c0/0x1f40 [ 100.683631][ T7470] ? __fget_files+0x34/0x3d0 [ 100.683645][ T7470] ? find_held_lock+0x2b/0x80 [ 100.683661][ T7470] ? __fget_files+0x215/0x3d0 [ 100.683674][ T7470] ? hook_file_ioctl_common+0x140/0x440 [ 100.683691][ T7470] ? __fget_files+0x215/0x3d0 [ 100.683707][ T7470] ? __fget_files+0x21f/0x3d0 [ 100.683723][ T7470] security_file_ioctl_compat+0xd3/0x230 [ 100.683742][ T7470] __ia32_compat_sys_ioctl+0xc2/0x360 [ 100.683756][ T7470] __do_fast_syscall_32+0x14b/0x8c0 [ 100.683774][ T7470] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.683792][ T7470] do_fast_syscall_32+0x32/0x70 [ 100.683810][ T7470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.683825][ T7470] RIP: 0023:0xf7f94fbc [ 100.683835][ T7470] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.683846][ T7470] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 100.683858][ T7470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045701 [ 100.683865][ T7470] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.683871][ T7470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.683878][ T7470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.683884][ T7470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.683899][ T7470] [ 100.683904][ T7470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.861078][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 100.861095][ T42] usb 8-1: Product: syz [ 100.861103][ T42] usb 8-1: Manufacturer: syz [ 100.986785][ T7476] Invalid ELF header magic: != ELF [ 101.036292][ T7476] ======================================================= [ 101.036292][ T7476] WARNING: The mand mount option has been deprecated and [ 101.036292][ T7476] and is ignored by this kernel. Remove the mand [ 101.036292][ T7476] option from the mount to silence this warning. [ 101.036292][ T7476] ======================================================= [ 101.039197][ T7476] overlay: Unknown parameter '/' [ 101.283576][ T5797] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 101.362247][ T11] usb 8-1: USB disconnect, device number 2 [ 101.409119][ T7493] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 101.413835][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.750359][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 101.750373][ T43] audit: type=1326 audit(1794045281.801:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.750497][ T43] audit: type=1326 audit(1794045281.801:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.753143][ T43] audit: type=1326 audit(1794045281.801:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.753816][ T43] audit: type=1326 audit(1794045281.801:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.753979][ T43] audit: type=1326 audit(1794045281.801:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.758345][ T43] audit: type=1326 audit(1794045281.811:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7187f6b code=0x7ffc0000 [ 101.758397][ T43] audit: type=1326 audit(1794045281.811:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.758435][ T43] audit: type=1326 audit(1794045281.811:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.758579][ T43] audit: type=1326 audit(1794045281.811:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.759757][ T43] audit: type=1326 audit(1794045281.811:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.449" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94fbc code=0x7ffc0000 [ 101.947371][ T7501] FAULT_INJECTION: forcing a failure. [ 101.947371][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.947401][ T7501] CPU: 3 UID: 0 PID: 7501 Comm: syz.3.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.947426][ T7501] Tainted: [L]=SOFTLOCKUP [ 101.947433][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.947443][ T7501] Call Trace: [ 101.947450][ T7501] [ 101.947457][ T7501] dump_stack_lvl+0x100/0x190 [ 101.947490][ T7501] should_fail_ex.cold+0x5/0xa [ 101.947517][ T7501] _copy_from_user+0x2e/0xd0 [ 101.947547][ T7501] get_compat_msghdr+0xb3/0x480 [ 101.947572][ T7501] ? __pfx_get_compat_msghdr+0x10/0x10 [ 101.947605][ T7501] ___sys_sendmsg+0x1b6/0x1e0 [ 101.947629][ T7501] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.947664][ T7501] ? find_held_lock+0x2b/0x80 [ 101.947707][ T7501] __sys_sendmsg+0x160/0x210 [ 101.947736][ T7501] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.947777][ T7501] __do_fast_syscall_32+0x14b/0x8c0 [ 101.947805][ T7501] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.947833][ T7501] do_fast_syscall_32+0x32/0x70 [ 101.947863][ T7501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.947887][ T7501] RIP: 0023:0xf73defbc [ 101.947903][ T7501] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 101.947919][ T7501] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 101.947937][ T7501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006e80 [ 101.947949][ T7501] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.947959][ T7501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.947969][ T7501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.947979][ T7501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.948003][ T7501] [ 101.995103][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.020748][ T7505] warning: `syz.3.452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.166016][ T30] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 102.171038][ T7510] process 'syz.3.454' launched './file2' with NULL argv: empty string added [ 102.203376][ T7510] lo speed is unknown, defaulting to 1000 [ 102.204461][ T7510] lo speed is unknown, defaulting to 1000 [ 102.210617][ T7510] lo speed is unknown, defaulting to 1000 [ 102.214107][ T7510] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 102.214154][ T7510] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 102.214216][ T7510] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 102.294285][ T7510] lo speed is unknown, defaulting to 1000 [ 102.307571][ T7510] lo speed is unknown, defaulting to 1000 [ 102.320331][ T7510] lo speed is unknown, defaulting to 1000 [ 102.330886][ T7510] lo speed is unknown, defaulting to 1000 [ 102.433459][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 102.433478][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 102.496737][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.496745][ T5797] Bluetooth: hci4: command 0x1003 tx timeout [ 102.614877][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.615080][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.615095][ T30] usb 5-1: Product: syz [ 102.615103][ T30] usb 5-1: Manufacturer: syz [ 102.615110][ T30] usb 5-1: SerialNumber: syz [ 102.756985][ T7517] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.764971][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 102.765526][ T50] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 102.766451][ T50] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.766465][ T50] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.766475][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.766484][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.766513][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.766533][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.768210][ T50] usb 6-1: config 0 descriptor?? [ 102.814910][ T5862] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.853494][ T7517] lo speed is unknown, defaulting to 1000 [ 102.983817][ T30] usb 5-1: USB2VGA dongle found at address 5 [ 102.987273][ T7513] FAULT_INJECTION: forcing a failure. [ 102.987273][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 102.987294][ T7513] CPU: 2 UID: 0 PID: 7513 Comm: syz.1.