last executing test programs: 54.73756737s ago: executing program 0 (id=276): r0 = syz_open_dev$vbi(&(0x7f0000000840), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000009400)={0x28, @bt={0xb40, 0x86c, 0x1, 0x0, 0xd59f81, 0x19f2, 0x3f, 0x19f2, 0x3, 0x5, 0x2800, 0x9, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x1}, 0xd0, 0x6}}) 54.734070967s ago: executing program 0 (id=277): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x8cff) 54.487070065s ago: executing program 0 (id=281): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 54.480949558s ago: executing program 0 (id=283): openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x121a83) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_FUTEX_WAIT={0x33, 0x12, 0x0, 0x8e, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x1ffd, 0x9c3a, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000200)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='source', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe4) lsm_get_self_attr(0x65, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x4, [0x0, 0x0, 0x0, 0x0]}) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) 39.25243676s ago: executing program 32 (id=285): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) open(0x0, 0x60840, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe4) lsm_get_self_attr(0x65, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x4, [0x0, 0x0, 0x0, 0x0]}) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) 29.847668724s ago: executing program 3 (id=470): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x57, 0x0, 0x0, 0x0, 0x40000}) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100100000020ac1b04030000000000010902240001000080db09040006ff0300000009218f0d03012218000905810320"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_open_dev$admmidi(&(0x7f0000000200), 0x7, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'pim6reg0\x00', 0x1000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=', 0x1f) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x57, 0x0, 0x0, 0x0, 0x40000}) (async) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100100000020ac1b04030000000000010902240001000080db09040006ff0300000009218f0d03012218000905810320"], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) (async) socket(0x10, 0x3, 0x9) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) syz_open_dev$admmidi(&(0x7f0000000200), 0x7, 0x2) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'pim6reg0\x00', 0x1000}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600884700000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) write(0xffffffffffffffff, &(0x7f0000000300)='p:t_st/event1 ./file0:0x0 arg2=', 0x1f) (async) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)) (async) 26.730251105s ago: executing program 3 (id=480): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$hpet(0xffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x0, 0x0) r4 = dup2(r3, r2) write$eventfd(r4, &(0x7f0000000180)=0x1, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000002280)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000022c0)={0x0, 0x0, 0x0, &(0x7f0000002300)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002340)={0x1, 0x0, 0x0, &(0x7f0000002380)=""/77, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002440)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000002480)={0x1, r4}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)="cd0b0c", 0x3}, 0x1, 0x0, 0x0, 0x880c}, 0x24004014) socket$l2tp6(0xa, 0x2, 0x73) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000010, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_i`,', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004500)={0x50, 0xffffffffffffffda, r7, {0x7, 0x1f, 0x0, 0x8000400, 0x40, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004580)="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", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801017f60000000a9020002000008000000d74fca1fa500"/37], 0x20) dup3(0xffffffffffffffff, r6, 0x80000) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000066c0)={0x60, 0xfffffffffffffff5, r7, {{0x7, 0xffb, 0x59, 0xffff, 0xffffffff, 0x8, 0x1, 0x7}}}, 0x60) write$FUSE_LSEEK(r5, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x80000}}, 0x18) 26.560560572s ago: executing program 3 (id=481): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001100034700bb65e1c3e4ffff0100b2a1010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4bfb, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x2e75) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x6, 0x6, r8, 0x0, 0x0, 0x4100000000, 0x0, 0x2, r8}]) r10 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_SET_PHYS(r10, 0x4004556c, &(0x7f0000000300)='syz1\x00') r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000680001000000000000000010020000000000000014000880100002800c000200626174616476300008000600f000000008000500", @ANYRES32, @ANYBLOB="060007"], 0x44}}, 0x40) 26.236193247s ago: executing program 3 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x7fe81e5246626bb5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x18b) write(r1, &(0x7f00000001c0)='7', 0x1) r2 = userfaultfd(0x801) lseek(r0, 0x141, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) signalfd(r2, &(0x7f00000004c0)={[0x7, 0x1]}, 0x8) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000040)=0x405f, 0x4) 26.090487614s ago: executing program 3 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) 25.597363453s ago: executing program 3 (id=488): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xcd, &(0x7f0000000240)=""/205, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000000)=@hsk={0x4, 0x0, "0045de1580"}) 25.508337375s ago: executing program 33 (id=488): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xcd, &(0x7f0000000240)=""/205, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000000)=@hsk={0x4, 0x0, "0045de1580"}) 4.020165504s ago: executing program 2 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000300)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0, 0x0, 0x9}}, 0x20) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000900)=0x1, 0x4) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) setns(0xffffffffffffffff, 0x20000) fsopen(&(0x7f0000000940)='nfs4\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000380)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001332546e643935cb573e1e6335d73e0d002100000000", @ANYRES32=0x0, @ANYBLOB="06a00000000000000c001a800800058004000180"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000880)={0x20071026}, &(0x7f00000008c0)={0x0, 0x6, 0x2, 0x9, 0xffffffff, 0x7}) r5 = getpid() sched_setaffinity(r5, 0x0, 0x0) r6 = add_key(&(0x7f0000000540)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'batadv0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=@getnexthop={0x48, 0x6a, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'veth1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000740)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000780)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.470491481s ago: executing program 2 (id=660): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.469117189s ago: executing program 2 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xffe, &(0x7f0000000240)={&(0x7f00000002c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@can_delroute={0x14, 0x19, 0x100, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x5}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 3.40843178s ago: executing program 2 (id=662): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r3, 0x1}}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 2.90996343s ago: executing program 4 (id=666): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0881) ppoll(&(0x7f0000000100)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1d, 0x4, 0x80000007, 0x10, 0x8}) (fail_nth: 5) 2.540485536s ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000002340), 0x10bc01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000002380)=0x200) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2d, 0x2, 0x0) write(r5, 0x0, 0x0) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)='w', 0x1}], 0x1, 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002300)='W', &(0x7f0000002380), 0x3, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) 2.339441399s ago: executing program 2 (id=668): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="344100070128bd7000f6ffffff017c0000040042800c0001800600062083622ed33d17000a000008100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], 0x3c}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r6) socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) symlink(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x0) mkdir(&(0x7f0000000880)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000980)='./file1\x00') chdir(&(0x7f00000009c0)='./bus\x00') rename(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='.\x02\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a402200", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff0000000064ea931c363b46756a5997de1730053cada02d82d63ee9c9809286dafae9053a5975eedbc40debead2b30bccc0aa84f9bae8462d58927a2c763c217cbdf3fc81ff76a605e0f5bf07bd938507455690ade299c588d43c0c2d326c1c2f24456db9731a2a1f2ce2ff0fa61d53ce78bee674f0b75ab073090321840ff2e698e911509e71f994b97aeec062570ed956c7d3817c"], 0x2c}}, 0x4000001) 2.338906074s ago: executing program 5 (id=669): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0xfffffffd, 0xfff, 0x1}, &(0x7f0000000040)=0x10) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) timer_create(0x8, &(0x7f0000000280)={0x0, 0x21}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="a109a81b133d", 0x0, 0x0, 0x10012, 0x1, 0x0}) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000080)={r2, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000100001040000000000dcb0b93d000000", @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467755f736c617665000000004400058005000500470000000500", @ANYRES8=r0], 0x7c}}, 0x0) 2.050219357s ago: executing program 4 (id=670): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.049732696s ago: executing program 4 (id=671): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) openat$zero(0xffffff9c, &(0x7f0000000480), 0x80, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) (fail_nth: 4) 1.993917505s ago: executing program 4 (id=672): socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000cd80)={0x0, 0x0, &(0x7f000000cd40)={&(0x7f0000000f40)=@delchain={0x8c4, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0x10, 0xb}, {0xb, 0x7}}, [@f_tcindex={{0xc}, {0x894, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0x1}}, @TCA_TCINDEX_ACT={0x2dc, 0x7, [@m_simple={0xb0, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x6, 0x1, 0x3}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xad, 0x9, 0x5, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x5fade026c87259c0, 0x1, 0x2}}, @TCA_DEF_DATA={0xe, 0x3, ':^}#,-)@#\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#:\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x11, 0x6, "6f3fecada7efd5128c944aff85"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x50, 0xc, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xd, 0x6, "430d9ead63aa16fb0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x110, 0xc, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x5, 0x6, 0x4, 0x6}, @empty, @local}}]}, {0xbd, 0x6, "c57a67ca3fc43b2f59ba516a64eb3c29748a5f47b9e88f0f75c52511d6ec310c08366adc49454f6038c4ca3db598112e86dbf604d77da0ab5108c02c6cbd0a4ebf65547465da27d3de99899a3b4bf76482163057edf9eceee6ac9ac850d73628353cea97d6e66b54ff69c16d79bcd422e6367490914ec5a4f39dd3599dc615ff17b90795def31c6b7cc25b765912fcac7aa1dcf28ec35d131ef725507ea3dd1390161f1039a2e8f915e6adb6cff51c21ea9478e4ff63bf6890"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0xc8, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x20, 0x5, 0x401, 0x34cb}, @multicast2, @empty}}]}, {0x75, 0x6, "e76b129cc74286b471874213ec0719694906c12a5242e7860014d7bf7d265f4772b5075bb79071f25625540598fc8bcf256f57a6b43ccdc92ef8100d5bfbd714589dbd4b7d5697330edb42b15c46609e9633cb0bbb859b498308d936c7dfdd5d4119770c312ca1bc48e87f1602d3cd531d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0xf0, 0x7, [@m_sample={0xec, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xbd, 0x6, "a2ed0b7a14bad05287e33d59babc8209db02ad650976dd842d2d47c1c9849ff305e872cb5a56afd1962936ac53e9d838267180709e74989147bec4de147416378dce4dac0b3235301c445fe680725606d98f8bc3cb0c8f64a1a8c781ab48a7f33b966fcd153977438519bb760a01337c88d3d21e62e1a2f0ef49edca46af84b4ff44788e079e7ff246b0e6bcd9b3c9e8cd6bd7f91b685f32a1f5441b6f57df12ad2a689d6b35720c05221dbc223be7f0bf36cf122a83a1ede3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_TCINDEX_ACT={0x4a4, 0x7, [@m_xt={0x50, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x5}]}, {0x1d, 0x6, "989643fb69d51a6fd170b16380660c7194a4697bda89f36579"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_police={0x450, 0x2010, 0x0, 0x0, {{0xb}, {0x424, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x9, 0x9, 0x8, 0x10, 0x3, 0xfffffff8, 0x0, 0xc, 0x5, 0x9, 0x5, 0x7, 0x1, 0x101, 0x5, 0xfffffff8, 0x100, 0x0, 0x6, 0xfffffffc, 0x6, 0x400, 0x3, 0x13bdefd4, 0xffffffff, 0xfffffc00, 0x272, 0x2, 0x4, 0xc30, 0x400, 0x9, 0x5, 0x5, 0x6, 0xd02, 0x0, 0x8001, 0x1ef, 0x8, 0x2, 0x8000, 0x3, 0x80, 0x5, 0x3f, 0x4, 0x8, 0x0, 0x10, 0xa8, 0x8001, 0x6, 0x9, 0xc7ca, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x30, 0x81, 0x6, 0x9, 0x2, 0x80000001, 0x40, 0xf8f, 0x7, 0x2, 0xc, 0x1, 0x428, 0x0, 0x8, 0x4, 0x3, 0x4, 0x30000000, 0x8, 0x7, 0x7fff, 0x69, 0x3, 0x10001, 0x80000, 0x1, 0x6, 0x40, 0x4, 0x1ff, 0x7, 0x4, 0x5, 0x14, 0x1, 0x0, 0xc3, 0x8, 0x79, 0x5, 0x5, 0x3, 0x0, 0xc, 0x390, 0x1, 0xe, 0x5, 0xfffffffa, 0x7ff, 0x9, 0x6, 0x2, 0x7fffffff, 0x0, 0x4, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fffffff, 0x1, 0x5, 0x3, 0xfffffff1, 0x3, 0x8, 0x9, 0x7, 0x0, 0xff, 0xfffffffb, 0x5, 0xc, 0x7207, 0x6, 0x7fd, 0x1, 0xa155, 0x2, 0x1, 0x6, 0x4, 0x4, 0x6, 0x4, 0x0, 0x1000, 0x7, 0xfffffffc, 0x560, 0x8, 0x10000, 0x101, 0xe2, 0x1, 0x6, 0x0, 0x9, 0x0, 0x8, 0xb, 0x2, 0x87, 0x1ff, 0x1, 0x81, 0x2, 0x65c, 0x10001, 0x5, 0x10, 0x7, 0xd08, 0x9, 0x2, 0x256, 0x4000000, 0x80000001, 0x80000000, 0x2, 0x9, 0x6, 0x3, 0x18000, 0x7fffffff, 0x3, 0x4, 0x8, 0x5, 0x40, 0xffffff4f, 0x4, 0x5, 0x3, 0x3, 0x4, 0x7, 0xe1, 0x7, 0x0, 0x4, 0x4, 0xd, 0x100, 0x9, 0x1000, 0x8, 0x5, 0x6, 0x10001, 0x0, 0x1, 0x8, 0x1, 0xac8, 0xd, 0x4, 0x5, 0x4, 0x7, 0x401, 0x0, 0x2, 0x9, 0x1, 0xff, 0x9, 0x40, 0x587, 0x893, 0x7fff, 0xd2, 0x1, 0x7, 0x3, 0x1d1, 0x4, 0x4, 0x9, 0x1, 0x6, 0x7, 0x40, 0x8000, 0x40000000, 0x0, 0x101, 0x7fffffff, 0x7ff, 0x2, 0x4, 0x1]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x40000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) io_setup(0x8, &(0x7f0000000100)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x181002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r7, 0x2219, 0x9362, 0x16, 0x0, 0x0) 1.993755186s ago: executing program 5 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f00000004c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0xffffffff, 0xe, 0x0, &(0x7f0000000580)="05004013ffffffffa000c4353512", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.930525469s ago: executing program 5 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000440)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x2010, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) bind(0xffffffffffffffff, &(0x7f0000000940)=@in={0x2, 0x3210, @broadcast}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f3, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={@mcast1, 0x48, r4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4000010, 0xffffffffffffffff, 0xaf316000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 1.870540213s ago: executing program 5 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e24}, 0x1c) (fail_nth: 7) 1.269686286s ago: executing program 5 (id=676): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x82, &(0x7f0000000100), &(0x7f00000002c0)=0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040815}, 0xc4) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x82, &(0x7f0000000100), &(0x7f00000002c0)=0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040815}, 0xc4) (async) 1.040289388s ago: executing program 5 (id=677): ioperm(0x2, 0xfffffe79, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001700010324bd7000fcffffff0a"], 0x44}, 0x1, 0x0, 0x0, 0x200448d3}, 0x8094) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000c"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000740)=@e={0xff, 0xb}) write(r1, &(0x7f0000000340)='0000:00:1f.3', 0xc) r3 = openat2$dir(0xffffff9c, &(0x7f0000000380)='./drv/bind\x00', &(0x7f00000003c0)={0x4100, 0x40}, 0x18) utimensat(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208c, &(0x7f0000000600)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./drv/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='0000:00:1f.3\x00', 0xd) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f00000000c0)={0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 954.265304ms ago: executing program 4 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x3f}, 0x1c) 878.680375ms ago: executing program 4 (id=679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000003c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="1201f402000000106307012040000102030109026f0003010300050904010000010100000a240100000a0002010209040100000102000009040101010102000008240201010206070724010606021009050109080002fc0a072501000e060009040200000102000009040201010102000009058209400001bf0807250108050600f675b0eab9e689a2854af9eba451b9032ed7b70f07d0fbd29790bb652577d88039b21b47ad26ac48ccb44e263fb9fc85b3314d6509ed6d2779d6db3f77ffb977fac433c28ced61f23e9f2e6f9a34f67019e6277385b3ddfd49c5ea88c7839e8b7c318f4b0518d5fb489dfbf56a652d177e072657a951ff"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) ioprio_set$pid(0x2, 0x0, 0x2000) 668.22538ms ago: executing program 1 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) read$FUSE(r0, &(0x7f0000007140)={0x2020}, 0x2020) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x1}, {0xe, 0x100}, 0x2}) close_range(r0, r0, 0x2) 579.668627ms ago: executing program 1 (id=682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f00000004c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0xffffffff, 0xe, 0x0, &(0x7f0000000580)="05004013ffffffffa000c4353512", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 340.196347ms ago: executing program 1 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000440)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x2010, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) bind(0xffffffffffffffff, &(0x7f0000000940)=@in={0x2, 0x3210, @broadcast}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f3, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={@mcast1, 0x48, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 90.235712ms ago: executing program 1 (id=684): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000000)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3e) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 89.988089ms ago: executing program 1 (id=685): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b [ 88.120190][ T7088] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 88.120240][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 88.120308][ T7088] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 88.120339][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 88.582177][ T7106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.583467][ T7106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.428740][ T7119] FAULT_INJECTION: forcing a failure. [ 89.428740][ T7119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.428761][ T7119] CPU: 3 UID: 0 PID: 7119 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT(full) [ 89.428774][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.428781][ T7119] Call Trace: [ 89.428785][ T7119] [ 89.428790][ T7119] dump_stack_lvl+0x100/0x190 [ 89.428810][ T7119] should_fail_ex.cold+0x5/0xa [ 89.428827][ T7119] _copy_from_user+0x2e/0xd0 [ 89.428844][ T7119] get_compat_msghdr+0xb3/0x480 [ 89.428871][ T7119] ? __pfx_get_compat_msghdr+0x10/0x10 [ 89.428905][ T7119] ___sys_sendmsg+0x1b6/0x1e0 [ 89.428936][ T7119] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.428960][ T7119] ? find_held_lock+0x2b/0x80 [ 89.428983][ T7119] __sys_sendmsg+0x160/0x210 [ 89.428997][ T7119] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.429045][ T7119] ? __pfx_ksys_write+0x10/0x10 [ 89.429064][ T7119] __do_fast_syscall_32+0x13a/0x8b0 [ 89.429077][ T7119] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.429096][ T7119] do_fast_syscall_32+0x32/0x70 [ 89.429107][ T7119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.429121][ T7119] RIP: 0023:0xf73befec [ 89.429134][ T7119] Code: Unable to access opcode bytes at 0xf73befc2. [ 89.429139][ T7119] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.429151][ T7119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 89.429158][ T7119] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.429165][ T7119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.429171][ T7119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.429182][ T7119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.429197][ T7119] [ 89.564763][ T7127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.542291][ T7159] could not allocate digest TFM handle [ 90.787597][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 90.936538][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 90.939053][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.940148][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.940172][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.940192][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.940225][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.945596][ T9] usb 6-1: config 0 descriptor?? [ 91.359597][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 91.359624][ T9] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 91.371848][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input8 [ 91.450854][ T9] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 91.566652][ T5820] usb 6-1: USB disconnect, device number 15 [ 91.982198][ T7180] fido_id[7180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 92.269999][ T7183] netlink: 'syz.3.379': attribute type 2 has an invalid length. [ 92.270019][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.379'. [ 92.281384][ T7183] : entered promiscuous mode [ 92.553343][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.553667][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.612274][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.615125][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.695317][ T5839] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696251][ T5839] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696291][ T5839] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696322][ T5839] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.377154][ T7220] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 93.377179][ T7220] device-mapper: ioctl: error adding target to table [ 93.595907][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.598802][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.599595][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.601785][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.602998][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.626820][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.628975][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.629670][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.631364][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.631936][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.853406][ T7236] xt_IDLETIMER: label is empty or not nul-terminated [ 93.879663][ T7238] Bluetooth: hci0: unsupported parameter 5161 [ 93.879683][ T7238] Bluetooth: hci0: unsupported parameter 8192 [ 93.879701][ T7238] Bluetooth: hci0: unsupported parameter 5161 [ 93.879712][ T7238] Bluetooth: hci0: unsupported parameter 8192 [ 93.894092][ T7238] overlayfs: failed to resolve './file0': -2 [ 93.962746][ T7224] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.203873][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.203954][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.204012][ T7224] bridge_slave_0: entered allmulticast mode [ 94.204729][ T7224] bridge_slave_0: entered promiscuous mode [ 94.207444][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.207621][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.207680][ T7224] bridge_slave_1: entered allmulticast mode [ 94.208372][ T7224] bridge_slave_1: entered promiscuous mode [ 94.231025][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.233615][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.249117][ T7224] team0: Port device team_slave_0 added [ 94.250368][ T7224] team0: Port device team_slave_1 added [ 94.261607][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.261617][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.261630][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.262671][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.262678][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.262691][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.280918][ T7224] hsr_slave_0: entered promiscuous mode [ 94.281469][ T7224] hsr_slave_1: entered promiscuous mode [ 94.281764][ T7224] debugfs: 'hsr0' already exists in 'hsr' [ 94.281776][ T7224] Cannot create hsr debugfs directory [ 94.369259][ T7224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.371127][ T7224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.371658][ T7224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.374936][ T7224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.388126][ T7224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.391778][ T7224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.392432][ T7224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.396669][ T7224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.428192][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.428249][ T7224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.428685][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.428735][ T7224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.476698][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.483758][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.484293][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.497243][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.501403][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.501484][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.506710][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.506790][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.749422][ T7275] FAULT_INJECTION: forcing a failure. [ 94.749422][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 94.749452][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.2.397 Not tainted syzkaller #0 PREEMPT(full) [ 94.749471][ T7275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.749481][ T7275] Call Trace: [ 94.749486][ T7275] [ 94.749493][ T7275] dump_stack_lvl+0x100/0x190 [ 94.749521][ T7275] should_fail_ex.cold+0x5/0xa [ 94.749543][ T7275] should_failslab+0xc2/0x120 [ 94.749569][ T7275] __kmalloc_noprof+0xfc/0x840 [ 94.749592][ T7275] ? nsim_fib_event_nb+0x661/0xe50 [ 94.749621][ T7275] nsim_fib_event_nb+0x661/0xe50 [ 94.749646][ T7275] ? lock_acquire+0x1d1/0x380 [ 94.749673][ T7275] notifier_call_chain+0x99/0x3f0 [ 94.749698][ T7275] atomic_notifier_call_chain+0x71/0x1c0 [ 94.749718][ T7275] call_fib_notifiers+0x33/0x70 [ 94.749741][ T7275] fib6_del+0xbc7/0x1790 [ 94.749773][ T7275] ? __pfx_fib6_del+0x10/0x10 [ 94.749793][ T7275] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 94.749817][ T7275] __ip6_del_rt+0xa5/0x1d0 [ 94.749836][ T7275] ip6_route_del+0x703/0x1a60 [ 94.749861][ T7275] ? __pfx_ip6_route_del+0x10/0x10 [ 94.749879][ T7275] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.749902][ T7275] ? rcu_is_watching+0x13/0xc0 [ 94.749922][ T7275] ? apparmor_capable+0x1d7/0x4d0 [ 94.749942][ T7275] ? bpf_lsm_capable+0x9/0x10 [ 94.749959][ T7275] ? security_capable+0x80/0x260 [ 94.749987][ T7275] ipv6_route_ioctl+0x496/0x5c0 [ 94.750018][ T7275] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 94.750055][ T7275] ? __might_fault+0xc5/0x140 [ 94.750072][ T7275] ? __might_fault+0xc5/0x140 [ 94.750096][ T7275] inet6_compat_ioctl+0x2db/0x360 [ 94.750115][ T7275] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 94.750157][ T7275] ? do_vfs_ioctl+0x226/0x13e0 [ 94.750177][ T7275] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.750196][ T7275] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 94.750213][ T7275] compat_sock_ioctl+0x179/0x760 [ 94.750242][ T7275] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 94.750265][ T7275] ? hook_file_ioctl_common+0x140/0x440 [ 94.750291][ T7275] ? __fget_files+0x21f/0x3d0 [ 94.750317][ T7275] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 94.750342][ T7275] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 94.750364][ T7275] __do_fast_syscall_32+0x13a/0x8b0 [ 94.750381][ T7275] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.750409][ T7275] do_fast_syscall_32+0x32/0x70 [ 94.750425][ T7275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.750445][ T7275] RIP: 0023:0xf7f64fec [ 94.750466][ T7275] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 94.750473][ T7275] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 94.750491][ T7275] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890c [ 94.750501][ T7275] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.750510][ T7275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.750520][ T7275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.750530][ T7275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.750553][ T7275] [ 94.769596][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.907047][ T7224] veth0_vlan: entered promiscuous mode [ 94.913091][ T7224] veth1_vlan: entered promiscuous mode [ 94.933659][ T7224] veth0_macvtap: entered promiscuous mode [ 94.937488][ T7224] veth1_macvtap: entered promiscuous mode [ 94.944819][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.950551][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.975367][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.988539][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.988576][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.988605][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.020081][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.020095][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041419][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.041432][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.070242][ T7278] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.155969][ T7295] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.191323][ T7278] FAULT_INJECTION: forcing a failure. [ 95.191323][ T7278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.191353][ T7278] CPU: 2 UID: 0 PID: 7278 Comm: syz.3.396 Not tainted syzkaller #0 PREEMPT(full) [ 95.191373][ T7278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.191383][ T7278] Call Trace: [ 95.191389][ T7278] [ 95.191396][ T7278] dump_stack_lvl+0x100/0x190 [ 95.191439][ T7278] should_fail_ex.cold+0x5/0xa [ 95.191463][ T7278] _copy_from_user+0x2e/0xd0 [ 95.191480][ T7278] kstrtouint_from_user+0xd6/0x1d0 [ 95.191501][ T7278] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 95.191527][ T7278] ? lock_acquire+0x1d1/0x380 [ 95.191556][ T7278] proc_fail_nth_write+0x83/0x220 [ 95.191580][ T7278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.191608][ T7278] vfs_write+0x2aa/0x1050 [ 95.191629][ T7278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.191656][ T7278] ? lock_acquire+0x1d1/0x380 [ 95.191678][ T7278] ? __fget_files+0x34/0x3d0 [ 95.191700][ T7278] ? __pfx_vfs_write+0x10/0x10 [ 95.191719][ T7278] ? find_held_lock+0x2b/0x80 [ 95.191740][ T7278] ? __fget_files+0x215/0x3d0 [ 95.191765][ T7278] ? __fget_files+0x21f/0x3d0 [ 95.191793][ T7278] ksys_write+0x12a/0x250 [ 95.191814][ T7278] ? __pfx_ksys_write+0x10/0x10 [ 95.191841][ T7278] do_int80_emulation+0x166/0x650 [ 95.191863][ T7278] asm_int80_emulation+0x1a/0x20 [ 95.191878][ T7278] RIP: 0023:0xf71177eb [ 95.191892][ T7278] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 95.191908][ T7278] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 95.191925][ T7278] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53d65d0 [ 95.191937][ T7278] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.191946][ T7278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.191955][ T7278] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.191965][ T7278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.191987][ T7278] [ 95.599463][ T7309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.607269][ T7309] FAULT_INJECTION: forcing a failure. [ 95.607269][ T7309] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.607357][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT(full) [ 95.607379][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.607389][ T7309] Call Trace: [ 95.607395][ T7309] [ 95.607403][ T7309] dump_stack_lvl+0x100/0x190 [ 95.607430][ T7309] should_fail_ex.cold+0x5/0xa [ 95.607448][ T7309] ? prepare_alloc_pages+0x16d/0x5b0 [ 95.607478][ T7309] should_fail_alloc_page+0xeb/0x140 [ 95.607524][ T7309] prepare_alloc_pages+0x1f0/0x5b0 [ 95.607551][ T7309] ? is_bpf_text_address+0x94/0x1a0 [ 95.607582][ T7309] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 95.607616][ T7309] ? stack_trace_save+0x8e/0xc0 [ 95.607640][ T7309] ? __pfx_stack_trace_save+0x10/0x10 [ 95.607662][ T7309] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.607688][ T7309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 95.607709][ T7309] ? is_bpf_text_address+0x94/0x1a0 [ 95.607735][ T7309] ? kasan_save_stack+0x3f/0x50 [ 95.607750][ T7309] ? kasan_save_stack+0x30/0x50 [ 95.607765][ T7309] ? kasan_save_track+0x14/0x30 [ 95.607780][ T7309] ? __kasan_slab_alloc+0x89/0x90 [ 95.607796][ T7309] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 95.607811][ T7309] ? alloc_vmap_area+0x640/0x2bb0 [ 95.607826][ T7309] ? __get_vm_area_node+0x1ed/0x350 [ 95.607846][ T7309] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 95.607872][ T7309] ? __vmalloc_node_noprof+0xad/0xf0 [ 95.607896][ T7309] ? copy_process+0x803/0x8380 [ 95.608018][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.608036][ T7309] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 95.608047][ T7309] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 95.608060][ T7309] ? kvm_vcpu_ioctl+0x730/0x1700 [ 95.608073][ T7309] ? kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 95.608087][ T7309] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 95.608100][ T7309] ? __do_fast_syscall_32+0x13a/0x8b0 [ 95.608118][ T7309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.608137][ T7309] ? policy_nodemask+0xed/0x4f0 [ 95.608156][ T7309] alloc_pages_mpol+0x201/0x550 [ 95.608173][ T7309] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 95.608195][ T7309] alloc_pages_noprof+0x1a/0x160 [ 95.608208][ T7309] get_free_pages_noprof+0x10/0xb0 [ 95.608224][ T7309] __kasan_populate_vmalloc+0xa0/0x210 [ 95.608243][ T7309] alloc_vmap_area+0x95d/0x2bb0 [ 95.608263][ T7309] ? kasan_save_track+0x14/0x30 [ 95.608278][ T7309] ? __kasan_kmalloc+0xaa/0xb0 [ 95.608294][ T7309] ? __pfx_alloc_vmap_area+0x10/0x10 [ 95.608311][ T7309] ? __get_vm_area_node+0x124/0x350 [ 95.608330][ T7309] __get_vm_area_node+0x1ed/0x350 [ 95.608349][ T7309] __vmalloc_node_range_noprof+0x268/0x1420 [ 95.608368][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.608382][ T7309] ? lock_acquire+0x1d1/0x380 [ 95.608398][ T7309] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 95.608414][ T7309] ? find_held_lock+0x2b/0x80 [ 95.608427][ T7309] ? rcu_read_unlock+0x17/0x60 [ 95.608441][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.608456][ T7309] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 95.608471][ T7309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.608491][ T7309] ? rcu_is_watching+0x13/0xc0 [ 95.608504][ T7309] ? trace_kmem_cache_alloc+0xdd/0x100 [ 95.608523][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.608537][ T7309] __vmalloc_node_noprof+0xad/0xf0 [ 95.608554][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.608570][ T7309] copy_process+0x803/0x8380 [ 95.608589][ T7309] ? __pfx_copy_process+0x10/0x10 [ 95.608600][ T7309] ? kasan_save_track+0x14/0x30 [ 95.608615][ T7309] ? __kasan_kmalloc+0xaa/0xb0 [ 95.608631][ T7309] ? lockdep_init_map_type+0x5c/0x250 [ 95.608649][ T7309] ? lockdep_init_map_type+0x5c/0x250 [ 95.608668][ T7309] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 95.608687][ T7309] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 95.608701][ T7309] vhost_task_create+0x1db/0x370 [ 95.608716][ T7309] ? __pfx_vhost_task_create+0x10/0x10 [ 95.608735][ T7309] ? __pfx_vhost_task_fn+0x10/0x10 [ 95.608750][ T7309] ? register_lock_class+0x3f/0x7b0 [ 95.608766][ T7309] ? rcu_is_watching+0x13/0xc0 [ 95.608779][ T7309] ? trace_contention_end+0x126/0x160 [ 95.608800][ T7309] kvm_mmu_post_init_vm+0x1b3/0x360 [ 95.608813][ T7309] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 95.608829][ T7309] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 95.608842][ T7309] ? lock_acquire+0x1d1/0x380 [ 95.608858][ T7309] ? do_raw_write_lock+0x11e/0x260 [ 95.608870][ T7309] ? find_held_lock+0x2b/0x80 [ 95.608883][ T7309] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 95.608896][ T7309] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 95.608913][ T7309] kvm_vcpu_ioctl+0x730/0x1700 [ 95.608929][ T7309] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.608944][ T7309] ? tomoyo_path_number_perm+0x188/0x580 [ 95.608959][ T7309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.608973][ T7309] ? get_pid_task+0x106/0x250 [ 95.608989][ T7309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.609026][ T7309] ? do_vfs_ioctl+0x226/0x13e0 [ 95.609039][ T7309] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 95.609055][ T7309] ? __fget_files+0x34/0x3d0 [ 95.609072][ T7309] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 95.609088][ T7309] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 95.609103][ T7309] ? __fget_files+0x21f/0x3d0 [ 95.609120][ T7309] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 95.609136][ T7309] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 95.609151][ T7309] __do_fast_syscall_32+0x13a/0x8b0 [ 95.609162][ T7309] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.609185][ T7309] do_fast_syscall_32+0x32/0x70 [ 95.609196][ T7309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.609211][ T7309] RIP: 0023:0xf73befec [ 95.609223][ T7309] Code: Unable to access opcode bytes at 0xf73befc2. [ 95.609229][ T7309] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 95.609240][ T7309] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 95.609247][ T7309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.609254][ T7309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.609261][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.609267][ T7309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.609281][ T7309] [ 95.610976][ T7309] warn_alloc: 1 callbacks suppressed [ 95.610990][ T7309] syz.3.403: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.611039][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT(full) [ 95.611051][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.611058][ T7309] Call Trace: [ 95.611062][ T7309] [ 95.611066][ T7309] dump_stack_lvl+0x100/0x190 [ 95.611096][ T7309] warn_alloc.cold+0x9e/0xb2 [ 95.611112][ T7309] ? __pfx_warn_alloc+0x10/0x10 [ 95.611126][ T7309] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.611145][ T7309] ? __get_vm_area_node+0x2f0/0x350 [ 95.611169][ T7309] ? __get_vm_area_node+0x22b/0x350 [ 95.611189][ T7309] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 95.611208][ T7309] ? lock_acquire+0x1d1/0x380 [ 95.611224][ T7309] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 95.611239][ T7309] ? find_held_lock+0x2b/0x80 [ 95.611253][ T7309] ? rcu_read_unlock+0x17/0x60 [ 95.611266][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.611281][ T7309] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 95.611297][ T7309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.611317][ T7309] ? rcu_is_watching+0x13/0xc0 [ 95.611330][ T7309] ? trace_kmem_cache_alloc+0xdd/0x100 [ 95.611349][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.611363][ T7309] __vmalloc_node_noprof+0xad/0xf0 [ 95.611380][ T7309] ? vhost_task_create+0x1db/0x370 [ 95.611404][ T7309] copy_process+0x803/0x8380 [ 95.611435][ T7309] ? __pfx_copy_process+0x10/0x10 [ 95.611454][ T7309] ? kasan_save_track+0x14/0x30 [ 95.611477][ T7309] ? __kasan_kmalloc+0xaa/0xb0 [ 95.611501][ T7309] ? lockdep_init_map_type+0x5c/0x250 [ 95.611530][ T7309] ? lockdep_init_map_type+0x5c/0x250 [ 95.611552][ T7309] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 95.611569][ T7309] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 95.611584][ T7309] vhost_task_create+0x1db/0x370 [ 95.611599][ T7309] ? __pfx_vhost_task_create+0x10/0x10 [ 95.611618][ T7309] ? __pfx_vhost_task_fn+0x10/0x10 [ 95.611633][ T7309] ? register_lock_class+0x3f/0x7b0 [ 95.611649][ T7309] ? rcu_is_watching+0x13/0xc0 [ 95.611662][ T7309] ? trace_contention_end+0x126/0x160 [ 95.611684][ T7309] kvm_mmu_post_init_vm+0x1b3/0x360 [ 95.611697][ T7309] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 95.611714][ T7309] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 95.611726][ T7309] ? lock_acquire+0x1d1/0x380 [ 95.611743][ T7309] ? do_raw_write_lock+0x11e/0x260 [ 95.611754][ T7309] ? find_held_lock+0x2b/0x80 [ 95.611767][ T7309] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 95.611783][ T7309] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 95.611810][ T7309] kvm_vcpu_ioctl+0x730/0x1700 [ 95.611836][ T7309] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.611861][ T7309] ? tomoyo_path_number_perm+0x188/0x580 [ 95.611883][ T7309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.611900][ T7309] ? get_pid_task+0x106/0x250 [ 95.611916][ T7309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.611934][ T7309] ? do_vfs_ioctl+0x226/0x13e0 [ 95.611948][ T7309] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 95.611964][ T7309] ? __fget_files+0x34/0x3d0 [ 95.611982][ T7309] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 95.611997][ T7309] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 95.612012][ T7309] ? __fget_files+0x21f/0x3d0 [ 95.612030][ T7309] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 95.612045][ T7309] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 95.612060][ T7309] __do_fast_syscall_32+0x13a/0x8b0 [ 95.612148][ T7309] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.612171][ T7309] do_fast_syscall_32+0x32/0x70 [ 95.612183][ T7309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.612197][ T7309] RIP: 0023:0xf73befec [ 95.612209][ T7309] Code: Unable to access opcode bytes at 0xf73befc2. [ 95.612214][ T7309] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 95.612225][ T7309] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 95.612232][ T7309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.612239][ T7309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.612245][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.612251][ T7309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.612266][ T7309] [ 95.612320][ T7309] Mem-Info: [ 95.612327][ T7309] active_anon:3761 inactive_anon:663 isolated_anon:0 [ 95.612327][ T7309] active_file:3043 inactive_file:4510 isolated_file:0 [ 95.612327][ T7309] unevictable:0 dirty:206 writeback:0 [ 95.612327][ T7309] slab_reclaimable:6522 slab_unreclaimable:59065 [ 95.612327][ T7309] mapped:32062 shmem:2863 pagetables:1271 [ 95.612327][ T7309] sec_pagetables:305 bounce:0 [ 95.612327][ T7309] kernel_misc_reclaimable:0 [ 95.612327][ T7309] free:21753 free_pcp:2012 free_cma:0 [ 95.612353][ T7309] Node 0 active_anon:12kB inactive_anon:56kB active_file:64kB inactive_file:1256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1268kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.612380][ T7309] Node 1 active_anon:15032kB inactive_anon:2596kB active_file:12108kB inactive_file:16784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128220kB dirty:824kB writeback:0kB shmem:11452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5936kB pagetables:3816kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.612407][ T7309] Node 0 DMA free:2352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:0kB zspages:72kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.612437][ T7309] lowmem_reserve[]: 0 259 259 259 259 [ 95.612455][ T7309] Node 0 DMA32 free:19860kB boost:8192kB min:19896kB low:22820kB high:25744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:52kB active_file:64kB inactive_file:996kB unevictable:0kB writepending:0kB zspages:1308kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 95.612539][ T7309] lowmem_reserve[]: 0 0 0 0 0 [ 95.612559][ T7309] Node 1 DMA32 free:64800kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15032kB inactive_anon:2596kB active_file:12108kB inactive_file:16784kB unevictable:0kB writepending:824kB zspages:7248kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:7992kB local_pcp:5412kB free_cma:0kB [ 95.612589][ T7309] lowmem_reserve[]: 0 0 0 0 0 [ 95.612606][ T7309] Node 0 DMA: 142*4kB (UE) 19*8kB (UE) 10*16kB (UE) 6*32kB (UE) 4*64kB (UE) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2352kB [ 95.613189][ T7309] Node 0 DMA32: 351*4kB (UME) 128*8kB (UME) 65*16kB (UME) 184*32kB (UME) 70*64kB (UME) 21*128kB (UME) 9*256kB (UME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19852kB [ 95.613264][ T7309] Node 1 DMA32: 69*4kB (UE) 51*8kB (UME) 100*16kB (UME) 196*32kB (UME) 123*64kB (UME) 107*128kB (UME) 71*256kB (UME) 18*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 64684kB [ 95.613393][ T7309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.613402][ T7309] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 95.613410][ T7309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.613418][ T7309] Node 1 hugepages_total=112 hugepages_free=112 hugepages_surp=0 hugepages_size=2048kB [ 95.613427][ T7309] 10872 total pagecache pages [ 95.613431][ T7309] 472 pages in swap cache [ 95.613434][ T7309] Free swap = 96752kB [ 95.613438][ T7309] Total swap = 124996kB [ 95.613442][ T7309] 524155 pages RAM [ 95.613446][ T7309] 0 pages HighMem/MovableOnly [ 95.613449][ T7309] 216924 pages reserved [ 95.613453][ T7309] 0 pages cma reserved [ 95.718877][ T5745] Bluetooth: hci4: command tx timeout [ 95.886043][ T7311] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.091222][ T7321] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 96.280403][ T7342] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.380011][ T58] kernel write not supported for file /input/event0 (pid: 58 comm: kworker/1:1) [ 96.438548][ T7350] netlink: 'syz.1.412': attribute type 2 has an invalid length. [ 96.629486][ T7356] netlink: 'syz.3.414': attribute type 2 has an invalid length. [ 96.791736][ T7363] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 96.791748][ T7363] device-mapper: raid: Choosing default region size of 4MiB [ 96.889613][ T7368] FAULT_INJECTION: forcing a failure. [ 96.889613][ T7368] name fail_futex, interval 1, probability 0, space 0, times 1 [ 96.889652][ T7368] CPU: 2 UID: 0 PID: 7368 Comm: syz.2.415 Not tainted syzkaller #0 PREEMPT(full) [ 96.889675][ T7368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.889688][ T7368] Call Trace: [ 96.889693][ T7368] [ 96.889697][ T7368] dump_stack_lvl+0x100/0x190 [ 96.889742][ T7368] should_fail_ex.cold+0x5/0xa [ 96.889768][ T7368] get_futex_key+0x1d0/0x14f0 [ 96.889790][ T7368] ? __pfx_get_futex_key+0x10/0x10 [ 96.889803][ T7368] ? __do_fast_syscall_32+0x13a/0x8b0 [ 96.889822][ T7368] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.889853][ T7368] futex_wait_setup+0x91/0x540 [ 96.889882][ T7368] __futex_wait+0x19f/0x300 [ 96.889905][ T7368] ? __pfx___futex_wait+0x10/0x10 [ 96.889929][ T7368] ? futex_hash+0x311/0x400 [ 96.889950][ T7368] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.889978][ T7368] ? __pfx_futex_hash+0x10/0x10 [ 96.889989][ T7368] ? __raw_spin_lock_init+0x3a/0x110 [ 96.890008][ T7368] ? lockdep_init_map_type+0x5c/0x250 [ 96.890041][ T7368] futex_wait+0xe6/0x370 [ 96.890065][ T7368] ? __pfx_futex_wait+0x10/0x10 [ 96.890089][ T7368] ? find_held_lock+0x2b/0x80 [ 96.890109][ T7368] ? fd_install+0x223/0x580 [ 96.890132][ T7368] ? fd_install+0x223/0x580 [ 96.890159][ T7368] do_futex+0x265/0x440 [ 96.890174][ T7368] ? __pfx_do_futex+0x10/0x10 [ 96.890192][ T7368] ? __seccomp_filter+0x896/0x1130 [ 96.890218][ T7368] __ia32_sys_futex_time32+0x2f4/0x470 [ 96.890245][ T7368] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 96.890276][ T7368] __do_fast_syscall_32+0x13a/0x8b0 [ 96.890293][ T7368] do_fast_syscall_32+0x32/0x70 [ 96.890311][ T7368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.890333][ T7368] RIP: 0023:0xf7f64fec [ 96.890353][ T7368] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 96.890361][ T7368] RSP: 002b:00000000f53d45bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 96.890376][ T7368] RAX: ffffffffffffffda RBX: 00000000f74250b8 RCX: 0000000000000080 [ 96.890384][ T7368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74250bc [ 96.890395][ T7368] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 96.890406][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.890417][ T7368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.890442][ T7368] [ 97.129033][ T7363] device-mapper: table: 248:2: raid: Component device(s) too small (-EINVAL) [ 97.129061][ T7363] device-mapper: ioctl: error adding target to table [ 97.591782][ T7381] netlink: 'syz.4.420': attribute type 2 has an invalid length. [ 97.722433][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 97.785019][ T7402] program syz.2.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.795299][ T5745] Bluetooth: hci4: command tx timeout [ 99.148134][ T7441] netlink: 76 bytes leftover after parsing attributes in process `syz.2.436'. [ 99.551701][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 99.553280][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 99.565384][ T58] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 99.636099][ T7466] FAULT_INJECTION: forcing a failure. [ 99.636099][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.636152][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.3.446 Not tainted syzkaller #0 PREEMPT(full) [ 99.636168][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.636175][ T7466] Call Trace: [ 99.636179][ T7466] [ 99.636184][ T7466] dump_stack_lvl+0x100/0x190 [ 99.636216][ T7466] should_fail_ex.cold+0x5/0xa [ 99.636238][ T7466] _copy_from_user+0x2e/0xd0 [ 99.636256][ T7466] ucma_resolve_ip+0x92/0x220 [ 99.636281][ T7466] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 99.636313][ T7466] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 99.636331][ T7466] ucma_write+0x1fb/0x330 [ 99.636343][ T7466] ? __pfx_ucma_write+0x10/0x10 [ 99.636355][ T7466] ? bpf_lsm_file_permission+0x9/0x10 [ 99.636373][ T7466] ? security_file_permission+0x76/0x210 [ 99.636389][ T7466] ? rw_verify_area+0xce/0x6d0 [ 99.636403][ T7466] vfs_write+0x2aa/0x1050 [ 99.636418][ T7466] ? __pfx_ucma_write+0x10/0x10 [ 99.636430][ T7466] ? lock_acquire+0x1d1/0x380 [ 99.636446][ T7466] ? __fget_files+0x34/0x3d0 [ 99.636461][ T7466] ? __pfx_vfs_write+0x10/0x10 [ 99.636474][ T7466] ? find_held_lock+0x2b/0x80 [ 99.636487][ T7466] ? __fget_files+0x215/0x3d0 [ 99.636501][ T7466] ? __fget_files+0x215/0x3d0 [ 99.636519][ T7466] ? __fget_files+0x21f/0x3d0 [ 99.636538][ T7466] ksys_write+0x1f8/0x250 [ 99.636552][ T7466] ? __pfx_ksys_write+0x10/0x10 [ 99.636570][ T7466] __do_fast_syscall_32+0x13a/0x8b0 [ 99.636583][ T7466] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.636601][ T7466] do_fast_syscall_32+0x32/0x70 [ 99.636613][ T7466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.636628][ T7466] RIP: 0023:0xf73befec [ 99.636642][ T7466] Code: Unable to access opcode bytes at 0xf73befc2. [ 99.636648][ T7466] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 99.636659][ T7466] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080002a40 [ 99.636667][ T7466] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.636673][ T7466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.636680][ T7466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.636686][ T7466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.636700][ T7466] [ 99.736043][ T58] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 99.737360][ T58] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 99.737385][ T58] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.737405][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.737437][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.744596][ T7447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.744746][ T7447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.749510][ T58] pl2303 6-1:1.0: pl2303 converter detected [ 99.755352][ T58] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 99.865370][ T1030] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 99.885308][ T5745] Bluetooth: hci4: command tx timeout [ 100.015773][ T1030] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.017066][ T1030] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.018452][ T1030] usb 9-1: config 0 descriptor?? [ 100.056665][ T7447] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 100.059166][ T7447] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 100.059401][ T7447] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 100.059783][ T7447] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 100.060880][ T7447] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 100.230688][ T7464] batman_adv: batadv0: Adding interface: macvtap1 [ 100.230701][ T7464] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.230715][ T7464] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 100.358148][ T1030] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 100.358733][ T1030] [drm:udl_init] *ERROR* Selecting channel failed [ 100.382016][ T1030] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 100.382037][ T1030] [drm] Initialized udl on minor 1 [ 100.386282][ T1030] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 100.391386][ T1030] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 100.395012][ T1030] usb 9-1: USB disconnect, device number 2 [ 100.436319][ T7446] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 100.438252][ T7446] pl2303 ttyUSB0: error sending break = -32 [ 100.439484][ T58] usb 6-1: USB disconnect, device number 16 [ 100.451751][ T58] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 100.452397][ T58] pl2303 6-1:1.0: device disconnected [ 100.506684][ T7478] hugetlbfs: Unknown parameter 'modd' [ 100.567597][ T7481] ovs-dp0: entered promiscuous mode [ 100.577067][ T7481] tipc: Started in network mode [ 100.577090][ T7481] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 100.577243][ T7481] tipc: Enabled bearer , priority 0 [ 100.590323][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.591429][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.240750][ T7494] ublk1: read batch cmd buffer failed [ 101.240835][ T7494] ublk1: read batch cmd buffer failed [ 101.259428][ T7494] ublk1: read batch cmd buffer failed [ 101.259481][ T7494] ublk1: read batch cmd buffer failed [ 101.275653][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.275853][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.628436][ T7501] fuse: Unknown parameter 'f„†0x0000000000000014' [ 101.698316][ T854] tipc: Node number set to 11578026 [ 101.828449][ T7503] hugetlbfs: Unknown parameter 'modd' [ 101.955456][ T5745] Bluetooth: hci4: command tx timeout [ 102.407286][ T7526] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.407322][ T7526] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.459886][ T7526] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.459909][ T7526] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.499636][ T7526] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.499664][ T7526] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.541337][ T7526] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.541365][ T7526] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.618920][ T7532] hugetlbfs: Unknown parameter 'modd' [ 102.645317][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.645338][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.645357][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.645371][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.659786][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.659820][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.659856][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.659879][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.022325][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.022833][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.127893][ T7546] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.138941][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.144370][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.209801][ T7523] block nbd1: shutting down sockets [ 104.921583][ T7569] hugetlbfs: Unknown parameter 'modd' [ 105.175323][ T35] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 105.245306][ T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 105.338067][ T35] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 105.342538][ T35] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.342568][ T35] usb 6-1: Product: syz [ 105.342581][ T35] usb 6-1: Manufacturer: syz [ 105.342593][ T35] usb 6-1: SerialNumber: syz [ 105.348190][ T35] usb 6-1: config 0 descriptor?? [ 105.397092][ T58] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 105.399183][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.399221][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.624687][ T58] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 105.637419][ T5821] usb 6-1: USB disconnect, device number 17 [ 105.640600][ T58] wwan wwan0: port wwan0qmi0 attached [ 105.851574][ T58] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 26:fd:2e:41:33:ad [ 105.855451][ T58] usb 9-1: USB disconnect, device number 3 [ 105.862651][ T58] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 105.939521][ T58] wwan wwan0: port wwan0qmi0 disconnected [ 106.059035][ T7580] fuse: Bad value for 'rootmode' [ 106.104870][ T7584] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 106.502682][ T7596] FAULT_INJECTION: forcing a failure. [ 106.502682][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 106.502705][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.3.484 Not tainted syzkaller #0 PREEMPT(full) [ 106.502719][ T7596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.502726][ T7596] Call Trace: [ 106.502731][ T7596] [ 106.502735][ T7596] dump_stack_lvl+0x100/0x190 [ 106.502755][ T7596] should_fail_ex.cold+0x5/0xa [ 106.502771][ T7596] should_failslab+0xc2/0x120 [ 106.502791][ T7596] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 106.502807][ T7596] ? lock_acquire+0x1d1/0x380 [ 106.502824][ T7596] ? alloc_inode+0x183/0x250 [ 106.502838][ T7596] alloc_inode+0x183/0x250 [ 106.502851][ T7596] alloc_anon_inode+0x2a/0x3e0 [ 106.502869][ T7596] anon_inode_make_secure_inode+0x2f/0x140 [ 106.502885][ T7596] __anon_inode_getfile+0x1cf/0x280 [ 106.502903][ T7596] new_userfaultfd+0x255/0x400 [ 106.502921][ T7596] __ia32_sys_userfaultfd+0x4b/0xb0 [ 106.502942][ T7596] __do_fast_syscall_32+0x13a/0x8b0 [ 106.502963][ T7596] do_fast_syscall_32+0x32/0x70 [ 106.502976][ T7596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.502993][ T7596] RIP: 0023:0xf73befec [ 106.503006][ T7596] Code: Unable to access opcode bytes at 0xf73befc2. [ 106.503011][ T7596] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 106.503023][ T7596] RAX: ffffffffffffffda RBX: 0000000000000801 RCX: 0000000000000000 [ 106.503033][ T7596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.503043][ T7596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.503054][ T7596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.503064][ T7596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.503079][ T7596] [ 106.843134][ T7605] hugetlbfs: Unknown parameter 'modd' [ 106.948006][ T9] usb 8-1: USB disconnect, device number 13 [ 106.974596][ T7609] JFS: discard option not supported on device [ 106.983056][ T7609] Mount JFS Failure: -5 [ 106.983071][ T7609] jfs_mount failed w/return code = -5 [ 107.338371][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.341424][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.342442][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.344035][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.344508][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.413665][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 107.463591][ T44] audit: type=1326 audit(1792044813.557:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.463637][ T44] audit: type=1326 audit(1792044813.557:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.469487][ T44] audit: type=1326 audit(1792044813.567:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.472430][ T44] audit: type=1326 audit(1792044813.567:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.472467][ T44] audit: type=1326 audit(1792044813.567:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.475265][ T44] audit: type=1326 audit(1792044813.567:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f64fec code=0x7ffc0000 [ 107.475290][ T44] audit: type=1326 audit(1792044813.567:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71577eb code=0x7ffc0000 [ 107.475311][ T44] audit: type=1326 audit(1792044813.567:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71577eb code=0x7ffc0000 [ 107.475332][ T44] audit: type=1326 audit(1792044813.567:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71577eb code=0x7ffc0000 [ 107.475352][ T44] audit: type=1326 audit(1792044813.567:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.492" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71577eb code=0x7ffc0000 [ 107.486760][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.498743][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 107.683231][ T7638] hugetlbfs: Unknown parameter 'modd' [ 107.759265][ T7618] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.945602][ T7648] Invalid ELF header magic: != ELF [ 108.203600][ T7659] jffs2: notice: (7659) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.289246][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.289326][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.289388][ T7618] bridge_slave_0: entered allmulticast mode [ 108.290161][ T7618] bridge_slave_0: entered promiscuous mode [ 108.303650][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.303714][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.303776][ T7618] bridge_slave_1: entered allmulticast mode [ 108.304765][ T7618] bridge_slave_1: entered promiscuous mode [ 108.331543][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.333149][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.355827][ T7618] team0: Port device team_slave_0 added [ 108.357229][ T7618] team0: Port device team_slave_1 added [ 108.372796][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.372806][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.372824][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.373818][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.373825][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.373838][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.420747][ T7618] hsr_slave_0: entered promiscuous mode [ 108.421192][ T7618] hsr_slave_1: entered promiscuous mode [ 108.421722][ T7618] debugfs: 'hsr0' already exists in 'hsr' [ 108.421734][ T7618] Cannot create hsr debugfs directory [ 108.643580][ T7618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.669351][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.669790][ T7618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.684224][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.699405][ T7618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.712470][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.712949][ T7618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.716642][ T7618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.740873][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.740919][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.750214][ T7692] hugetlbfs: Unknown parameter 'modd' [ 108.785413][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.810299][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.837884][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.849759][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.849807][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.857478][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.857522][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.933030][ T7698] FAULT_INJECTION: forcing a failure. [ 108.933030][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 108.933077][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.1.508 Not tainted syzkaller #0 PREEMPT(full) [ 108.933091][ T7698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.933098][ T7698] Call Trace: [ 108.933102][ T7698] [ 108.933107][ T7698] dump_stack_lvl+0x100/0x190 [ 108.933126][ T7698] should_fail_ex.cold+0x5/0xa [ 108.933141][ T7698] should_failslab+0xc2/0x120 [ 108.933159][ T7698] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 108.933189][ T7698] ? __kasan_kmalloc+0xaa/0xb0 [ 108.933204][ T7698] ? allocate_partition+0x1bc/0x2a0 [ 108.933223][ T7698] kstrdup+0x51/0xe0 [ 108.933237][ T7698] allocate_partition+0x1bc/0x2a0 [ 108.933256][ T7698] mtd_add_partition+0x230/0x6a0 [ 108.933272][ T7698] ? __pfx_mtd_add_partition+0x10/0x10 [ 108.933287][ T7698] ? __might_fault+0xc5/0x140 [ 108.933299][ T7698] ? __might_fault+0xc5/0x140 [ 108.933316][ T7698] mtdchar_blkpg_ioctl+0x207/0x250 [ 108.933332][ T7698] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 108.933361][ T7698] mtdchar_compat_ioctl+0x3d6/0x440 [ 108.933378][ T7698] ? find_held_lock+0x2b/0x80 [ 108.933392][ T7698] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 108.933416][ T7698] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 108.933433][ T7698] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 108.933449][ T7698] __do_fast_syscall_32+0x13a/0x8b0 [ 108.933461][ T7698] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.933479][ T7698] do_fast_syscall_32+0x32/0x70 [ 108.933491][ T7698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.933504][ T7698] RIP: 0023:0xf740efec [ 108.933517][ T7698] Code: Unable to access opcode bytes at 0xf740efc2. [ 108.933522][ T7698] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 108.933533][ T7698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 108.933540][ T7698] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.933547][ T7698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.933554][ T7698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.933560][ T7698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.933574][ T7698] [ 108.933973][ T7698] memory allocation error while creating partitions for "mtdram test device" [ 109.344160][ T7720] 0x000000000000-0x000000010000 : "" [ 109.360867][ T7720] ftl_cs: FTL header not found. [ 109.371881][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.377256][ T7720] FAULT_INJECTION: forcing a failure. [ 109.377256][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 109.377276][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(full) [ 109.377289][ T7720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.377296][ T7720] Call Trace: [ 109.377302][ T7720] [ 109.377307][ T7720] dump_stack_lvl+0x100/0x190 [ 109.377327][ T7720] should_fail_ex.cold+0x5/0xa [ 109.377343][ T7720] should_failslab+0xc2/0x120 [ 109.377362][ T7720] kmem_cache_alloc_noprof+0x92/0x6a0 [ 109.377379][ T7720] ? __kernfs_new_node+0xd2/0xa10 [ 109.377393][ T7720] __kernfs_new_node+0xd2/0xa10 [ 109.377406][ T7720] ? __pfx___kernfs_new_node+0x10/0x10 [ 109.377420][ T7720] ? lock_acquire+0x1d1/0x380 [ 109.377437][ T7720] ? kernfs_root+0x23/0x2a0 [ 109.377453][ T7720] ? find_held_lock+0x2b/0x80 [ 109.377466][ T7720] ? kernfs_root+0xee/0x2a0 [ 109.377482][ T7720] ? kernfs_root+0xee/0x2a0 [ 109.377504][ T7720] kernfs_new_node+0x117/0x150 [ 109.377517][ T7720] __kernfs_create_file+0x53/0x350 [ 109.377533][ T7720] sysfs_add_file_mode_ns+0x207/0x3c0 [ 109.377553][ T7720] internal_create_group+0x593/0xfb0 [ 109.377573][ T7720] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 109.377585][ T7720] ? __pfx_internal_create_group+0x10/0x10 [ 109.377603][ T7720] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 109.377620][ T7720] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 109.377637][ T7720] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 109.377655][ T7720] internal_create_groups+0x9d/0x150 [ 109.377673][ T7720] kobject_add_internal+0x317/0x930 [ 109.377691][ T7720] kobject_add+0x16a/0x1e0 [ 109.377705][ T7720] ? __pfx_kobject_add+0x10/0x10 [ 109.377720][ T7720] ? __pfx_kobject_add+0x10/0x10 [ 109.377739][ T7720] blk_register_queue+0x8d/0x630 [ 109.377758][ T7720] __add_disk+0x7dd/0xf10 [ 109.377775][ T7720] add_disk_fwnode+0x118/0x480 [ 109.377794][ T7720] add_mtd_blktrans_dev+0xd0b/0x1520 [ 109.377826][ T7720] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 109.377866][ T7720] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 109.377892][ T7720] ? mtdblock_add_mtd+0x4a/0x270 [ 109.377912][ T7720] mtdblock_add_mtd+0x1cc/0x270 [ 109.377924][ T7720] blktrans_notify_add+0xa2/0xf0 [ 109.377949][ T7720] add_mtd_device+0xb6d/0x1820 [ 109.377975][ T7720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.377993][ T7720] ? __pfx_add_mtd_device+0x10/0x10 [ 109.378013][ T7720] mtd_add_partition+0x376/0x6a0 [ 109.378031][ T7720] ? __pfx_mtd_add_partition+0x10/0x10 [ 109.378048][ T7720] ? __might_fault+0xc5/0x140 [ 109.378061][ T7720] ? __might_fault+0xc5/0x140 [ 109.378080][ T7720] mtdchar_blkpg_ioctl+0x207/0x250 [ 109.378098][ T7720] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 109.378129][ T7720] mtdchar_compat_ioctl+0x3d6/0x440 [ 109.378148][ T7720] ? find_held_lock+0x2b/0x80 [ 109.378162][ T7720] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 109.378186][ T7720] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 109.378204][ T7720] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 109.378220][ T7720] __do_fast_syscall_32+0x13a/0x8b0 [ 109.378232][ T7720] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.378250][ T7720] do_fast_syscall_32+0x32/0x70 [ 109.378262][ T7720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.378284][ T7720] RIP: 0023:0xf740efec [ 109.378299][ T7720] Code: Unable to access opcode bytes at 0xf740efc2. [ 109.378304][ T7720] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 109.378316][ T7720] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 109.378324][ T7720] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.378331][ T7720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.378338][ T7720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.378346][ T7720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.378361][ T7720] [ 109.380670][ T7720] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock1) [ 109.475263][ T5745] Bluetooth: hci1: command tx timeout [ 109.681543][ T7618] veth0_vlan: entered promiscuous mode [ 109.710489][ T7618] veth1_vlan: entered promiscuous mode [ 109.724794][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 109.766920][ T7618] veth0_macvtap: entered promiscuous mode [ 109.771560][ T7618] veth1_macvtap: entered promiscuous mode [ 109.795064][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.810830][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.835502][ T5821] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 109.879695][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.880083][ T5839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.880380][ T5839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.880655][ T5839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.995160][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.995339][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.001783][ T5821] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 110.008405][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.008419][ T5821] usb 9-1: Product: syz [ 110.008427][ T5821] usb 9-1: Manufacturer: syz [ 110.008434][ T5821] usb 9-1: SerialNumber: syz [ 110.014972][ T5821] usb 9-1: USB2VGA dongle found at address 4 [ 110.033944][ T5821] usb 9-1: Allocated 8 output buffers [ 110.068890][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.068910][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.544660][ T7747] hugetlbfs: Unknown parameter 'modd' [ 110.654314][ T7750] FAULT_INJECTION: forcing a failure. [ 110.654314][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.654336][ T7750] CPU: 2 UID: 0 PID: 7750 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT(full) [ 110.654349][ T7750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.654355][ T7750] Call Trace: [ 110.654360][ T7750] [ 110.654365][ T7750] dump_stack_lvl+0x100/0x190 [ 110.654384][ T7750] should_fail_ex.cold+0x5/0xa [ 110.654400][ T7750] _copy_from_user+0x2e/0xd0 [ 110.654412][ T7750] kstrtouint_from_user+0xd6/0x1d0 [ 110.654426][ T7750] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 110.654444][ T7750] ? lock_acquire+0x1d1/0x380 [ 110.654464][ T7750] proc_fail_nth_write+0x83/0x220 [ 110.654480][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.654499][ T7750] vfs_write+0x2aa/0x1050 [ 110.654514][ T7750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.654529][ T7750] ? lock_acquire+0x1d1/0x380 [ 110.654544][ T7750] ? __fget_files+0x34/0x3d0 [ 110.654559][ T7750] ? __pfx_vfs_write+0x10/0x10 [ 110.654579][ T7750] ? find_held_lock+0x2b/0x80 [ 110.654593][ T7750] ? __fget_files+0x215/0x3d0 [ 110.654610][ T7750] ? __fget_files+0x21f/0x3d0 [ 110.654629][ T7750] ksys_write+0x12a/0x250 [ 110.654642][ T7750] ? __pfx_ksys_write+0x10/0x10 [ 110.654661][ T7750] do_int80_emulation+0x166/0x650 [ 110.654675][ T7750] asm_int80_emulation+0x1a/0x20 [ 110.654686][ T7750] RIP: 0023:0xf71577eb [ 110.654696][ T7750] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 110.654707][ T7750] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 110.654731][ T7750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54165d0 [ 110.654738][ T7750] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.654744][ T7750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.654750][ T7750] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.654757][ T7750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.654772][ T7750] [ 111.227908][ T5821] usb 9-1: Failed to early initialize device [ 111.257567][ T5821] usb 9-1: USB disconnect, device number 4 [ 111.317444][ T7758] bridge_slave_0: left allmulticast mode [ 111.317464][ T7758] bridge_slave_0: left promiscuous mode [ 111.317848][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.363841][ T7758] bridge_slave_1: left allmulticast mode [ 111.364070][ T7758] bridge_slave_1: left promiscuous mode [ 111.392412][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.503547][ T7758] bond0: (slave bond_slave_0): Releasing backup interface [ 111.540358][ T7758] bond0: (slave bond_slave_1): Releasing backup interface [ 111.555485][ T5745] Bluetooth: hci1: command tx timeout [ 111.568465][ T7758] team0: Port device team_slave_0 removed [ 111.588825][ T7758] team0: Port device team_slave_1 removed [ 111.589241][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.623399][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.639573][ T7758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.671654][ T7760] FAULT_INJECTION: forcing a failure. [ 111.671654][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 111.671675][ T7760] CPU: 2 UID: 0 PID: 7760 Comm: syz.5.520 Not tainted syzkaller #0 PREEMPT(full) [ 111.671688][ T7760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.671695][ T7760] Call Trace: [ 111.671699][ T7760] [ 111.671704][ T7760] dump_stack_lvl+0x100/0x190 [ 111.671737][ T7760] should_fail_ex.cold+0x5/0xa [ 111.671752][ T7760] should_failslab+0xc2/0x120 [ 111.671770][ T7760] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.671786][ T7760] ? lock_acquire+0x1d1/0x380 [ 111.671803][ T7760] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 111.671823][ T7760] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 111.671842][ T7760] idr_get_free+0x52e/0xa00 [ 111.671864][ T7760] idr_alloc_u32+0x1ac/0x320 [ 111.671876][ T7760] ? __pfx_idr_alloc_u32+0x10/0x10 [ 111.671893][ T7760] tcf_idr_check_alloc+0x136/0x7a0 [ 111.671906][ T7760] ? tcf_gate_init+0xe1/0x2d10 [ 111.671920][ T7760] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 111.671934][ T7760] ? __nla_parse+0x40/0x60 [ 111.671952][ T7760] tcf_gate_init+0x38c/0x2d10 [ 111.671970][ T7760] ? __lock_acquire+0x5c0/0x1f40 [ 111.671987][ T7760] ? __pfx_tcf_gate_init+0x10/0x10 [ 111.672006][ T7760] ? __pfx___nla_validate_parse+0x10/0x10 [ 111.672028][ T7760] ? __nla_parse+0x40/0x60 [ 111.672045][ T7760] tcf_action_init_1+0x466/0x6c0 [ 111.672061][ T7760] ? __pfx_tcf_action_init_1+0x10/0x10 [ 111.672073][ T7760] ? tc_action_load_ops+0x1f5/0x3e0 [ 111.672087][ T7760] ? __pfx_tc_action_load_ops+0x10/0x10 [ 111.672107][ T7760] ? __nla_parse+0x40/0x60 [ 111.672123][ T7760] tcf_action_init+0x43f/0xa60 [ 111.672142][ T7760] ? __pfx_tcf_action_init+0x10/0x10 [ 111.672182][ T7760] ? find_held_lock+0x2b/0x80 [ 111.672195][ T7760] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 111.672216][ T7760] tcf_action_add+0xed/0x5c0 [ 111.672231][ T7760] ? __pfx_tcf_action_add+0x10/0x10 [ 111.672245][ T7760] ? __lock_acquire+0x5c0/0x1f40 [ 111.672281][ T7760] ? __nla_parse+0x40/0x60 [ 111.672299][ T7760] tc_ctl_action+0x2e3/0x470 [ 111.672313][ T7760] ? __pfx_tc_ctl_action+0x10/0x10 [ 111.672332][ T7760] ? __pfx_tc_ctl_action+0x10/0x10 [ 111.672346][ T7760] rtnetlink_rcv_msg+0x3c9/0xe90 [ 111.672363][ T7760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.672383][ T7760] ? ref_tracker_free+0x37e/0x6c0 [ 111.672399][ T7760] netlink_rcv_skb+0x159/0x420 [ 111.672411][ T7760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.672427][ T7760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.672444][ T7760] ? netlink_deliver_tap+0x1ae/0xcc0 [ 111.672465][ T7760] netlink_unicast+0x585/0x850 [ 111.672479][ T7760] ? __pfx_netlink_unicast+0x10/0x10 [ 111.672495][ T7760] netlink_sendmsg+0x8b0/0xda0 [ 111.672509][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.672523][ T7760] ? apparmor_socket_sendmsg+0x165/0x280 [ 111.672538][ T7760] __sys_sendto+0x48b/0x4e0 [ 111.672549][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.672561][ T7760] ? __pfx___sys_sendto+0x10/0x10 [ 111.672589][ T7760] ? fput+0x7c/0x100 [ 111.672605][ T7760] ? ksys_write+0x1ac/0x250 [ 111.672621][ T7760] __ia32_sys_sendto+0xdd/0x1b0 [ 111.672633][ T7760] ? __do_fast_syscall_32+0xb3/0x8b0 [ 111.672644][ T7760] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.672661][ T7760] __do_fast_syscall_32+0x13a/0x8b0 [ 111.672672][ T7760] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.672691][ T7760] do_fast_syscall_32+0x32/0x70 [ 111.672702][ T7760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.672717][ T7760] RIP: 0023:0xf7f34fec [ 111.672730][ T7760] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 111.672735][ T7760] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 111.672746][ T7760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 111.672754][ T7760] RDX: 0000000000000068 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.672760][ T7760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.672766][ T7760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.672773][ T7760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.672787][ T7760] [ 111.926167][ T7758] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 113.645688][ T5745] Bluetooth: hci1: command tx timeout [ 115.020696][ T7782] 0x000000000000-0x000000010000 : "" [ 115.038548][ T7782] ftl_cs: FTL header not found. [ 115.038856][ T7782] blk-mq: reduced tag depth (2 -> 1) [ 115.715528][ T5745] Bluetooth: hci1: command tx timeout [ 116.865234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 117.029059][ T2331] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 117.029117][ T2331] dvb_usb_ec168 7-1:1.1: probe with driver dvb_usb_ec168 failed with error -110 [ 117.126502][ T2331] usb 7-1: USB disconnect, device number 2 [ 117.734119][ T5839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.734150][ T5839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.812553][ T5839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.812585][ T5839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.920202][ T5839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.920226][ T5839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.062062][ T7829] FAULT_INJECTION: forcing a failure. [ 118.062062][ T7829] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.062085][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.2.542 Not tainted syzkaller #0 PREEMPT(full) [ 118.062099][ T7829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.062106][ T7829] Call Trace: [ 118.062110][ T7829] [ 118.062115][ T7829] dump_stack_lvl+0x100/0x190 [ 118.062135][ T7829] should_fail_ex.cold+0x5/0xa [ 118.062151][ T7829] get_futex_key+0x1d0/0x14f0 [ 118.062166][ T7829] ? __pfx_get_futex_key+0x10/0x10 [ 118.062179][ T7829] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 118.062193][ T7829] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 118.062207][ T7829] futex_wait_setup+0x91/0x540 [ 118.062227][ T7829] __futex_wait+0x19f/0x300 [ 118.062244][ T7829] ? __pfx___futex_wait+0x10/0x10 [ 118.062260][ T7829] ? __pfx_try_to_wake_up+0x10/0x10 [ 118.062283][ T7829] ? futex_hash+0x311/0x400 [ 118.062300][ T7829] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.062322][ T7829] ? find_held_lock+0x2b/0x80 [ 118.062335][ T7829] ? futex_wake+0x4ea/0x5e0 [ 118.062353][ T7829] futex_wait+0xe6/0x370 [ 118.062368][ T7829] ? __pfx_futex_wait+0x10/0x10 [ 118.062387][ T7829] ? putname+0xb1/0x110 [ 118.062402][ T7829] ? kmem_cache_free+0x127/0x6c0 [ 118.062419][ T7829] do_futex+0x265/0x440 [ 118.062432][ T7829] ? __pfx_do_futex+0x10/0x10 [ 118.062443][ T7829] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.062458][ T7829] __ia32_sys_futex_time32+0x2f4/0x470 [ 118.062474][ T7829] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 118.062494][ T7829] __do_fast_syscall_32+0x13a/0x8b0 [ 118.062508][ T7829] do_fast_syscall_32+0x32/0x70 [ 118.062520][ T7829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.062534][ T7829] RIP: 0023:0xf7f64fec [ 118.062547][ T7829] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 118.062552][ T7829] RSP: 002b:00000000f54165bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 118.062564][ T7829] RAX: ffffffffffffffda RBX: 00000000f7424f88 RCX: 0000000000000080 [ 118.062572][ T7829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 118.062584][ T7829] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 118.062590][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.062597][ T7829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.062611][ T7829] [ 118.082576][ T5839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.082597][ T5839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.419959][ T5839] bridge_slave_1: left allmulticast mode [ 118.419998][ T5839] bridge_slave_1: left promiscuous mode [ 118.422343][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.438380][ T5839] bridge_slave_0: left allmulticast mode [ 118.438396][ T5839] bridge_slave_0: left promiscuous mode [ 118.438502][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.683648][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.711335][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.712472][ T5839] bond0 (unregistering): Released all slaves [ 118.901267][ T7862] FAULT_INJECTION: forcing a failure. [ 118.901267][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.901288][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.2.550 Not tainted syzkaller #0 PREEMPT(full) [ 118.901301][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.901308][ T7862] Call Trace: [ 118.901312][ T7862] [ 118.901316][ T7862] dump_stack_lvl+0x100/0x190 [ 118.901335][ T7862] should_fail_ex.cold+0x5/0xa [ 118.901350][ T7862] _copy_from_iter+0x1f4/0x1690 [ 118.901364][ T7862] ? __asan_memset+0x23/0x50 [ 118.901379][ T7862] ? __pfx__copy_from_iter+0x10/0x10 [ 118.901390][ T7862] ? __pfx___alloc_skb+0x10/0x10 [ 118.901409][ T7862] netlink_sendmsg+0x808/0xda0 [ 118.901424][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.901437][ T7862] ? apparmor_socket_sendmsg+0x165/0x280 [ 118.901452][ T7862] ____sys_sendmsg+0xa4d/0xbe0 [ 118.901471][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.901484][ T7862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.901507][ T7862] ___sys_sendmsg+0x190/0x1e0 [ 118.901524][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.901547][ T7862] ? find_held_lock+0x2b/0x80 [ 118.901569][ T7862] __sys_sendmsg+0x160/0x210 [ 118.901582][ T7862] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.901599][ T7862] ? __pfx_ksys_write+0x10/0x10 [ 118.901616][ T7862] __do_fast_syscall_32+0x13a/0x8b0 [ 118.901628][ T7862] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.901646][ T7862] do_fast_syscall_32+0x32/0x70 [ 118.901657][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.901672][ T7862] RIP: 0023:0xf7f64fec [ 118.901683][ T7862] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 118.901688][ T7862] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 118.901699][ T7862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 118.901706][ T7862] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.901713][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.901720][ T7862] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.901726][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.901740][ T7862] [ 118.921246][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.988189][ T7842] syzkaller0: entered promiscuous mode [ 118.988204][ T7842] syzkaller0: entered allmulticast mode [ 119.133126][ T7878] FAULT_INJECTION: forcing a failure. [ 119.133126][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 119.133148][ T7878] CPU: 3 UID: 0 PID: 7878 Comm: syz.2.553 Not tainted syzkaller #0 PREEMPT(full) [ 119.133161][ T7878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.133168][ T7878] Call Trace: [ 119.133172][ T7878] [ 119.133177][ T7878] dump_stack_lvl+0x100/0x190 [ 119.133196][ T7878] should_fail_ex.cold+0x5/0xa [ 119.133212][ T7878] should_failslab+0xc2/0x120 [ 119.133232][ T7878] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.133249][ T7878] ? __send_signal_locked+0x1d1/0x1430 [ 119.133268][ T7878] __send_signal_locked+0x1d1/0x1430 [ 119.133286][ T7878] send_signal_locked+0x15e/0xa00 [ 119.133304][ T7878] ? __pfx_send_signal_locked+0x10/0x10 [ 119.133320][ T7878] ? do_raw_spin_lock+0x128/0x260 [ 119.133334][ T7878] ? _raw_spin_lock_irqsave+0x52/0x60 [ 119.133352][ T7878] force_sig_info_to_task+0x450/0x660 [ 119.133389][ T7878] force_sig_fault+0xc3/0x100 [ 119.133408][ T7878] ? __pfx_force_sig_fault+0x10/0x10 [ 119.133430][ T7878] ? __pfx___up_read+0x10/0x10 [ 119.133442][ T7878] ? fixup_vdso_exception+0x2d1/0x370 [ 119.133458][ T7878] __bad_area_nosemaphore+0x31b/0x3f0 [ 119.133473][ T7878] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 119.133487][ T7878] do_user_addr_fault+0x8ca/0x12f0 [ 119.133510][ T7878] exc_page_fault+0x6f/0xd0 [ 119.133528][ T7878] asm_exc_page_fault+0x26/0x30 [ 119.133540][ T7878] RIP: 0023:0xf716fc54 [ 119.133550][ T7878] Code: 8d 44 07 30 5f c3 31 c0 5f c3 66 90 66 90 66 90 66 90 66 90 66 90 8b 54 24 04 57 8b 7c 24 0c 83 ef 04 0f 86 4e 05 00 00 31 c0 <80> 3a 00 0f 84 41 03 00 00 80 7a 01 00 0f 84 79 06 00 00 80 7a 02 [ 119.133563][ T7878] RSP: 002b:00000000f5415478 EFLAGS: 00010246 [ 119.133574][ T7878] RAX: 0000000000000000 RBX: 00000000f73eaff4 RCX: 0000000000000000 [ 119.133581][ T7878] RDX: 0000000000000000 RSI: 00000000f54154e8 RDI: 000000000000000b [ 119.133589][ T7878] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 119.133596][ T7878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.133604][ T7878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.133619][ T7878] [ 119.375335][ T1345] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.525684][ T1345] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 119.526463][ T1345] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.526486][ T1345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.539979][ T1345] as10x_usb: device has been detected [ 119.540306][ T1345] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 119.586667][ T1345] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 119.608817][ T1345] as10x_usb: error during firmware upload part1 [ 119.609078][ T1345] Registered device Abilis Systems DVB-Titan [ 120.160614][ T6242] usb 7-1: USB disconnect, device number 3 [ 120.184804][ T6242] Unregistered device Abilis Systems DVB-Titan [ 120.187119][ T6242] as10x_usb: device has been disconnected [ 120.467145][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 120.666834][ T500] IPVS: starting estimator thread 0... [ 120.726800][ T7910] xt_IDLETIMER: label is empty or not nul-terminated [ 120.766208][ T7904] IPVS: using max 43 ests per chain, 103200 per kthread [ 120.802200][ T5839] hsr_slave_0: left promiscuous mode [ 120.802854][ T5839] hsr_slave_1: left promiscuous mode [ 120.803348][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.803367][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.803936][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.803946][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.824089][ T5839] veth1_macvtap: left promiscuous mode [ 120.824148][ T5839] veth0_macvtap: left promiscuous mode [ 120.824211][ T5839] veth1_vlan: left promiscuous mode [ 120.972933][ T7920] synth uevent: /bus/platform/drivers/ath9k: unknown uevent action string [ 121.344679][ T5839] team0 (unregistering): Port device team_slave_1 removed [ 121.354188][ T5839] team0 (unregistering): Port device team_slave_0 removed [ 121.643043][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 121.649923][ T7940] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 121.702561][ T5839] IPVS: stop unused estimator thread 0... [ 121.901005][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 122.100910][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 122.204064][ T7964] syzkaller1: entered promiscuous mode [ 122.204078][ T7964] syzkaller1: entered allmulticast mode [ 122.464124][ T7974] xt_IDLETIMER: label is empty or not nul-terminated [ 122.681200][ T8005] FAULT_INJECTION: forcing a failure. [ 122.681200][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.681221][ T8005] CPU: 2 UID: 0 PID: 8005 Comm: syz.5.576 Not tainted syzkaller #0 PREEMPT(full) [ 122.681234][ T8005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.681241][ T8005] Call Trace: [ 122.681245][ T8005] [ 122.681250][ T8005] dump_stack_lvl+0x100/0x190 [ 122.681269][ T8005] should_fail_ex.cold+0x5/0xa [ 122.681285][ T8005] _copy_to_user+0x32/0xd0 [ 122.681297][ T8005] simple_read_from_buffer+0xcb/0x170 [ 122.681315][ T8005] proc_fail_nth_read+0x1af/0x230 [ 122.681331][ T8005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.681347][ T8005] ? rw_verify_area+0xce/0x6d0 [ 122.681373][ T8005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.681389][ T8005] vfs_read+0x1e4/0xb40 [ 122.681403][ T8005] ? lock_acquire+0x1d1/0x380 [ 122.681419][ T8005] ? __fget_files+0x34/0x3d0 [ 122.681434][ T8005] ? __pfx_vfs_read+0x10/0x10 [ 122.681446][ T8005] ? find_held_lock+0x2b/0x80 [ 122.681460][ T8005] ? __fget_files+0x215/0x3d0 [ 122.681477][ T8005] ? __fget_files+0x21f/0x3d0 [ 122.681496][ T8005] ksys_read+0x12a/0x250 [ 122.681510][ T8005] ? __pfx_ksys_read+0x10/0x10 [ 122.681542][ T8005] do_int80_emulation+0x166/0x650 [ 122.681558][ T8005] asm_int80_emulation+0x1a/0x20 [ 122.681570][ T8005] RIP: 0023:0xf71277eb [ 122.681579][ T8005] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 122.681602][ T8005] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 122.681614][ T8005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 122.681621][ T8005] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 122.681628][ T8005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.681634][ T8005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.681641][ T8005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.681655][ T8005] [ 122.835328][ T76] IPVS: starting estimator thread 0... [ 122.925374][ T8012] IPVS: using max 43 ests per chain, 103200 per kthread [ 122.954902][ T8019] netlink: 128 bytes leftover after parsing attributes in process `syz.5.581'. [ 122.954923][ T8019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 123.248288][ T854] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 123.375459][ T854] usb 7-1: device descriptor read/64, error -71 [ 123.615358][ T854] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 123.745410][ T854] usb 7-1: device descriptor read/64, error -71 [ 123.866198][ T854] usb usb7-port1: attempt power cycle [ 123.971963][ T8033] xt_IDLETIMER: label is empty or not nul-terminated [ 124.064771][ T44] kauditd_printk_skb: 142 callbacks suppressed [ 124.064784][ T44] audit: type=1800 audit(1792044830.155:307): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.585" name="file2" dev="sda1" ino=2040 res=0 errno=0 [ 124.226539][ T854] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 124.257207][ T854] usb 7-1: device descriptor read/8, error -71 [ 124.412566][ T8055] FAULT_INJECTION: forcing a failure. [ 124.412566][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 124.412587][ T8055] CPU: 2 UID: 0 PID: 8055 Comm: syz.4.592 Not tainted syzkaller #0 PREEMPT(full) [ 124.412600][ T8055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.412606][ T8055] Call Trace: [ 124.412610][ T8055] [ 124.412615][ T8055] dump_stack_lvl+0x100/0x190 [ 124.412639][ T8055] should_fail_ex.cold+0x5/0xa [ 124.412654][ T8055] should_failslab+0xc2/0x120 [ 124.412672][ T8055] kmem_cache_alloc_noprof+0x92/0x6a0 [ 124.412688][ T8055] ? skb_clone+0x190/0x400 [ 124.412703][ T8055] skb_clone+0x190/0x400 [ 124.412730][ T8055] bpf_clone_redirect+0x166/0x500 [ 124.412747][ T8055] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 124.412767][ T8055] bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68 [ 124.412778][ T8055] ? unwind_get_return_address+0x59/0xa0 [ 124.412794][ T8055] ? __lock_acquire+0x5c0/0x1f40 [ 124.412812][ T8055] ? __lock_acquire+0x5c0/0x1f40 [ 124.412831][ T8055] ? lock_acquire+0x1d1/0x380 [ 124.412847][ T8055] ? bpf_test_timer_enter+0xf7/0x2c0 [ 124.412888][ T8055] ? find_held_lock+0x2b/0x80 [ 124.412908][ T8055] ? bpf_test_timer_enter+0xf7/0x2c0 [ 124.412926][ T8055] ? ktime_get+0x22c/0x320 [ 124.412943][ T8055] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.412961][ T8055] ? ktime_get+0x23e/0x320 [ 124.412978][ T8055] ? __pfx___cant_migrate+0x10/0x10 [ 124.412990][ T8055] ? bpf_test_timer_enter+0xf7/0x2c0 [ 124.413007][ T8055] bpf_test_run+0x39c/0xa40 [ 124.413024][ T8055] ? bpf_test_run+0x1c6/0xa40 [ 124.413042][ T8055] ? __pfx_bpf_test_run+0x10/0x10 [ 124.413069][ T8055] ? eth_type_trans+0x2e3/0x720 [ 124.413089][ T8055] bpf_prog_test_run_skb+0x15b3/0x3530 [ 124.413102][ T8055] ? lock_acquire+0x1d1/0x380 [ 124.413125][ T8055] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 124.413138][ T8055] ? fput+0x7c/0x100 [ 124.413160][ T8055] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 124.413174][ T8055] __sys_bpf+0x2265/0x4a30 [ 124.413190][ T8055] ? __pfx___sys_bpf+0x10/0x10 [ 124.413202][ T8055] ? lock_acquire+0x1d1/0x380 [ 124.413218][ T8055] ? get_pid_task+0x2a/0x250 [ 124.413230][ T8055] ? find_held_lock+0x2b/0x80 [ 124.413242][ T8055] ? get_pid_task+0xfc/0x250 [ 124.413253][ T8055] ? get_pid_task+0xfc/0x250 [ 124.413268][ T8055] ? proc_fail_nth_write+0x9f/0x220 [ 124.413283][ T8055] ? find_held_lock+0x2b/0x80 [ 124.413299][ T8055] ? rcu_read_lock_any_held+0x6a/0x90 [ 124.413313][ T8055] ? find_held_lock+0x2b/0x80 [ 124.413326][ T8055] ? ksys_write+0x190/0x250 [ 124.413339][ T8055] ? ksys_write+0x190/0x250 [ 124.413352][ T8055] ? lock_acquire+0x1d1/0x380 [ 124.413377][ T8055] ? fput+0x7c/0x100 [ 124.413395][ T8055] ? __ia32_sys_bpf+0xcc/0x170 [ 124.413407][ T8055] __ia32_sys_bpf+0xcc/0x170 [ 124.413421][ T8055] ? __do_fast_syscall_32+0xb3/0x8b0 [ 124.413433][ T8055] __do_fast_syscall_32+0x13a/0x8b0 [ 124.413444][ T8055] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.413462][ T8055] do_fast_syscall_32+0x32/0x70 [ 124.413473][ T8055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.413488][ T8055] RIP: 0023:0xf740efec [ 124.413501][ T8055] Code: Unable to access opcode bytes at 0xf740efc2. [ 124.413506][ T8055] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 124.413517][ T8055] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001fc0 [ 124.413524][ T8055] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000 [ 124.413530][ T8055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.413537][ T8055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.413543][ T8055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.413556][ T8055] [ 124.482160][ T8058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'. [ 124.505496][ T854] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 124.526158][ T854] usb 7-1: device descriptor read/8, error -71 [ 124.637105][ T854] usb usb7-port1: unable to enumerate USB device [ 124.711400][ T8068] xt_IDLETIMER: label is empty or not nul-terminated [ 125.251791][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 125.472467][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.474098][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.495114][ T8095] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 125.506241][ T8094] bridge_slave_0: left allmulticast mode [ 125.506256][ T8094] bridge_slave_0: left promiscuous mode [ 125.506349][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.529315][ T8094] bridge_slave_1: left allmulticast mode [ 125.529332][ T8094] bridge_slave_1: left promiscuous mode [ 125.529417][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.533680][ T8094] bond0: (slave bond_slave_0): Releasing backup interface [ 125.549099][ T8094] bond0: (slave bond_slave_1): Releasing backup interface [ 125.558275][ T8094] team0: Port device team_slave_0 removed [ 125.563013][ T8094] team0: Port device team_slave_1 removed [ 125.567430][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.569708][ T8094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.574357][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.578627][ T8094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.588303][ T8094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.797364][ T8098] xt_IDLETIMER: label is empty or not nul-terminated [ 125.977967][ T8109] FAULT_INJECTION: forcing a failure. [ 125.977967][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 125.977986][ T8109] CPU: 0 UID: 0 PID: 8109 Comm: syz.5.612 Not tainted syzkaller #0 PREEMPT(full) [ 125.977999][ T8109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.978006][ T8109] Call Trace: [ 125.978010][ T8109] [ 125.978014][ T8109] dump_stack_lvl+0x100/0x190 [ 125.978033][ T8109] should_fail_ex.cold+0x5/0xa [ 125.978048][ T8109] should_failslab+0xc2/0x120 [ 125.978066][ T8109] __kmalloc_cache_noprof+0x91/0x6d0 [ 125.978079][ T8109] ? __request_module+0x2b7/0x6a0 [ 125.978095][ T8109] __request_module+0x2b7/0x6a0 [ 125.978108][ T8109] ? __pfx___request_module+0x10/0x10 [ 125.978125][ T8109] ? find_held_lock+0x2b/0x80 [ 125.978138][ T8109] ? rtnl_link_ops_get+0x17b/0x2c0 [ 125.978152][ T8109] ? rtnl_link_ops_get+0x17b/0x2c0 [ 125.978170][ T8109] rtnl_newlink+0x1883/0x2620 [ 125.978197][ T8109] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.978218][ T8109] ? rcu_is_watching+0x13/0xc0 [ 125.978235][ T8109] ? kasan_quarantine_put+0x104/0x240 [ 125.978257][ T8109] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.978286][ T8109] ? find_held_lock+0x2b/0x80 [ 125.978301][ T8109] ? lock_acquire+0x1d1/0x380 [ 125.978317][ T8109] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 125.978332][ T8109] ? find_held_lock+0x2b/0x80 [ 125.978345][ T8109] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.978359][ T8109] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 125.978374][ T8109] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.978388][ T8109] rtnetlink_rcv_msg+0x95e/0xe90 [ 125.978404][ T8109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.978423][ T8109] ? ref_tracker_free+0x37e/0x6c0 [ 125.978439][ T8109] netlink_rcv_skb+0x159/0x420 [ 125.978452][ T8109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.978468][ T8109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.978484][ T8109] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.978505][ T8109] netlink_unicast+0x585/0x850 [ 125.978519][ T8109] ? __pfx_netlink_unicast+0x10/0x10 [ 125.978535][ T8109] netlink_sendmsg+0x8b0/0xda0 [ 125.978548][ T8109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.978566][ T8109] ? apparmor_socket_sendmsg+0x165/0x280 [ 125.978580][ T8109] ____sys_sendmsg+0xa4d/0xbe0 [ 125.978595][ T8109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.978608][ T8109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.978630][ T8109] ___sys_sendmsg+0x190/0x1e0 [ 125.978648][ T8109] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.978671][ T8109] ? find_held_lock+0x2b/0x80 [ 125.978692][ T8109] __sys_sendmsg+0x160/0x210 [ 125.978705][ T8109] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.978722][ T8109] ? __pfx_ksys_write+0x10/0x10 [ 125.978739][ T8109] __do_fast_syscall_32+0x13a/0x8b0 [ 125.978750][ T8109] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.978768][ T8109] do_fast_syscall_32+0x32/0x70 [ 125.978780][ T8109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.978794][ T8109] RIP: 0023:0xf7f34fec [ 125.978807][ T8109] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 125.978812][ T8109] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 125.978823][ T8109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 125.978830][ T8109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.978836][ T8109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.978842][ T8109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.978862][ T8109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.978877][ T8109] [ 125.978914][ T8109] netlink: 'syz.5.612': attribute type 3 has an invalid length. [ 126.102645][ T8118] xt_IDLETIMER: label is empty or not nul-terminated [ 126.108064][ T8116] FAULT_INJECTION: forcing a failure. [ 126.108064][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 126.108090][ T8116] CPU: 2 UID: 0 PID: 8116 Comm: syz.5.615 Not tainted syzkaller #0 PREEMPT(full) [ 126.108110][ T8116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.108121][ T8116] Call Trace: [ 126.108127][ T8116] [ 126.108134][ T8116] dump_stack_lvl+0x100/0x190 [ 126.108162][ T8116] should_fail_ex.cold+0x5/0xa [ 126.108185][ T8116] should_failslab+0xc2/0x120 [ 126.108213][ T8116] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 126.108237][ T8116] ? mnt_get_write_access+0x52/0x2f0 [ 126.108256][ T8116] ? ovl_alloc_inode+0x25/0x190 [ 126.108277][ T8116] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 126.108297][ T8116] ovl_alloc_inode+0x25/0x190 [ 126.108315][ T8116] alloc_inode+0x68/0x250 [ 126.108334][ T8116] new_inode+0x22/0x1c0 [ 126.108354][ T8116] ovl_new_inode+0x1d/0x50 [ 126.108375][ T8116] ovl_create_object+0x180/0x3b0 [ 126.108401][ T8116] ? __pfx_ovl_create_object+0x10/0x10 [ 126.108427][ T8116] ? bpf_lsm_inode_create+0x9/0x10 [ 126.108449][ T8116] ? security_inode_create+0xc4/0x280 [ 126.108475][ T8116] ? may_o_create+0x46/0x3a0 [ 126.108494][ T8116] ? __pfx_ovl_create+0x10/0x10 [ 126.108520][ T8116] lookup_open+0x1255/0x1990 [ 126.108550][ T8116] path_openat+0xa2c/0x2440 [ 126.108578][ T8116] ? __pfx_path_openat+0x10/0x10 [ 126.108608][ T8116] do_file_open+0x20e/0x430 [ 126.108635][ T8116] ? __pfx_do_file_open+0x10/0x10 [ 126.108676][ T8116] ? _raw_spin_unlock+0x28/0x50 [ 126.108700][ T8116] ? alloc_fd+0x471/0x7a0 [ 126.108748][ T8116] do_sys_openat2+0x10f/0x1e0 [ 126.108766][ T8116] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.108784][ T8116] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.108802][ T8116] __ia32_compat_sys_openat+0x12d/0x210 [ 126.108818][ T8116] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 126.108833][ T8116] ? fput+0x7c/0x100 [ 126.108872][ T8116] ? ksys_write+0x1ac/0x250 [ 126.108895][ T8116] ? __pfx_ksys_write+0x10/0x10 [ 126.108922][ T8116] __do_fast_syscall_32+0x13a/0x8b0 [ 126.108938][ T8116] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.108966][ T8116] do_fast_syscall_32+0x32/0x70 [ 126.108984][ T8116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.109010][ T8116] RIP: 0023:0xf7f34fec [ 126.109029][ T8116] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 126.109037][ T8116] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 126.109054][ T8116] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 126.109065][ T8116] RDX: 0000000000000042 RSI: 0000000000000085 RDI: 0000000000000000 [ 126.109075][ T8116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.109085][ T8116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.109096][ T8116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.109119][ T8116] [ 126.321129][ T8134] FAULT_INJECTION: forcing a failure. [ 126.321129][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 126.321150][ T8134] CPU: 3 UID: 0 PID: 8134 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) [ 126.321163][ T8134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.321170][ T8134] Call Trace: [ 126.321174][ T8134] [ 126.321179][ T8134] dump_stack_lvl+0x100/0x190 [ 126.321202][ T8134] should_fail_ex.cold+0x5/0xa [ 126.321218][ T8134] should_failslab+0xc2/0x120 [ 126.321236][ T8134] kmem_cache_alloc_noprof+0x92/0x6a0 [ 126.321253][ T8134] ? do_getname+0x35/0x390 [ 126.321268][ T8134] do_getname+0x35/0x390 [ 126.321282][ T8134] do_sys_openat2+0xc7/0x1e0 [ 126.321293][ T8134] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.321305][ T8134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.321321][ T8134] __ia32_compat_sys_openat+0x12d/0x210 [ 126.321334][ T8134] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 126.321352][ T8134] __do_fast_syscall_32+0x13a/0x8b0 [ 126.321366][ T8134] do_fast_syscall_32+0x32/0x70 [ 126.321378][ T8134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.321392][ T8134] RIP: 0023:0xf740efec [ 126.321406][ T8134] Code: Unable to access opcode bytes at 0xf740efc2. [ 126.321411][ T8134] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 126.321424][ T8134] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 126.321431][ T8134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.321439][ T8134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.321449][ T8134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.321458][ T8134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.321478][ T8134] [ 126.432694][ T8149] FAULT_INJECTION: forcing a failure. [ 126.432694][ T8149] name failslab, interval 1, probability 0, space 0, times 0 [ 126.432763][ T8149] CPU: 2 UID: 0 PID: 8149 Comm: syz.4.625 Not tainted syzkaller #0 PREEMPT(full) [ 126.432782][ T8149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.432792][ T8149] Call Trace: [ 126.432799][ T8149] [ 126.432806][ T8149] dump_stack_lvl+0x100/0x190 [ 126.432833][ T8149] should_fail_ex.cold+0x5/0xa [ 126.432876][ T8149] should_failslab+0xc2/0x120 [ 126.432903][ T8149] __kmalloc_cache_noprof+0x91/0x6d0 [ 126.432929][ T8149] ? virtual_ncidev_open+0x49/0x220 [ 126.432957][ T8149] virtual_ncidev_open+0x49/0x220 [ 126.432980][ T8149] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 126.433002][ T8149] misc_open+0x26d/0x450 [ 126.433019][ T8149] ? __pfx_misc_open+0x10/0x10 [ 126.433034][ T8149] chrdev_open+0x234/0x6a0 [ 126.433060][ T8149] ? __pfx_chrdev_open+0x10/0x10 [ 126.433085][ T8149] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 126.433108][ T8149] do_dentry_open+0x6ab/0x14d0 [ 126.433129][ T8149] ? __pfx_chrdev_open+0x10/0x10 [ 126.433159][ T8149] vfs_open+0x82/0x3f0 [ 126.433179][ T8149] path_openat+0x19fa/0x2440 [ 126.433208][ T8149] ? __pfx_path_openat+0x10/0x10 [ 126.433239][ T8149] do_file_open+0x20e/0x430 [ 126.433264][ T8149] ? __pfx_do_file_open+0x10/0x10 [ 126.433306][ T8149] ? _raw_spin_unlock+0x28/0x50 [ 126.433329][ T8149] ? alloc_fd+0x471/0x7a0 [ 126.433361][ T8149] do_sys_openat2+0x10f/0x1e0 [ 126.433378][ T8149] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.433398][ T8149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.433420][ T8149] __ia32_compat_sys_openat+0x12d/0x210 [ 126.433523][ T8149] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 126.433542][ T8149] ? fput+0x7c/0x100 [ 126.433566][ T8149] ? ksys_write+0x1ac/0x250 [ 126.433587][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 126.433613][ T8149] __do_fast_syscall_32+0x13a/0x8b0 [ 126.433630][ T8149] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.433649][ T8149] do_fast_syscall_32+0x32/0x70 [ 126.433661][ T8149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.433675][ T8149] RIP: 0023:0xf740efec [ 126.433688][ T8149] Code: Unable to access opcode bytes at 0xf740efc2. [ 126.433694][ T8149] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 126.433705][ T8149] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 126.433734][ T8149] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.433741][ T8149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.433747][ T8149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.433754][ T8149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.433768][ T8149] [ 126.487219][ T8153] xt_IDLETIMER: label is empty or not nul-terminated [ 127.494934][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 127.665685][ T8183] xt_IDLETIMER: label is empty or not nul-terminated [ 128.036214][ T8212] xt_IDLETIMER: label is empty or not nul-terminated [ 128.221590][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 128.232645][ T8227] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 128.361402][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 128.373105][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 128.384698][ T8236] bond1: entered promiscuous mode [ 128.384713][ T8236] bond1: entered allmulticast mode [ 128.475381][ T6242] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 128.493101][ T8247] xt_IDLETIMER: label is empty or not nul-terminated [ 128.625308][ T6242] usb 10-1: Using ep0 maxpacket: 16 [ 128.625926][ T6242] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 128.626491][ T6242] usb 10-1: config 0 has no interfaces? [ 128.628830][ T6242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.628860][ T6242] usb 10-1: Product: syz [ 128.628868][ T6242] usb 10-1: Manufacturer: syz [ 128.628876][ T6242] usb 10-1: SerialNumber: syz [ 128.630236][ T6242] usb 10-1: config 0 descriptor?? [ 128.735261][ T854] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 128.837439][ T6242] usb 10-1: USB disconnect, device number 2 [ 128.888658][ T854] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 128.889490][ T854] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.889506][ T854] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.889523][ T854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.893360][ T854] metro_usb 9-1:1.0: Metrologic USB to Serial converter detected [ 128.896059][ T854] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 129.094006][ T8245] FAULT_INJECTION: forcing a failure. [ 129.094006][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 129.094036][ T8245] CPU: 2 UID: 0 PID: 8245 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT(full) [ 129.094056][ T8245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.094067][ T8245] Call Trace: [ 129.094073][ T8245] [ 129.094081][ T8245] dump_stack_lvl+0x100/0x190 [ 129.094111][ T8245] should_fail_ex.cold+0x5/0xa [ 129.094136][ T8245] should_failslab+0xc2/0x120 [ 129.094165][ T8245] __kmalloc_cache_noprof+0x91/0x6d0 [ 129.094187][ T8245] ? tty_open+0x134/0xe20 [ 129.094214][ T8245] tty_open+0x134/0xe20 [ 129.094239][ T8245] ? __pfx_tty_open+0x10/0x10 [ 129.094258][ T8245] ? chrdev_open+0x589/0x6a0 [ 129.094285][ T8245] ? chrdev_open+0x589/0x6a0 [ 129.094312][ T8245] ? __pfx_tty_open+0x10/0x10 [ 129.094334][ T8245] chrdev_open+0x234/0x6a0 [ 129.094360][ T8245] ? __pfx_chrdev_open+0x10/0x10 [ 129.094393][ T8245] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 129.094417][ T8245] do_dentry_open+0x6ab/0x14d0 [ 129.094440][ T8245] ? __pfx_chrdev_open+0x10/0x10 [ 129.094471][ T8245] vfs_open+0x82/0x3f0 [ 129.094492][ T8245] path_openat+0x19fa/0x2440 [ 129.094522][ T8245] ? __pfx_path_openat+0x10/0x10 [ 129.094555][ T8245] do_file_open+0x20e/0x430 [ 129.094582][ T8245] ? __pfx_do_file_open+0x10/0x10 [ 129.094626][ T8245] ? _raw_spin_unlock+0x28/0x50 [ 129.094649][ T8245] ? alloc_fd+0x471/0x7a0 [ 129.094681][ T8245] do_sys_openat2+0x10f/0x1e0 [ 129.094700][ T8245] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.094738][ T8245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.094762][ T8245] __ia32_compat_sys_openat+0x12d/0x210 [ 129.094784][ T8245] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 129.094803][ T8245] ? fput+0x7c/0x100 [ 129.094830][ T8245] ? ksys_write+0x1ac/0x250 [ 129.094854][ T8245] ? __pfx_ksys_write+0x10/0x10 [ 129.094880][ T8245] __do_fast_syscall_32+0x13a/0x8b0 [ 129.094899][ T8245] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.094929][ T8245] do_fast_syscall_32+0x32/0x70 [ 129.094948][ T8245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.094971][ T8245] RIP: 0023:0xf740efec [ 129.094991][ T8245] Code: Unable to access opcode bytes at 0xf740efc2. [ 129.095000][ T8245] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 129.095019][ T8245] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800009c0 [ 129.095031][ T8245] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.095042][ T8245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.095053][ T8245] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.095064][ T8245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.095089][ T8245] [ 129.095254][ T5821] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 129.096114][ T6242] usb 9-1: USB disconnect, device number 5 [ 129.107291][ T6242] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 129.107760][ T6242] metro_usb 9-1:1.0: device disconnected [ 129.245660][ T5821] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 129.246428][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.246444][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.246463][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.251525][ T5821] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 129.253364][ T5821] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 129.255480][ T8263] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 129.258064][ T44] audit: type=1326 audit(1792044835.355:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.2.662" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64fec code=0x0 [ 129.510570][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 129.510587][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 129.510595][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 129.514235][ T8271] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 129.680899][ T8275] xt_IDLETIMER: label is empty or not nul-terminated [ 129.790159][ T8279] FAULT_INJECTION: forcing a failure. [ 129.790159][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.790188][ T8279] CPU: 2 UID: 0 PID: 8279 Comm: syz.4.666 Not tainted syzkaller #0 PREEMPT(full) [ 129.790208][ T8279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.790218][ T8279] Call Trace: [ 129.790225][ T8279] [ 129.790231][ T8279] dump_stack_lvl+0x100/0x190 [ 129.790261][ T8279] should_fail_ex.cold+0x5/0xa [ 129.790286][ T8279] _copy_to_user+0x32/0xd0 [ 129.790307][ T8279] snd_seq_ioctl+0x332/0x410 [ 129.790330][ T8279] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 129.790368][ T8279] ? __fget_files+0x21f/0x3d0 [ 129.790397][ T8279] snd_seq_ioctl_compat+0x13b/0x300 [ 129.790419][ T8279] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 129.790442][ T8279] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 129.790467][ T8279] __do_fast_syscall_32+0x13a/0x8b0 [ 129.790486][ T8279] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.790522][ T8279] do_fast_syscall_32+0x32/0x70 [ 129.790541][ T8279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.790564][ T8279] RIP: 0023:0xf740efec [ 129.790583][ T8279] Code: Unable to access opcode bytes at 0xf740efc2. [ 129.790592][ T8279] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 129.790610][ T8279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004058534c [ 129.790622][ T8279] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.790633][ T8279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.790643][ T8279] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.790654][ T8279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.790678][ T8279] [ 130.556567][ T5821] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 130.644276][ T8287] netlink: 'syz.5.669': attribute type 3 has an invalid length. [ 130.705672][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 130.709745][ T5821] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 130.710729][ T5821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.710746][ T5821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.710780][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.710812][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.714254][ T5821] hub 7-1:1.0: bad descriptor, ignoring hub [ 130.714266][ T5821] hub 7-1:1.0: probe with driver hub failed with error -5 [ 130.714785][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 130.714794][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 130.717826][ T5821] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 130.717837][ T5821] cdc_wdm 7-1:1.0: Unknown control protocol [ 130.725776][ T8298] xt_IDLETIMER: label is empty or not nul-terminated [ 130.790307][ T8301] FAULT_INJECTION: forcing a failure. [ 130.790307][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.790326][ T8301] CPU: 2 UID: 0 PID: 8301 Comm: syz.5.675 Not tainted syzkaller #0 PREEMPT(full) [ 130.790339][ T8301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.790345][ T8301] Call Trace: [ 130.790350][ T8301] [ 130.790354][ T8301] dump_stack_lvl+0x100/0x190 [ 130.790378][ T8301] should_fail_ex.cold+0x5/0xa [ 130.790393][ T8301] _copy_to_user+0x32/0xd0 [ 130.790406][ T8301] simple_read_from_buffer+0xcb/0x170 [ 130.790423][ T8301] proc_fail_nth_read+0x1af/0x230 [ 130.790438][ T8301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.790454][ T8301] ? rw_verify_area+0xce/0x6d0 [ 130.790467][ T8301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.790482][ T8301] vfs_read+0x1e4/0xb40 [ 130.790495][ T8301] ? lock_acquire+0x1d1/0x380 [ 130.790512][ T8301] ? __fget_files+0x34/0x3d0 [ 130.790526][ T8301] ? __pfx_vfs_read+0x10/0x10 [ 130.790539][ T8301] ? find_held_lock+0x2b/0x80 [ 130.790552][ T8301] ? __fget_files+0x215/0x3d0 [ 130.790569][ T8301] ? __fget_files+0x21f/0x3d0 [ 130.790588][ T8301] ksys_read+0x12a/0x250 [ 130.790601][ T8301] ? __pfx_ksys_read+0x10/0x10 [ 130.790619][ T8301] do_int80_emulation+0x166/0x650 [ 130.790633][ T8301] asm_int80_emulation+0x1a/0x20 [ 130.790645][ T8301] RIP: 0023:0xf71277eb [ 130.790654][ T8301] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 130.790679][ T8301] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 130.790690][ T8301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 130.790697][ T8301] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 130.790704][ T8301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.790721][ T8301] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.790729][ T8301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.790744][ T8301] [ 130.998823][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.003513][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.010375][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.108558][ T8303] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 131.109949][ T8303] batman_adv: batadv0: Interface activated: macvtap1 [ 131.220871][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 131.278156][ T8284] overlayfs: conflicting lowerdir path [ 131.454508][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 131.513777][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 131.623906][ T8318] netlink: 48 bytes leftover after parsing attributes in process `syz.5.677'. [ 131.661776][ T8318] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 131.662220][ T8318] FAULT_INJECTION: forcing a failure. [ 131.662220][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 131.662239][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.5.677 Not tainted syzkaller #0 PREEMPT(full) [ 131.662252][ T8318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.662259][ T8318] Call Trace: [ 131.662263][ T8318] [ 131.662268][ T8318] dump_stack_lvl+0x100/0x190 [ 131.662287][ T8318] should_fail_ex.cold+0x5/0xa [ 131.662304][ T8318] should_failslab+0xc2/0x120 [ 131.662322][ T8318] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.662339][ T8318] ? __asan_memcpy+0x3c/0x60 [ 131.662353][ T8318] ? __kernfs_new_node+0xd2/0xa10 [ 131.662367][ T8318] __kernfs_new_node+0xd2/0xa10 [ 131.662377][ T8318] ? mark_held_locks+0x40/0x70 [ 131.662395][ T8318] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.662413][ T8318] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.662433][ T8318] ? __pfx___kernfs_new_node+0x10/0x10 [ 131.662447][ T8318] ? lock_acquire+0x1d1/0x380 [ 131.662469][ T8318] ? kernfs_root+0x23/0x2a0 [ 131.662488][ T8318] ? find_held_lock+0x2b/0x80 [ 131.662502][ T8318] ? kernfs_root+0xee/0x2a0 [ 131.662518][ T8318] ? kernfs_root+0xee/0x2a0 [ 131.662539][ T8318] kernfs_create_dir_ns+0xa6/0x2b0 [ 131.662555][ T8318] sysfs_create_dir_ns+0x13a/0x2b0 [ 131.662572][ T8318] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 131.662589][ T8318] ? find_held_lock+0x2b/0x80 [ 131.662602][ T8318] ? kobject_add_internal+0x25f/0x930 [ 131.662617][ T8318] ? kobject_add_internal+0x25f/0x930 [ 131.662633][ T8318] ? do_raw_spin_unlock+0x145/0x1e0 [ 131.662647][ T8318] kobject_add_internal+0x2c8/0x930 [ 131.662663][ T8318] kobject_add+0x16a/0x1e0 [ 131.662677][ T8318] ? __pfx_kobject_add+0x10/0x10 [ 131.662692][ T8318] ? __kasan_kmalloc+0xaa/0xb0 [ 131.662708][ T8318] ? lockdep_init_map_type+0x5c/0x250 [ 131.662726][ T8318] ? class_to_subsys+0x114/0x150 [ 131.662745][ T8318] device_add+0x294/0x1970 [ 131.662762][ T8318] ? __pfx_device_add+0x10/0x10 [ 131.662775][ T8318] ? __pfx_idr_replace+0x10/0x10 [ 131.662786][ T8318] ? dput.part.0+0x4f/0x240 [ 131.662799][ T8318] ? dput+0x24/0x30 [ 131.662812][ T8318] i2c_register_adapter+0x862/0x13f0 [ 131.662825][ T8318] ? of_alias_get_id+0xb1/0x110 [ 131.662842][ T8318] i801_probe.cold+0x30c/0x84e [ 131.662857][ T8318] ? __pfx_i801_probe+0x10/0x10 [ 131.662872][ T8318] ? mark_held_locks+0x40/0x70 [ 131.662888][ T8318] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.662905][ T8318] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.662922][ T8318] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 131.662941][ T8318] ? __pfx_i801_probe+0x10/0x10 [ 131.662953][ T8318] local_pci_probe+0xdd/0x1b0 [ 131.662974][ T8318] pci_call_probe+0x176/0x800 [ 131.662992][ T8318] ? pci_match_device+0x147/0x7d0 [ 131.663009][ T8318] ? __pfx_pci_call_probe+0x10/0x10 [ 131.663031][ T8318] ? __pfx_pci_match_device+0x10/0x10 [ 131.663048][ T8318] ? pci_find_host_bridge+0x3c/0x80 [ 131.663069][ T8318] ? up_write+0x2dc/0x5b0 [ 131.663085][ T8318] pci_device_probe+0x25b/0x400 [ 131.663104][ T8318] ? __pfx_pci_device_probe+0x10/0x10 [ 131.663139][ T8318] ? kernfs_create_link+0x1bd/0x240 [ 131.663160][ T8318] ? sysfs_create_link+0x68/0xc0 [ 131.663178][ T8318] ? __pfx_pci_device_probe+0x10/0x10 [ 131.663196][ T8318] really_probe+0x241/0xa60 [ 131.663211][ T8318] __driver_probe_device+0x210/0x460 [ 131.663227][ T8318] device_driver_attach+0xd1/0x220 [ 131.663242][ T8318] bind_store+0xf4/0x190 [ 131.663258][ T8318] ? __pfx_bind_store+0x10/0x10 [ 131.663276][ T8318] drv_attr_store+0x74/0xb0 [ 131.663293][ T8318] ? __pfx_drv_attr_store+0x10/0x10 [ 131.663308][ T8318] sysfs_kf_write+0xf2/0x150 [ 131.663325][ T8318] kernfs_fop_write_iter+0x3e0/0x5f0 [ 131.663337][ T8318] ? __pfx_sysfs_kf_write+0x10/0x10 [ 131.663354][ T8318] vfs_write+0x6af/0x1050 [ 131.663368][ T8318] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 131.663384][ T8318] ? __pfx_vfs_write+0x10/0x10 [ 131.663397][ T8318] ? find_held_lock+0x2b/0x80 [ 131.663420][ T8318] ksys_write+0x12a/0x250 [ 131.663434][ T8318] ? __pfx_ksys_write+0x10/0x10 [ 131.663454][ T8318] __do_fast_syscall_32+0x13a/0x8b0 [ 131.663496][ T8318] do_fast_syscall_32+0x32/0x70 [ 131.663511][ T8318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.663526][ T8318] RIP: 0023:0xf7f34fec [ 131.663541][ T8318] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 131.663546][ T8318] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 131.663559][ T8318] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800006c0 [ 131.663567][ T8318] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 131.663574][ T8318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.663581][ T8318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.663588][ T8318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.663604][ T8318] [ 131.663652][ T8318] kobject: kobject_add_internal failed for i2c-0 (error: -12 parent: 0000:00:1f.3) [ 131.663671][ T8318] i2c-core: adapter 'SMBus I801 adapter at 0000:00:1f.3': can't register device (-12) [ 131.663896][ T8318] i801_smbus 0000:00:1f.3: probe with driver i801_smbus failed with error -12 [ 131.792304][ T44] audit: type=1326 audit(1792044837.885:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.792451][ T44] audit: type=1326 audit(1792044837.885:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.793588][ T44] audit: type=1326 audit(1792044837.885:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.793632][ T44] audit: type=1326 audit(1792044837.885:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.793751][ T44] audit: type=1326 audit(1792044837.885:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.793916][ T44] audit: type=1326 audit(1792044837.885:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.793993][ T44] audit: type=1326 audit(1792044837.885:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.794092][ T44] audit: type=1326 audit(1792044837.885:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.794179][ T44] audit: type=1326 audit(1792044837.885:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.4.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 131.887775][ T6379] usb 6-1: USB disconnect, device number 18 [ 131.915545][ T2331] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 131.923104][ T6379] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 131.923549][ T6379] metro_usb 6-1:1.0: device disconnected [ 132.066334][ T2331] usb 10-1: Using ep0 maxpacket: 8 [ 132.069197][ T2331] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.070505][ T2331] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 132.070541][ T2331] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.070558][ T2331] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.070583][ T2331] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.070601][ T2331] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.070632][ T2331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.155454][ T5820] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 132.290241][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.290272][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.305339][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 132.341943][ T2331] usb 10-1: GET_CAPABILITIES returned 0 [ 132.341969][ T2331] usbtmc 10-1:16.0: can't read capabilities [ 132.363577][ T8332] xt_IDLETIMER: label is empty or not nul-terminated [ 132.690327][ T8340] [ 132.691417][ T8340] ====================================================== [ 132.693629][ T8340] WARNING: possible circular locking dependency detected [ 132.695972][ T8340] syzkaller #0 Not tainted [ 132.697744][ T8340] ------------------------------------------------------ [ 132.700092][ T8340] syz.1.686/8340 is trying to acquire lock: [ 132.701982][ T8340] ffffffff914028c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.705502][ T8340] [ 132.705502][ T8340] but task is already holding lock: [ 132.708534][ T8340] ffff888014171900 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 132.712925][ T8340] [ 132.712925][ T8340] which lock already depends on the new lock. [ 132.712925][ T8340] [ 132.717018][ T8340] [ 132.717018][ T8340] the existing dependency chain (in reverse order) is: [ 132.720721][ T8340] [ 132.720721][ T8340] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 132.724230][ T8340] lock_acquire+0x1d1/0x380 [ 132.726274][ T8340] down_write+0x8b/0x1f0 [ 132.728326][ T8340] configfs_depend_item_unlocked+0xf3/0x6a0 SYZFAIL: failed to recv rpc [ 132.731019][ T8340] usbg_make_tpg+0x251/0x610 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 132.733300][ T8340] target_fabric_make_tpg+0xab/0x8c0 [ 132.735836][ T8340] configfs_mkdir+0x525/0xd40 [ 132.738005][ T8340] vfs_mkdir+0x364/0x850 [ 132.740000][ T8340] filename_mkdirat+0x48b/0x5e0 [ 132.742303][ T8340] __ia32_sys_mkdirat+0x88/0xc0 [ 132.744609][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 132.747039][ T8340] do_fast_syscall_32+0x32/0x70 [ 132.749233][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.752041][ T8340] [ 132.752041][ T8340] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 132.755366][ T8340] lock_acquire+0x1d1/0x380 [ 132.757546][ T8340] __mutex_lock+0x1a4/0x1bd0 [ 132.759329][ T8340] tcm_alloc_inst+0x5f/0x1e0 [ 132.761269][ T8340] try_get_usb_function_instance+0x136/0x1f0 [ 132.763536][ T8340] usb_get_function_instance+0x16/0x70 [ 132.765402][ T8340] function_make+0x18c/0x3f0 [ 132.767271][ T8340] configfs_mkdir+0x525/0xd40 [ 132.768861][ T8340] vfs_mkdir+0x364/0x850 [ 132.770641][ T8340] filename_mkdirat+0x48b/0x5e0 [ 132.772925][ T8340] __ia32_sys_mkdirat+0x88/0xc0 [ 132.775173][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 132.777615][ T8340] do_fast_syscall_32+0x32/0x70 [ 132.779529][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.781734][ T8340] [ 132.781734][ T8340] -> #1 (func_lock){+.+.}-{4:4}: [ 132.784584][ T8340] lock_acquire+0x1d1/0x380 [ 132.786443][ T8340] __mutex_lock+0x1a4/0x1bd0 [ 132.788380][ T8340] try_get_usb_function_instance+0x26/0x1f0 [ 132.790584][ T8340] usb_get_function_instance+0x16/0x70 [ 132.792938][ T8340] function_make+0x18c/0x3f0 [ 132.794573][ T8340] configfs_mkdir+0x525/0xd40 [ 132.796266][ T8340] vfs_mkdir+0x364/0x850 [ 132.797793][ T8340] filename_mkdirat+0x48b/0x5e0 [ 132.799488][ T8340] __ia32_sys_mkdirat+0x88/0xc0 [ 132.801418][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 132.803230][ T8340] do_fast_syscall_32+0x32/0x70 [ 132.804925][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.807693][ T8340] [ 132.807693][ T8340] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 132.810980][ T8340] check_prev_add+0xeb/0xe60 [ 132.813137][ T8340] __lock_acquire+0x1528/0x1f40 [ 132.815407][ T8340] lock_acquire+0x1d1/0x380 [ 132.817553][ T8340] __mutex_lock+0x1a4/0x1bd0 [ 132.819739][ T8340] uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.822702][ T8340] configfs_symlink+0x695/0x1340 [ 132.825249][ T8340] vfs_symlink+0x178/0x4d0 [ 132.827376][ T8340] filename_symlinkat+0x2a6/0x560 [ 132.829237][ T8340] __ia32_sys_symlinkat+0x9b/0xe0 [ 132.831009][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 132.832957][ T8340] do_fast_syscall_32+0x32/0x70 [ 132.835223][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.837724][ T8340] [ 132.837724][ T8340] other info that might help us debug this: [ 132.837724][ T8340] [ 132.841549][ T8340] Chain exists of: [ 132.841549][ T8340] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 132.841549][ T8340] [ 132.847265][ T8340] Possible unsafe locking scenario: [ 132.847265][ T8340] [ 132.849917][ T8340] CPU0 CPU1 [ 132.851921][ T8340] ---- ---- [ 132.854007][ T8340] lock(&sb->s_type->i_mutex_key#27); [ 132.856210][ T8340] lock(tpg_instances_lock); [ 132.858748][ T8340] lock(&sb->s_type->i_mutex_key#27); [ 132.861936][ T8340] lock(gadget_subsys.su_mutex); [ 132.864113][ T8340] [ 132.864113][ T8340] *** DEADLOCK *** [ 132.864113][ T8340] [ 132.867545][ T8340] locks held by syz.1.686/8340: 2, last CPU#1: [ 132.870063][ T8340] #0: ffff888022f42460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 132.873082][ T8340] #1: ffff888014171900 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 132.876489][ T8340] [ 132.876489][ T8340] stack backtrace: [ 132.878330][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(full) [ 132.881208][ T8340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.884514][ T8340] Call Trace: [ 132.885605][ T8340] [ 132.886583][ T8340] dump_stack_lvl+0x100/0x190 [ 132.888085][ T8340] print_circular_bug.cold+0x178/0x1be [ 132.889822][ T8340] check_noncircular+0x146/0x160 [ 132.891416][ T8340] check_prev_add+0xeb/0xe60 [ 132.892896][ T8340] __lock_acquire+0x1528/0x1f40 [ 132.894442][ T8340] lock_acquire+0x1d1/0x380 [ 132.895900][ T8340] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.897891][ T8340] ? __pfx___might_resched+0x10/0x10 [ 132.899570][ T8340] __mutex_lock+0x1a4/0x1bd0 [ 132.901481][ T8340] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.903774][ T8340] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.905766][ T8340] ? __lock_acquire+0xe8b/0x1f40 [ 132.907330][ T8340] ? __pfx___mutex_lock+0x10/0x10 [ 132.908952][ T8340] ? make_vfsuid+0xec/0x140 [ 132.910411][ T8340] ? __pfx___might_resched+0x10/0x10 [ 132.912105][ T8340] ? make_vfsgid+0xf1/0x140 [ 132.913561][ T8340] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.915573][ T8340] ? security_inode_permission+0xbf/0x250 [ 132.917452][ T8340] uvcg_streaming_header_allow_link+0x7c/0x650 [ 132.919395][ T8340] ? inode_permission+0x374/0x620 [ 132.921048][ T8340] ? mntput_no_expire+0xe8/0x220 [ 132.922628][ T8340] configfs_symlink+0x695/0x1340 [ 132.924192][ T8340] ? bpf_lsm_inode_permission+0x9/0x10 [ 132.925926][ T8340] ? security_inode_permission+0xbf/0x250 [ 132.927714][ T8340] ? __pfx_configfs_symlink+0x10/0x10 [ 132.929420][ T8340] vfs_symlink+0x178/0x4d0 [ 132.930868][ T8340] filename_symlinkat+0x2a6/0x560 [ 132.932500][ T8340] ? __pfx_filename_symlinkat+0x10/0x10 [ 132.934265][ T8340] ? strncpy_from_user+0x19d/0x2d0 [ 132.935895][ T8340] ? do_getname+0x191/0x390 [ 132.937343][ T8340] __ia32_sys_symlinkat+0x9b/0xe0 [ 132.938936][ T8340] __do_fast_syscall_32+0x13a/0x8b0 [ 132.940602][ T8340] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.942267][ T8340] do_fast_syscall_32+0x32/0x70 [ 132.943994][ T8340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.946003][ T8340] RIP: 0023:0xf740efec [ 132.947353][ T8340] Code: Unable to access opcode bytes at 0xf740efc2. [ 132.949436][ T8340] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 132.952073][ T8340] RAX: ffffffffffffffda RBX: 0000000080000880 RCX: 00000000ffffff9c [ 132.954543][ T8340] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.957051][ T8340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.959540][ T8340] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.962125][ T8340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.964902][ T8340] [ 133.020520][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.020537][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.020544][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 133.020549][ T5835] usb 7-1: USB disconnect, device number 8 [ 133.369516][ T2331] usb 10-1: USB disconnect, device number 3 [ 133.426408][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 133.426428][ T5820] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 133.427001][ T5820] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 133.427015][ T5820] usb 9-1: can't read configurations, error -71 [ 133.747923][ T5828] bond0 (unregistering): Released all slaves [ 134.003968][ T5828] hsr_slave_0: left promiscuous mode [ 134.004322][ T5828] hsr_slave_1: left promiscuous mode [ 134.108603][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 134.248650][ T5828] IPVS: stop unused estimator thread 0... [ 134.302593][ T5828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.323661][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 134.349329][ T5828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.390801][ T5828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.425980][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 134.446103][ T5828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.544442][ T5828] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.551720][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 134.611405][ T5828] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.650187][ T5828] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.663975][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 134.690559][ T5828] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.742228][ T5828] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.786386][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 134.886812][ T5828] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.914512][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 134.940863][ T5828] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.979292][ T5828] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.024347][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 135.031386][ T5828] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.096152][ T5828] bridge_slave_1: left allmulticast mode [ 135.096173][ T5828] bridge_slave_1: left promiscuous mode [ 135.096263][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.097579][ T5828] bridge_slave_0: left allmulticast mode [ 135.097596][ T5828] bridge_slave_0: left promiscuous mode [ 135.097696][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.124257][ T5828] bridge_slave_1: left allmulticast mode [ 135.124279][ T5828] bridge_slave_1: left promiscuous mode [ 135.124395][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.128797][ T5828] bridge_slave_0: left allmulticast mode [ 135.128840][ T5828] bridge_slave_0: left promiscuous mode [ 135.128941][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.231976][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.233071][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.233644][ T5828] bond0 (unregistering): Released all slaves [ 135.234807][ T5828] bond1 (unregistering): Released all slaves [ 135.280989][ T5828] bond0 (unregistering): Released all slaves [ 135.300419][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.301316][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.301836][ T5828] bond0 (unregistering): Released all slaves [ 135.303422][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 135.377760][ T5828] tipc: Left network mode [ 135.449071][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 135.544552][ T5828] batman_adv: batadv0: Interface deactivated: macvtap1 [ 135.548445][ T5828] batman_adv: batadv0: Removing interface: macvtap1 [ 135.558281][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 135.651135][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 135.793540][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 135.924371][ T5828] hsr_slave_0: left promiscuous mode [ 135.924840][ T5828] hsr_slave_1: left promiscuous mode [ 135.925059][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.925069][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.940864][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.941549][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.963605][ T5828] hsr_slave_0: left promiscuous mode [ 135.963962][ T5828] hsr_slave_1: left promiscuous mode [ 135.969584][ T5828] hsr_slave_0: left promiscuous mode [ 135.969934][ T5828] hsr_slave_1: left promiscuous mode [ 135.970163][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.970173][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.970455][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.970463][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.974570][ T5828] veth1_macvtap: left promiscuous mode [ 135.974590][ T5828] veth0_macvtap: left promiscuous mode [ 135.974622][ T5828] veth1_vlan: left promiscuous mode [ 135.974642][ T5828] veth0_vlan: left promiscuous mode [ 135.975142][ T5828] veth1_macvtap: left promiscuous mode [ 135.975155][ T5828] veth0_macvtap: left promiscuous mode [ 135.975529][ T5828] veth1_vlan: left promiscuous mode [ 135.975552][ T5828] veth0_vlan: left promiscuous mode [ 136.007764][ T5828] veth1_macvtap: left promiscuous mode [ 136.007787][ T5828] veth0_macvtap: left promiscuous mode [ 136.007829][ T5828] veth1_vlan: left promiscuous mode [ 136.007863][ T5828] veth0_vlan: left promiscuous mode [ 136.122132][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 136.124214][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 136.244509][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 136.248961][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 136.271066][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 136.410986][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 136.517876][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.619986][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22 [ 136.850399][ T5828] IPVS: stop unused estimator thread 0... [ 136.850961][ T5828] IPVS: stop unused estimator thread 0... [ 136.851115][ T5828] IPVS: stop unused estimator thread 0...