last executing test programs: 7.147217054s ago: executing program 1 (id=1469): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000006c0)=ANY=[@ANYBLOB="7cc6932cbaa79655533ee92d80a463be1c8c4368cb1e45b8c675d8f312e9a9315f063cbe310a6822cee3e92cd604409a90aa0a8184b0a8dbc1af49786a3e13cefaeec2226608e2d075431ff8970064a1750000f5b771b482b3c164e8", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ec3d2a3301ede5a6c2f86a889969895a7dcc588f68311cd2b85b6af494a8e6026b711d6fff5d8771d5c939c833f497191cf1e84e4c3bc51bc712387a1704c73233", @ANYRESDEC=0x0]) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'caif0\x00', {0x2}, 0xfff8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="700800000010000000000900000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r7, r8, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000440)) write$FUSE_STATFS(r0, &(0x7f00000002c0)={0x60, 0x0, r6, {{0x3, 0x91, 0x9, 0x1000, 0x2, 0xffff0001, 0x40, 0xffff0ba0}}}, 0x60) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0x40082104, &(0x7f00000004c0)) syz_fuse_handle_req(r0, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r11, 0x330f, 0x4) close_range(r0, r5, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) write$UHID_INPUT(r10, &(0x7f0000006380)={0x8, {"26312c23607f7eafe8c7546a61de2facfe4542a5d22f30eda9c094fa6ab016f58aa7093d6a59646c1d4a7bdc041fa0f23586051e0a67320488f1ce67707b74ef67ac90f2900f6f1a76b663d8f71d2508ebf196911fb4fd9d994ef75438444bf9cf4e3e57b87d37565cc0d6ebb1b58065cc89724a2b7a1ec9682f13a7c22c1fdb7517ba64e6d6af47b3af5ded083e90ae18d6a038d58c6f9709e3d6cbae2f0d847ef074e9542c944946210d68e5aa2a52063a59c90f30814bf4852f9aa1539e909478d2cfcb590f0c83edb78948f2581cc99638b98fffd05bf00636d763f98a34d18d58aa40c7965baabffe5ef7d1c164e070335de159c386a89a2e9a75d1fa69ce1260a4e5a888c2a8fe9cfb5abbafbb414eb8dbcba15e24a527626e59e791bcd8bae5f24a9743447200c2d8a202b5ddc564cbe749b5f65573e0d63c6f7d65abbb87481a179931a246e5b869a14fc54d5da346ff3d1cd53c0531dc869cef373bf81c0d4edba9c41b72c06f58db31d6c4fddbeab613758f58dd9f1e8b2162e321eb675d3b8dc6abe6c147910a89fb84a66642e89cf820b1dae41612b9c2b55bdedc2640bbea5b45ec4600480a4f742ad49e83baea7483677f87a4e2ad233b612c3738a225ed0c6dc8117c49297f928d64e90a8b4a5506cc4dee12d7bb1eab308439f47beb98a9f6a95df1c992f58020ce0384c1ed46eeb0e03a3ece713a24e9c27c4a0e30a1465c293271e41d385a1f6f8efb83b5afb09e463249963e761fc00b25cf3dbd1fc142cf9d32a59f58023b53eaeae5e104f18dd3840d756a6240b2b8b2baa309be0c54bba840c7d954da6b82152bdf19ad0e80775eaaa57587f763eb7e8ac7a77ebcccbd045a9c3e65cb9c35803ac2e07d0b976edc06bad908f226616c0719550f77e1ada3587b22aac15418a7f08668a2c0ca34d790af0285fdeaec53f63578ac673a279047ee09d7e7bd46cf72b76070e7f9de3b3d55804e9a6efa22dcdb7367abd9c4405d8f9362a3a12eb5a982cea00cd6d6f725230b559f6e027ba46f7221054d80fc4cffe0faae5a495ada2c51770841008c34bd78c102059ebe776d1519db37f70148a7b41c6477f0fcd6141e60239151ae620b8571d7eab4e761ca4e0ebfbc2133ead3df31cf3b8aa25d88cdbcf01d32d6d3090998e3370de1439526a89b4c3893826b6c3b24a49229e51785638292fd56d7db3dab4e443a9475cfc4c236d12976faa6003137b3a43936669349dde172e567c9f525f68874f0652c0c77c150096e9edf5cdcbed0ebc638ee620a05cc548d7995eba00f6c0fa0f00a9d01d462111a90f951524b4a488f9af6739582a43f596dce8bf90e22b663ddc1920935026b9eab9531b2255f6bd50d92eee8f704b7645ee9b0f546c48c9513e510944bf2981d892fad07da46d44564406793d2df32960f06c196558c366f9b9617adbdf48701d53e0dedecd6a4227862e199815bbf9be4f5caef7d90ae299ffc012bceeba2cdf78c8b18fe3bd4be73ac2055da0cab330ba5f18b6254757f1d492176b3997a24a066ff8ab9b13a91a330dc14597b877762f4a59125e721dd3816b9cbc0abc56e3bf41397cabed335172a7e74617c04730d391d1ff242d87377f486558bad7ea58b0621f8614a735fd54631fe0595d416e408419c8e7682a66941ac6f5fc175955553e9c60c92823a7f0ab8ac824cc1bbc0068048b536c9d35741742f623fa89af5ab33569644a3f026bd3f9ea0a3df7259859e24d886cc73ee63a266caa5a710df8193724a5f6c7c1c7b88d05f80ca28cd8cb5aaf2c699cb7bddedcfcdfa70798519dda9539c5ca926fb06fea69b30c456568da75be6f980fdecca8d73459b1d2a77586d90ab4658ac6d9c0d02a4e3c7f103e12a8601b6782ee6cd25a35b08f833eca0a0e5abaf50ac6fc129b8b325afe11827018f5870b2ffb84ab84b517dcf1e16100a0816e3f7f25676dc5c115a277ac066ea817fa5350066393d3182b0ee46ec6aec5b7de436fc45b07672be8452af959e042f6e2cb6f5fbefcc4a3e28578251446640219f68bdeea52f015c174c7192fe380a4626f70944cdef7dacc2bb62c037b7fb59700039eb8a5211d5250f63ebd129df0a34091d323500efaa127d51b5615cf4c44c0461516da8321e3221a5cb21a3de59ff5d87b97d5d33709a5b211ede00f53a5633c1ee726f730d53dd471012eccc0900396ab9053b011239db5a8808b207c7bb0613ecd4c2922aaafa06db6d9e321d415a3ebc01e8009ac26cf79e0bbc715b471ab99579a005d5f117fff582f52c1b1a4be6c31d7e1e3fb4faedee0514d8337be815e152cb140aec61c5e8058d9ab73f82f4f38245c7ffde52b305d96426553d19e121bb1449ddb6bc943877cc41d1fc02801dbc6410ede324b8ae1f58b669ffcfe7d20f4948d2b58a4b28e2694d62ffd87e77ba65dac6cb53418429c9f6de7c3e2288b82e6c811fcff57fe02afad4cde7f4c0401600907ab01584e33374526a0a504f303a95c3c1f6869352f0d2776ab6460ec0cd69a7b488748f912d3561947f674066ffa9f42b5b61a2679337bf0ead75361ed5af1ba749897b67a83170fa26f7a958a6dfe0849260f8ace138d33aaa6ab6529f673a3b8a7c994db7fd9f9a5dd6c68d6069cac28ff9ad49fd820a27c2f7a664479b754e7731dd9ed59289c44147edc1c3194e040b507b9660fad1b479d5df6fc511b02717d91d569639e110ebef900084e9abc7cf5695306066dcce6c00af465e6f52d6e9a835d85d78f021a87241467418369cc53ce0afafb0261cff88318a5b9ac6a2d3a05b32eb7f3159f12ff553167635ee4613a76faa489c137da45cc6eab01d7066bc606c3ba7df0bc92da537b2d584e22945b48912a1a0086006401b7b79be1a4348cafa931272e028a5eb3dc22a81f4251a72c89c745c599ec33430e3ab6cb08d1b985a63eda7bf489800892faad42a0a345ba446b3667918582caa4750f15ed648c254a1a585d89cfcd75e85bd9a5be1559d3d2c11fdfc21175324c1d00326e4aed7ad3f38d93ee9b16a16d755ef53968743ca6bdf92c22ffa4c28c3d5532a5e93592d9e27b6d8c865aaa102f0bbaa2ef347bc88b47b3b4ea8f179011eab17be6e6151a1bbaef68701794f4b34616ad5de2a2a0578923b076b8fc065b3cd308ab342f488e32c0f31e1dafc9e66872767bca6e9cca3bfb44de5b13a1b165587a14bed0c950086b6f49e60710fc766d9059f342dad0ca4e18be6e909479fb8a89bd7650c3f7ca16fef321589644d2e48666b2a3447f5114b5f9f5f501889f5d435aa433bbf7bf09a7c277c629d65cb3ba50dfcc25438ba8fb408d81789bf25853f8f178e19981e70c9678967400a11e8e5699ab22718103b1eaabda5c82c7222d070e7cb728da67c63627d53cdb5fc5e8786166be5fe4686b420cf3fc5f2fc38dd11eeecfbdbdab8bad953f208a45ae68b56403a66726260427fb849093c2b4526c741ffb9284ed911143651e2cce13a116bb75ed4ace371ee2e66c1eac182d89bb27d00bd8e3dd382f42d53dab4b7d881054aa2ef5a98a5e411509f0d4e8e9f0185123d23aeb3aba4dee63624c6dd24dd377c4d7372cff2b6a3e4bee0619e50813a7791a59d2e4c54cc2d5d227d3b7de57c8714bd6699a0f820bc71242af001e9c19d16b3794e027a54f376c64d773ce8dc1aee835b8e6e3ed8ed6613bad632f80679386a344384bc59408bec0da24ecbf4182a30b9a17e760a8304e0fe255430b0642dc59af938e009e87fcf4a21973c42398340cee64440989361ff3a658a7a1fe179588dbe8e1fb4a9ffea9a1d076c39b635a06254f211e7849a43fa03302f4eabe1e0eb4afe5d1ade3d07a3980c9ac4056d10b72470f16539f722e6f2c6e9e819f696adeacc2358443d16da15195fdf7ce8e04f516dcecf1df1292ddf156cdb32e9caa532610a8eb35390c8f9bc9248419bf19fe901549558e755cfde9c923e891d09216957f330f330f242cb732fab657c0a38d935b8e38d9311efaec531277110f8e975ca82d21d5bd7ac5258bd90ab6ab9732d9ce72b8f0e8c1bd41987d6e9afef0912830c9e49fc2e7993dbd12d3426450e15cf6ba563872aa5b63d26300058a6d12990b18c93e7520f478bc05be4ac23d6e558d840590009c41e5642807ef8ff3068636bbcfa30c7ca760b9777e236b2131c7297f8cb33bf0f1f5d9784c8cfcdbfd21e5a9a4fc4a554e2e99ac901d2faf02768a81abfa66a79c6687d819077fbb73387d26fb807ad1e45794dff53fff5dd349fecf29809301312f32b4ecc78c3ba080b4621c2259683146a6cad15995b2c0675e0c3d7bc8fbb0d2084d347fbc33f78fa168ae73ab3360aef074a9d5dc9ec93578559f1def2751a6726acac220b470b5c2ae6366747c9c830cb7cca606a908f59dcd3722aaa664c53ded0cdcf186c1ed17bce62b4d46a40b25003235c22befbc827f15d2a5eccca141548bed9c4735b699c9903850566229bbaae45bebe3f7221b16dfeb8124310314d5e72982571d95fadcbb6204e800107335c6e01548d9ea73b58230dea9dfd6e1210af4c6af698d9cbd783b840615eea51afaef8896f3e4928de9f2fc3cba91399fef7c66df3290771919a8ef18b1103aab605d046e2fb742065d0b74112a8bf992e79ac8cb36c535396f283a34e1a7f2ce1846cda18ad1af3cabc052099b443b8178ef584a52a6390bf00de6027c7a7e5894158b3e7af695f4f820920a5fcf3d72141330bb4b8b6b0ca9707b8088f7a46a3958c725cb4da2b48d75f9526df340bfd6595059cf29ae88f2602f2a322df9c1f6bbf6e026d7266d3b5b783b306d3f1d9212c7e8b15eff81a22506c2a40f9c07ac5c8129ea8134d292c1474b32c54c22bbe3da8340af4f3cec9d665649bcec1f8c92b0b520ec18b3cd9433c239988dd1c0c5e0b6611ab46855552877d78ce9b4637f45b80c5037f2f5fae5df79f851b520855cab2ffefd6bcc5f23f0a566a6f7daa1a9c524c0147cb92a35310e2538328ae0401af4567301a969782b71e40377b642bc0a925034b1fc9b193c3abb103f5b1522cad3608b5428f615a02824f0db9ea89e6ab0dd37e4f656a58268f452976013d0fe66f82d818563028651f49f22b2036104053a5a949d3c81bcafbbac8121b58477a68fbfbed6d6de3a9914be12197c0c20b12d25dc04cb5be00c4a6b3e41b2efee6fd83fd4e0d68ee8da20e1e8e37ea1811e39b49eaf914c5869167a66c9cd0101dfad3fa839074de3ce3f7d08d8b29ce378ee6c866f8733cb1b7799e8fc7e29729238a8fedf0aead7dd6e98c01782e1c072f389ca4afb41f51928e175a20fc67b6e9619d82b46414809259346111c6943cd3b15dd474d7354f3ca4c8e115d08c76b2f9ccfeece024541715aff22a0292a05781c0542880357f263150e6c8cf215883f0dbcfd80912f2aefd61b2ed3ac16af75fe65472522c04161b4e057f587d0fb37f6518de57f569293afb2f46471f0b5b8fe8a9cf9743d125b8786bd8ade97d94a73b9bcc7716354a279c4d7ff670f5955bc6b7f28d0797ed496370171c65ed6fa2925d9eaddd86a8a92ff43cce16ae505dd380582e0eeb817a2f5fc1439ed1c79465e1f2b11c5400d70a3bf90f2dc5f7251bd2e3259bbd71eff5362291c5c0d17676ee68eb175f9053990a4e36e4059c8a5d44a57461b451c7c3ae2df7b932f62853bef41cde5f4b5208dd23329a10ca368bc997291741d45585f39fb9fa9f30c77f26abd93cd01efd9d920c21229b373e", 0x1000}}, 0x1006) close_range(r12, 0xffffffffffffffff, 0x0) 6.270147249s ago: executing program 1 (id=1479): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, 0x0, 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xbb4, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='pcs', 0x3) 3.436897665s ago: executing program 3 (id=1494): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='./m', 0x3) 3.202081911s ago: executing program 1 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x187) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./sys\x00', 0x0, 0x1c0) write(r3, 0x0, 0x0) (async) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) (async) write(r3, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) (async) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa"], 0x0) (async) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012806f6e4f65087100eeff018008000308030000000000000000"], 0x3c}}, 0x54) 2.751402274s ago: executing program 1 (id=1496): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 3) 2.705841566s ago: executing program 3 (id=1497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000700)='\x00') read$char_usb(r2, &(0x7f0000000600)=""/64, 0x40) 2.705661943s ago: executing program 1 (id=1498): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) chmod(&(0x7f0000000000)='./file1\x00', 0x52) 2.494975165s ago: executing program 2 (id=1499): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='1', 0x1) 2.229628518s ago: executing program 2 (id=1500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000040601030000000000000000050000080500010007"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 2.153131415s ago: executing program 2 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$cgroup(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x40, &(0x7f00000004c0)={[{@favordynmods}, {@xattr}, {@xattr}, {@name={'name', 0x3d, '#@%@'}}, {@subsystem='net_prio'}, {@release_agent={'release_agent', 0x3d, './cgroup'}}, {@nofavordynmods}, {@release_agent={'release_agent', 0x3d, './proc'}}], [{@hash}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, '+#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@appraise}]}) 2.048192459s ago: executing program 2 (id=1502): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x12a) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000f80)={{0x4, 0x3}, 0x100, './my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) mkdirat(r0, &(0x7f0000000040)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x51) write(r5, &(0x7f0000001400)='1', 0x1) 2.047534503s ago: executing program 2 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r1, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x4}]) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r3, 0x0, r6, 0x0, 0x8000, 0x0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000140, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00040080195ca77e32c8e1323d1be26239c89f1919f51bc9e0f8607e10205389f31d1fe8fb9c57aab9fabe5bbf13b3be6c88eb3a84267c525e4c528e5750aab9b59b2b40fec600ce3dd7d354be20173646fb449b83780100df7a1cbae6308bc4b26b3ef6b656de10db2f620df945f30157e1da922208000000b5e02782609683bf547b9ddb69735fa7c75a1ec877aa4d6fe3b9f0fe2b77cf09358f0f937439ca8296a037d4ef9b219218637a866c8b880e4b1fa7d4034bcc85b87f6ee71d2572aa88077c0f0ee6f075c22b29de9df5213dd06333343ff9f323746d", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES8=r1, @ANYRES64=r2, @ANYRES16=r2], 0x50) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000030000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000006"], 0x0, 0x4e}, 0x28) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x140, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x14, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000040)={0x24, r10, 'id0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r10, r13, 0x22, 0x0, @void}, 0x10) syz_emit_ethernet(0x20, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}, {}], @generic="64a1"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11221}}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) 1.778501389s ago: executing program 1 (id=1504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(r1, &(0x7f0000000140)='./file1\x00', 0x101080, 0x185) write(r3, &(0x7f0000000200)='0,0,0,0\x00', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x4, 0x12) write(r4, &(0x7f0000000400)='0,0,0,0\x00', 0x8) close(r4) syz_usb_connect(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004010110f900000010203010902470003010080320904000001ff000000070584034000010904010002ff00000007058202000200070502020002000904020002ff0000000705820200020007050202000200"], 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xc0000010}) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xfffffea3) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='security.selinux\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109242, 0x0) 1.531798507s ago: executing program 0 (id=1507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea2d11397d2b33ad100d3753d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d590da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0acd3b4fbe21997754874d1c0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb06b5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa8", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}], 0x5}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 1.484228172s ago: executing program 0 (id=1508): write(0xffffffffffffffff, &(0x7f0000000300)='$', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.398439894s ago: executing program 0 (id=1509): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@grpquota}, {@huge_within_size}]}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r6, 0x18, 0x0, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000001c0)={r6, 0xf07a, 0x1, r6}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) 1.287744411s ago: executing program 0 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x7e99a, 0xd220}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 1.287416636s ago: executing program 3 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.240342014s ago: executing program 0 (id=1512): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0xc040, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x100000000000000, 0x1, 0x5, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.239982152s ago: executing program 3 (id=1513): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) r5 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x4004090) close_range(r5, r7, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r9, 0xc0186e86, &(0x7f0000000380)={&(0x7f0000000440)=[{0x2, 0x284b, 0x100000000, 0x2}, {0x9, 0x9, 0x100000000, 0x1}, {0x3, 0x6, 0x1, 0x6}, {0x3, 0x7ff0, 0x0, 0x4}, {0x0, 0x9, 0x2285, 0x6}, {0xd, 0x0, 0x1, 0x4}], 0x6, 0x20, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) 1.180279603s ago: executing program 0 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004700070128bd700000000000017c000006000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 685.060249ms ago: executing program 2 (id=1515): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) r5 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x4004090) close_range(r5, r7, 0x0) connect$l2tp6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r10, 