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.987311][ T7513] Tainted: [L]=SOFTLOCKUP [ 102.987316][ T7513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.987335][ T7513] Call Trace: [ 102.987340][ T7513] [ 102.987345][ T7513] dump_stack_lvl+0x100/0x190 [ 102.987369][ T7513] should_fail_ex.cold+0x5/0xa [ 102.987388][ T7513] should_failslab+0xc2/0x120 [ 102.987404][ T7513] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.987418][ T7513] ? dst_alloc+0x99/0x1a0 [ 102.987439][ T7513] dst_alloc+0x99/0x1a0 [ 102.987458][ T7513] rt_dst_alloc+0x35/0x3a0 [ 102.987476][ T7513] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 102.987495][ T7513] ip_route_output_key_hash+0x118/0x2b0 [ 102.987508][ T7513] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 102.987520][ T7513] ? irqentry_exit+0x202/0xab0 [ 102.987545][ T7513] ip_route_output_flow+0x27/0x150 [ 102.987559][ T7513] sctp_v4_get_dst+0x3c4/0x1220 [ 102.987578][ T7513] ? __asan_memset+0x23/0x50 [ 102.987597][ T7513] ? _get_random_bytes+0xa8/0x220 [ 102.987626][ T7513] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 102.987650][ T7513] ? lockdep_init_map_type+0x5c/0x250 [ 102.987666][ T7513] ? timer_init_key+0x150/0x310 [ 102.987684][ T7513] sctp_transport_route+0x131/0x360 [ 102.987707][ T7513] sctp_assoc_add_peer+0x7b3/0x1550 [ 102.987730][ T7513] sctp_connect_new_asoc+0x1f8/0x770 [ 102.987750][ T7513] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 102.987772][ T7513] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 102.987790][ T7513] sctp_sendmsg+0x1743/0x22e0 [ 102.987813][ T7513] ? __pfx_sctp_sendmsg+0x10/0x10 [ 102.987832][ T7513] ? __lock_acquire+0x5c0/0x1f40 [ 102.987846][ T7513] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 102.987864][ T7513] ? aa_sock_msg_perm+0x11e/0x200 [ 102.987880][ T7513] ? __pfx_sctp_sendmsg+0x10/0x10 [ 102.987899][ T7513] inet_sendmsg+0x11c/0x140 [ 102.987926][ T7513] ____sys_sendmsg+0xa23/0xc30 [ 102.987940][ T7513] ? __pfx_inet_sendmsg+0x10/0x10 [ 102.987962][ T7513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.987985][ T7513] ___sys_sendmsg+0x190/0x1e0 [ 102.988002][ T7513] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.988032][ T7513] ? futex_wait+0x11e/0x370 [ 102.988051][ T7513] ? find_held_lock+0x2b/0x80 [ 102.988078][ T7513] __sys_sendmsg+0x160/0x210 [ 102.988098][ T7513] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.988126][ T7513] __do_fast_syscall_32+0x14b/0x8c0 [ 102.988146][ T7513] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.988164][ T7513] do_fast_syscall_32+0x32/0x70 [ 102.988183][ T7513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.988199][ T7513] RIP: 0023:0xf740efbc [ 102.988210][ T7513] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 102.988221][ T7513] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 102.988233][ T7513] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 102.988241][ T7513] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.988248][ T7513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.988255][ T7513] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.988263][ T7513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.988279][ T7513] [ 102.995949][ T30] usb 5-1: Allocated 8 output buffers [ 103.017730][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 103.048205][ T50] usb 6-1: USB disconnect, device number 6 [ 103.210220][ T7499] mmap: syz.0.449 (7499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.290308][ T7528] FAULT_INJECTION: forcing a failure. [ 103.290308][ T7528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.290331][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.2.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.290348][ T7528] Tainted: [L]=SOFTLOCKUP [ 103.290352][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.290359][ T7528] Call Trace: [ 103.290363][ T7528] [ 103.290368][ T7528] dump_stack_lvl+0x100/0x190 [ 103.290391][ T7528] should_fail_ex.cold+0x5/0xa [ 103.290409][ T7528] should_fail_alloc_page+0xeb/0x140 [ 103.290426][ T7528] prepare_alloc_pages+0x1f0/0x5b0 [ 103.290444][ T7528] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 103.290466][ T7528] ? rcu_is_watching+0x13/0xc0 [ 103.290485][ T7528] ? __lock_acquire+0x5c0/0x1f40 [ 103.290499][ T7528] ? __lock_acquire+0x5c0/0x1f40 [ 103.290515][ T7528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.290536][ T7528] ? ttwu_queue_wakelist+0x2fd/0x450 [ 103.290550][ T7528] ? rcu_is_watching+0x13/0xc0 [ 103.290567][ T7528] ? ttwu_queue_wakelist+0x2fd/0x450 [ 103.290580][ T7528] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 103.290598][ T7528] ? __smp_call_single_queue+0x17e/0x450 [ 103.290614][ T7528] ? __pfx___smp_call_single_queue+0x10/0x10 [ 103.290631][ T7528] ? do_raw_spin_lock+0x128/0x260 [ 103.290649][ T7528] ? try_to_wake_up+0xd8d/0x1ca0 [ 103.290665][ T7528] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.290681][ T7528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.290698][ T7528] ? policy_nodemask+0xed/0x5e0 [ 103.290717][ T7528] alloc_pages_mpol+0x201/0x560 [ 103.290734][ T7528] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.290751][ T7528] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.290770][ T7528] folio_alloc_mpol_noprof+0x36/0x260 [ 103.290789][ T7528] alloc_migration_target_by_mpol+0x2c1/0x650 [ 103.290810][ T7528] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.290830][ T7528] ? __pfx___might_resched+0x10/0x10 [ 103.290853][ T7528] migrate_pages_batch+0x5c2/0x4700 [ 103.290871][ T7528] ? mtree_range_walk+0x6e0/0xb70 [ 103.290890][ T7528] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.290926][ T7528] ? __pfx_migrate_pages_batch+0x10/0x10 [ 103.290958][ T7528] migrate_pages_sync+0x12c/0x880 [ 103.290977][ T7528] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.291006][ T7528] ? vma_migratable+0x380/0x450 [ 103.291031][ T7528] ? __pfx_migrate_pages_sync+0x10/0x10 [ 103.291054][ T7528] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 103.291084][ T7528] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 103.291118][ T7528] migrate_pages+0x1a79/0x2840 [ 103.291149][ T7528] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.291184][ T7528] ? __pfx_migrate_pages+0x10/0x10 [ 103.291220][ T7528] ? do_mbind+0x593/0x1030 [ 103.291255][ T7528] do_mbind+0x5e2/0x1030 [ 103.291288][ T7528] ? __pfx_do_mbind+0x10/0x10 [ 103.291317][ T7528] ? find_held_lock+0x2b/0x80 [ 103.291342][ T7528] ? ksys_write+0x190/0x250 [ 103.291368][ T7528] ? __pfx_get_nodes+0x10/0x10 [ 103.291388][ T7528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.291420][ T7528] kernel_mbind+0x1b7/0x200 [ 103.291449][ T7528] ? __pfx_kernel_mbind+0x10/0x10 [ 103.291481][ T7528] __do_fast_syscall_32+0x14b/0x8c0 [ 103.291507][ T7528] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.291535][ T7528] do_fast_syscall_32+0x32/0x70 [ 103.291561][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.291585][ T7528] RIP: 0023:0xf7f32fbc [ 103.291601][ T7528] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.291618][ T7528] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 103.291635][ T7528] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 103.291647][ T7528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.291657][ T7528] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 103.291668][ T7528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.291678][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.291701][ T7528] [ 103.415690][ T7540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.464'. [ 103.443510][ T7541] FAULT_INJECTION: forcing a failure. [ 103.443510][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.443532][ T7541] CPU: 3 UID: 0 PID: 7541 Comm: syz.2.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.443548][ T7541] Tainted: [L]=SOFTLOCKUP [ 103.443552][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.443559][ T7541] Call Trace: [ 103.443564][ T7541] [ 103.443569][ T7541] dump_stack_lvl+0x100/0x190 [ 103.443591][ T7541] should_fail_ex.cold+0x5/0xa [ 103.443609][ T7541] _copy_to_user+0x32/0xd0 [ 103.443629][ T7541] simple_read_from_buffer+0xcb/0x170 [ 103.443646][ T7541] proc_fail_nth_read+0x1af/0x230 [ 103.443663][ T7541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.443680][ T7541] ? rw_verify_area+0xce/0x6d0 [ 103.443699][ T7541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.443714][ T7541] vfs_read+0x1e4/0xb40 [ 103.443728][ T7541] ? lock_acquire+0x1d1/0x380 [ 103.443741][ T7541] ? __fget_files+0x34/0x3d0 [ 103.443754][ T7541] ? __pfx_vfs_read+0x10/0x10 [ 103.443766][ T7541] ? find_held_lock+0x2b/0x80 [ 103.443783][ T7541] ? __fget_files+0x215/0x3d0 [ 103.443799][ T7541] ? __fget_files+0x21f/0x3d0 [ 103.443817][ T7541] ksys_read+0x12a/0x250 [ 103.443829][ T7541] ? __pfx_ksys_read+0x10/0x10 [ 103.443846][ T7541] do_int80_emulation+0x166/0x650 [ 103.443867][ T7541] asm_int80_emulation+0x1a/0x20 [ 103.443880][ T7541] RIP: 0023:0xf7127f6b [ 103.443890][ T7541] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 103.443907][ T7541] RSP: 002b:00000000f53c54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.443919][ T7541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53c55d0 [ 103.443926][ T7541] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 103.443933][ T7541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.443940][ T7541] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.443947][ T7541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.443961][ T7541] [ 103.546449][ T7556] FAULT_INJECTION: forcing a failure. [ 103.546449][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 103.546470][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.546486][ T7556] Tainted: [L]=SOFTLOCKUP [ 103.546491][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.546497][ T7556] Call Trace: [ 103.546502][ T7556] [ 103.546506][ T7556] dump_stack_lvl+0x100/0x190 [ 103.546528][ T7556] should_fail_ex.cold+0x5/0xa [ 103.546545][ T7556] should_failslab+0xc2/0x120 [ 103.546561][ T7556] __kmalloc_noprof+0xfc/0x840 [ 103.546573][ T7556] ? iovec_from_user+0x8d/0x140 [ 103.546588][ T7556] iovec_from_user+0x8d/0x140 [ 103.546601][ T7556] __import_iovec+0x81/0x640 [ 103.546615][ T7556] import_iovec+0x82/0xb0 [ 103.546628][ T7556] vfs_readv+0x19e/0x8d0 [ 103.546641][ T7556] ? __lock_acquire+0x5c0/0x1f40 [ 103.546656][ T7556] ? __pfx_vfs_readv+0x10/0x10 [ 103.546671][ T7556] ? lock_acquire+0x1d1/0x380 [ 103.546682][ T7556] ? __fget_files+0x34/0x3d0 [ 103.546701][ T7556] ? __fget_files+0x21f/0x3d0 [ 103.546719][ T7556] ? do_readv+0x13e/0x340 [ 103.546729][ T7556] do_readv+0x13e/0x340 [ 103.546740][ T7556] ? __pfx_do_readv+0x10/0x10 [ 103.546756][ T7556] __do_fast_syscall_32+0x14b/0x8c0 [ 103.546774][ T7556] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.546793][ T7556] do_fast_syscall_32+0x32/0x70 [ 103.546811][ T7556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.546826][ T7556] RIP: 0023:0xf73defbc [ 103.546837][ T7556] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.546849][ T7556] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 103.546860][ T7556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002940 [ 103.546868][ T7556] RDX: 00000000000000fb RSI: 0000000000000000 RDI: 0000000000000000 [ 103.546875][ T7556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.546881][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.546888][ T7556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.546902][ T7556] [ 103.609708][ T7564] FAULT_INJECTION: forcing a failure. [ 103.609708][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 103.609729][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.1.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.609746][ T7564] Tainted: [L]=SOFTLOCKUP [ 103.609751][ T7564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.609758][ T7564] Call Trace: [ 103.609762][ T7564] [ 103.609767][ T7564] dump_stack_lvl+0x100/0x190 [ 103.609790][ T7564] should_fail_ex.cold+0x5/0xa [ 103.609814][ T7564] should_failslab+0xc2/0x120 [ 103.609829][ T7564] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 103.609843][ T7564] ? copy_process+0x6aa/0x88e0 [ 103.609858][ T7564] copy_process+0x6aa/0x88e0 [ 103.609870][ T7564] ? __might_fault+0xc5/0x140 [ 103.609887][ T7564] ? __lock_acquire+0x5c0/0x1f40 [ 103.609905][ T7564] ? __pfx_copy_process+0x10/0x10 [ 103.609923][ T7564] ? get_pid_task+0x2a/0x250 [ 103.609948][ T7564] ? get_pid_task+0xfc/0x250 [ 103.609969][ T7564] ? get_pid_task+0xfc/0x250 [ 103.609990][ T7564] kernel_clone+0x176/0x9d0 [ 103.610002][ T7564] ? proc_fail_nth_write+0x9f/0x220 [ 103.610019][ T7564] ? __pfx_kernel_clone+0x10/0x10 [ 103.610039][ T7564] ? find_held_lock+0x2b/0x80 [ 103.610063][ T7564] ? ksys_write+0x190/0x250 [ 103.610082][ T7564] ? ksys_write+0x190/0x250 [ 103.610104][ T7564] __do_compat_sys_ia32_clone+0xd4/0x120 [ 103.610125][ T7564] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 103.610155][ T7564] ? __might_fault+0xc5/0x140 [ 103.610176][ T7564] ? __might_fault+0xc5/0x140 [ 103.610203][ T7564] __do_fast_syscall_32+0x14b/0x8c0 [ 103.610222][ T7564] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.610239][ T7564] do_fast_syscall_32+0x32/0x70 [ 103.610264][ T7564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.610286][ T7564] RIP: 0023:0xf740efbc [ 103.610301][ T7564] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.610318][ T7564] RSP: 002b:00000000f54264bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 103.610335][ T7564] RAX: ffffffffffffffda RBX: 0000000002842411 RCX: 0000000000000000 [ 103.610346][ T7564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.610352][ T7564] RBP: 00000000f7434f80 R08: 0000000000000000 R09: 0000000000000000 [ 103.610359][ T7564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.610366][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.610386][ T7564] [ 103.811269][ T7569] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.950736][ T7569] lo speed is unknown, defaulting to 1000 [ 104.052065][ T7578] FAULT_INJECTION: forcing a failure. [ 104.052065][ T7578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.052098][ T7578] CPU: 3 UID: 0 PID: 7578 Comm: syz.3.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.052126][ T7578] Tainted: [L]=SOFTLOCKUP [ 104.052135][ T7578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.052147][ T7578] Call Trace: [ 104.052153][ T7578] [ 104.052160][ T7578] dump_stack_lvl+0x100/0x190 [ 104.052205][ T7578] should_fail_ex.cold+0x5/0xa [ 104.052236][ T7578] should_fail_alloc_page+0xeb/0x140 [ 104.052263][ T7578] prepare_alloc_pages+0x1f0/0x5b0 [ 104.052289][ T7578] ? process_measurement+0x1f4/0x2360 [ 104.052321][ T7578] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 104.052355][ T7578] ? __lock_acquire+0x5c0/0x1f40 [ 104.052380][ T7578] ? __lock_acquire+0x5c0/0x1f40 [ 104.052404][ T7578] ? lock_acquire+0x1d1/0x380 [ 104.052423][ T7578] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.052458][ T7578] ? lock_acquire+0x1d1/0x380 [ 104.052479][ T7578] ? is_bpf_text_address+0x25/0x1a0 [ 104.052523][ T7578] ? find_held_lock+0x2b/0x80 [ 104.052549][ T7578] ? is_bpf_text_address+0x8a/0x1a0 [ 104.052575][ T7578] ? is_bpf_text_address+0x8a/0x1a0 [ 104.052600][ T7578] ? bpf_ksym_find+0x124/0x1c0 [ 104.052621][ T7578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.052650][ T7578] ? fast_dput+0x494/0x6f0 [ 104.052701][ T7578] ? __kernel_text_address+0xd/0x30 [ 104.052736][ T7578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.052762][ T7578] ? policy_nodemask+0xed/0x5e0 [ 104.052793][ T7578] alloc_pages_mpol+0x201/0x560 [ 104.052821][ T7578] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.052849][ T7578] ? _kstrtoull+0x144/0x200 [ 104.052874][ T7578] ? __pfx__kstrtoull+0x10/0x10 [ 104.052906][ T7578] folio_alloc_mpol_noprof+0x36/0x260 [ 104.052937][ T7578] vma_alloc_folio_noprof+0xed/0x1d0 [ 104.052968][ T7578] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 104.053007][ T7578] do_anonymous_page+0xac9/0x2050 [ 104.053034][ T7578] ? get_pid_task+0x2a/0x250 [ 104.053061][ T7578] ? __pfx_do_anonymous_page+0x10/0x10 [ 104.053085][ T7578] ? rcu_read_unlock+0x2d/0xb0 [ 104.053108][ T7578] ? rcu_read_unlock+0x2d/0xb0 [ 104.053140][ T7578] __handle_mm_fault+0x1eeb/0x2f40 [ 104.053168][ T7578] ? lock_vma_under_rcu+0x11d/0x590 [ 104.053189][ T7578] ? __pfx___handle_mm_fault+0x10/0x10 [ 104.053219][ T7578] ? lock_vma_under_rcu+0x17c/0x590 [ 104.053255][ T7578] handle_mm_fault+0x363/0xa30 [ 104.053294][ T7578] do_user_addr_fault+0x59c/0x12f0 [ 104.053330][ T7578] exc_page_fault+0x6f/0xd0 [ 104.053361][ T7578] asm_exc_page_fault+0x26/0x30 [ 104.053382][ T7578] RIP: 0023:0xf7032785 [ 104.053399][ T7578] Code: ff 0f b7 44 16 fe 66 89 44 14 1e e9 b5 fe ff ff 2e 8d 74 26 00 55 e8 fc c6 01 00 81 c5 7e c8 39 00 57 56 53 81 ec 94 20 00 00 <89> 44 24 24 8b 84 24 a8 20 00 00 8b b4 24 b0 20 00 00 89 44 24 14 [ 104.053417][ T7578] RSP: 002b:00000000f53f4448 EFLAGS: 00010286 [ 104.053437][ T7578] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000003f [ 104.053449][ T7578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7021420 [ 104.053461][ T7578] RBP: 00000000f73ceff4 R08: 0000000000000000 R09: 0000000000000000 [ 104.053474][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.053486][ T7578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.053512][ T7578] [ 104.054598][ T7578] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 104.314999][ T66] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 104.476181][ T66] usb 8-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 104.477104][ T66] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 104.477118][ T66] usb 8-1: config 1 has no interface number 0 [ 104.477136][ T66] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 104.477150][ T66] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.477164][ T66] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.483046][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.483061][ T66] usb 8-1: Product: syz [ 104.483068][ T66] usb 8-1: Manufacturer: syz [ 104.483076][ T66] usb 8-1: SerialNumber: syz [ 104.487757][ T7578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.688879][ T7578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.734949][ T5159] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 104.885600][ T5159] usb 7-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 104.886551][ T5159] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 104.886571][ T5159] usb 7-1: config 1 has no interface number 0 [ 104.886603][ T5159] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 104.886625][ T5159] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.886646][ T5159] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.888494][ T5159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.888512][ T5159] usb 7-1: Product: syz [ 104.888526][ T5159] usb 7-1: Manufacturer: syz [ 104.888539][ T5159] usb 7-1: SerialNumber: syz [ 104.891754][ T7584] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 104.897889][ T66] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 105.090224][ T66] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 105.090247][ T66] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 105.091783][ T66] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 105.091796][ T66] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 105.104100][ T66] usb 8-1: USB disconnect, device number 3 [ 105.108043][ T66] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 105.132899][ T7584] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.166391][ T66] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 105.367657][ T5159] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 105.479352][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 105.540302][ T5159] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 105.540321][ T5159] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 105.540623][ T5159] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 105.540635][ T5159] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 105.546243][ T5159] usb 7-1: USB disconnect, device number 5 [ 105.548825][ T5159] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 105.595227][ T5159] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 106.314896][ T66] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 106.362105][ T7601] Cannot find add_set index 32767 as target [ 106.393570][ T7601] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 106.465902][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 106.468096][ T66] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 106.469064][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.469086][ T66] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.469107][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.469126][ T66] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.469146][ T66] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.469179][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.471208][ T66] usb 7-1: config 0 descriptor?? [ 106.632428][ T7607] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.689851][ T66] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.764084][ T7607] lo speed is unknown, defaulting to 1000 [ 106.969898][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 107.782485][ T7618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.897940][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 108.062121][ T7650] FAULT_INJECTION: forcing a failure. [ 108.062121][ T7650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.062143][ T7650] CPU: 2 UID: 0 PID: 7650 Comm: syz.0.501 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.062159][ T7650] Tainted: [L]=SOFTLOCKUP [ 108.062163][ T7650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.062170][ T7650] Call Trace: [ 108.062175][ T7650] [ 108.062180][ T7650] dump_stack_lvl+0x100/0x190 [ 108.062202][ T7650] should_fail_ex.cold+0x5/0xa [ 108.062225][ T7650] _copy_from_user+0x2e/0xd0 [ 108.062246][ T7650] move_addr_to_kernel+0x65/0x170 [ 108.062263][ T7650] __sys_connect+0xb5/0x170 [ 108.062279][ T7650] ? __pfx___sys_connect+0x10/0x10 [ 108.062294][ T7650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.062317][ T7650] ? __might_fault+0xc5/0x140 [ 108.062332][ T7650] ? __might_fault+0xc5/0x140 [ 108.062349][ T7650] __ia32_sys_connect+0x71/0xb0 [ 108.062366][ T7650] __do_fast_syscall_32+0x14b/0x8c0 [ 108.062384][ T7650] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.062401][ T7650] do_fast_syscall_32+0x32/0x70 [ 108.062419][ T7650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.062435][ T7650] RIP: 0023:0xf7f94fbc [ 108.062445][ T7650] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.062457][ T7650] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 108.062469][ T7650] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000940 [ 108.062476][ T7650] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.062483][ T7650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.062490][ T7650] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.062497][ T7650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.062511][ T7650] [ 108.097266][ T7652] FAULT_INJECTION: forcing a failure. [ 108.097266][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 108.097295][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.1.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.097321][ T7652] Tainted: [L]=SOFTLOCKUP [ 108.097328][ T7652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.097338][ T7652] Call Trace: [ 108.097344][ T7652] [ 108.097353][ T7652] dump_stack_lvl+0x100/0x190 [ 108.097385][ T7652] should_fail_ex.cold+0x5/0xa [ 108.097412][ T7652] should_failslab+0xc2/0x120 [ 108.097436][ T7652] kmem_cache_alloc_noprof+0x92/0x6a0 [ 108.097456][ T7652] ? do_getname+0x35/0x390 [ 108.097488][ T7652] do_getname+0x35/0x390 [ 108.097517][ T7652] do_sys_openat2+0xc3/0x1d0 [ 108.097544][ T7652] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.097569][ T7652] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 108.097607][ T7652] __ia32_compat_sys_openat+0x12d/0x210 [ 108.097636][ T7652] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 108.097675][ T7652] do_int80_emulation+0x166/0x650 [ 108.097705][ T7652] asm_int80_emulation+0x1a/0x20 [ 108.097725][ T7652] RIP: 0023:0xf7167f6b [ 108.097740][ T7652] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 108.097758][ T7652] RSP: 002b:00000000f54263cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 108.097777][ T7652] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426490 [ 108.097789][ T7652] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.097800][ T7652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.097811][ T7652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.097821][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.097846][ T7652] [ 108.139654][ T7654] ipip0: entered allmulticast mode [ 108.143775][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 108.269663][ T7661] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.353148][ T7661] lo speed is unknown, defaulting to 1000 [ 108.946942][ T7679] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 109.003323][ T1311] nvmet: connect request for invalid subsystem t! [ 109.005016][ T7679] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 109.006392][ T7679] nvme nvme0: failed to connect queue: 0 ret=16770 [ 109.058296][ T7682] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 109.058569][ T7682] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 109.058809][ T7682] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 109.059084][ T7682] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 109.188926][ T5892] usb 7-1: USB disconnect, device number 6 [ 109.194203][ T5892] usblp1: removed [ 109.230572][ T7691] FAULT_INJECTION: forcing a failure. [ 109.230572][ T7691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.230593][ T7691] CPU: 2 UID: 0 PID: 7691 Comm: syz.2.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.230609][ T7691] Tainted: [L]=SOFTLOCKUP [ 109.230613][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.230620][ T7691] Call Trace: [ 109.230624][ T7691] [ 109.230629][ T7691] dump_stack_lvl+0x100/0x190 [ 109.230651][ T7691] should_fail_ex.cold+0x5/0xa [ 109.230669][ T7691] _copy_to_user+0x32/0xd0 [ 109.230690][ T7691] simple_read_from_buffer+0xcb/0x170 [ 109.230706][ T7691] proc_fail_nth_read+0x1af/0x230 [ 109.230723][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.230740][ T7691] ? rw_verify_area+0xce/0x6d0 [ 109.230758][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.230774][ T7691] vfs_read+0x1e4/0xb40 [ 109.230787][ T7691] ? lock_acquire+0x1d1/0x380 [ 109.230800][ T7691] ? __fget_files+0x34/0x3d0 [ 109.230815][ T7691] ? __pfx_vfs_read+0x10/0x10 [ 109.230826][ T7691] ? find_held_lock+0x2b/0x80 [ 109.230846][ T7691] ? __fget_files+0x215/0x3d0 [ 109.230869][ T7691] ? __fget_files+0x21f/0x3d0 [ 109.230896][ T7691] ksys_read+0x12a/0x250 [ 109.230911][ T7691] ? __pfx_ksys_read+0x10/0x10 [ 109.230929][ T7691] do_int80_emulation+0x166/0x650 [ 109.230949][ T7691] asm_int80_emulation+0x1a/0x20 [ 109.230962][ T7691] RIP: 0023:0xf7127f6b [ 109.230972][ T7691] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 109.230988][ T7691] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 109.231006][ T7691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0 [ 109.231018][ T7691] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 109.231028][ T7691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.231037][ T7691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.231043][ T7691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.231058][ T7691] [ 109.252482][ T7692] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 109.252500][ T7692] device-mapper: raid: Choosing default region size of 4MiB [ 109.266714][ T7692] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 109.364498][ T7692] md/raid1:mdX: active with 1 out of 2 mirrors [ 109.366248][ T7692] mdX: invalid bitmap file superblock: bad magic [ 109.366980][ T7692] md: mdX: invalid bitmap magic 0x0 [ 109.367036][ T7692] mdX: failed to create bitmap (-22) [ 109.587858][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 109.605344][ T7692] device-mapper: table: 248:2: raid: Failed to run raid array (-EINVAL) [ 109.605363][ T7692] device-mapper: ioctl: error adding target to table [ 109.761340][ T7715] ptrace attach of "/syz-executor exec"[5782] was attempted by "/syz-executor exec"[7715] [ 110.095893][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 110.201712][ T7723] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.202272][ T7723] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 110.202700][ T7723] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 110.203164][ T7723] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 110.240661][ T7723] nvme nvme0: failed to connect socket: -111 [ 110.304876][ T11] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 110.454921][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 110.455454][ T11] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 110.456407][ T11] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.456429][ T11] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.456446][ T11] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.456462][ T11] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.456500][ T11] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.456533][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.458415][ T11] usb 8-1: config 0 descriptor?? [ 110.690722][ T11] usb 8-1: USB disconnect, device number 4 [ 110.923752][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 110.927517][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 110.928751][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 111.161801][ T7728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.256330][ T7740] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.370640][ T7740] lo speed is unknown, defaulting to 1000 [ 111.632132][ T7747] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.018493][ T7747] lo speed is unknown, defaulting to 1000 [ 112.417599][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 112.968383][ T7769] usb 1-1: USB disconnect, device number 2 [ 113.099403][ T7775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.545'. [ 113.151319][ T7777] FAULT_INJECTION: forcing a failure. [ 113.151319][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.151349][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.1.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.151376][ T7777] Tainted: [L]=SOFTLOCKUP [ 113.151383][ T7777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.151394][ T7777] Call Trace: [ 113.151403][ T7777] [ 113.151411][ T7777] dump_stack_lvl+0x100/0x190 [ 113.151445][ T7777] should_fail_ex.cold+0x5/0xa [ 113.151473][ T7777] _copy_to_user+0x32/0xd0 [ 113.151506][ T7777] simple_read_from_buffer+0xcb/0x170 [ 113.151533][ T7777] proc_fail_nth_read+0x1af/0x230 [ 113.151560][ T7777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.151586][ T7777] ? rw_verify_area+0xce/0x6d0 [ 113.151617][ T7777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.151643][ T7777] vfs_read+0x1e4/0xb40 [ 113.151665][ T7777] ? lock_acquire+0x1d1/0x380 [ 113.151687][ T7777] ? __fget_files+0x34/0x3d0 [ 113.151710][ T7777] ? __pfx_vfs_read+0x10/0x10 [ 113.151744][ T7777] ? find_held_lock+0x2b/0x80 [ 113.151774][ T7777] ? __fget_files+0x215/0x3d0 [ 113.151802][ T7777] ? __fget_files+0x21f/0x3d0 [ 113.151833][ T7777] ksys_read+0x12a/0x250 [ 113.151859][ T7777] ? __pfx_ksys_read+0x10/0x10 [ 113.151889][ T7777] do_int80_emulation+0x166/0x650 [ 113.151922][ T7777] asm_int80_emulation+0x1a/0x20 [ 113.151943][ T7777] RIP: 0023:0xf7167f6b [ 113.151960][ T7777] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 113.151979][ T7777] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 113.151998][ T7777] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 113.152011][ T7777] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 113.152022][ T7777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.152033][ T7777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.152045][ T7777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.152072][ T7777] [ 113.184285][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 113.420033][ T7793] FAULT_INJECTION: forcing a failure. [ 113.420033][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.420054][ T7793] CPU: 2 UID: 0 PID: 7793 Comm: syz.2.