0xc0186e86, &(0x7f0000000380)={&(0x7f0000000440)=[{0x2, 0x284b, 0x100000000, 0x2}, {0x9, 0x9, 0x100000000, 0x1}, {0x3, 0x6, 0x1, 0x6}, {0x3, 0x7ff0, 0x0, 0x4}, {0x0, 0x9, 0x2285, 0x6}, {0xd, 0x0, 0x1, 0x4}], 0x6, 0x20, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) 234.011209ms ago: executing program 3 (id=1516): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80104132, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e27, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) io_setup(0x5, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000140), 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) 0s ago: executing program 3 (id=1517): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x6, 0x4645, {}, {0xee01}, 0x6, 0x81}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@rnullb, r0, 0x0) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='rd_pages=8', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)="00d59437a1c580fbafca9b36c3d8fe130baccae5f8d4e3f1d448674f85d86efd87af522681d1ef1978cbf79ede5e094b66f00549e8dcb483faea27e438f123437b4e8f1242727b3dcc6f8347f2f9cff2c339ab55289ca5674d2b4538f611fdd72dc1b8e3324fab82f16cdf9304bf9d27b0574da2eb7fe982b55bda10b897ad11462fc825659e3112dd842af2e342b2372a2dbf53595be821e0a6144d0aced244d5f9270d08e9c989ebe49aa408882e18a3737f18970fea221fcbe3d3a655", 0xbe) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='1', 0x1) kernel console output (not intermixed with test programs): 41] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 303.916212][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 303.930858][ T41] usb 6-1: config 0 has no interfaces? [ 303.963819][ T41] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.986339][ T41] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 304.017022][ T41] usb 6-1: Product: syz [ 304.032879][ T41] usb 6-1: Manufacturer: syz [ 304.057571][ T41] usb 6-1: SerialNumber: syz [ 304.112954][ T41] usb 6-1: config 0 descriptor?? [ 304.897079][T10282] Bluetooth: MGMT ver 1.23 [ 305.032817][ T41] usb 6-1: USB disconnect, device number 38 [ 306.077313][T10281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.154630][T10298] FAULT_INJECTION: forcing a failure. [ 306.154630][T10298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.159474][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.3.904 Not tainted syzkaller #0 PREEMPT(full) [ 306.159498][T10298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.159508][T10298] Call Trace: [ 306.159515][T10298] [ 306.159521][T10298] dump_stack_lvl+0x100/0x190 [ 306.159549][T10298] should_fail_ex.cold+0x5/0xa [ 306.159568][T10298] ? prepare_alloc_pages+0x16d/0x5f0 [ 306.159594][T10298] should_fail_alloc_page+0xeb/0x140 [ 306.159629][T10298] prepare_alloc_pages+0x1f0/0x5f0 [ 306.159654][T10298] ? is_bpf_text_address+0x8a/0x1a0 [ 306.159714][T10298] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 306.159733][T10298] ? is_bpf_text_address+0x94/0x1a0 [ 306.159752][T10298] ? kernel_text_address+0x8d/0x100 [ 306.159783][T10298] ? find_held_lock+0x2b/0x80 [ 306.159801][T10298] ? __kernel_text_address+0xd/0x30 [ 306.159821][T10298] ? unwind_get_return_address+0x59/0xa0 [ 306.159853][T10298] ? arch_stack_walk+0xa6/0xf0 [ 306.159888][T10298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.159907][T10298] ? __pfx_stack_trace_save+0x10/0x10 [ 306.159939][T10298] ? stack_depot_save_flags+0x27/0x9d0 [ 306.159967][T10298] ? kasan_save_stack+0x3f/0x50 [ 306.159985][T10298] ? kasan_save_stack+0x30/0x50 [ 306.160004][T10298] ? handle_mm_fault+0x37b/0xa30 [ 306.160019][T10298] ? do_user_addr_fault+0x74c/0x12f0 [ 306.160038][T10298] ? exc_page_fault+0x6f/0xd0 [ 306.160058][T10298] ? asm_exc_page_fault+0x26/0x30 [ 306.160073][T10298] ? _copy_from_user+0x93/0xd0 [ 306.160094][T10298] ? vt_do_kdsk_ioctl+0x94/0xbc0 [ 306.160142][T10298] ? vt_ioctl+0x226/0x3110 [ 306.160155][T10298] ? vt_compat_ioctl+0x33f/0x4e0 [ 306.160168][T10298] ? tty_compat_ioctl+0x1b4/0x420 [ 306.160188][T10298] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 306.160211][T10298] ? __do_fast_syscall_32+0xe7/0x970 [ 306.160232][T10298] ? do_fast_syscall_32+0x32/0x70 [ 306.160251][T10298] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.160269][T10298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.160293][T10298] ? policy_nodemask+0xed/0x4f0 [ 306.160318][T10298] alloc_pages_mpol+0x1fb/0x540 [ 306.160340][T10298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.160366][T10298] alloc_pages_noprof+0x1a/0x160 [ 306.160381][T10298] pte_alloc_one+0x1c/0x3d0 [ 306.160403][T10298] __pte_alloc+0x6d/0x3e0 [ 306.160423][T10298] ? __pfx___pte_alloc+0x10/0x10 [ 306.160442][T10298] ? do_raw_spin_lock+0x128/0x260 [ 306.160459][T10298] ? find_held_lock+0x2b/0x80 [ 306.160478][T10298] do_anonymous_page+0x13ae/0x2080 [ 306.160496][T10298] ? __pmd_alloc+0x3fb/0x950 [ 306.160520][T10298] __handle_mm_fault+0x1d2c/0x2a00 [ 306.160538][T10298] ? mt_find+0x45e/0x8e0 [ 306.160561][T10298] ? __pfx___handle_mm_fault+0x10/0x10 [ 306.160575][T10298] ? __pfx_mt_find+0x10/0x10 [ 306.160607][T10298] ? find_vma+0xbf/0x140 [ 306.160630][T10298] ? __pfx_find_vma+0x10/0x10 [ 306.160650][T10298] handle_mm_fault+0x37b/0xa30 [ 306.160669][T10298] do_user_addr_fault+0x74c/0x12f0 [ 306.160695][T10298] exc_page_fault+0x6f/0xd0 [ 306.160714][T10298] asm_exc_page_fault+0x26/0x30 [ 306.160729][T10298] RIP: 0010:_copy_from_user+0x93/0xd0 [ 306.160750][T10298] Code: 44 ee fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 49 db 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 65 3e [ 306.160764][T10298] RSP: 0018:ffffc900047b7b08 EFLAGS: 00050297 [ 306.160778][T10298] RAX: 0000000000000001 RBX: 0000000080000040 RCX: 0000000000000004 [ 306.160786][T10298] RDX: 0000000000000001 RSI: 0000000080000040 RDI: ffffc900047b7b68 [ 306.160795][T10298] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520008f6f6d [ 306.160804][T10298] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 306.160812][T10298] R13: ffffc900047b7b68 R14: 1ffff920008f6f82 R15: 0000000000000001 [ 306.160832][T10298] ? _copy_from_user+0x87/0xd0 [ 306.160853][T10298] vt_do_kdsk_ioctl+0x94/0xbc0 [ 306.160877][T10298] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 306.160899][T10298] ? bpf_lsm_capable+0x9/0x10 [ 306.160917][T10298] ? security_capable+0x80/0x260 [ 306.160938][T10298] vt_ioctl+0x226/0x3110 [ 306.160959][T10298] ? __pfx_vt_ioctl+0x10/0x10 [ 306.160977][T10298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.160997][T10298] ? get_pid_task+0x106/0x250 [ 306.161020][T10298] ? rcu_is_watching+0x12/0xc0 [ 306.161040][T10298] ? apparmor_capable+0x1d7/0x4d0 [ 306.161058][T10298] ? bpf_lsm_capable+0x9/0x10 [ 306.161073][T10298] ? security_capable+0x80/0x260 [ 306.161091][T10298] vt_compat_ioctl+0x33f/0x4e0 [ 306.161106][T10298] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 306.161121][T10298] ? __fget_files+0x215/0x3d0 [ 306.161135][T10298] ? hook_file_ioctl_common+0x140/0x440 [ 306.161158][T10298] ? __fget_files+0x21f/0x3d0 [ 306.161172][T10298] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 306.161188][T10298] tty_compat_ioctl+0x1b4/0x420 [ 306.161207][T10298] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 306.161227][T10298] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 306.161250][T10298] __do_fast_syscall_32+0xe7/0x970 [ 306.161271][T10298] ? lockdep_hardirqs_on+0x78/0x100 [ 306.161292][T10298] do_fast_syscall_32+0x32/0x70 [ 306.161313][T10298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.161331][T10298] RIP: 0023:0xf7fa8fec [ 306.161348][T10298] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 306.161355][T10298] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 306.161368][T10298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b46 [ 306.161376][T10298] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.161385][T10298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.161393][T10298] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 306.161401][T10298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.161419][T10298] [ 306.604585][T10313] syzkaller0: entered allmulticast mode [ 306.631773][T10320] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 306.638298][T10320] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 306.641737][T10320] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 306.985883][ T5741] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 306.987706][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 307.206451][ T5793] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 307.386452][ T5793] usb 6-1: Using ep0 maxpacket: 32 [ 307.398958][ T5793] usb 6-1: config 0 has no interfaces? [ 307.419049][ T5793] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 307.426126][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 307.434285][ T5793] usb 6-1: Product: syz [ 307.439199][ T5793] usb 6-1: Manufacturer: syz [ 307.444140][ T5793] usb 6-1: SerialNumber: syz [ 307.461485][ T5793] usb 6-1: config 0 descriptor?? [ 308.130716][ T50] usb 6-1: USB disconnect, device number 39 [ 308.808351][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 308.815306][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 308.820645][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 308.827539][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 309.035850][ T9] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 309.045248][T10386] pim6reg: entered allmulticast mode [ 309.059898][T10386] pim6reg: left allmulticast mode [ 309.189746][T10383] 9pnet_virtio: no channels available for device syz [ 309.836084][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 309.842150][ T9] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 309.848107][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.857549][ T9] usb 8-1: config 0 descriptor?? [ 309.876788][ T9] as10x_usb: device has been detected [ 309.882318][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 309.885801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 309.933832][ T9] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 309.993788][ T9] as10x_usb: error during firmware upload part1 [ 310.002090][ T9] Registered device nBox DVB-T Dongle [ 310.089176][ T9] usb 8-1: USB disconnect, device number 45 [ 310.114265][ T9] Unregistered device nBox DVB-T Dongle [ 310.115205][ T9] as10x_usb: device has been disconnected [ 310.658932][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 310.767930][T10431] FAULT_INJECTION: forcing a failure. [ 310.767930][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.774109][T10431] CPU: 3 UID: 0 PID: 10431 Comm: syz.1.936 Not tainted syzkaller #0 PREEMPT(full) [ 310.774126][T10431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.774133][T10431] Call Trace: [ 310.774139][T10431] [ 310.774143][T10431] dump_stack_lvl+0x100/0x190 [ 310.774164][T10431] should_fail_ex.cold+0x5/0xa [ 310.774177][T10431] _copy_from_user+0x2e/0xd0 [ 310.774196][T10431] kstrtouint_from_user+0xd6/0x1d0 [ 310.774225][T10431] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 310.774238][T10431] ? __lock_acquire+0x49f/0x1a40 [ 310.774263][T10431] proc_fail_nth_write+0x83/0x220 [ 310.774281][T10431] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 310.774301][T10431] vfs_write+0x2aa/0x1050 [ 310.774313][T10431] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 310.774331][T10431] ? __pfx_vfs_write+0x10/0x10 [ 310.774340][T10431] ? find_held_lock+0x2b/0x80 [ 310.774355][T10431] ? __fget_files+0x215/0x3d0 [ 310.774369][T10431] ? __fget_files+0x21f/0x3d0 [ 310.774384][T10431] ksys_write+0x12a/0x250 [ 310.774394][T10431] ? __pfx_ksys_write+0x10/0x10 [ 310.774408][T10431] do_int80_emulation+0x14b/0x720 [ 310.774428][T10431] asm_int80_emulation+0x1a/0x20 [ 310.774440][T10431] RIP: 0023:0xf71b74eb [ 310.774450][T10431] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 310.774460][T10431] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 310.774472][T10431] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 310.774479][T10431] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.774485][T10431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.774491][T10431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 310.774498][T10431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.774511][T10431] [ 311.300125][T10458] comedi comedi3: comedi_config --init_data is deprecated [ 311.467222][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 311.537406][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.542428][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.547915][T10463] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 311.622998][T10467] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 311.625299][T10467] netlink: 200 bytes leftover after parsing attributes in process `syz.1.948'. [ 311.628675][T10467] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 311.631009][T10467] netlink: 29 bytes leftover after parsing attributes in process `syz.1.948'. [ 312.530936][T10501] syz_tun: entered allmulticast mode [ 312.591997][T10500] syz_tun: left allmulticast mode [ 312.663018][T10505] netlink: ct family unspecified [ 312.664516][T10505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.785838][ T41] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 312.937911][ T41] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 312.943679][ T41] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 312.953027][ T41] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.959325][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.963807][ T41] usb 8-1: Product: syz [ 312.965911][ T41] usb 8-1: Manufacturer: syz [ 312.970848][ T41] usb 8-1: SerialNumber: syz [ 313.078072][ T34] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.313628][ T7429] usb 8-1: USB disconnect, device number 46 [ 313.331730][T10529] autofs: Unknown parameter './file0' [ 313.384436][T10536] FAULT_INJECTION: forcing a failure. [ 313.384436][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.389199][T10536] CPU: 3 UID: 0 PID: 10536 Comm: syz.0.960 Not tainted syzkaller #0 PREEMPT(full) [ 313.389215][T10536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.389222][T10536] Call Trace: [ 313.389227][T10536] [ 313.389232][T10536] dump_stack_lvl+0x100/0x190 [ 313.389252][T10536] should_fail_ex.cold+0x5/0xa [ 313.389266][T10536] _copy_to_user+0x32/0xd0 [ 313.389297][T10536] simple_read_from_buffer+0xcb/0x170 [ 313.389320][T10536] proc_fail_nth_read+0x1af/0x230 [ 313.389338][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.389356][T10536] ? rw_verify_area+0xce/0x6d0 [ 313.389373][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.389390][T10536] vfs_read+0x1e4/0xb40 [ 313.389404][T10536] ? __pfx_vfs_read+0x10/0x10 [ 313.389433][T10536] ? find_held_lock+0x2b/0x80 [ 313.389450][T10536] ? __fget_files+0x215/0x3d0 [ 313.389463][T10536] ? __fget_files+0x21f/0x3d0 [ 313.389477][T10536] ksys_read+0x12a/0x250 [ 313.389488][T10536] ? __pfx_ksys_read+0x10/0x10 [ 313.389504][T10536] do_int80_emulation+0x14b/0x720 [ 313.389525][T10536] asm_int80_emulation+0x1a/0x20 [ 313.389537][T10536] RIP: 0023:0xf71b74eb [ 313.389546][T10536] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 313.389557][T10536] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 313.389570][T10536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f546d5d0 [ 313.389577][T10536] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 313.389590][T10536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.389596][T10536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.389603][T10536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.389616][T10536] [ 313.568939][T10546] netlink: 96 bytes leftover after parsing attributes in process `syz.0.961'. [ 313.736200][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.740254][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.925878][ T60] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 314.075845][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 314.078956][ T60] usb 6-1: config 0 has no interfaces? [ 314.082220][ T60] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 314.085111][ T60] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 314.087755][ T60] usb 6-1: Product: syz [ 314.089062][ T60] usb 6-1: Manufacturer: syz [ 314.090536][ T60] usb 6-1: SerialNumber: syz [ 314.093533][ T60] usb 6-1: config 0 descriptor?? [ 314.115982][ T34] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 314.119903][ T34] ath9k_htc: Failed to initialize the device [ 314.128607][ T7429] usb 8-1: ath9k_htc: USB layer deinitialized [ 314.145702][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.152309][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.269265][T10561] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 314.301468][ T60] usb 6-1: USB disconnect, device number 40 [ 314.415979][ T7429] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 314.535903][T10563] sctp: [Deprecated]: syz.2.966 (pid 10563) Use of int in max_burst socket option. [ 314.535903][T10563] Use struct sctp_assoc_value instead [ 314.565869][ T7429] usb 8-1: Using ep0 maxpacket: 32 [ 314.571278][ T7429] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 314.575681][ T7429] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 314.583030][ T7429] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 314.586077][ T7429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.588539][ T7429] usb 8-1: Product: syz [ 314.589799][ T7429] usb 8-1: Manufacturer: syz [ 314.591233][ T7429] usb 8-1: SerialNumber: syz [ 314.598462][ T7429] ldusb 8-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 314.704625][T10568] fuse: fd is not a fuse device [ 314.709356][T10568] fuse: fd is not a fuse device [ 314.822183][ T50] usb 8-1: USB disconnect, device number 47 [ 314.840673][ T50] ldusb 8-1:1.0: LD USB Device #0 now disconnected [ 314.842655][T10577] netlink: 80 bytes leftover after parsing attributes in process `syz.0.970'. [ 314.888593][T10583] syzkaller0: entered promiscuous mode [ 314.890509][T10583] syzkaller0: entered allmulticast mode [ 314.960706][T10589] netlink: 'syz.2.973': attribute type 11 has an invalid length. [ 314.963705][T10589] netlink: 148 bytes leftover after parsing attributes in process `syz.2.973'. [ 315.023534][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.975'. [ 315.403478][ T29] libceph: connect (1)[c::]:6789 error -101 [ 315.416704][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 315.436851][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 315.707649][ T29] libceph: connect (1)[c::]:6789 error -101 [ 315.711515][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 315.764036][T10622] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 315.771114][T10622] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 315.779553][T10622] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 315.791056][T10622] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 316.226152][ T60] libceph: connect (1)[c::]:6789 error -101 [ 316.238655][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 316.393061][T10607] ceph: No mds server is up or the cluster is laggy [ 316.532301][T10632] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 316.535880][T10632] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 316.538599][T10632] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 316.541024][T10632] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 316.568413][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 316.756619][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.759096][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.806613][ T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 316.872659][T10641] file system registered [ 316.875862][T10641] unloading [ 316.956145][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 316.963037][ T10] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.966530][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 316.971506][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 316.975112][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.979662][ T10] usb 8-1: Product: 《 [ 316.983286][ T10] usb 8-1: Manufacturer: 秂ᜯဢ嬳藄럸쟰雮ꖇⒹ烯뭓郆✟댵ퟝҐ璫ࠖ¬恇馃㓮֎敎朌 [ 316.987199][ T10] usb 8-1: SerialNumber: ࠚ [ 316.993759][T10633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.130201][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 317.204155][T10634] loop5: detected capacity change from 0 to 4095 [ 317.219454][T10659] FAULT_INJECTION: forcing a failure. [ 317.219454][T10659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.229769][T10659] CPU: 3 UID: 0 PID: 10659 Comm: syz.0.992 Not tainted syzkaller #0 PREEMPT(full) [ 317.229798][T10659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.229805][T10659] Call Trace: [ 317.229810][T10659] [ 317.229815][T10659] dump_stack_lvl+0x100/0x190 [ 317.229835][T10659] should_fail_ex.cold+0x5/0xa [ 317.229849][T10659] _copy_from_user+0x2e/0xd0 [ 317.229868][T10659] kstrtouint_from_user+0xd6/0x1d0 [ 317.229881][T10659] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.229894][T10659] ? __lock_acquire+0x49f/0x1a40 [ 317.229919][T10659] proc_fail_nth_write+0x83/0x220 [ 317.229937][T10659] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.229958][T10659] vfs_write+0x2aa/0x1050 [ 317.229969][T10659] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.229987][T10659] ? __pfx_vfs_write+0x10/0x10 [ 317.229997][T10659] ? find_held_lock+0x2b/0x80 [ 317.230011][T10659] ? __fget_files+0x215/0x3d0 [ 317.230025][T10659] ? __fget_files+0x21f/0x3d0 [ 317.230039][T10659] ksys_write+0x12a/0x250 [ 317.230049][T10659] ? __pfx_ksys_write+0x10/0x10 [ 317.230064][T10659] do_int80_emulation+0x14b/0x720 [ 317.230084][T10659] asm_int80_emulation+0x1a/0x20 [ 317.230096][T10659] RIP: 0023:0xf71b74eb [ 317.230106][T10659] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 317.230117][T10659] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 317.230129][T10659] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f546d5d0 [ 317.230135][T10659] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.230142][T10659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.230148][T10659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.230154][T10659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.230168][T10659] [ 317.272115][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 317.274523][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025e04400: rx timeout, send abort [ 317.306430][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 317.319393][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 317.331802][T10272] Buffer I/O error on dev loop5, logical block 511, async page read [ 317.365055][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.369080][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.413939][ T10] usb 8-1: USB disconnect, device number 48 [ 317.495894][ T7429] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 317.648036][ T7429] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 317.654916][ T7429] usb 6-1: config 0 has no interface number 0 [ 317.658030][ T7429] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.664999][ T7429] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 317.672665][ T7429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.676443][ T7429] usb 6-1: Product: syz [ 317.680411][ T7429] usb 6-1: Manufacturer: syz [ 317.682420][ T7429] usb 6-1: SerialNumber: syz [ 317.688967][ T7429] usb 6-1: config 0 descriptor?? [ 317.700782][ T7429] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 317.745853][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025e07400: rx timeout, send abort [ 317.804151][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025e04400: abort rx timeout. Force session deactivation [ 318.156465][ T5793] usb 6-1: USB disconnect, device number 41 [ 318.248899][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025e07400: abort rx timeout. Force session deactivation [ 318.512217][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 318.526028][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 318.564710][T10690] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 318.646842][T10694] syzkaller0: entered promiscuous mode [ 318.648655][T10694] syzkaller0: entered allmulticast mode [ 318.659335][T10694] tipc: Started in network mode [ 318.661076][T10694] tipc: Node identity ae04a00e0927, cluster identity 4711 [ 318.665942][T10694] tipc: Enabled bearer , priority 0 [ 318.675410][T10694] tipc: Resetting bearer [ 318.681007][T10693] tipc: Resetting bearer [ 318.702783][T10693] tipc: Disabling bearer [ 319.920156][T10715] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 319.946124][ T5793] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 320.002612][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 320.011352][T10722] ubi16: attaching mtd0 [ 320.017306][T10722] ubi16: scanning is finished [ 320.019238][T10722] ubi16: empty MTD device detected [ 320.164507][T10731] sctp: [Deprecated]: syz.0.1011 (pid 10731) Use of int in max_burst socket option. [ 320.164507][T10731] Use struct sctp_assoc_value instead [ 320.240559][T10722] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 320.244068][T10722] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 320.249167][T10722] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 320.252228][T10722] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 320.255342][T10722] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 320.258365][T10722] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 320.261848][T10722] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 393847627 [ 320.267450][T10722] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 320.271696][T10732] ubi16: background thread "ubi_bgt16d" started, PID 10732 [ 320.625840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 320.677569][ T60] libceph: connect (1)[c::]:6789 error -101 [ 320.680982][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 320.719595][ T5741] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 320.804716][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.833877][T10751] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 320.854571][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.002300][ T60] libceph: connect (1)[c::]:6789 error -101 [ 321.019171][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 321.085169][T10757] tipc: Enabling of bearer rejected, failed to enable media [ 321.209145][T10774] pimreg: entered allmulticast mode [ 321.517689][T10771] __nla_validate_parse: 5 callbacks suppressed [ 321.517702][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 321.549837][ T29] libceph: connect (1)[c::]:6789 error -101 [ 321.552494][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 321.942263][T10743] ceph: No mds server is up or the cluster is laggy [ 322.429330][T10798] FAULT_INJECTION: forcing a failure. [ 322.429330][T10798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.434499][T10798] CPU: 2 UID: 0 PID: 10798 Comm: syz.0.1035 Not tainted syzkaller #0 PREEMPT(full) [ 322.434525][T10798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.434536][T10798] Call Trace: [ 322.434543][T10798] [ 322.434550][T10798] dump_stack_lvl+0x100/0x190 [ 322.434580][T10798] should_fail_ex.cold+0x5/0xa [ 322.434602][T10798] _copy_to_user+0x32/0xd0 [ 322.434635][T10798] simple_read_from_buffer+0xcb/0x170 [ 322.434668][T10798] proc_fail_nth_read+0x1af/0x230 [ 322.434699][T10798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.434725][T10798] ? rw_verify_area+0xce/0x6d0 [ 322.434752][T10798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.434777][T10798] vfs_read+0x1e4/0xb40 [ 322.434796][T10798] ? __pfx_vfs_read+0x10/0x10 [ 322.434812][T10798] ? find_held_lock+0x2b/0x80 [ 322.434836][T10798] ? __fget_files+0x215/0x3d0 [ 322.434858][T10798] ? __fget_files+0x21f/0x3d0 [ 322.434882][T10798] ksys_read+0x12a/0x250 [ 322.434900][T10798] ? __pfx_ksys_read+0x10/0x10 [ 322.434924][T10798] do_int80_emulation+0x14b/0x720 [ 322.434957][T10798] asm_int80_emulation+0x1a/0x20 [ 322.434978][T10798] RIP: 0023:0xf71b74eb [ 322.434994][T10798] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 322.435012][T10798] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 322.435031][T10798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 322.435042][T10798] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 322.435052][T10798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.435062][T10798] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.435073][T10798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.435096][T10798] [ 322.437607][T10796] FAULT_INJECTION: forcing a failure. [ 322.437607][T10796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.500775][T10796] CPU: 3 UID: 0 PID: 10796 Comm: syz.1.1033 Not tainted syzkaller #0 PREEMPT(full) [ 322.500792][T10796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.500799][T10796] Call Trace: [ 322.500805][T10796] [ 322.500811][T10796] dump_stack_lvl+0x100/0x190 [ 322.500838][T10796] should_fail_ex.cold+0x5/0xa [ 322.500857][T10796] _copy_to_user+0x32/0xd0 [ 322.500897][T10796] simple_read_from_buffer+0xcb/0x170 [ 322.500919][T10796] proc_fail_nth_read+0x1af/0x230 [ 322.500937][T10796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.500954][T10796] ? rw_verify_area+0xce/0x6d0 [ 322.500971][T10796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.500987][T10796] vfs_read+0x1e4/0xb40 [ 322.501000][T10796] ? __pfx_vfs_read+0x10/0x10 [ 322.501008][T10796] ? find_held_lock+0x2b/0x80 [ 322.501024][T10796] ? __fget_files+0x215/0x3d0 [ 322.501037][T10796] ? __fget_files+0x21f/0x3d0 [ 322.501052][T10796] ksys_read+0x12a/0x250 [ 322.501062][T10796] ? __pfx_ksys_read+0x10/0x10 [ 322.501076][T10796] do_int80_emulation+0x14b/0x720 [ 322.501096][T10796] asm_int80_emulation+0x1a/0x20 [ 322.501108][T10796] RIP: 0023:0xf71b74eb [ 322.501118][T10796] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 322.501129][T10796] RSP: 002b:00000000f54344bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 322.501141][T10796] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54345d0 [ 322.501148][T10796] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 322.501154][T10796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.501160][T10796] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.501167][T10796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.501181][T10796] [ 322.697852][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 322.936893][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 323.016994][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 323.744697][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 324.040266][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 324.043875][T10835] netlink: 'syz.0.1040': attribute type 30 has an invalid length. [ 324.075953][ T5808] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.081107][ T5808] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.084014][ T5808] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.092271][ T5808] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.103693][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.107280][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.351488][T10845] Bluetooth: MGMT ver 1.23 [ 324.654819][ T42] audit: type=1326 audit(1786126370.062:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.1.1045" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x4000000 [ 325.066994][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 325.191812][T10845] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 325.476127][ T1034] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 325.627801][ T1034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.632573][ T1034] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.636736][ T1034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.642316][ T1034] usb 8-1: config 0 descriptor?? [ 325.855478][ T1034] usbhid 8-1:0.0: can't add hid device: -71 [ 325.858883][ T1034] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 325.863438][ T1034] usb 8-1: USB disconnect, device number 49 [ 326.296028][ T34] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 326.425993][ T5741] Bluetooth: hci0: command 0x0406 tx timeout [ 326.447228][ T34] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 326.450626][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 326.453732][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.459745][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 326.462724][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.465522][ T34] usb 8-1: Product: syz [ 326.466993][ T34] usb 8-1: Manufacturer: syz [ 326.468550][ T34] usb 8-1: SerialNumber: syz [ 327.952012][ T10] usb 8-1: USB disconnect, device number 50 [ 338.588060][T10894] bond2 (unregistering): Released all slaves [ 339.194997][ T42] audit: type=1800 audit(1786126384.602:88): pid=10909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="host_addr" dev="configfs" ino=36019 res=0 errno=0 [ 339.338729][T10912] syzkaller0: entered promiscuous mode [ 339.340867][T10912] syzkaller0: entered allmulticast mode [ 340.118051][T10922] overlayfs: failed to clone upperpath [ 340.301447][T10927] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 340.423713][T10933] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 341.108044][T10940] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 341.145967][T10940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.167726][T10940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.170082][T10940] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 341.173702][T10940] bond2: (slave ipip0): Error -95 calling set_mac_address [ 342.630673][T10985] netlink: 'syz.2.1075': attribute type 2 has an invalid length. [ 342.645910][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 342.775888][ T10] usb 6-1: device descriptor read/64, error -71 [ 343.025889][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 343.187346][ T10] usb 6-1: device descriptor read/64, error -71 [ 343.300062][ T10] usb usb6-port1: attempt power cycle [ 343.578146][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'. [ 343.656205][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 343.678217][ T10] usb 6-1: device descriptor read/8, error -71 [ 343.916045][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 343.937030][ T10] usb 6-1: device descriptor read/8, error -71 [ 344.054182][ T10] usb usb6-port1: unable to enumerate USB device [ 344.119263][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 344.464202][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'. [ 345.368849][T11069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.421493][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.424603][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.561883][T11081] FAULT_INJECTION: forcing a failure. [ 345.561883][T11081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.566311][T11081] CPU: 3 UID: 0 PID: 11081 Comm: syz.3.1098 Not tainted syzkaller #0 PREEMPT(full) [ 345.566328][T11081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.566335][T11081] Call Trace: [ 345.566339][T11081] [ 345.566344][T11081] dump_stack_lvl+0x100/0x190 [ 345.566363][T11081] should_fail_ex.cold+0x5/0xa [ 345.566378][T11081] _copy_to_user+0x32/0xd0 [ 345.566396][T11081] simple_read_from_buffer+0xcb/0x170 [ 345.566432][T11081] proc_fail_nth_read+0x1af/0x230 [ 345.566451][T11081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.566468][T11081] ? rw_verify_area+0xce/0x6d0 [ 345.566485][T11081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.566501][T11081] vfs_read+0x1e4/0xb40 [ 345.566513][T11081] ? __pfx_vfs_read+0x10/0x10 [ 345.566522][T11081] ? find_held_lock+0x2b/0x80 [ 345.566537][T11081] ? __fget_files+0x215/0x3d0 [ 345.566551][T11081] ? __fget_files+0x21f/0x3d0 [ 345.566565][T11081] ksys_read+0x12a/0x250 [ 345.566575][T11081] ? __pfx_ksys_read+0x10/0x10 [ 345.566589][T11081] do_int80_emulation+0x14b/0x720 [ 345.566608][T11081] asm_int80_emulation+0x1a/0x20 [ 345.566620][T11081] RIP: 0023:0xf71a74eb [ 345.566630][T11081] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 345.566641][T11081] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 345.566653][T11081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 345.566660][T11081] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 345.566666][T11081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.566672][T11081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.566678][T11081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.566692][T11081] [ 345.655128][ T5741] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 345.657679][ T5741] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 345.724870][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 345.728152][T11086] FAULT_INJECTION: forcing a failure. [ 345.728152][T11086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.732195][T11086] CPU: 1 UID: 0 PID: 11086 Comm: syz.1.1100 Not tainted syzkaller #0 PREEMPT(full) [ 345.732209][T11086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.732216][T11086] Call Trace: [ 345.732220][T11086] [ 345.732224][T11086] dump_stack_lvl+0x100/0x190 [ 345.732243][T11086] should_fail_ex.cold+0x5/0xa [ 345.732257][T11086] _copy_to_user+0x32/0xd0 [ 345.732276][T11086] simple_read_from_buffer+0xcb/0x170 [ 345.732297][T11086] proc_fail_nth_read+0x1af/0x230 [ 345.732315][T11086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.732332][T11086] ? rw_verify_area+0xce/0x6d0 [ 345.732350][T11086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.732366][T11086] vfs_read+0x1e4/0xb40 [ 345.732378][T11086] ? __pfx_vfs_read+0x10/0x10 [ 345.732387][T11086] ? find_held_lock+0x2b/0x80 [ 345.732402][T11086] ? __fget_files+0x215/0x3d0 [ 345.732415][T11086] ? __fget_files+0x21f/0x3d0 [ 345.732430][T11086] ksys_read+0x12a/0x250 [ 345.732439][T11086] ? __pfx_ksys_read+0x10/0x10 [ 345.732454][T11086] do_int80_emulation+0x14b/0x720 [ 345.732477][T11086] asm_int80_emulation+0x1a/0x20 [ 345.732489][T11086] RIP: 0023:0xf71b74eb [ 345.732499][T11086] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 345.732510][T11086] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 345.732521][T11086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54765d0 [ 345.732528][T11086] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 345.732535][T11086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.732541][T11086] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.732547][T11086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.732561][T11086] [ 346.136604][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'. [ 346.256985][T11100] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 346.271710][T11104] FAULT_INJECTION: forcing a failure. [ 346.271710][T11104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.278960][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(full) [ 346.278978][T11104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.278985][T11104] Call Trace: [ 346.278989][T11104] [ 346.278994][T11104] dump_stack_lvl+0x100/0x190 [ 346.279031][T11104] should_fail_ex.cold+0x5/0xa [ 346.279045][T11104] _copy_from_user+0x2e/0xd0 [ 346.279064][T11104] kstrtouint_from_user+0xd6/0x1d0 [ 346.279077][T11104] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 346.279090][T11104] ? __lock_acquire+0x49f/0x1a40 [ 346.279119][T11104] proc_fail_nth_write+0x83/0x220 [ 346.279137][T11104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.279158][T11104] vfs_write+0x2aa/0x1050 [ 346.279171][T11104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.279189][T11104] ? __pfx_vfs_write+0x10/0x10 [ 346.279198][T11104] ? find_held_lock+0x2b/0x80 [ 346.279213][T11104] ? __fget_files+0x215/0x3d0 [ 346.279230][T11104] ? __fget_files+0x21f/0x3d0 [ 346.279244][T11104] ksys_write+0x12a/0x250 [ 346.279254][T11104] ? __pfx_ksys_write+0x10/0x10 [ 346.279269][T11104] do_int80_emulation+0x14b/0x720 [ 346.279289][T11104] asm_int80_emulation+0x1a/0x20 [ 346.279301][T11104] RIP: 0023:0xf71b74eb [ 346.279310][T11104] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 346.279321][T11104] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 346.279333][T11104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 346.279340][T11104] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.279347][T11104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.279353][T11104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.279360][T11104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.279374][T11104] [ 346.366736][T11105] tmpfs: Bad value for 'mpol' [ 346.631200][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'. [ 346.862624][T11125] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 346.865213][T11125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 346.871152][T11125] vhci_hcd vhci_hcd.0: Device attached [ 346.979658][T11132] erofs (device sr0): cannot find valid erofs superblock [ 347.000036][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 347.010912][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.013779][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.143609][T11137] kAFS: unable to lookup cell 'foosyz' [ 347.185871][ T60] usb 38-1: SetAddress Request (6) to port 0 [ 347.188230][ T60] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 347.248736][T11140] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.462877][T11128] vhci_hcd: connection reset by peer [ 347.471950][ T5879] vhci_hcd vhci_hcd.0: stop threads [ 347.473695][ T5879] vhci_hcd vhci_hcd.0: release socket [ 347.476515][ T5879] vhci_hcd vhci_hcd.0: disconnect device [ 347.748560][ T1034] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 347.907165][ T1034] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.910397][ T1034] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 347.913562][ T1034] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 347.916631][ T1034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.922866][ T1034] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 347.931336][ T1034] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 348.253842][T11164] FAULT_INJECTION: forcing a failure. [ 348.253842][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.258711][T11164] CPU: 2 UID: 0 PID: 11164 Comm: syz.0.1124 Not tainted syzkaller #0 PREEMPT(full) [ 348.258748][T11164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.258759][T11164] Call Trace: [ 348.258767][T11164] [ 348.258774][T11164] dump_stack_lvl+0x100/0x190 [ 348.258803][T11164] should_fail_ex.cold+0x5/0xa [ 348.258824][T11164] _copy_to_user+0x32/0xd0 [ 348.258847][T11164] simple_read_from_buffer+0xcb/0x170 [ 348.258868][T11164] proc_fail_nth_read+0x1af/0x230 [ 348.258886][T11164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.258906][T11164] ? rw_verify_area+0xce/0x6d0 [ 348.258923][T11164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.258939][T11164] vfs_read+0x1e4/0xb40 [ 348.258951][T11164] ? __pfx_vfs_read+0x10/0x10 [ 348.258960][T11164] ? find_held_lock+0x2b/0x80 [ 348.258976][T11164] ? __fget_files+0x215/0x3d0 [ 348.258989][T11164] ? __fget_files+0x21f/0x3d0 [ 348.259003][T11164] ksys_read+0x12a/0x250 [ 348.259013][T11164] ? __pfx_ksys_read+0x10/0x10 [ 348.259028][T11164] do_int80_emulation+0x14b/0x720 [ 348.259049][T11164] asm_int80_emulation+0x1a/0x20 [ 348.259061][T11164] RIP: 0023:0xf71b74eb [ 348.259070][T11164] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.259094][T11164] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 348.259107][T11164] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 348.259114][T11164] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 348.259121][T11164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.259127][T11164] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.259134][T11164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.259148][T11164] [ 348.673782][T11175] Option ' ' to dns_resolver key: bad/missing value [ 348.682397][T11175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 348.684641][T11175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.688300][T11175] vhci_hcd vhci_hcd.0: Device attached [ 348.763379][T11177] vhci_hcd: connection closed [ 348.763850][ T12] vhci_hcd vhci_hcd.1: stop threads [ 348.771361][T11188] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 348.772443][ T12] vhci_hcd vhci_hcd.1: release socket [ 348.777951][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 348.829734][T11189] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 348.834871][T11189] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 349.535929][ T5793] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 349.687293][ T5793] usb 6-1: Using ep0 maxpacket: 32 [ 349.690852][ T5793] usb 6-1: config 0 has no interfaces? [ 349.696534][ T5793] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 349.702118][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 349.707219][ T5793] usb 6-1: Product: syz [ 349.708740][ T5793] usb 6-1: Manufacturer: syz [ 349.714847][ T5793] usb 6-1: SerialNumber: syz [ 349.723166][ T5793] usb 6-1: config 0 descriptor?? [ 349.938254][ T50] usb 6-1: USB disconnect, device number 46 [ 350.518534][ T50] usb 8-1: USB disconnect, device number 51 [ 350.539203][ T50] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 350.546271][ T50] spcp8x5 8-1:1.0: device disconnected [ 350.547019][T11225] FAULT_INJECTION: forcing a failure. [ 350.547019][T11225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.553520][T11225] CPU: 1 UID: 0 PID: 11225 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) [ 350.553547][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.553559][T11225] Call Trace: [ 350.553565][T11225] [ 350.553573][T11225] dump_stack_lvl+0x100/0x190 [ 350.553605][T11225] should_fail_ex.cold+0x5/0xa [ 350.553629][T11225] _copy_to_user+0x32/0xd0 [ 350.553658][T11225] simple_read_from_buffer+0xcb/0x170 [ 350.553693][T11225] proc_fail_nth_read+0x1af/0x230 [ 350.553722][T11225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.553752][T11225] ? rw_verify_area+0xce/0x6d0 [ 350.553777][T11225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.553804][T11225] vfs_read+0x1e4/0xb40 [ 350.553826][T11225] ? __pfx_vfs_read+0x10/0x10 [ 350.553842][T11225] ? find_held_lock+0x2b/0x80 [ 350.553869][T11225] ? __fget_files+0x215/0x3d0 [ 350.553893][T11225] ? __fget_files+0x21f/0x3d0 [ 350.553918][T11225] ksys_read+0x12a/0x250 [ 350.553942][T11225] ? __pfx_ksys_read+0x10/0x10 [ 350.553968][T11225] do_int80_emulation+0x14b/0x720 [ 350.554000][T11225] asm_int80_emulation+0x1a/0x20 [ 350.554021][T11225] RIP: 0023:0xf71b74eb [ 350.554037][T11225] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 350.554055][T11225] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 350.554075][T11225] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 350.554087][T11225] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 350.554099][T11225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.554110][T11225] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.554120][T11225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.554145][T11225] [ 350.639978][T11230] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 350.824477][ T42] audit: type=1326 audit(1786126396.232:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 350.834613][ T42] audit: type=1326 audit(1786126396.232:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 350.844410][ T42] audit: type=1326 audit(1786126396.232:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 350.848769][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.852772][ T42] audit: type=1326 audit(1786126396.232:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 350.856337][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.864145][ T42] audit: type=1326 audit(1786126396.232:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf707efec code=0x7ffc0000 [ 350.871005][ T42] audit: type=1326 audit(1786126396.232:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 350.879884][ T42] audit: type=1326 audit(1786126396.232:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 350.886505][ T42] audit: type=1326 audit(1786126396.232:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71b74eb code=0x7ffc0000 [ 350.893115][ T42] audit: type=1326 audit(1786126396.232:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 350.903519][ T42] audit: type=1326 audit(1786126396.232:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.0.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 350.930131][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1142'. [ 351.019783][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 351.462021][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.468902][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.668990][T11269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 351.855842][T11274] fuse: fd is not a fuse device [ 352.266980][ T60] usb 38-1: device descriptor read/8, error -110 [ 352.275907][ T3258] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 352.425910][ T3258] usb 6-1: Using ep0 maxpacket: 32 [ 352.430625][ T3258] usb 6-1: config 0 has no interfaces? [ 352.435565][ T3258] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 352.444576][ T3258] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 352.454574][ T3258] usb 6-1: Product: syz [ 352.456029][ T3258] usb 6-1: Manufacturer: syz [ 352.457587][ T3258] usb 6-1: SerialNumber: syz [ 352.472016][ T3258] usb 6-1: config 0 descriptor?? [ 352.657425][ T60] usb usb38-port1: attempt power cycle [ 352.701941][ T5793] usb 6-1: USB disconnect, device number 47 [ 352.763448][T11322] FAULT_INJECTION: forcing a failure. [ 352.763448][T11322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.768882][T11322] CPU: 3 UID: 0 PID: 11322 Comm: syz.3.1165 Not tainted syzkaller #0 PREEMPT(full) [ 352.768906][T11322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.768916][T11322] Call Trace: [ 352.768923][T11322] [ 352.768929][T11322] dump_stack_lvl+0x100/0x190 [ 352.768958][T11322] should_fail_ex.cold+0x5/0xa [ 352.768992][T11322] _copy_to_user+0x32/0xd0 [ 352.769019][T11322] simple_read_from_buffer+0xcb/0x170 [ 352.769048][T11322] proc_fail_nth_read+0x1af/0x230 [ 352.769072][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.769095][T11322] ? rw_verify_area+0xce/0x6d0 [ 352.769118][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.769140][T11322] vfs_read+0x1e4/0xb40 [ 352.769158][T11322] ? __pfx_vfs_read+0x10/0x10 [ 352.769171][T11322] ? find_held_lock+0x2b/0x80 [ 352.769193][T11322] ? __fget_files+0x215/0x3d0 [ 352.769212][T11322] ? __fget_files+0x21f/0x3d0 [ 352.769255][T11322] ksys_read+0x12a/0x250 [ 352.769272][T11322] ? __pfx_ksys_read+0x10/0x10 [ 352.769293][T11322] do_int80_emulation+0x14b/0x720 [ 352.769320][T11322] asm_int80_emulation+0x1a/0x20 [ 352.769337][T11322] RIP: 0023:0xf71a74eb [ 352.769350][T11322] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 352.769366][T11322] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 352.769383][T11322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 352.769398][T11322] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 352.769406][T11322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.769415][T11322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.769424][T11322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.769445][T11322] [ 352.885942][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.889651][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.930377][T11324] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 352.963996][T11324] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 352.968021][T11324] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 352.972903][T11324] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 352.976433][T11324] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 352.995652][T11324] pci 0000:00:01.0: Adding to iommu group 1 [ 353.003151][T11324] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 353.005691][T11324] pci 0000:00:01.0: vgaarb: bridge control possible [ 353.008082][T11324] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 353.053516][T11324] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 353.060869][T11324] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 353.069484][T11324] pci 0000:00:04.0: PCI bridge to [bus 01] [ 353.071455][T11324] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 353.080132][T11324] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 353.094658][T11324] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 353.118881][T11324] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 353.142969][T11324] [drm] Found bochs VGA, ID 0xb0c5. [ 353.147748][T11324] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 353.185644][T11324] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 353.229948][ T60] usb usb38-port1: unable to enumerate USB device [ 353.359902][T11324] Console: switching to colour frame buffer device 160x50 [ 353.412249][T11324] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 353.415075][T11337] FAULT_INJECTION: forcing a failure. [ 353.415075][T11337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.419462][T11337] CPU: 1 UID: 0 PID: 11337 Comm: syz.1.1169 Not tainted syzkaller #0 PREEMPT(full) [ 353.419478][T11337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.419484][T11337] Call Trace: [ 353.419516][T11337] [ 353.419520][T11337] dump_stack_lvl+0x100/0x190 [ 353.419627][T11337] should_fail_ex.cold+0x5/0xa [ 353.419653][T11337] _copy_to_user+0x32/0xd0 [ 353.419706][T11337] simple_read_from_buffer+0xcb/0x170 [ 353.419745][T11337] proc_fail_nth_read+0x1af/0x230 [ 353.419763][T11337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.419781][T11337] ? rw_verify_area+0xce/0x6d0 [ 353.419805][T11337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.419821][T11337] vfs_read+0x1e4/0xb40 [ 353.419833][T11337] ? __pfx_vfs_read+0x10/0x10 [ 353.419842][T11337] ? find_held_lock+0x2b/0x80 [ 353.419869][T11337] ? __fget_files+0x215/0x3d0 [ 353.419883][T11337] ? __fget_files+0x21f/0x3d0 [ 353.419897][T11337] ksys_read+0x12a/0x250 [ 353.419907][T11337] ? __pfx_ksys_read+0x10/0x10 [ 353.419922][T11337] do_int80_emulation+0x14b/0x720 [ 353.419985][T11337] asm_int80_emulation+0x1a/0x20 [ 353.419997][T11337] RIP: 0023:0xf71b74eb [ 353.420008][T11337] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 353.420019][T11337] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 353.420052][T11337] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54765d0 [ 353.420059][T11337] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 353.420066][T11337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.420072][T11337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 353.420078][T11337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.420093][T11337] [ 353.633986][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 353.886102][T11354] binder: 11353:11354 ioctl c400941b 80000740 returned -22 [ 353.895873][ T1034] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 354.046556][ T1034] usb 8-1: Using ep0 maxpacket: 32 [ 354.050235][ T1034] usb 8-1: config 0 has no interfaces? [ 354.055127][ T1034] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.061052][ T1034] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.067276][ T1034] usb 8-1: Product: syz [ 354.068754][ T1034] usb 8-1: Manufacturer: syz [ 354.070943][ T1034] usb 8-1: SerialNumber: syz [ 354.077434][ T1034] usb 8-1: config 0 descriptor?? [ 354.102884][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'. [ 354.297942][ T10] usb 8-1: USB disconnect, device number 52 [ 355.105930][ T10] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 355.155875][ T1034] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 355.255888][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 355.261566][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 355.266385][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 355.273242][ T10] usb 8-1: string descriptor 0 read error: -22 [ 355.276053][ T10] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 355.279759][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.286925][T11375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.293267][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.296440][ T10] usb 8-1: MIDIStreaming interface descriptor not found [ 355.299454][ T1034] usb 6-1: device descriptor read/64, error -71 [ 355.500538][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.503610][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.508507][ T60] usb 8-1: USB disconnect, device number 53 [ 355.535902][ T1034] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 355.666373][ T1034] usb 6-1: device descriptor read/64, error -71 [ 355.776393][ T1034] usb usb6-port1: attempt power cycle [ 356.117731][ T1034] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 356.146637][ T1034] usb 6-1: device descriptor read/8, error -71 [ 356.386080][ T1034] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 356.407697][ T1034] usb 6-1: device descriptor read/8, error -71 [ 356.526916][ T1034] usb usb6-port1: unable to enumerate USB device [ 356.777656][T11394] binder: 11393:11394 ioctl c400941b 80000740 returned -22 [ 357.515881][ T1034] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 357.688556][ T1034] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.693648][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.702021][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.707944][ T1034] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.727392][ T1034] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.730528][ T1034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.736567][T11397] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.745057][ T1034] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.313170][ T50] usb 8-1: USB disconnect, device number 54 [ 358.882052][T11419] lo: entered allmulticast mode [ 358.885523][T11419] tunl0: entered allmulticast mode [ 358.889736][T11419] gre0: entered allmulticast mode [ 358.892697][T11419] gretap0: entered allmulticast mode [ 358.895527][T11419] erspan0: entered allmulticast mode [ 358.899129][T11419] ip_vti0: entered allmulticast mode [ 358.902285][T11419] ip6_vti0: entered allmulticast mode [ 358.905294][T11419] sit0: entered allmulticast mode [ 358.908567][T11419] ip6tnl0: entered allmulticast mode [ 358.911510][T11419] ip6gre0: entered allmulticast mode [ 358.914403][T11419] syz_tun: entered allmulticast mode [ 358.917323][T11419] ip6gretap0: entered allmulticast mode [ 358.920019][T11419] bridge0: entered allmulticast mode [ 358.923107][T11419] vcan0: entered allmulticast mode [ 358.926118][T11419] bond0: entered allmulticast mode [ 358.927968][T11419] bond_slave_0: entered allmulticast mode [ 358.929920][T11419] bond_slave_1: entered allmulticast mode [ 358.933557][T11419] `: entered allmulticast mode [ 358.938553][T11419] team_slave_0: entered allmulticast mode [ 358.948950][T11419] 2: entered allmulticast mode [ 358.952186][T11419] nlmon0: entered allmulticast mode [ 358.955160][T11419] batadv0: entered allmulticast mode [ 358.964740][T11419] vxcan0: entered allmulticast mode [ 358.969643][T11419] vxcan1: entered allmulticast mode [ 358.972138][T11419] veth0: entered allmulticast mode [ 358.976815][T11419] veth1: entered allmulticast mode [ 358.980583][T11419] wg0: entered allmulticast mode [ 358.987942][T11419] wg1: entered allmulticast mode [ 358.991287][T11419] wg2: entered allmulticast mode [ 358.993634][T11419] veth0_to_bridge: entered allmulticast mode [ 358.998241][T11419] bridge_slave_0: left promiscuous mode [ 359.004645][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.054805][T11419] veth1_to_bridge: entered allmulticast mode [ 359.072141][T11419] bridge_slave_1: left promiscuous mode [ 359.074972][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.076133][T11428] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 359.084116][T11428] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 359.095513][T11419] veth0_to_bond: entered allmulticast mode [ 359.211013][T11419] bond0: (slave bond_slave_0): Releasing backup interface [ 359.218827][T11419] veth1_to_bond: entered allmulticast mode [ 359.223438][T11419] bond0: (slave bond_slave_1): Releasing backup interface [ 359.230240][T11419] veth0_to_team: entered allmulticast mode [ 359.242219][T11419] `: Port device team_slave_0 removed [ 359.244737][T11419] veth1_to_team: entered allmulticast mode [ 359.252456][T11419] `: Port device 12 removed [ 359.254991][T11419] veth0_to_batadv: entered allmulticast mode [ 359.258028][T11419] batadv_slave_0: entered allmulticast mode [ 359.260386][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.262908][T11419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.732248][T11419] veth1_to_batadv: entered allmulticast mode [ 359.735257][T11419] batadv_slave_1: entered allmulticast mode [ 359.737932][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.740674][T11419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.746962][T11419] xfrm0: entered allmulticast mode [ 359.752236][T11419] veth0_to_hsr: entered allmulticast mode [ 359.754618][T11419] hsr_slave_0: entered allmulticast mode [ 359.757720][T11419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.904035][T11438] FAULT_INJECTION: forcing a failure. [ 359.904035][T11438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.923365][T11438] CPU: 2 UID: 0 PID: 11438 Comm: syz.0.1198 Not tainted syzkaller #0 PREEMPT(full) [ 359.923385][T11438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.923405][T11438] Call Trace: [ 359.923410][T11438] [ 359.923415][T11438] dump_stack_lvl+0x100/0x190 [ 359.923435][T11438] should_fail_ex.cold+0x5/0xa [ 359.923449][T11438] _copy_to_user+0x32/0xd0 [ 359.923469][T11438] simple_read_from_buffer+0xcb/0x170 [ 359.923490][T11438] proc_fail_nth_read+0x1af/0x230 [ 359.923508][T11438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.923525][T11438] ? rw_verify_area+0xce/0x6d0 [ 359.923543][T11438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.923573][T11438] vfs_read+0x1e4/0xb40 [ 359.923585][T11438] ? __pfx_vfs_read+0x10/0x10 [ 359.923594][T11438] ? find_held_lock+0x2b/0x80 [ 359.923610][T11438] ? __fget_files+0x215/0x3d0 [ 359.923623][T11438] ? __fget_files+0x21f/0x3d0 [ 359.923637][T11438] ksys_read+0x12a/0x250 [ 359.923647][T11438] ? __pfx_ksys_read+0x10/0x10 [ 359.923662][T11438] do_int80_emulation+0x14b/0x720 [ 359.923681][T11438] asm_int80_emulation+0x1a/0x20 [ 359.923694][T11438] RIP: 0023:0xf71b74eb [ 359.923704][T11438] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 359.923715][T11438] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 359.923727][T11438] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 359.923734][T11438] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 359.923740][T11438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.923746][T11438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 359.923753][T11438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.923766][T11438] [ 360.190991][T11449] loop5: detected capacity change from 0 to 7 [ 360.260942][T11449] Dev loop5: unable to read RDB block 7 [ 360.267671][T11449] loop5: unable to read partition table [ 360.272912][T11449] loop5: partition table beyond EOD, truncated [ 360.278466][T11449] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 360.458807][T11452] binder: 11451:11452 ioctl c400941b 80000740 returned -22 [ 360.505918][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 360.512106][ T5741] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 360.939005][T11458] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 360.941213][T11458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.950991][T11458] vhci_hcd vhci_hcd.0: Device attached [ 360.956841][T11461] vhci_hcd: connection closed [ 360.960231][ T12] vhci_hcd vhci_hcd.1: stop threads [ 360.966027][ T12] vhci_hcd vhci_hcd.1: release socket [ 360.967697][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 361.036309][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 361.197148][T11471] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 361.894748][T11503] binder: 11500:11503 ioctl c400941b 80000740 returned -22 [ 361.994224][T11509] openvswitch: netlink: Missing key (keys=40, expected=100) [ 362.785672][T11548] syzkaller0: entered promiscuous mode [ 362.787458][T11548] syzkaller0: entered allmulticast mode [ 362.825793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 363.762227][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'. [ 363.773478][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'. [ 365.584790][T11579] binder: 11577:11579 ioctl c400941b 80000740 returned -22 [ 365.668776][T11575] kvm: kvm [11574]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc2) = 0xffffc6f0000f0106 [ 365.831509][T11583] capability: warning: `syz.3.1239' uses 32-bit capabilities (legacy support in use) [ 366.239214][T11596] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 366.246311][T11595] IPVS: stopping master sync thread 11596 ... [ 366.396067][ T10] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 366.559951][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.567564][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 366.572368][ T10] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 366.578494][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.592017][ T10] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 366.617758][ T10] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 366.626932][T11611] lo: entered allmulticast mode [ 366.638342][T11611] tunl0: entered allmulticast mode [ 366.640665][T11611] gre0: entered allmulticast mode [ 366.646885][T11611] gretap0: entered allmulticast mode [ 366.649783][T11611] erspan0: left promiscuous mode [ 366.651783][T11611] bridge0: port 3(erspan0) entered disabled state [ 366.656983][T11611] ip_vti0: entered allmulticast mode [ 366.659323][T11611] ip6_vti0: entered allmulticast mode [ 366.661735][T11611] sit0: entered allmulticast mode [ 366.663994][T11611] ip6tnl0: entered allmulticast mode [ 366.672860][T11611] ip6gre0: entered allmulticast mode [ 366.675692][T11611] syz_tun: entered allmulticast mode [ 366.684077][T11611] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 366.815798][T11614] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 366.826205][T11614] nfs4: Unknown parameter '\:' [ 367.245514][T11627] 8021q: VLANs not supported on ip6tnl0 [ 367.284889][T11631] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 367.289241][T11629] IPVS: stopping master sync thread 11631 ... [ 367.300291][T11632] macvlan2: entered allmulticast mode [ 367.302258][T11632] team0: Device macvlan2 is already an upper device of the team interface [ 367.520506][T11635] FAULT_INJECTION: forcing a failure. [ 367.520506][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.525146][T11635] CPU: 3 UID: 0 PID: 11635 Comm: syz.0.1256 Not tainted syzkaller #0 PREEMPT(full) [ 367.525177][T11635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.525185][T11635] Call Trace: [ 367.525190][T11635] [ 367.525196][T11635] dump_stack_lvl+0x100/0x190 [ 367.525215][T11635] should_fail_ex.cold+0x5/0xa [ 367.525229][T11635] _copy_from_iter+0x1f4/0x1690 [ 367.525249][T11635] ? irqentry_exit+0x24d/0xa00 [ 367.525266][T11635] ? lockdep_hardirqs_on+0x78/0x100 [ 367.525281][T11635] ? __pfx__copy_from_iter+0x10/0x10 [ 367.525305][T11635] sctp_user_addto_chunk+0x84/0x240 [ 367.525336][T11635] sctp_datamsg_from_user+0x60b/0x1360 [ 367.525359][T11635] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 367.525370][T11635] ? __asan_memmove+0x30/0x60 [ 367.525396][T11635] ? sctp_assoc_set_primary+0x276/0x310 [ 367.525408][T11635] ? sctp_assoc_add_peer+0x256/0x1550 [ 367.525423][T11635] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 367.525434][T11635] ? sctp_connect_new_asoc+0x41e/0x770 [ 367.525448][T11635] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 367.525461][T11635] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 367.525473][T11635] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 367.525486][T11635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.525513][T11635] sctp_sendmsg+0x1144/0x22e0 [ 367.525528][T11635] ? __pfx___might_resched+0x10/0x10 [ 367.525558][T11635] ? __pfx_sctp_sendmsg+0x10/0x10 [ 367.525572][T11635] ? aa_sk_perm+0x309/0xaa0 [ 367.525592][T11635] ? __might_fault+0xc5/0x140 [ 367.525612][T11635] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 367.525625][T11635] ? __pfx_sctp_sendmsg+0x10/0x10 [ 367.525639][T11635] inet_sendmsg+0x11c/0x140 [ 367.525678][T11635] __sys_sendto+0x453/0x4e0 [ 367.525698][T11635] ? __pfx_inet_sendmsg+0x10/0x10 [ 367.525715][T11635] ? __pfx___sys_sendto+0x10/0x10 [ 367.525740][T11635] ? fput+0x79/0x100 [ 367.525753][T11635] ? ksys_write+0x1ac/0x250 [ 367.525765][T11635] __ia32_sys_sendto+0xdd/0x1b0 [ 367.525780][T11635] ? __do_fast_syscall_32+0x98/0x970 [ 367.525796][T11635] ? lockdep_hardirqs_on+0x78/0x100 [ 367.525811][T11635] __do_fast_syscall_32+0xe7/0x970 [ 367.525827][T11635] ? lockdep_hardirqs_on+0x78/0x100 [ 367.525844][T11635] do_fast_syscall_32+0x32/0x70 [ 367.525860][T11635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.525875][T11635] RIP: 0023:0xf707efec [ 367.525890][T11635] Code: Unable to access opcode bytes at 0xf707efc2. [ 367.525895][T11635] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 367.525907][T11635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 367.525914][T11635] RDX: 0000000000034000 RSI: 0000000000040810 RDI: 0000000080000480 [ 367.525920][T11635] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 367.525927][T11635] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 367.525933][T11635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.525947][T11635] [ 367.811697][T11642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.425934][ T5829] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 368.577388][ T5829] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.580753][ T5829] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 368.583735][ T5829] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.591251][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.597990][T11655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 368.604874][ T5829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.190123][ T5829] usb 6-1: USB disconnect, device number 52 [ 369.396467][ T60] usb 8-1: USB disconnect, device number 55 [ 369.412175][ T60] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 369.419118][ T60] spcp8x5 8-1:1.0: device disconnected [ 369.470799][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 369.470812][ T42] audit: type=1800 audit(1786126414.882:102): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1263" name="nullb0" dev="tmpfs" ino=2172 res=0 errno=0 [ 369.497173][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1266'. [ 369.711283][T11689] Invalid ELF header type: 3 != 1 [ 369.789320][ T42] audit: type=1326 audit(1786126415.202:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.2.1274" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x0 [ 370.747744][T11716] lo: entered allmulticast mode [ 370.750029][T11716] tunl0: entered allmulticast mode [ 370.752167][T11716] gre0: entered allmulticast mode [ 370.754321][T11716] gretap0: entered allmulticast mode [ 370.756749][T11716] erspan0: entered allmulticast mode [ 370.758961][T11716] ip_vti0: entered allmulticast mode [ 370.761103][T11716] ip6_vti0: entered allmulticast mode [ 370.763285][T11716] sit0: entered allmulticast mode [ 370.765391][T11716] ip6tnl0: entered allmulticast mode [ 370.767909][T11716] ip6gre0: entered allmulticast mode [ 370.770151][T11716] syz_tun: entered allmulticast mode [ 370.772303][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.774619][T11716] bridge0: port 2(bridge_slave_1) entered listening state [ 370.777079][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.779289][T11716] bridge0: port 1(bridge_slave_0) entered listening state [ 370.782131][T11716] bridge0: entered allmulticast mode [ 370.784761][T11716] vcan0: entered allmulticast mode [ 370.787354][T11716] bond0: entered allmulticast mode [ 370.789008][T11716] bond_slave_0: entered allmulticast mode [ 370.790781][T11716] bond_slave_1: entered allmulticast mode [ 370.793200][T11716] team0: entered allmulticast mode [ 370.794870][T11716] team_slave_0: entered allmulticast mode [ 370.797882][T11716] 2: entered allmulticast mode [ 370.800040][T11716] dummy0: entered allmulticast mode [ 370.802498][T11716] nlmon0: entered allmulticast mode [ 370.804620][T11716] batadv0: entered allmulticast mode [ 370.806907][T11716] veth0: entered allmulticast mode [ 370.808953][T11716] veth1: entered allmulticast mode [ 370.811120][T11716] wg0: entered allmulticast mode [ 370.813368][T11716] wg1: entered allmulticast mode [ 370.815321][T11716] wg2: entered allmulticast mode [ 370.817539][T11716] veth0_to_bridge: entered allmulticast mode [ 370.820096][T11716] bridge_slave_0: left promiscuous mode [ 370.821991][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.826554][T11716] veth1_to_bridge: entered allmulticast mode [ 370.829377][T11716] bridge_slave_1: left promiscuous mode [ 370.831372][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.838354][T11716] veth0_to_bond: entered allmulticast mode [ 370.842342][T11716] bond0: (slave bond_slave_0): Releasing backup interface [ 370.857768][T11716] veth1_to_bond: entered allmulticast mode [ 370.862302][T11716] bond0: (slave bond_slave_1): Releasing backup interface [ 370.867236][T11716] veth0_to_team: entered allmulticast mode [ 370.877247][T11716] team0: Port device team_slave_0 removed [ 370.879435][T11716] veth1_to_team: entered allmulticast mode [ 370.889369][T11716] team0: Port device 12 removed [ 370.891724][T11716] veth0_to_batadv: entered allmulticast mode [ 370.894202][T11716] batadv_slave_0: entered allmulticast mode [ 370.897179][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.899615][T11716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.902946][T11716] veth1_to_batadv: entered allmulticast mode [ 370.907494][T11716] batadv_slave_1: entered allmulticast mode [ 370.909772][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.912143][T11716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.967942][T11716] xfrm0: entered allmulticast mode [ 370.970272][T11716] veth0_to_hsr: entered allmulticast mode [ 370.972524][T11716] hsr_slave_0: entered allmulticast mode [ 370.974741][T11716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.463696][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.470062][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.480202][T11729] block nbd0: NBD_DISCONNECT [ 371.735586][T11733] pim6reg: entered allmulticast mode [ 371.743649][T11733] pim6reg: left allmulticast mode [ 372.028738][T11745] lo: entered allmulticast mode [ 372.034925][T11745] tunl0: entered allmulticast mode [ 372.038089][T11745] gre0: entered allmulticast mode [ 372.040778][T11745] gretap0: entered allmulticast mode [ 372.042809][T11745] erspan0: entered allmulticast mode [ 372.044631][T11745] ip_vti0: entered allmulticast mode [ 372.046709][T11745] ip6_vti0: entered allmulticast mode [ 372.048595][T11745] sit0: entered allmulticast mode [ 372.050976][T11745] ip6tnl0: entered allmulticast mode [ 372.053053][T11745] ip6gre0: entered allmulticast mode [ 372.055159][T11745] syz_tun: entered allmulticast mode [ 372.057567][T11745] ip6gretap0: entered allmulticast mode [ 372.059787][T11745] bridge0: entered allmulticast mode [ 372.061926][T11745] vcan0: entered allmulticast mode [ 372.064453][T11745] bond0: entered allmulticast mode [ 372.066390][T11745] bond_slave_0: entered allmulticast mode [ 372.068619][T11745] bond_slave_1: entered allmulticast mode [ 372.071550][T11745] team0: entered allmulticast mode [ 372.073280][T11745] team_slave_0: entered allmulticast mode [ 372.075624][T11745] team_slave_1: entered allmulticast mode [ 372.078268][T11745] dummy0: entered allmulticast mode [ 372.083354][T11745] nlmon0: entered allmulticast mode [ 372.085477][T11745] batadv0: entered allmulticast mode [ 372.090782][T11745] vxcan0: entered allmulticast mode [ 372.092882][T11745] vxcan1: entered allmulticast mode [ 372.094883][T11745] veth0: entered allmulticast mode [ 372.097259][T11745] veth1: entered allmulticast mode [ 372.099261][T11745] wg0: entered allmulticast mode [ 372.101319][T11745] wg1: entered allmulticast mode [ 372.103266][T11745] wg2: entered allmulticast mode [ 372.106028][T11745] veth0_to_bridge: entered allmulticast mode [ 372.108685][T11745] bridge_slave_0: left promiscuous mode [ 372.113652][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.119157][T11745] veth1_to_bridge: entered allmulticast mode [ 372.123170][T11745] bridge_slave_1: left promiscuous mode [ 372.125038][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.131016][T11745] veth0_to_bond: entered allmulticast mode [ 372.162495][T11745] bond0: (slave bond_slave_0): Releasing backup interface [ 372.175359][T11745] veth1_to_bond: entered allmulticast mode [ 372.185116][T11745] bond0: (slave bond_slave_1): Releasing backup interface [ 372.192639][T11745] veth0_to_team: entered allmulticast mode [ 372.198570][T11745] team0: Port device team_slave_0 removed [ 372.201978][T11745] veth1_to_team: entered allmulticast mode [ 372.211459][T11745] team0: Port device team_slave_1 removed [ 372.215181][T11745] veth0_to_batadv: entered allmulticast mode [ 372.217988][T11745] batadv_slave_0: entered allmulticast mode [ 372.223224][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.225682][T11745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.231308][T11745] veth1_to_batadv: entered allmulticast mode [ 372.234331][T11745] batadv_slave_1: entered allmulticast mode [ 372.237003][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.240005][T11745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.245938][ T2312] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 372.247700][T11745] xfrm0: entered allmulticast mode [ 372.251679][T11745] veth0_to_hsr: entered allmulticast mode [ 372.254021][T11745] hsr_slave_0: entered allmulticast mode [ 372.258632][T11745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.416261][ T2312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 372.423004][ T2312] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 372.440781][ T2312] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 372.448825][ T2312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.477508][ T2312] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 372.490023][ T2312] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 372.693806][T11760] FAULT_INJECTION: forcing a failure. [ 372.693806][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.699933][T11760] CPU: 3 UID: 0 PID: 11760 Comm: syz.1.1296 Not tainted syzkaller #0 PREEMPT(full) [ 372.699955][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.699962][T11760] Call Trace: [ 372.699966][T11760] [ 372.699971][T11760] dump_stack_lvl+0x100/0x190 [ 372.699991][T11760] should_fail_ex.cold+0x5/0xa [ 372.700019][T11760] _copy_to_user+0x32/0xd0 [ 372.700039][T11760] simple_read_from_buffer+0xcb/0x170 [ 372.700060][T11760] proc_fail_nth_read+0x1af/0x230 [ 372.700077][T11760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.700094][T11760] ? rw_verify_area+0xce/0x6d0 [ 372.700111][T11760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.700127][T11760] vfs_read+0x1e4/0xb40 [ 372.700139][T11760] ? __pfx_vfs_read+0x10/0x10 [ 372.700147][T11760] ? find_held_lock+0x2b/0x80 [ 372.700163][T11760] ? __fget_files+0x215/0x3d0 [ 372.700176][T11760] ? __fget_files+0x21f/0x3d0 [ 372.700190][T11760] ksys_read+0x12a/0x250 [ 372.700200][T11760] ? __pfx_ksys_read+0x10/0x10 [ 372.700210][T11760] ? __ia32_sys_read+0x11/0xb0 [ 372.700221][T11760] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 372.700240][T11760] do_int80_emulation+0x14b/0x720 [ 372.700260][T11760] asm_int80_emulation+0x1a/0x20 [ 372.700272][T11760] RIP: 0023:0xf71b74eb [ 372.700282][T11760] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 372.700293][T11760] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 372.700304][T11760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 372.700311][T11760] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 372.700317][T11760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.700323][T11760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 372.700330][T11760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.700343][T11760] [ 372.868154][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 373.065154][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 373.068737][T11769] openvswitch: netlink: IPv4 frag type 98 is out of range max 2 [ 373.161075][T11772] syzkaller0: entered promiscuous mode [ 373.162934][T11772] syzkaller0: entered allmulticast mode [ 373.379147][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 373.431379][T11775] syzkaller1: entered promiscuous mode [ 373.433196][T11775] syzkaller1: entered allmulticast mode [ 373.682496][T11786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 373.684605][T11786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.689166][T11786] vhci_hcd vhci_hcd.0: Device attached [ 373.762400][T11786] overlayfs: missing 'lowerdir' [ 373.889640][ T2312] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 373.950683][ T2312] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 374.106550][T11787] vhci_hcd: connection closed [ 374.108735][T11328] vhci_hcd vhci_hcd.0: stop threads [ 374.115036][T11328] vhci_hcd vhci_hcd.0: release socket [ 374.117415][T11328] vhci_hcd vhci_hcd.0: disconnect device [ 374.857070][T11807] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1312'. [ 375.005446][ T34] usb 8-1: USB disconnect, device number 56 [ 375.017286][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 375.024309][ T34] spcp8x5 8-1:1.0: device disconnected [ 375.538744][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1319'. [ 375.735847][ T5829] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 375.888338][ T5829] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.893262][ T5829] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 375.896654][ T5829] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.899613][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.904956][T11828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.910827][ T5829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.050554][T11846] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1325'. [ 376.071045][T11846] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1325'. [ 376.445346][ T60] usb 6-1: USB disconnect, device number 53 [ 376.639232][T11861] tipc: Enabled bearer , priority 0 [ 376.642433][T11861] syzkaller0: entered promiscuous mode [ 376.644361][T11861] syzkaller0: entered allmulticast mode [ 376.652703][T11861] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 376.698265][T11861] tipc: Resetting bearer [ 376.710111][T11860] tipc: Resetting bearer [ 376.721957][T11860] tipc: Disabling bearer [ 376.982532][T11880] tipc: Enabled bearer , priority 0 [ 376.985959][T11880] syzkaller0: entered promiscuous mode [ 376.988338][T11880] syzkaller0: entered allmulticast mode [ 376.992222][T11880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 377.033098][T11880] tipc: Resetting bearer [ 377.033574][T11888] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 377.045051][T11879] tipc: Resetting bearer [ 377.069921][T11879] tipc: Disabling bearer [ 377.143339][T11895] nvmet_tcp: address family 255 not supported [ 377.173534][T11888] cgroup: Invalid name [ 377.367696][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1333'. [ 378.035515][T11909] tipc: Enabling of bearer rejected, failed to enable media [ 378.190249][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.192282][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.296621][T11925] 9p: Unknown access argument 18446744073709551615: -34 [ 378.977195][T11939] FAULT_INJECTION: forcing a failure. [ 378.977195][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.985381][T11939] CPU: 0 UID: 0 PID: 11939 Comm: syz.3.1341 Not tainted syzkaller #0 PREEMPT(full) [ 378.985400][T11939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.985406][T11939] Call Trace: [ 378.985411][T11939] [ 378.985416][T11939] dump_stack_lvl+0x100/0x190 [ 378.985437][T11939] should_fail_ex.cold+0x5/0xa [ 378.985451][T11939] _copy_from_user+0x2e/0xd0 [ 378.985471][T11939] kstrtouint_from_user+0xd6/0x1d0 [ 378.985484][T11939] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 378.985497][T11939] ? __lock_acquire+0x49f/0x1a40 [ 378.985522][T11939] proc_fail_nth_write+0x83/0x220 [ 378.985540][T11939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.985560][T11939] vfs_write+0x2aa/0x1050 [ 378.985572][T11939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.985590][T11939] ? __pfx_vfs_write+0x10/0x10 [ 378.985599][T11939] ? find_held_lock+0x2b/0x80 [ 378.985613][T11939] ? __fget_files+0x215/0x3d0 [ 378.985628][T11939] ? __fget_files+0x21f/0x3d0 [ 378.985642][T11939] ksys_write+0x12a/0x250 [ 378.985652][T11939] ? __pfx_ksys_write+0x10/0x10 [ 378.985678][T11939] do_int80_emulation+0x14b/0x720 [ 378.985701][T11939] asm_int80_emulation+0x1a/0x20 [ 378.985713][T11939] RIP: 0023:0xf71a74eb [ 378.985722][T11939] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 378.985733][T11939] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 378.985746][T11939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54665d0 [ 378.985753][T11939] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.985759][T11939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.985765][T11939] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 378.985771][T11939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.985785][T11939] [ 379.066936][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 379.235264][T11944] 9p: Bad value for 'rfdno' [ 379.447982][ T2312] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 379.595861][ T9] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 379.748984][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.752264][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.756467][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 379.759296][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.773535][ T9] usb 8-1: config 0 descriptor?? [ 379.779863][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 379.980904][ T9] usb 8-1: USB disconnect, device number 57 [ 380.425932][ T1034] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 380.577682][ T1034] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.580911][ T1034] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.583760][ T1034] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 380.586968][ T1034] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.594714][ T1034] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 380.598125][ T1034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.600791][ T1034] usb 8-1: Product: syz [ 380.602344][ T1034] usb 8-1: Manufacturer: syz [ 380.603797][ T1034] usb 8-1: SerialNumber: syz [ 380.815575][ T1034] usb 8-1: USB disconnect, device number 58 [ 380.915922][ T60] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 381.121366][ T60] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.128633][ T60] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 381.133445][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.146371][ T60] usb 6-1: config 0 descriptor?? [ 381.190516][ T60] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 381.317654][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'. [ 381.375427][ T60] usb 6-1: USB disconnect, device number 54 [ 381.500170][T11987] openvswitch: netlink: Key 0 has unexpected len 1 expected 0 [ 381.896027][ T60] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 382.037399][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'. [ 382.057032][ T60] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 382.060478][ T60] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 382.063631][ T60] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.069728][ T60] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 382.072687][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.075253][ T60] usb 6-1: Product: syz [ 382.076729][ T60] usb 6-1: Manufacturer: syz [ 382.078279][ T60] usb 6-1: SerialNumber: syz [ 382.139095][T11997] fuse: fd is not a fuse device [ 382.630237][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 382.633306][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 382.638957][T12012] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 382.936536][ T2312] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 383.095064][ T2312] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.099510][ T2312] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.103110][ T2312] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.109120][ T2312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.126493][T12014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 383.162917][ T2312] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.621417][ T60] usb 8-1: USB disconnect, device number 59 [ 383.655030][ T2312] usb 6-1: USB disconnect, device number 55 [ 383.842396][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 384.404052][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1371'. [ 384.768268][T12054] netlink: 'syz.1.1374': attribute type 12 has an invalid length. [ 384.865696][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.870503][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.077005][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.084096][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.166520][ T29] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 385.168676][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1379'. [ 385.317045][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.320639][ T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.323719][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.326755][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.331056][T12063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 385.335061][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.501959][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1381'. [ 385.842500][ T2312] usb 6-1: USB disconnect, device number 56 [ 385.970223][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.973242][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.219660][T12093] veth0: entered promiscuous mode [ 386.222638][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 386.274386][T12094] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1386'. [ 386.304854][T12092] veth0: left promiscuous mode [ 386.354158][T12100] netlink: 'syz.3.1388': attribute type 13 has an invalid length. [ 386.450103][ T42] audit: type=1326 audit(1786126660.859:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.460744][ T42] audit: type=1326 audit(1786126660.859:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.471939][ T42] audit: type=1326 audit(1786126660.869:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.479550][ T42] audit: type=1326 audit(1786126660.869:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.491491][ T42] audit: type=1326 audit(1786126660.869:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.504271][ T42] audit: type=1326 audit(1786126660.869:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.524056][ T42] audit: type=1326 audit(1786126660.869:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.1.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 386.698523][T12122] cgroup: Invalid name [ 387.305936][ T50] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 387.457623][ T50] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.465962][ T50] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.471276][ T50] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.476411][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.607944][T12133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.612678][ T50] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.818301][T12137] syzkaller0: entered promiscuous mode [ 387.836070][T12137] syzkaller0: entered allmulticast mode [ 388.173408][ T60] usb 6-1: USB disconnect, device number 57 [ 388.363632][T12150] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.687906][T12157] FAULT_INJECTION: forcing a failure. [ 388.687906][T12157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.693087][T12157] CPU: 2 UID: 0 PID: 12157 Comm: syz.0.1403 Not tainted syzkaller #0 PREEMPT(full) [ 388.693126][T12157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.693137][T12157] Call Trace: [ 388.693143][T12157] [ 388.693150][T12157] dump_stack_lvl+0x100/0x190 [ 388.693177][T12157] should_fail_ex.cold+0x5/0xa [ 388.693197][T12157] _copy_from_user+0x2e/0xd0 [ 388.693222][T12157] generic_map_update_batch+0x4bb/0x800 [ 388.693261][T12157] ? __pfx_generic_map_update_batch+0x10/0x10 [ 388.693277][T12157] ? find_held_lock+0x2b/0x80 [ 388.693298][T12157] ? __might_fault+0xc5/0x140 [ 388.693316][T12157] ? __might_fault+0xc5/0x140 [ 388.693335][T12157] ? __pfx_generic_map_update_batch+0x10/0x10 [ 388.693353][T12157] bpf_map_do_batch+0x66f/0x6d0 [ 388.693379][T12157] __sys_bpf+0x4ce/0x4e80 [ 388.693404][T12157] ? __pfx___sys_bpf+0x10/0x10 [ 388.693423][T12157] ? find_held_lock+0x2b/0x80 [ 388.693441][T12157] ? get_pid_task+0xfc/0x250 [ 388.693471][T12157] ? get_pid_task+0xfc/0x250 [ 388.693498][T12157] ? proc_fail_nth_write+0x9f/0x220 [ 388.693521][T12157] ? find_held_lock+0x2b/0x80 [ 388.693546][T12157] ? rcu_read_lock_any_held+0x6a/0xa0 [ 388.693594][T12157] ? vfs_write+0x15d/0x1050 [ 388.693612][T12157] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 388.693634][T12157] ? populate_seccomp_data+0x225/0x4d0 [ 388.693675][T12157] ? __ia32_sys_bpf+0xcc/0x170 [ 388.693691][T12157] __ia32_sys_bpf+0xcc/0x170 [ 388.693710][T12157] ? __secure_computing+0x1e4/0x2c0 [ 388.693736][T12157] __do_fast_syscall_32+0xe7/0x970 [ 388.693761][T12157] ? lockdep_hardirqs_on+0x78/0x100 [ 388.693784][T12157] do_fast_syscall_32+0x32/0x70 [ 388.693807][T12157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.693829][T12157] RIP: 0023:0xf707efec [ 388.693850][T12157] Code: Unable to access opcode bytes at 0xf707efc2. [ 388.693858][T12157] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 388.693875][T12157] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000140 [ 388.693885][T12157] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.693894][T12157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.693904][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.693913][T12157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.693934][T12157] [ 389.578196][T12195] binder: 12194:12195 ioctl c0306201 80000080 returned -14 [ 389.583140][T12195] binder: 12194:12195 ioctl c0306201 800003c0 returned -14 [ 390.026883][T12204] zero sized request [ 390.063658][T12201] No control pipe specified [ 390.774726][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.781400][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.791604][T12222] usb 1-1: USB disconnect, device number 2 [ 391.146555][ T1034] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 391.298779][ T1034] usb 8-1: Using ep0 maxpacket: 32 [ 391.308186][ T1034] usb 8-1: config 0 has no interfaces? [ 391.313386][ T1034] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.326545][ T1034] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.328908][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 391.336118][ T1034] usb 8-1: Product: syz [ 391.337752][ T1034] usb 8-1: Manufacturer: syz [ 391.342191][ T1034] usb 8-1: SerialNumber: syz [ 391.354760][ T1034] usb 8-1: config 0 descriptor?? [ 391.689408][ T60] usb 8-1: USB disconnect, device number 60 [ 391.874012][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'. [ 392.770995][T12281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 392.927487][T12285] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.069291][T12291] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 393.086836][T12291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.090904][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 393.111803][T12291] macvlan2: entered promiscuous mode [ 393.113666][T12291] macvlan2: entered allmulticast mode [ 393.130186][T12291] bond1: (slave ip6gretap1): making interface the new active one [ 393.134771][T12291] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 393.429604][T12300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1437'. [ 393.433953][T12300] netlink: 'syz.1.1437': attribute type 12 has an invalid length. [ 393.697817][T12302] CIFS: Attempting to mount //127.0.0.1/share [ 393.708564][T12302] CIFS: VFS: Error connecting to socket. Aborting operation. [ 393.711782][T12302] CIFS: VFS: cifs_mount failed w/return code = -22 [ 394.254822][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.260703][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.340302][T12309] hub 1-0:1.0: USB hub found [ 394.345178][T12309] hub 1-0:1.0: 6 ports detected [ 394.454778][T12312] FAULT_INJECTION: forcing a failure. [ 394.454778][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.460761][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.1.1442 Not tainted syzkaller #0 PREEMPT(full) [ 394.460785][T12312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.460795][T12312] Call Trace: [ 394.460800][T12312] [ 394.460807][T12312] dump_stack_lvl+0x100/0x190 [ 394.460835][T12312] should_fail_ex.cold+0x5/0xa [ 394.460854][T12312] _copy_from_user+0x2e/0xd0 [ 394.460879][T12312] kstrtouint_from_user+0xd6/0x1d0 [ 394.460897][T12312] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 394.460922][T12312] ? __lock_acquire+0x49f/0x1a40 [ 394.460958][T12312] proc_fail_nth_write+0x83/0x220 [ 394.460983][T12312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.461012][T12312] vfs_write+0x2aa/0x1050 [ 394.461028][T12312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.461094][T12312] ? __pfx_vfs_write+0x10/0x10 [ 394.461108][T12312] ? find_held_lock+0x2b/0x80 [ 394.461127][T12312] ? __fget_files+0x215/0x3d0 [ 394.461147][T12312] ? __fget_files+0x21f/0x3d0 [ 394.461168][T12312] ksys_write+0x12a/0x250 [ 394.461184][T12312] ? __pfx_ksys_write+0x10/0x10 [ 394.461206][T12312] do_int80_emulation+0x14b/0x720 [ 394.461234][T12312] asm_int80_emulation+0x1a/0x20 [ 394.461251][T12312] RIP: 0023:0xf71b74eb [ 394.461265][T12312] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 394.461280][T12312] RSP: 002b:00000000f54554bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 394.461298][T12312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54555d0 [ 394.461308][T12312] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.461316][T12312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 394.461325][T12312] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 394.461334][T12312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.461354][T12312] [ 394.551108][ T60] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 394.556506][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.566204][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.644209][T12319] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 394.731621][ T60] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 394.736613][ T60] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 394.742125][ T60] usb 1-1: Product: QEMU USB Tablet [ 394.744344][ T60] usb 1-1: Manufacturer: QEMU [ 394.747011][ T60] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 394.782869][ T60] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input15 [ 394.880805][ T60] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 395.129934][T12334] nvmet_tcp: address family 255 not supported [ 395.266120][ T60] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 395.435832][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 395.445518][ T60] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 395.448322][ T60] usb 8-1: config 0 has no interface number 0 [ 395.450291][ T60] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.457765][ T60] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 395.464071][ T60] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.467896][ T60] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.471957][ T60] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.474869][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.479949][ T60] usb 8-1: config 0 descriptor?? [ 395.490928][ T60] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 395.511800][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.515579][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.557784][T12339] usb 1-1: USB disconnect, device number 3 [ 395.713591][ T60] usb 8-1: USB disconnect, device number 61 [ 395.732758][ T60] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 396.276323][ T60] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 396.426062][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 396.430378][ T60] usb 6-1: config 0 has no interfaces? [ 396.436386][ T60] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 396.445935][ T60] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 396.449570][ T60] usb 6-1: Product: syz [ 396.451364][ T60] usb 6-1: Manufacturer: syz [ 396.453484][ T60] usb 6-1: SerialNumber: syz [ 396.464530][ T60] usb 6-1: config 0 descriptor?? [ 396.592967][ T42] audit: type=1800 audit(1786126670.999:111): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1460" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 396.680796][ T9] usb 6-1: USB disconnect, device number 58 [ 397.176908][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1467'. [ 397.291348][T12406] kernel profiling enabled (shift: 9) [ 397.349399][T12408] fuse: Unknown parameter '|Ɠ' [ 397.359019][ T42] audit: type=1326 audit(1786126671.769:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x0 [ 397.460767][T12411] random: crng reseeded on system resumption [ 397.605911][ T1034] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 397.757274][ T1034] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.760832][ T1034] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.763637][ T1034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.767726][ T1034] usb 8-1: config 0 descriptor?? [ 397.775039][ T1034] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 397.976496][ T60] usb 8-1: USB disconnect, device number 62 [ 398.425897][ T60] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 398.516193][ T1034] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 398.577748][ T60] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 398.582287][ T60] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 398.589124][ T60] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.610754][ T60] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 398.614700][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.617598][ T60] usb 8-1: Product: syz [ 398.619257][ T60] usb 8-1: Manufacturer: syz [ 398.621118][ T60] usb 8-1: SerialNumber: syz [ 398.689774][ T1034] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.693143][ T1034] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 398.697335][ T1034] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 398.700450][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.719286][ T1034] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 398.758133][ T1034] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 400.349197][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.354309][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.384971][ T60] usb 8-1: USB disconnect, device number 63 [ 400.445033][ T42] audit: type=1800 audit(1786126674.849:113): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1490" name="ipv4_address" dev="configfs" ino=46204 res=0 errno=0 [ 400.463476][ T42] audit: type=1800 audit(1786126674.869:114): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1490" name="num" dev="configfs" ino=46205 res=0 errno=0 [ 400.474236][ T42] audit: type=1800 audit(1786126674.879:115): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1490" name="local" dev="configfs" ino=46206 res=0 errno=0 [ 401.220828][T12477] db_root: cannot open: ./m [ 401.279309][ T9] usb 6-1: USB disconnect, device number 59 [ 401.295696][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 401.301470][ T9] spcp8x5 6-1:1.0: device disconnected [ 401.418227][T12485] FAULT_INJECTION: forcing a failure. [ 401.418227][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.423798][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.1.1496 Not tainted syzkaller #0 PREEMPT(full) [ 401.423822][T12485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.423832][T12485] Call Trace: [ 401.423838][T12485] [ 401.423844][T12485] dump_stack_lvl+0x100/0x190 [ 401.423873][T12485] should_fail_ex.cold+0x5/0xa [ 401.423892][T12485] strncpy_from_user+0x3b/0x2d0 [ 401.423917][T12485] do_getname+0x78/0x390 [ 401.423944][T12485] user_path_at+0x26/0x60 [ 401.423961][T12485] __ia32_sys_mount+0x1fb/0x310 [ 401.423983][T12485] ? __pfx___ia32_sys_mount+0x10/0x10 [ 401.424002][T12485] ? ksys_write+0x1ac/0x250 [ 401.424020][T12485] ? __pfx_ksys_write+0x10/0x10 [ 401.424039][T12485] __do_fast_syscall_32+0xe7/0x970 [ 401.424064][T12485] ? lockdep_hardirqs_on+0x78/0x100 [ 401.424086][T12485] do_fast_syscall_32+0x32/0x70 [ 401.424110][T12485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.424132][T12485] RIP: 0023:0xf7fb6fec [ 401.424151][T12485] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 401.424158][T12485] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 401.424176][T12485] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 401.424186][T12485] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000080001480 [ 401.424196][T12485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.424205][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.424215][T12485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.424242][T12485] [ 402.027025][ T2312] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 402.221052][ T2312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.236454][ T2312] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 402.252566][ T2312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.260839][ T2312] usb 8-1: config 0 descriptor?? [ 402.309856][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 402.471566][ T2312] usbhid 8-1:0.0: can't add hid device: -71 [ 402.473619][ T2312] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 402.485572][ T2312] usb 8-1: USB disconnect, device number 64 [ 402.837323][T12508] FAULT_INJECTION: forcing a failure. [ 402.837323][T12508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.841563][T12508] CPU: 3 UID: 0 PID: 12508 Comm: syz.0.1505 Not tainted syzkaller #0 PREEMPT(full) [ 402.841579][T12508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.841586][T12508] Call Trace: [ 402.841591][T12508] [ 402.841596][T12508] dump_stack_lvl+0x100/0x190 [ 402.841629][T12508] should_fail_ex.cold+0x5/0xa [ 402.841643][T12508] _copy_to_user+0x32/0xd0 [ 402.841663][T12508] drm_ioctl+0x608/0xc60 [ 402.841709][T12508] ? __pfx_drm_mode_gamma_set_ioctl+0x10/0x10 [ 402.841724][T12508] ? __pfx_drm_ioctl+0x10/0x10 [ 402.841748][T12508] drm_compat_ioctl+0x386/0x4c0 [ 402.841768][T12508] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 402.841785][T12508] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 402.841806][T12508] __do_fast_syscall_32+0xe7/0x970 [ 402.841823][T12508] ? lockdep_hardirqs_on+0x78/0x100 [ 402.841840][T12508] do_fast_syscall_32+0x32/0x70 [ 402.841857][T12508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.841873][T12508] RIP: 0023:0xf707efec [ 402.841886][T12508] Code: Unable to access opcode bytes at 0xf707efc2. [ 402.841891][T12508] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 402.841902][T12508] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c02064a5 [ 402.841909][T12508] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.841915][T12508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.841922][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.841928][T12508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.841941][T12508] [ 403.175915][ T50] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 403.238425][T12521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1511'. [ 403.242140][T12521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.248685][T12523] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 403.251819][T12523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.258003][T12523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1512'. [ 403.261800][T12523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.423843][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1513'. [ 403.448463][ T50] usb 6-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 403.464837][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.471095][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.377390][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1515'. [ 404.513919][T12543] [ 404.514760][T12543] ====================================================== [ 404.517135][T12543] WARNING: possible circular locking dependency detected [ 404.519330][T12543] syzkaller #0 Not tainted [ 404.521234][T12543] ------------------------------------------------------ [ 404.523413][T12543] syz.3.1517/12543 is trying to acquire lock: [ 404.525349][T12543] ffff88801e4dcd40 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 404.528821][T12543] [ 404.528821][T12543] but task is already holding lock: [ 404.531088][T12543] ffff888012fdc118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 404.533905][T12543] [ 404.533905][T12543] which lock already depends on the new lock. [ 404.533905][T12543] [ 404.537458][T12543] [ 404.537458][T12543] the existing dependency chain (in reverse order) is: [ 404.540422][T12543] [ 404.540422][T12543] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 404.542899][T12543] lock_acquire+0x1b9/0x370 [ 404.544591][T12543] __mutex_lock+0x1a4/0x1bd0 [ 404.546450][T12543] tcm_set_name+0x29/0xb0 [ 404.548192][T12543] function_make+0x21c/0x3f0 [ 404.550012][T12543] configfs_mkdir+0x51e/0xb70 [ 404.551909][T12543] vfs_mkdir+0x361/0x850 [ 404.553621][T12543] filename_mkdirat+0x48b/0x5e0 [ 404.555581][T12543] __ia32_sys_mkdir+0x6a/0x90 [ 404.557445][T12543] __do_fast_syscall_32+0xe7/0x970 [ 404.559376][T12543] do_fast_syscall_32+0x32/0x70 [ 404.561480][T12543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.563629][T12543] [ 404.563629][T12543] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 404.566188][T12543] lock_acquire+0x1b9/0x370 [ 404.567778][T12543] __mutex_lock+0x1a4/0x1bd0 [ 404.569389][T12543] configfs_rmdir+0x5ae/0x950 [ 404.571064][T12543] vfs_rmdir+0x328/0x8a0 [ 404.572568][T12543] filename_rmdir+0x31a/0x5c0 [ 404.574194][T12543] __ia32_sys_rmdir+0x45/0x60 [ 404.575818][T12543] __do_fast_syscall_32+0xe7/0x970 [ 404.577586][T12543] do_fast_syscall_32+0x32/0x70 [ 404.579277][T12543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.581432][T12543] [ 404.581432][T12543] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 404.584183][T12543] check_prev_add+0xeb/0xe60 [ 404.585903][T12543] __lock_acquire+0x136c/0x1a40 [ 404.587659][T12543] lock_acquire+0x1b9/0x370 [ 404.589303][T12543] down_write+0x8b/0x1f0 [ 404.591055][T12543] configfs_depend_item_unlocked+0xf3/0x6a0 [ 404.593219][T12543] usbg_make_tpg+0x261/0x620 [ 404.594908][T12543] target_fabric_make_tpg+0xab/0x8c0 [ 404.596817][T12543] configfs_mkdir+0x51e/0xb70 [ 404.598499][T12543] vfs_mkdir+0x361/0x850 [ 404.600028][T12543] filename_mkdirat+0x48b/0x5e0 [ 404.601892][T12543] __ia32_sys_mkdir+0x6a/0x90 [ 404.603603][T12543] __do_fast_syscall_32+0xe7/0x970 [ 404.605450][T12543] do_fast_syscall_32+0x32/0x70 [ 404.607168][T12543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.609352][T12543] [ 404.609352][T12543] other info that might help us debug this: [ 404.609352][T12543] [ 404.612684][T12543] Chain exists of: [ 404.612684][T12543] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 404.612684][T12543] [ 404.617387][T12543] Possible unsafe locking scenario: [ 404.617387][T12543] [ 404.619765][T12543] CPU0 CPU1 [ 404.621513][T12543] ---- ---- [ 404.623229][T12543] lock(&opts->dep_lock); [ 404.624703][T12543] lock(gadget_subsys.su_mutex); [ 404.627155][T12543] lock(&opts->dep_lock); [ 404.629364][T12543] lock(&sb->s_type->i_mutex_key#26); [ 404.631153][T12543] [ 404.631153][T12543] *** DEADLOCK *** [ 404.631153][T12543] [ 404.633741][T12543] 5 locks held by syz.3.1517/12543: [ 404.635472][T12543] #0: ffff888021c00450 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 404.638473][T12543] #1: ffff888012d44880 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 404.642368][T12543] #2: ffffffff8fd83428 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 404.646362][T12543] #3: ffffffff9024e740 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 404.650333][T12543] #4: ffff888012fdc118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 404.654155][T12543] [ 404.654155][T12543] stack backtrace: [ 404.656593][T12543] CPU: 0 UID: 0 PID: 12543 Comm: syz.3.1517 Not tainted syzkaller #0 PREEMPT(full) [ 404.656617][T12543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.656629][T12543] Call Trace: [ 404.656636][T12543] [ 404.656645][T12543] dump_stack_lvl+0x100/0x190 [ 404.656665][T12543] print_circular_bug.cold+0x178/0x1c7 [ 404.656701][T12543] check_noncircular+0x146/0x160 [ 404.656736][T12543] check_prev_add+0xeb/0xe60 [ 404.656768][T12543] __lock_acquire+0x136c/0x1a40 [ 404.656800][T12543] ? rcu_is_watching+0x12/0xc0 [ 404.656830][T12543] lock_acquire+0x1b9/0x370 [ 404.656857][T12543] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 404.656879][T12543] ? __pfx___might_resched+0x10/0x10 [ 404.656908][T12543] down_write+0x8b/0x1f0 [ 404.656935][T12543] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 404.656961][T12543] ? __pfx_down_write+0x10/0x10 [ 404.657013][T12543] configfs_depend_item_unlocked+0xf3/0x6a0 [ 404.657038][T12543] ? __lock_acquire+0x49f/0x1a40 [ 404.657069][T12543] usbg_make_tpg+0x261/0x620 [ 404.657095][T12543] ? __pfx_usbg_make_tpg+0x10/0x10 [ 404.657116][T12543] ? find_held_lock+0x2b/0x80 [ 404.657135][T12543] ? __pfx_usbg_make_tpg+0x10/0x10 [ 404.657156][T12543] target_fabric_make_tpg+0xab/0x8c0 [ 404.657183][T12543] configfs_mkdir+0x51e/0xb70 [ 404.657205][T12543] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 404.657233][T12543] ? __pfx_configfs_mkdir+0x10/0x10 [ 404.657259][T12543] vfs_mkdir+0x361/0x850 [ 404.657292][T12543] filename_mkdirat+0x48b/0x5e0 [ 404.657316][T12543] ? __pfx_filename_mkdirat+0x10/0x10 [ 404.657336][T12543] ? strncpy_from_user+0x19d/0x2d0 [ 404.657362][T12543] ? do_getname+0x191/0x390 [ 404.657385][T12543] __ia32_sys_mkdir+0x6a/0x90 [ 404.657404][T12543] __do_fast_syscall_32+0xe7/0x970 [ 404.657430][T12543] do_fast_syscall_32+0x32/0x70 [ 404.657456][T12543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.657478][T12543] RIP: 0023:0xf7fa8fec [ 404.657502][T12543] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 404.657511][T12543] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 404.657530][T12543] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 00000000000001ff [ 404.657544][T12543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.657556][T12543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.657569][T12543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.657579][T12543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.657595][T12543] [ 404.664481][ T50] usb 6-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 404.780868][ T50] usb 6-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 404.785437][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.789214][ T50] usb 6-1: Product: syz [ 404.790987][ T50] usb 6-1: Manufacturer: syz [ 404.792958][ T50] usb 6-1: SerialNumber: syz [ 404.813515][T12543] For dev_enable ops, only valid value is "1" [ 404.827783][T12543] se_device not configured yet, cannot port link [ 404.925897][ T50] usb 6-1: reset high-speed USB device number 60 using dummy_hcd [ 406.766308][ T50] usb 6-1: [UEAGLE-ATM] urb submission failed with error -19 [ 406.768775][ T50] ueagle-atm 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 406.772777][ T50] usb 6-1: USB disconnect, device number 60