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.420071][ T7793] Tainted: [L]=SOFTLOCKUP [ 113.420075][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.420082][ T7793] Call Trace: [ 113.420087][ T7793] [ 113.420092][ T7793] dump_stack_lvl+0x100/0x190 [ 113.420114][ T7793] should_fail_ex.cold+0x5/0xa [ 113.420131][ T7793] _copy_from_user+0x2e/0xd0 [ 113.420151][ T7793] ucma_write+0x123/0x330 [ 113.420166][ T7793] ? __pfx_ucma_write+0x10/0x10 [ 113.420180][ T7793] ? bpf_lsm_file_permission+0x9/0x10 [ 113.420200][ T7793] ? security_file_permission+0x76/0x210 [ 113.420220][ T7793] ? rw_verify_area+0xce/0x6d0 [ 113.420240][ T7793] ? __pfx_ucma_write+0x10/0x10 [ 113.420253][ T7793] vfs_writev+0x5ed/0xdd0 [ 113.420269][ T7793] ? __pfx_vfs_writev+0x10/0x10 [ 113.420283][ T7793] ? lock_acquire+0x1d1/0x380 [ 113.420296][ T7793] ? __fget_files+0x34/0x3d0 [ 113.420315][ T7793] ? __fget_files+0x21f/0x3d0 [ 113.420332][ T7793] ? do_writev+0x28a/0x340 [ 113.420343][ T7793] do_writev+0x28a/0x340 [ 113.420355][ T7793] ? __pfx_do_writev+0x10/0x10 [ 113.420371][ T7793] __do_fast_syscall_32+0x14b/0x8c0 [ 113.420389][ T7793] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.420408][ T7793] do_fast_syscall_32+0x32/0x70 [ 113.420426][ T7793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.420441][ T7793] RIP: 0023:0xf7f32fbc [ 113.420451][ T7793] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.420463][ T7793] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 113.420475][ T7793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 113.420482][ T7793] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.420489][ T7793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.420496][ T7793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.420503][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.420517][ T7793] [ 113.782688][ T7805] FAULT_INJECTION: forcing a failure. [ 113.782688][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 113.782709][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.1.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.782726][ T7805] Tainted: [L]=SOFTLOCKUP [ 113.782730][ T7805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.782737][ T7805] Call Trace: [ 113.782742][ T7805] [ 113.782747][ T7805] dump_stack_lvl+0x100/0x190 [ 113.782769][ T7805] should_fail_ex.cold+0x5/0xa [ 113.782787][ T7805] should_failslab+0xc2/0x120 [ 113.782802][ T7805] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.782814][ T7805] ? lock_acquire+0x1d1/0x380 [ 113.782828][ T7805] ? do_getname+0x35/0x390 [ 113.782847][ T7805] do_getname+0x35/0x390 [ 113.782866][ T7805] __ia32_sys_mkdir+0x56/0x90 [ 113.782883][ T7805] __do_fast_syscall_32+0x14b/0x8c0 [ 113.782901][ T7805] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.782919][ T7805] do_fast_syscall_32+0x32/0x70 [ 113.782937][ T7805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.782952][ T7805] RIP: 0023:0xf740efbc [ 113.782962][ T7805] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.782974][ T7805] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 113.782986][ T7805] RAX: ffffffffffffffda RBX: 0000000080002000 RCX: 0000000000000063 [ 113.782993][ T7805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.783000][ T7805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.783007][ T7805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.783013][ T7805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.783028][ T7805] [ 113.927284][ T7809] FAULT_INJECTION: forcing a failure. [ 113.927284][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 113.927308][ T7809] CPU: 3 UID: 0 PID: 7809 Comm: syz.1.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.927325][ T7809] Tainted: [L]=SOFTLOCKUP [ 113.927329][ T7809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.927336][ T7809] Call Trace: [ 113.927342][ T7809] [ 113.927347][ T7809] dump_stack_lvl+0x100/0x190 [ 113.927371][ T7809] should_fail_ex.cold+0x5/0xa [ 113.927394][ T7809] should_failslab+0xc2/0x120 [ 113.927412][ T7809] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.927426][ T7809] ? copy_fs_struct+0x49/0x340 [ 113.927443][ T7809] copy_fs_struct+0x49/0x340 [ 113.927458][ T7809] ksys_unshare+0x3a9/0x980 [ 113.927474][ T7809] ? __pfx_ksys_unshare+0x10/0x10 [ 113.927489][ T7809] ? __might_fault+0xc5/0x140 [ 113.927509][ T7809] __ia32_sys_unshare+0x30/0x40 [ 113.927523][ T7809] __do_fast_syscall_32+0x14b/0x8c0 [ 113.927544][ T7809] do_fast_syscall_32+0x32/0x70 [ 113.927563][ T7809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.927579][ T7809] RIP: 0023:0xf740efbc [ 113.927590][ T7809] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.927603][ T7809] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 113.927616][ T7809] RAX: ffffffffffffffda RBX: 0000000064000600 RCX: 0000000000000000 [ 113.927624][ T7809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.927632][ T7809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.927639][ T7809] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.927647][ T7809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.927662][ T7809] [ 114.007144][ T7809] bridge0: port 3(netdevsim0) entered blocking state [ 114.007196][ T7809] bridge0: port 3(netdevsim0) entered disabled state [ 114.007361][ T7809] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 114.009191][ T7809] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 114.009691][ T7809] bridge0: port 3(netdevsim0) entered blocking state [ 114.009742][ T7809] bridge0: port 3(netdevsim0) entered forwarding state [ 114.187934][ T7821] e1000 0000:00:07.0 eth0: Unsupported Speed/Duplex configuration [ 114.370413][ T7834] FAULT_INJECTION: forcing a failure. [ 114.370413][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.370436][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.2.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.370452][ T7834] Tainted: [L]=SOFTLOCKUP [ 114.370456][ T7834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.370464][ T7834] Call Trace: [ 114.370468][ T7834] [ 114.370472][ T7834] dump_stack_lvl+0x100/0x190 [ 114.370494][ T7834] should_fail_ex.cold+0x5/0xa [ 114.370513][ T7834] _copy_from_user+0x2e/0xd0 [ 114.370533][ T7834] ucma_write+0x123/0x330 [ 114.370547][ T7834] ? __pfx_ucma_write+0x10/0x10 [ 114.370561][ T7834] ? bpf_lsm_file_permission+0x9/0x10 [ 114.370580][ T7834] ? security_file_permission+0x76/0x210 [ 114.370599][ T7834] ? rw_verify_area+0xce/0x6d0 [ 114.370620][ T7834] vfs_write+0x2aa/0x1050 [ 114.370633][ T7834] ? __pfx_ucma_write+0x10/0x10 [ 114.370646][ T7834] ? lock_acquire+0x1d1/0x380 [ 114.370659][ T7834] ? __fget_files+0x34/0x3d0 [ 114.370674][ T7834] ? __pfx_vfs_write+0x10/0x10 [ 114.370685][ T7834] ? find_held_lock+0x2b/0x80 [ 114.370702][ T7834] ? __fget_files+0x215/0x3d0 [ 114.370715][ T7834] ? __fget_files+0x215/0x3d0 [ 114.370731][ T7834] ? __fget_files+0x21f/0x3d0 [ 114.370748][ T7834] ksys_write+0x1f8/0x250 [ 114.370761][ T7834] ? __pfx_ksys_write+0x10/0x10 [ 114.370777][ T7834] __do_fast_syscall_32+0x14b/0x8c0 [ 114.370796][ T7834] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.370814][ T7834] do_fast_syscall_32+0x32/0x70 [ 114.370832][ T7834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.370847][ T7834] RIP: 0023:0xf7f32fbc [ 114.370857][ T7834] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.370869][ T7834] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 114.370881][ T7834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 114.370888][ T7834] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.370895][ T7834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.370901][ T7834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.370908][ T7834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.370922][ T7834] [ 114.413539][ T7840] FAULT_INJECTION: forcing a failure. [ 114.413539][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.413568][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.2.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.413592][ T7840] Tainted: [L]=SOFTLOCKUP [ 114.413598][ T7840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.413623][ T7840] Call Trace: [ 114.413631][ T7840] [ 114.413638][ T7840] dump_stack_lvl+0x100/0x190 [ 114.413669][ T7840] should_fail_ex.cold+0x5/0xa [ 114.413696][ T7840] _copy_from_user+0x2e/0xd0 [ 114.413725][ T7840] __sys_bpf+0x2f5/0x4b60 [ 114.413750][ T7840] ? __pfx___sys_bpf+0x10/0x10 [ 114.413767][ T7840] ? lock_acquire+0x1d1/0x380 [ 114.413785][ T7840] ? get_pid_task+0x2a/0x250 [ 114.413809][ T7840] ? find_held_lock+0x2b/0x80 [ 114.413833][ T7840] ? get_pid_task+0xfc/0x250 [ 114.413849][ T7840] ? get_pid_task+0xfc/0x250 [ 114.413868][ T7840] ? proc_fail_nth_write+0x9f/0x220 [ 114.413884][ T7840] ? find_held_lock+0x2b/0x80 [ 114.413904][ T7840] ? rcu_read_lock_any_held+0x6a/0x90 [ 114.413923][ T7840] ? find_held_lock+0x2b/0x80 [ 114.413939][ T7840] ? ksys_write+0x190/0x250 [ 114.413951][ T7840] ? ksys_write+0x190/0x250 [ 114.413972][ T7840] ? lock_acquire+0x1d1/0x380 [ 114.413984][ T7840] ? __might_fault+0xc5/0x140 [ 114.413999][ T7840] ? find_held_lock+0x2b/0x80 [ 114.414018][ T7840] ? __ia32_sys_bpf+0xcc/0x170 [ 114.414029][ T7840] __ia32_sys_bpf+0xcc/0x170 [ 114.414042][ T7840] ? __might_fault+0x111/0x140 [ 114.414058][ T7840] __do_fast_syscall_32+0x14b/0x8c0 [ 114.414076][ T7840] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.414094][ T7840] do_fast_syscall_32+0x32/0x70 [ 114.414120][ T7840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.414143][ T7840] RIP: 0023:0xf7f32fbc [ 114.414158][ T7840] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.414175][ T7840] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 114.414193][ T7840] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001b80 [ 114.414201][ T7840] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.414208][ T7840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.414214][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.414221][ T7840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.414235][ T7840] [ 114.732167][ T7844] syz.2.569 uses obsolete (PF_INET,SOCK_PACKET) [ 114.826085][ T7853] ioremap: invalid physical address 8000000000000000 [ 114.826141][ T7853] ------------[ cut here ]------------ [ 114.826147][ T7853] 1 [ 114.826151][ T7853] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#0: syz.2.571/7853 [ 114.833998][ T7853] Modules linked in: [ 114.835502][ T7853] CPU: 0 UID: 0 PID: 7853 Comm: syz.2.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.838836][ T7853] Tainted: [L]=SOFTLOCKUP [ 114.840175][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.843243][ T7853] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 114.845314][ T7853] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 9a 22 01 00 e9 db 04 9b 00 e8 30 88 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 81 22 01 00 90 <0f> 0b 90 e9 bb 04 9b 00 e8 13 88 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 114.851233][ T7853] RSP: 0018:ffffc900042278b8 EFLAGS: 00010286 [ 114.853154][ T7853] RAX: 0000000000000032 RBX: 1ffff92000844f1b RCX: 0000000000000000 [ 114.855655][ T7853] RDX: 0000000000000032 RSI: ffffffff81eba419 RDI: fffff52000844f08 [ 114.858083][ T7853] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 114.860510][ T7853] R10: ffffc9000422767f R11: 0000000000000001 R12: 8000000000000fff [ 114.862930][ T7853] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 114.865424][ T7853] FS: 0000000000000000(0000) GS:ffff888095279000(0063) knlGS:00000000f53e6b40 [ 114.868257][ T7853] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 114.870477][ T7853] CR2: 00000000f53a3ff4 CR3: 000000004c918000 CR4: 0000000000352ef0 [ 114.873012][ T7853] Call Trace: [ 114.874096][ T7853] [ 114.875113][ T7853] ? register_device+0x1bb/0x6a0 [ 114.876735][ T7853] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 114.878699][ T7853] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 114.880507][ T7853] ? register_device+0x164/0x6a0 [ 114.882209][ T7853] register_device+0x1bb/0x6a0 [ 114.883790][ T7853] phram_setup+0x3b1/0x4c0 [ 114.885411][ T7853] ? __pfx_phram_setup+0x10/0x10 [ 114.887049][ T7853] ? trace_contention_end+0x126/0x160 [ 114.888819][ T7853] ? param_attr_store+0xec/0x300 [ 114.890375][ T7853] ? __pfx___mutex_lock+0x10/0x10 [ 114.891968][ T7853] phram_param_call+0xa6/0xd0 [ 114.893453][ T7853] param_attr_store+0x199/0x300 [ 114.895038][ T7853] ? __pfx_param_attr_store+0x10/0x10 [ 114.896784][ T7853] module_attr_store+0x58/0x80 [ 114.898476][ T7853] ? __pfx_module_attr_store+0x10/0x10 [ 114.900235][ T7853] sysfs_kf_write+0xf2/0x150 [ 114.901739][ T7853] kernfs_fop_write_iter+0x3e0/0x5f0 [ 114.903349][ T7853] ? __pfx_sysfs_kf_write+0x10/0x10 [ 114.905132][ T7853] vfs_write+0x6af/0x1050 [ 114.906480][ T7853] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 114.908360][ T7853] ? __pfx_vfs_write+0x10/0x10 [ 114.909891][ T7853] ? find_held_lock+0x2b/0x80 [ 114.911409][ T7853] ksys_write+0x12a/0x250 [ 114.912800][ T7853] ? __pfx_ksys_write+0x10/0x10 [ 114.914357][ T7853] __do_fast_syscall_32+0x14b/0x8c0 [ 114.916011][ T7853] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.917597][ T7853] do_fast_syscall_32+0x32/0x70 [ 114.919163][ T7853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.921140][ T7853] RIP: 0023:0xf7f32fbc [ 114.922460][ T7853] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.928277][ T7853] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 114.930855][ T7853] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 114.933277][ T7853] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 114.935754][ T7853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.938194][ T7853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.940637][ T7853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.943064][ T7853] [ 114.944036][ T7853] irq event stamp: 1353 [ 114.945293][ T7853] hardirqs last enabled at (1359): [] irqentry_exit+0x202/0xab0 [ 114.948120][ T7853] hardirqs last disabled at (1362): [] __nbcon_atomic_flush_pending_con+0x284/0x440 [ 114.951448][ T7853] softirqs last enabled at (1278): [] __irq_exit_rcu+0x178/0x220 [ 114.954233][ T7853] softirqs last disabled at (1271): [] __irq_exit_rcu+0x178/0x220 [ 114.956984][ T7853] ---[ end trace 0000000000000000 ]--- [ 114.993194][ T7853] phram: ioremap failed [ 115.106721][ T7855] netlink: 964 bytes leftover after parsing attributes in process `syz.2.571'. [ 116.505614][ T25] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 117.535017][ T5159] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 118.574985][ T11] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec [ 120.014931][ T5892] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec