last executing test programs: 4.848486894s ago: executing program 2 (id=629): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3450, &(0x7f0000001980)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./sys\x00', &(0x7f0000002ac0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys/class/net/gre0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000002b40)='1', 0x1) writev(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{&(0x7f00000000c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/106, 0x6a}, {&(0x7f0000001580)=""/73, 0x49}, {0x0}, {&(0x7f0000001680)=""/154, 0x9a}, {&(0x7f0000001740)=""/17, 0x11}], 0x8, &(0x7f0000001780)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000001840)={0x77359400}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @multicast2}}], 0x1c) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000480)=0x0, &(0x7f0000001880)=0x0, &(0x7f00000018c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001900)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1fff, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 4.647380879s ago: executing program 3 (id=630): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)='.', 0x1a000}}, 0xfe) close(r1) 4.64708508s ago: executing program 2 (id=631): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000010280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 4.400178893s ago: executing program 2 (id=632): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r0) 4.161246067s ago: executing program 3 (id=633): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x8004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 4.160205231s ago: executing program 2 (id=641): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r0) 4.088517942s ago: executing program 2 (id=634): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004"], 0x50}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in=@local, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.088076243s ago: executing program 2 (id=635): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000740)='\a\x00\x00\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x158}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000980)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000c00)={0xc, {0x16, "2100005000fa00000000000500"/22}}, 0x1c) 3.263272082s ago: executing program 3 (id=639): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x5, 0x161040) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0xfffffffa, 0x4768, @value=0x9f5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002840)={0x84, &(0x7f00000028c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x100}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048850e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000028c0)={0x6, 0x4, &(0x7f0000002980)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f00000029c0)='GPL\x00', 0xa, 0xffad, &(0x7f0000002a00)=""/133}, 0x94) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002ac0)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002bc0)='./dev\x00', &(0x7f0000002c00)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002c40)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002cc0)='./dev/md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000002d00)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r8, 0x40140921, 0x0) ioctl(r8, 0x40140921, &(0x7f0000002d80)="0100000001000000010000000100000006") 2.468471035s ago: executing program 1 (id=643): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) 2.406431315s ago: executing program 1 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.403290311s ago: executing program 1 (id=645): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004"], 0x50}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in=@local, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.32864727s ago: executing program 1 (id=646): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000340)=0x2000) readv(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001400), 0xa0201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./config\x00', &(0x7f0000001500)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r2, &(0x7f0000001580)='1', 0x1) r3 = syz_open_dev$mtd(&(0x7f00000015c0), 0x0, 0x2) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001600)={0x1, 0x0, 0x98, &(0x7f0000001640)={0xec, 0x6, 0x6}}) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001700)={0x2, 0x0, 0x98, &(0x7f0000001740)={0x0, 0x0, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) write$dsp(r1, &(0x7f0000001440)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x2008e4, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000104000380605008800000000000000ff000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800081312345f8cf949a01b515682f44cecac91ba1d02d2b653e0c9d32072c19dd6ca814b7d7b"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyS0\x00', 0x2, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3fffffc, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x6}, 0x94) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x13, 0x7f, 0x4, 0xffff, 0x7, "008a9ea0086de13d"}) 1.817301063s ago: executing program 3 (id=647): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000002cc0)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d80)="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", 0x353}, {&(0x7f0000003100)="46b179971d5d3440bd08ecbdbf3838fd130f6438a5daf746b3a443371163ed18fe11e63233d2df82593e47bd501c195459d573df1e9a061b1a19ab087226ae4b6f39a25213a50f59d5589e9e333f0fc7d692c6672200baa2adfba880add28d0bfd980ccb9a26652db96cdbb2074131b7b7e00912678bf7d92bdb32b02606f842a321b612bc7939834e1ed1fad14aeac70b65ae6c19ff13c749763ad318af18fc31d98c551e84ec0269458e051c0dd727c10872505100cef828f6c6d0b4ee17d9f5a65cced7820aad44130bff17cc25809ecb89dc3d399eefdb12510da9d6c210e151faa5ffef5d2626a45a1259609de87c188127e4ec31c2388fbd582c5f83e766b7c0c710672ca3f77f89323d619bc22c1c80d5ff714d805bb39b54c3e0472c6a23a3b11633ff16705f23744caa5b6820a21f91ee89e8828f356f43f238c6", 0x13f}, {&(0x7f0000003280)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6425bb23c63", 0x48}, {&(0x7f0000000d40)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70c2a7f41e4863a52c1bbacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b79b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffafa1209c65c27014aa0d967f4940dbee8b60700000000000000100085", 0x96}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x840) 1.816955971s ago: executing program 3 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x68, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb09, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0xaf1, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xb17) 1.707576739s ago: executing program 3 (id=649): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000340)=0x2000) readv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4106, 0x100a}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001400), 0xa0201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./config\x00', &(0x7f0000001500)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) r3 = syz_open_dev$mtd(&(0x7f00000015c0), 0x0, 0x2) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001600)={0x1, 0x0, 0x98, &(0x7f0000001640)={0xec, 0x6, 0x6}}) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001700)={0x2, 0x0, 0x98, &(0x7f0000001740)={0x0, 0x0, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) close(r2) write$dsp(r1, &(0x7f0000001440)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2008e4, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000104000380605008800000000000000ff000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800081312345f8cf949a01b515682f44cecac91ba1d02d2b653e0c9"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyS0\x00', 0x2, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3fffffc, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x6}, 0x94) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x13, 0x7f, 0x4, 0xffff, 0x7, "008a9ea0086de13d"}) 1.648931745s ago: executing program 0 (id=650): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1a7) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x40, 0x0) r2 = open$dir(&(0x7f00000006c0)='./mnt\x00', 0x0, 0x2) renameat2(r2, &(0x7f0000000700)='./dev\x00', r2, 0x0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 753.179448ms ago: executing program 0 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x51) r1 = openat(r0, &(0x7f00000000c0)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x4) write(r1, 0x0, 0x0) 668.792308ms ago: executing program 0 (id=652): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) 668.491901ms ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, 0x0, 0x36) 539.607644ms ago: executing program 0 (id=654): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xfe) close(r1) 148.71204ms ago: executing program 1 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, 0x0, 0x36) 17.610824ms ago: executing program 1 (id=656): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000008c0)=0xffdffffc, 0x4) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000a80)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 0s ago: executing program 0 (id=657): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r1, 0x0, 0xfe) close(r1) kernel console output (not intermixed with test programs): : left promiscuous mode [ 62.122717][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.126699][ T6574] bridge_slave_1: left allmulticast mode [ 62.126711][ T6574] bridge_slave_1: left promiscuous mode [ 62.126817][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.138850][ T6574] bond0: (slave bond_slave_0): Releasing backup interface [ 62.148797][ T6574] bond0: (slave bond_slave_1): Releasing backup interface [ 62.152579][ T6574] team0: Port device team_slave_0 removed [ 62.155472][ T6574] team0: Port device team_slave_1 removed [ 62.157143][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.159080][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.163417][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.164608][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.169751][ T6574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.193893][ T6563] FAULT_INJECTION: forcing a failure. [ 62.193893][ T6563] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.193912][ T6563] CPU: 3 UID: 0 PID: 6563 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 62.193924][ T6563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.193930][ T6563] Call Trace: [ 62.193934][ T6563] [ 62.193939][ T6563] dump_stack_lvl+0x100/0x190 [ 62.193958][ T6563] should_fail_ex.cold+0x5/0xa [ 62.193973][ T6563] strncpy_from_user+0x3b/0x2d0 [ 62.193987][ T6563] do_getname+0x78/0x390 [ 62.194000][ T6563] do_sys_openat2+0xc7/0x1e0 [ 62.194011][ T6563] ? __pfx_do_sys_openat2+0x10/0x10 [ 62.194023][ T6563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.194035][ T6563] ? __fget_files+0x21f/0x3d0 [ 62.194053][ T6563] __ia32_compat_sys_openat+0x12d/0x210 [ 62.194065][ T6563] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 62.194077][ T6563] ? ksys_write+0x1ac/0x250 [ 62.194095][ T6563] do_int80_emulation+0x166/0x650 [ 62.194108][ T6563] asm_int80_emulation+0x1a/0x20 [ 62.194119][ T6563] RIP: 0023:0xf71a77eb [ 62.194128][ T6563] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 62.194139][ T6563] RSP: 002b:00000000f546603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 62.194149][ T6563] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 62.194156][ T6563] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.194163][ T6563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.194169][ T6563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.194175][ T6563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.194189][ T6563] [ 62.236186][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.400539][ T6581] 0x0000000000ec-0x0000000000f2 : "" [ 62.403871][ T6581] ftl_cs: FTL header corrupt! [ 62.406159][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.407663][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.407682][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.407696][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.407725][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 62.407742][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 62.412569][ T6582] udevd[6582]: open /dev/null failed: Not a directory [ 62.418150][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.418170][ T10] usb 6-1: Product: syz [ 62.418184][ T10] usb 6-1: Manufacturer: syz [ 62.426299][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 62.426309][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 62.429478][ T10] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 62.429493][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 63.150211][ T6587] 0x0000000000ec-0x0000000000f2 : "" [ 63.157618][ T6587] ftl_cs: FTL header corrupt! [ 63.166298][ T6589] udevd[6589]: open /dev/null failed: Not a directory [ 63.240963][ T6591] __nla_validate_parse: 8 callbacks suppressed [ 63.240982][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 63.261666][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 64.475627][ T5817] usb 5-1: USB disconnect, device number 2 [ 64.845623][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.003165][ T5892] usb 6-1: USB disconnect, device number 2 [ 65.006040][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 65.008929][ T5817] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.013132][ T5817] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.013157][ T5817] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.013169][ T5817] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.013181][ T5817] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.013193][ T5817] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.013212][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.038501][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.039557][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.040112][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.040439][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.040733][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 65.217021][ T5817] usb 5-1: GET_CAPABILITIES returned 0 [ 65.217044][ T5817] usbtmc 5-1:16.0: can't read capabilities [ 65.426711][ T6619] 0x0000000000ec-0x0000000000f2 : "" [ 65.430125][ T6619] ftl_cs: FTL header corrupt! [ 65.439295][ T6621] udevd[6621]: open /dev/null failed: Not a directory [ 65.464419][ T5804] usb 5-1: USB disconnect, device number 3 [ 65.530937][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 65.651722][ T6629] cgroup: fork rejected by pids controller in /syz1 [ 65.786055][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 65.787274][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 66.027162][ T6817] FAULT_INJECTION: forcing a failure. [ 66.027162][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 66.027191][ T6817] CPU: 3 UID: 0 PID: 6817 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 66.027211][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.027222][ T6817] Call Trace: [ 66.027228][ T6817] [ 66.027236][ T6817] dump_stack_lvl+0x100/0x190 [ 66.027265][ T6817] should_fail_ex.cold+0x5/0xa [ 66.027290][ T6817] should_failslab+0xc2/0x120 [ 66.027319][ T6817] __kmalloc_noprof+0xfc/0x840 [ 66.027344][ T6817] ? __pfx_dynamic_dname+0x10/0x10 [ 66.027365][ T6817] ? tomoyo_encode2+0xfb/0x3c0 [ 66.027395][ T6817] tomoyo_encode2+0xfb/0x3c0 [ 66.027424][ T6817] tomoyo_encode+0x29/0x50 [ 66.027447][ T6817] tomoyo_realpath_from_path+0x18c/0x690 [ 66.027479][ T6817] tomoyo_path_number_perm+0x23c/0x580 [ 66.027500][ T6817] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.027524][ T6817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.027547][ T6817] ? get_pid_task+0x106/0x250 [ 66.027575][ T6817] ? __lock_acquire+0x5c0/0x1f40 [ 66.027616][ T6817] ? __fget_files+0x34/0x3d0 [ 66.027751][ T6817] ? find_held_lock+0x2b/0x80 [ 66.027774][ T6817] ? __fget_files+0x215/0x3d0 [ 66.027797][ T6817] ? hook_file_ioctl_common+0x140/0x440 [ 66.027819][ T6817] ? __fget_files+0x215/0x3d0 [ 66.027849][ T6817] ? __fget_files+0x21f/0x3d0 [ 66.027882][ T6817] security_file_ioctl_compat+0xd3/0x230 [ 66.027907][ T6817] __ia32_compat_sys_ioctl+0xc2/0x360 [ 66.027933][ T6817] __do_fast_syscall_32+0x13a/0x8b0 [ 66.027952][ T6817] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.027983][ T6817] do_fast_syscall_32+0x32/0x70 [ 66.028003][ T6817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.028025][ T6817] RIP: 0023:0xf7f92fec [ 66.028044][ T6817] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 66.028053][ T6817] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 66.028070][ T6817] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 66.028082][ T6817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.028093][ T6817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.028103][ T6817] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.028114][ T6817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.028140][ T6817] [ 66.028156][ T6817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.263207][ T6827] FAULT_INJECTION: forcing a failure. [ 66.263207][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.263236][ T6827] CPU: 0 UID: 0 PID: 6827 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(full) [ 66.263256][ T6827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.263266][ T6827] Call Trace: [ 66.263272][ T6827] [ 66.263279][ T6827] dump_stack_lvl+0x100/0x190 [ 66.263308][ T6827] should_fail_ex.cold+0x5/0xa [ 66.263331][ T6827] _copy_from_user+0x2e/0xd0 [ 66.263351][ T6827] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 66.263386][ T6827] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 66.263411][ T6827] ? __import_iovec+0x1d2/0x640 [ 66.263437][ T6827] ____sys_sendmsg+0x607/0xbe0 [ 66.263463][ T6827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.263501][ T6827] ___sys_sendmsg+0x190/0x1e0 [ 66.263531][ T6827] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.263568][ T6827] ? find_held_lock+0x2b/0x80 [ 66.263603][ T6827] __sys_sendmsg+0x160/0x210 [ 66.263619][ T6827] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.263636][ T6827] ? __pfx_ksys_write+0x10/0x10 [ 66.263653][ T6827] __do_fast_syscall_32+0x13a/0x8b0 [ 66.263664][ T6827] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.263682][ T6827] do_fast_syscall_32+0x32/0x70 [ 66.263693][ T6827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.263707][ T6827] RIP: 0023:0xf7fb3fec [ 66.263720][ T6827] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 66.263725][ T6827] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 66.263737][ T6827] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0 [ 66.263743][ T6827] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.263750][ T6827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.263756][ T6827] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.263762][ T6827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.263775][ T6827] [ 66.328510][ T6831] 0x0000000000ec-0x0000000000f2 : "" [ 66.335162][ T6831] ftl_cs: FTL header corrupt! [ 66.346960][ T6834] udevd[6834]: open /dev/null failed: Not a directory [ 66.365165][ T6833] jffs2: notice: (6833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.543294][ T6842] futex_wake_op: syz.0.271 tries to shift op by -1; fix this program [ 66.641093][ T6851] FAULT_INJECTION: forcing a failure. [ 66.641093][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 66.641113][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT(full) [ 66.641125][ T6851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.641131][ T6851] Call Trace: [ 66.641135][ T6851] [ 66.641140][ T6851] dump_stack_lvl+0x100/0x190 [ 66.641158][ T6851] should_fail_ex.cold+0x5/0xa [ 66.641173][ T6851] should_failslab+0xc2/0x120 [ 66.641190][ T6851] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 66.641206][ T6851] ? __alloc_skb+0x5b7/0x710 [ 66.641217][ T6851] ? __alloc_skb+0x140/0x710 [ 66.641231][ T6851] __alloc_skb+0x140/0x710 [ 66.641243][ T6851] ? __alloc_skb+0x5b7/0x710 [ 66.641254][ T6851] ? __pfx___alloc_skb+0x10/0x10 [ 66.641270][ T6851] netlink_alloc_large_skb+0x69/0x150 [ 66.641283][ T6851] netlink_sendmsg+0x680/0xda0 [ 66.641297][ T6851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.641310][ T6851] ? apparmor_socket_sendmsg+0x165/0x280 [ 66.641324][ T6851] ____sys_sendmsg+0xa4d/0xbe0 [ 66.641339][ T6851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.641352][ T6851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.641374][ T6851] ___sys_sendmsg+0x190/0x1e0 [ 66.641391][ T6851] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.641414][ T6851] ? find_held_lock+0x2b/0x80 [ 66.641435][ T6851] __sys_sendmsg+0x160/0x210 [ 66.641449][ T6851] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.641466][ T6851] ? __pfx_ksys_write+0x10/0x10 [ 66.641482][ T6851] __do_fast_syscall_32+0x13a/0x8b0 [ 66.641494][ T6851] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.641512][ T6851] do_fast_syscall_32+0x32/0x70 [ 66.641523][ T6851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.641537][ T6851] RIP: 0023:0xf7f17fec [ 66.641548][ T6851] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 66.641554][ T6851] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 66.641565][ T6851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 66.641572][ T6851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.641579][ T6851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.641585][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.641592][ T6851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.641605][ T6851] [ 66.730778][ T6853] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.745686][ T61] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.821538][ T6866] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.829869][ T6866] raw_sendmsg: syz.0.276 forgot to set AF_INET. Fix it! [ 66.858176][ T6868] FAULT_INJECTION: forcing a failure. [ 66.858176][ T6868] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.858197][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 66.858210][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.858216][ T6868] Call Trace: [ 66.858220][ T6868] [ 66.858225][ T6868] dump_stack_lvl+0x100/0x190 [ 66.858244][ T6868] should_fail_ex.cold+0x5/0xa [ 66.858257][ T6868] ? prepare_alloc_pages+0x16d/0x5b0 [ 66.858276][ T6868] should_fail_alloc_page+0xeb/0x140 [ 66.858295][ T6868] prepare_alloc_pages+0x1f0/0x5b0 [ 66.858320][ T6868] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 66.858335][ T6868] ? lock_acquire+0x1d1/0x380 [ 66.858353][ T6868] ? process_measurement+0x1567/0x2350 [ 66.858365][ T6868] ? __pfx___might_resched+0x10/0x10 [ 66.858382][ T6868] ? find_held_lock+0x2b/0x80 [ 66.858395][ T6868] ? process_measurement+0x4c8/0x2350 [ 66.858405][ T6868] ? process_measurement+0x4c8/0x2350 [ 66.858416][ T6868] ? down_write+0x146/0x1f0 [ 66.858428][ T6868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.858444][ T6868] ? up_write+0x2dc/0x5b0 [ 66.858456][ T6868] ? process_measurement+0x1f4/0x2350 [ 66.858469][ T6868] ? __lock_acquire+0x5c0/0x1f40 [ 66.858489][ T6868] ? __lock_acquire+0x5c0/0x1f40 [ 66.858506][ T6868] ? lock_acquire+0x1d1/0x380 [ 66.858522][ T6868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.858541][ T6868] ? policy_nodemask+0xed/0x4f0 [ 66.858560][ T6868] alloc_pages_mpol+0x201/0x550 [ 66.858571][ T6868] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.858593][ T6868] alloc_pages_noprof+0x1a/0x160 [ 66.858606][ T6868] pte_alloc_one+0x1c/0x3d0 [ 66.858621][ T6868] do_fault+0x960/0x1830 [ 66.858638][ T6868] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 66.858652][ T6868] ? __pfx_do_fault+0x10/0x10 [ 66.858667][ T6868] ? pgd_none+0x9f/0xe0 [ 66.858678][ T6868] ? __pfx_pgd_none+0x10/0x10 [ 66.858689][ T6868] ? find_held_lock+0x2b/0x80 [ 66.858704][ T6868] __handle_mm_fault+0x150b/0x2f60 [ 66.858718][ T6868] ? __pfx___handle_mm_fault+0x10/0x10 [ 66.858730][ T6868] ? __pfx_mt_find+0x10/0x10 [ 66.858749][ T6868] ? find_vma+0xbf/0x140 [ 66.858763][ T6868] ? __pfx_find_vma+0x10/0x10 [ 66.858779][ T6868] handle_mm_fault+0x363/0xa20 [ 66.858793][ T6868] do_user_addr_fault+0x745/0x12f0 [ 66.858810][ T6868] exc_page_fault+0x6f/0xd0 [ 66.858828][ T6868] asm_exc_page_fault+0x26/0x30 [ 66.858839][ T6868] RIP: 0010:_copy_from_user+0x93/0xd0 [ 66.858851][ T6868] Code: d4 e0 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 21 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 cf [ 66.858862][ T6868] RSP: 0018:ffffc90003aefda0 EFLAGS: 00050246 [ 66.858872][ T6868] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 66.858878][ T6868] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003aefde8 [ 66.858885][ T6868] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200075dfbd [ 66.858891][ T6868] R10: ffffc90003aefdef R11: 0000000000000000 R12: 0000000000000000 [ 66.858898][ T6868] R13: ffffc90003aefde8 R14: ffffc90003aefe78 R15: ffffffff8bf37828 [ 66.858913][ T6868] get_old_timespec32+0x82/0x130 [ 66.858931][ T6868] ? __pfx_get_old_timespec32+0x10/0x10 [ 66.858947][ T6868] ? __pfx___seccomp_filter+0x10/0x10 [ 66.858963][ T6868] __ia32_sys_clock_settime32+0x17d/0x2a0 [ 66.858980][ T6868] ? __pfx___ia32_sys_clock_settime32+0x10/0x10 [ 66.858995][ T6868] ? ksys_write+0x1ac/0x250 [ 66.859013][ T6868] __do_fast_syscall_32+0x13a/0x8b0 [ 66.859024][ T6868] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.859041][ T6868] do_fast_syscall_32+0x32/0x70 [ 66.859053][ T6868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.859066][ T6868] RIP: 0023:0xf7f92fec [ 66.859079][ T6868] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 66.859084][ T6868] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000108 [ 66.859094][ T6868] RAX: ffffffffffffffda RBX: 00000000fffffffb RCX: 0000000000000000 [ 66.859100][ T6868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.859107][ T6868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.859113][ T6868] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.859138][ T6868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.859154][ T6868] [ 66.939805][ T6875] 0x0000000000ec-0x0000000000f2 : "" [ 66.947894][ T6875] ftl_cs: FTL header corrupt! [ 66.958039][ T6876] udevd[6876]: open /dev/null failed: Not a directory [ 67.265549][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 67.267298][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.272516][ T61] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 67.272541][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.272553][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.272565][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.272576][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.272595][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.638056][ T6889] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 67.638072][ T6889] iwpm_hello_cb: Unable to parse nlmsg [ 67.701997][ T6893] fuse: Bad value for 'fd' [ 67.747157][ T61] usb 8-1: GET_CAPABILITIES returned 0 [ 67.747181][ T61] usbtmc 8-1:16.0: can't read capabilities [ 67.932830][ T6902] veth1_macvtap: left promiscuous mode [ 67.932849][ T6902] macsec0: entered promiscuous mode [ 67.932857][ T6902] macsec0: entered allmulticast mode [ 67.943576][ T6902] veth1_macvtap: entered promiscuous mode [ 67.943590][ T6902] veth1_macvtap: entered allmulticast mode [ 67.944076][ T6902] macsec0: left promiscuous mode [ 67.944362][ T6902] macsec0: left allmulticast mode [ 67.944371][ T6902] veth1_macvtap: left allmulticast mode [ 68.018477][ T6899] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 68.035109][ T72] usb 8-1: USB disconnect, device number 4 [ 68.085378][ T6911] FAULT_INJECTION: forcing a failure. [ 68.085378][ T6911] name failslab, interval 1, probability 0, space 0, times 0 [ 68.085408][ T6911] CPU: 1 UID: 0 PID: 6911 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(full) [ 68.085427][ T6911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.085437][ T6911] Call Trace: [ 68.085443][ T6911] [ 68.085450][ T6911] dump_stack_lvl+0x100/0x190 [ 68.085477][ T6911] should_fail_ex.cold+0x5/0xa [ 68.085517][ T6911] should_failslab+0xc2/0x120 [ 68.085543][ T6911] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 68.085566][ T6911] ? __alloc_skb+0x5b7/0x710 [ 68.085584][ T6911] ? __alloc_skb+0x140/0x710 [ 68.085606][ T6911] __alloc_skb+0x140/0x710 [ 68.085622][ T6911] ? __alloc_skb+0x5b7/0x710 [ 68.085645][ T6911] ? __pfx___alloc_skb+0x10/0x10 [ 68.085670][ T6911] netlink_alloc_large_skb+0x69/0x150 [ 68.085690][ T6911] netlink_sendmsg+0x680/0xda0 [ 68.085711][ T6911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.085731][ T6911] ? apparmor_socket_sendmsg+0x165/0x280 [ 68.085753][ T6911] ____sys_sendmsg+0xa4d/0xbe0 [ 68.085775][ T6911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.085795][ T6911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.085828][ T6911] ___sys_sendmsg+0x190/0x1e0 [ 68.085854][ T6911] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.085889][ T6911] ? find_held_lock+0x2b/0x80 [ 68.085923][ T6911] __sys_sendmsg+0x160/0x210 [ 68.085940][ T6911] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.085962][ T6911] ? __pfx_ksys_write+0x10/0x10 [ 68.085984][ T6911] __do_fast_syscall_32+0x13a/0x8b0 [ 68.085999][ T6911] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.086024][ T6911] do_fast_syscall_32+0x32/0x70 [ 68.086041][ T6911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.086061][ T6911] RIP: 0023:0xf7fb3fec [ 68.086080][ T6911] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 68.086088][ T6911] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 68.086105][ T6911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 68.086116][ T6911] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.086126][ T6911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.086135][ T6911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.086145][ T6911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.086167][ T6911] [ 68.269392][ T6915] __nla_validate_parse: 9 callbacks suppressed [ 68.269411][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 68.278394][ T9] wiimote 0005:057E:0330.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 68.278623][ T9] wiimote 0005:057E:0330.0003: New device registered [ 68.288665][ T6914] wiimote 0005:057E:0330.0003: Device removed [ 68.294843][ T6916] udevd[6916]: open /dev/null failed: Not a directory [ 68.656312][ T6921] CacheFiles: Second cache directory specified [ 68.712786][ T35] cfg80211: failed to load regulatory.db [ 68.995381][ T6935] FAULT_INJECTION: forcing a failure. [ 68.995381][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.995412][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) [ 68.995434][ T6935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.995445][ T6935] Call Trace: [ 68.995451][ T6935] [ 68.995459][ T6935] dump_stack_lvl+0x100/0x190 [ 68.995502][ T6935] should_fail_ex.cold+0x5/0xa [ 68.995529][ T6935] copy_fpstate_to_sigframe+0x82d/0xae0 [ 68.995558][ T6935] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 68.995581][ T6935] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 68.995612][ T6935] ? irqentry_exit+0x24d/0xa10 [ 68.995629][ T6935] ? x86_task_fpu+0x5f/0x90 [ 68.995654][ T6935] get_sigframe+0x3fb/0x940 [ 68.995683][ T6935] ? __pfx_get_sigframe+0x10/0x10 [ 68.995706][ T6935] ? _raw_spin_unlock_irq+0x29/0x50 [ 68.995730][ T6935] ? siginfo_layout+0x156/0x290 [ 68.995761][ T6935] ia32_setup_rt_frame+0xe7/0xaf0 [ 68.995791][ T6935] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 68.995816][ T6935] arch_do_signal_or_restart+0x459/0x7a0 [ 68.995842][ T6935] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 68.995874][ T6935] ? fput+0x7c/0x100 [ 68.995908][ T6935] exit_to_user_mode_loop+0x139/0x700 [ 68.995925][ T6935] ? rcu_is_watching+0x13/0xc0 [ 68.995948][ T6935] do_int80_emulation+0x555/0x650 [ 68.995971][ T6935] asm_int80_emulation+0x1a/0x20 [ 68.995989][ T6935] RIP: 0023:0xf71877eb [ 68.996004][ T6935] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 68.996022][ T6935] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 68.996040][ T6935] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f54465c0 [ 68.996051][ T6935] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.996062][ T6935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.996073][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.996085][ T6935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.996110][ T6935] [ 69.258538][ T6942] FAULT_INJECTION: forcing a failure. [ 69.258538][ T6942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.258567][ T6942] CPU: 3 UID: 0 PID: 6942 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT(full) [ 69.258589][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.258600][ T6942] Call Trace: [ 69.258607][ T6942] [ 69.258615][ T6942] dump_stack_lvl+0x100/0x190 [ 69.258646][ T6942] should_fail_ex.cold+0x5/0xa [ 69.258666][ T6942] ? prepare_alloc_pages+0x16d/0x5b0 [ 69.258698][ T6942] should_fail_alloc_page+0xeb/0x140 [ 69.258729][ T6942] prepare_alloc_pages+0x1f0/0x5b0 [ 69.258779][ T6942] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 69.258806][ T6942] ? lock_acquire+0x1d1/0x380 [ 69.258833][ T6942] ? process_measurement+0x1567/0x2350 [ 69.258859][ T6942] ? __pfx___might_resched+0x10/0x10 [ 69.258887][ T6942] ? find_held_lock+0x2b/0x80 [ 69.258909][ T6942] ? process_measurement+0x4c8/0x2350 [ 69.258928][ T6942] ? process_measurement+0x4c8/0x2350 [ 69.258946][ T6942] ? down_write+0x146/0x1f0 [ 69.258966][ T6942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.258992][ T6942] ? up_write+0x2dc/0x5b0 [ 69.259013][ T6942] ? process_measurement+0x1f4/0x2350 [ 69.259037][ T6942] ? __lock_acquire+0x5c0/0x1f40 [ 69.259070][ T6942] ? __lock_acquire+0x5c0/0x1f40 [ 69.259100][ T6942] ? lock_acquire+0x1d1/0x380 [ 69.259147][ T6942] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.259178][ T6942] ? policy_nodemask+0xed/0x4f0 [ 69.259211][ T6942] alloc_pages_mpol+0x201/0x550 [ 69.259231][ T6942] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 69.259269][ T6942] alloc_pages_noprof+0x1a/0x160 [ 69.259290][ T6942] pte_alloc_one+0x1c/0x3d0 [ 69.259316][ T6942] do_fault+0x960/0x1830 [ 69.259345][ T6942] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 69.259367][ T6942] ? __pfx_do_fault+0x10/0x10 [ 69.259392][ T6942] ? pgd_none+0x9f/0xe0 [ 69.259411][ T6942] ? __pfx_pgd_none+0x10/0x10 [ 69.259431][ T6942] ? find_held_lock+0x2b/0x80 [ 69.259456][ T6942] __handle_mm_fault+0x150b/0x2f60 [ 69.259483][ T6942] ? __pfx___handle_mm_fault+0x10/0x10 [ 69.259501][ T6942] ? __pfx_mt_find+0x10/0x10 [ 69.259535][ T6942] ? find_vma+0xbf/0x140 [ 69.259558][ T6942] ? __pfx_find_vma+0x10/0x10 [ 69.259582][ T6942] handle_mm_fault+0x363/0xa20 [ 69.259605][ T6942] do_user_addr_fault+0x745/0x12f0 [ 69.259631][ T6942] exc_page_fault+0x6f/0xd0 [ 69.259658][ T6942] asm_exc_page_fault+0x26/0x30 [ 69.259676][ T6942] RIP: 0010:_copy_from_user+0x93/0xd0 [ 69.259695][ T6942] Code: d4 e0 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 21 54 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 cf [ 69.259712][ T6942] RSP: 0018:ffffc90002d3fda0 EFLAGS: 00050246 [ 69.259729][ T6942] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 69.259740][ T6942] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90002d3fde8 [ 69.259751][ T6942] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520005a7fbd [ 69.259763][ T6942] R10: ffffc90002d3fdef R11: 0000000000000000 R12: 0000000000000000 [ 69.259774][ T6942] R13: ffffc90002d3fde8 R14: ffffc90002d3fe78 R15: ffffffff8bf37828 [ 69.259803][ T6942] get_old_timespec32+0x82/0x130 [ 69.259832][ T6942] ? __pfx_get_old_timespec32+0x10/0x10 [ 69.259865][ T6942] ? __pfx___seccomp_filter+0x10/0x10 [ 69.259894][ T6942] __ia32_sys_clock_settime32+0x17d/0x2a0 [ 69.259922][ T6942] ? __pfx___ia32_sys_clock_settime32+0x10/0x10 [ 69.259948][ T6942] ? ksys_write+0x1ac/0x250 [ 69.259979][ T6942] __do_fast_syscall_32+0x13a/0x8b0 [ 69.259998][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.260029][ T6942] do_fast_syscall_32+0x32/0x70 [ 69.260049][ T6942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.260072][ T6942] RIP: 0023:0xf7f17fec [ 69.260091][ T6942] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 69.260099][ T6942] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000108 [ 69.260116][ T6942] RAX: ffffffffffffffda RBX: 00000000fffffffb RCX: 0000000000000000 [ 69.260128][ T6942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.260138][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.260150][ T6942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.260161][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.260187][ T6942] [ 69.276802][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.355608][ T9] wiimote 0005:057E:0330.0003: detected device: Nintendo Wii Remote Plus (Gen 2) [ 69.363865][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input9 [ 69.367783][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input10 [ 69.369430][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input8 [ 69.425689][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 69.426463][ T5892] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.427460][ T5892] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 69.427499][ T5892] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.427517][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.427537][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.427555][ T5892] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.427587][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.639473][ T5892] usb 6-1: GET_CAPABILITIES returned 0 [ 69.639512][ T5892] usbtmc 6-1:16.0: can't read capabilities [ 69.894604][ T5804] usb 6-1: USB disconnect, device number 3 [ 69.911184][ T6974] 0x0000000000ec-0x0000000000f2 : "" [ 69.923482][ T6974] ftl_cs: FTL header corrupt! [ 69.927797][ T6975] udevd[6975]: open /dev/null failed: Not a directory [ 69.984935][ T6977] FAULT_INJECTION: forcing a failure. [ 69.984935][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 69.984988][ T6977] CPU: 3 UID: 0 PID: 6977 Comm: syz.2.315 Not tainted syzkaller #0 PREEMPT(full) [ 69.985011][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.985023][ T6977] Call Trace: [ 69.985031][ T6977] [ 69.985040][ T6977] dump_stack_lvl+0x100/0x190 [ 69.985072][ T6977] should_fail_ex.cold+0x5/0xa [ 69.985099][ T6977] should_failslab+0xc2/0x120 [ 69.985126][ T6977] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.985152][ T6977] ? __alloc_skb+0x5b7/0x710 [ 69.985170][ T6977] ? __alloc_skb+0x140/0x710 [ 69.985194][ T6977] __alloc_skb+0x140/0x710 [ 69.985212][ T6977] ? __alloc_skb+0x5b7/0x710 [ 69.985231][ T6977] ? __pfx___alloc_skb+0x10/0x10 [ 69.985264][ T6977] netlink_alloc_large_skb+0x69/0x150 [ 69.985286][ T6977] netlink_sendmsg+0x680/0xda0 [ 69.985310][ T6977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.985332][ T6977] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.985356][ T6977] ____sys_sendmsg+0xa4d/0xbe0 [ 69.985381][ T6977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.985401][ T6977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.985441][ T6977] ___sys_sendmsg+0x190/0x1e0 [ 69.985470][ T6977] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.985526][ T6977] ? find_held_lock+0x2b/0x80 [ 69.985565][ T6977] __sys_sendmsg+0x160/0x210 [ 69.985587][ T6977] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.985617][ T6977] ? __pfx_ksys_write+0x10/0x10 [ 69.985645][ T6977] __do_fast_syscall_32+0x13a/0x8b0 [ 69.985664][ T6977] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.985694][ T6977] do_fast_syscall_32+0x32/0x70 [ 69.985713][ T6977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.985736][ T6977] RIP: 0023:0xf7f17fec [ 69.985755][ T6977] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 69.985764][ T6977] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.985782][ T6977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c00 [ 69.985794][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.985804][ T6977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.985815][ T6977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.985826][ T6977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.985851][ T6977] [ 70.001765][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 70.028490][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.029308][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.029841][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.030226][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.030552][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.685671][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.847973][ T5893] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.849165][ T5893] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.849187][ T5893] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.849202][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.849237][ T5893] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 70.849259][ T5893] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 70.850885][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.850905][ T5893] usb 6-1: Product: syz [ 70.850919][ T5893] usb 6-1: Manufacturer: syz [ 70.857317][ T5893] cdc_wdm 6-1:1.0: skipping garbage [ 70.857332][ T5893] cdc_wdm 6-1:1.0: skipping garbage [ 70.862675][ T5893] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 70.862692][ T5893] cdc_wdm 6-1:1.0: Unknown control protocol [ 70.880033][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.880122][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.235808][ T5893] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.406412][ T5893] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.407402][ T5893] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.407423][ T5893] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 71.407440][ T5893] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.407475][ T5893] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 71.407499][ T5893] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 71.408943][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.408962][ T5893] usb 7-1: Product: syz [ 71.408976][ T5893] usb 7-1: Manufacturer: syz [ 71.413405][ T5893] cdc_wdm 7-1:1.0: skipping garbage [ 71.413419][ T5893] cdc_wdm 7-1:1.0: skipping garbage [ 71.416834][ T5893] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 71.416848][ T5893] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.453562][ T5817] usb 6-1: USB disconnect, device number 4 [ 73.835592][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.965618][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.986343][ T5817] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.987348][ T5817] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.987361][ T5817] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.987370][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.987390][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.987402][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.988893][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.988910][ T5817] usb 6-1: Product: syz [ 73.988922][ T5817] usb 6-1: Manufacturer: syz [ 73.996249][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 73.996263][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 73.998659][ T5817] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 73.998673][ T5817] cdc_wdm 6-1:1.0: Unknown control protocol [ 74.016032][ T9] usb 7-1: USB disconnect, device number 5 [ 74.036777][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 74.037637][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 74.039111][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 74.039834][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 74.040363][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 74.136507][ T5893] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.137632][ T5893] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.137654][ T5893] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 74.137671][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.137716][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 74.137736][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.139826][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.139846][ T5893] usb 5-1: Product: syz [ 74.139860][ T5893] usb 5-1: Manufacturer: syz [ 74.145612][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 74.145625][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 74.152034][ T5893] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 74.152050][ T5893] cdc_wdm 5-1:1.0: Unknown control protocol [ 74.196179][ T6999] FAULT_INJECTION: forcing a failure. [ 74.196179][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.196199][ T6999] CPU: 3 UID: 0 PID: 6999 Comm: syz.1.322 Not tainted syzkaller #0 PREEMPT(full) [ 74.196212][ T6999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.196219][ T6999] Call Trace: [ 74.196223][ T6999] [ 74.196228][ T6999] dump_stack_lvl+0x100/0x190 [ 74.196246][ T6999] should_fail_ex.cold+0x5/0xa [ 74.196261][ T6999] _copy_from_user+0x2e/0xd0 [ 74.196274][ T6999] kstrtouint_from_user+0xd6/0x1d0 [ 74.196288][ T6999] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 74.196306][ T6999] ? lock_acquire+0x1d1/0x380 [ 74.196325][ T6999] proc_fail_nth_write+0x83/0x220 [ 74.196342][ T6999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.196361][ T6999] vfs_write+0x2aa/0x1050 [ 74.196376][ T6999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.196391][ T6999] ? lock_acquire+0x1d1/0x380 [ 74.196407][ T6999] ? __fget_files+0x34/0x3d0 [ 74.196421][ T6999] ? __pfx_vfs_write+0x10/0x10 [ 74.196434][ T6999] ? find_held_lock+0x2b/0x80 [ 74.196448][ T6999] ? __fget_files+0x215/0x3d0 [ 74.196465][ T6999] ? __fget_files+0x21f/0x3d0 [ 74.196484][ T6999] ksys_write+0x12a/0x250 [ 74.196498][ T6999] ? __pfx_ksys_write+0x10/0x10 [ 74.196516][ T6999] do_int80_emulation+0x166/0x650 [ 74.196530][ T6999] asm_int80_emulation+0x1a/0x20 [ 74.196542][ T6999] RIP: 0023:0xf71877eb [ 74.196552][ T6999] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 74.196562][ T6999] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 74.196573][ T6999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 74.196580][ T6999] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.196587][ T6999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.196593][ T6999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.196599][ T6999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.196625][ T6999] [ 74.206251][ T5804] usb 6-1: USB disconnect, device number 5 [ 74.326155][ T7014] 0x0000000000ec-0x0000000000f2 : "" [ 74.327930][ T7014] ftl_cs: FTL header corrupt! [ 74.337393][ T7015] udevd[7015]: open /dev/null failed: Not a directory [ 74.402730][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 74.408941][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.575629][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 74.576642][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.577578][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 74.577602][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.577613][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.577625][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.577636][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.577656][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.781504][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 74.781529][ T9] usbtmc 7-1:16.0: can't read capabilities [ 75.042441][ T5893] usb 7-1: USB disconnect, device number 6 [ 75.616595][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 75.626040][ T5828] wiimote 0005:057E:0330.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 75.626173][ T5828] wiimote 0005:057E:0330.0004: New device registered [ 75.630647][ T7025] wiimote 0005:057E:0330.0004: Device removed [ 75.634952][ T7027] udevd[7027]: open /dev/null failed: Not a directory [ 76.350916][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 76.352170][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 76.352955][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 76.601583][ T7041] overlayfs: overlapping lowerdir path [ 76.607914][ T7041] overlayfs: overlapping lowerdir path [ 76.610491][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.614326][ T7041] overlayfs: overlapping lowerdir path [ 76.617519][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.624829][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.628517][ T7041] overlayfs: overlapping lowerdir path [ 76.637341][ T5828] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 76.638174][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.650879][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.656001][ T5828] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input12 [ 76.656244][ T7041] overlayfs: overlapping lowerdir path [ 76.663303][ T5828] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input13 [ 76.667697][ T5828] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input11 [ 76.673026][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.677829][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.680735][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.682506][ T7041] overlayfs: overlapping lowerdir path [ 76.687897][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.690034][ T7041] overlayfs: overlapping lowerdir path [ 76.690677][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.692752][ T7041] overlayfs: overlapping lowerdir path [ 76.693888][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.702509][ T7041] overlayfs: overlapping lowerdir path [ 76.722485][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.725294][ T7041] overlayfs: overlapping lowerdir path [ 76.729822][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.743207][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.744345][ T7041] overlayfs: overlapping lowerdir path [ 76.753220][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.768639][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.770443][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.770798][ T7041] overlayfs: overlapping lowerdir path [ 76.771772][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.773252][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.786001][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.786939][ T5893] usb 5-1: USB disconnect, device number 4 [ 76.791015][ T7041] overlayfs: overlapping lowerdir path [ 76.806730][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.814651][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.817561][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.821099][ T7041] overlayfs: overlapping lowerdir path [ 76.822979][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.827654][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.829114][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.830848][ T7041] overlayfs: overlapping lowerdir path [ 76.831270][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.833084][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.834738][ T7041] overlayfs: overlapping lowerdir path [ 76.836393][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.838893][ T7041] overlayfs: overlapping lowerdir path [ 76.839234][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.840802][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.841382][ T7041] overlayfs: overlapping lowerdir path [ 76.841729][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.842359][ T7041] overlayfs: overlapping lowerdir path [ 76.842657][ T7043] overlayfs: failed to resolve 'context=system_u': -2 [ 76.844918][ T7041] overlayfs: overlapping lowerdir path [ 76.847293][ T7041] overlayfs: overlapping lowerdir path [ 76.849147][ T7041] overlayfs: overlapping lowerdir path [ 76.851032][ T7041] overlayfs: overlapping lowerdir path [ 76.856830][ T7041] overlayfs: overlapping lowerdir path [ 76.858516][ T7041] overlayfs: overlapping lowerdir path [ 76.860692][ T7041] overlayfs: overlapping lowerdir path [ 76.862385][ T7041] overlayfs: overlapping lowerdir path [ 76.864397][ T7041] overlayfs: overlapping lowerdir path [ 76.868991][ T7041] overlayfs: overlapping lowerdir path [ 76.870370][ T7050] tipc: Started in network mode [ 76.870393][ T7050] tipc: Node identity ac14140f, cluster identity 4711 [ 76.871310][ T7041] overlayfs: overlapping lowerdir path [ 76.871479][ T7050] tipc: New replicast peer: 255.255.255.255 [ 76.872042][ T7050] tipc: Enabled bearer , priority 10 [ 76.872673][ T7041] overlayfs: overlapping lowerdir path [ 76.874389][ T7041] overlayfs: overlapping lowerdir path [ 76.877053][ T7041] overlayfs: overlapping lowerdir path [ 77.242884][ T7069] 0x0000000000ec-0x0000000000f2 : "" [ 77.246193][ T7069] ftl_cs: FTL header corrupt! [ 77.254762][ T7071] udevd[7071]: open /dev/null failed: Not a directory [ 77.265098][ T7070] qnx6: unable to read the first superblock [ 77.265261][ T7070] qnx6: unable to read the first superblock [ 77.265271][ T7070] qnx6: unable to read the first superblock [ 77.309309][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.465645][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 77.466639][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.467597][ T5893] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 77.467638][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.467656][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.467676][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.467695][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.467726][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.673571][ T5893] usb 5-1: GET_CAPABILITIES returned 0 [ 77.673595][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 77.867257][ T5893] tipc: Node number set to 2886997007 [ 77.923658][ T5892] usb 5-1: USB disconnect, device number 5 [ 78.402397][ T7085] FAULT_INJECTION: forcing a failure. [ 78.402397][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.402423][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.3.351 Not tainted syzkaller #0 PREEMPT(full) [ 78.402440][ T7085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.402450][ T7085] Call Trace: [ 78.402454][ T7085] [ 78.402460][ T7085] dump_stack_lvl+0x100/0x190 [ 78.402485][ T7085] should_fail_ex.cold+0x5/0xa [ 78.402504][ T7085] _copy_from_user+0x2e/0xd0 [ 78.402520][ T7085] get_compat_msghdr+0xb3/0x480 [ 78.402541][ T7085] ? __pfx_get_compat_msghdr+0x10/0x10 [ 78.402569][ T7085] ___sys_sendmsg+0x1b6/0x1e0 [ 78.402593][ T7085] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.402624][ T7085] ? find_held_lock+0x2b/0x80 [ 78.402654][ T7085] __sys_sendmsg+0x160/0x210 [ 78.402671][ T7085] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.402695][ T7085] ? __pfx_ksys_write+0x10/0x10 [ 78.402717][ T7085] __do_fast_syscall_32+0x13a/0x8b0 [ 78.402732][ T7085] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.402756][ T7085] do_fast_syscall_32+0x32/0x70 [ 78.402770][ T7085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.402789][ T7085] RIP: 0023:0xf73befec [ 78.402805][ T7085] Code: Unable to access opcode bytes at 0xf73befc2. [ 78.402812][ T7085] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 78.402828][ T7085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 78.402838][ T7085] RDX: 00000000240880c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.402846][ T7085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.402855][ T7085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.402863][ T7085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.402882][ T7085] [ 78.565009][ T7094] FAULT_INJECTION: forcing a failure. [ 78.565009][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 78.565042][ T7094] CPU: 1 UID: 0 PID: 7094 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 78.565064][ T7094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.565077][ T7094] Call Trace: [ 78.565084][ T7094] [ 78.565092][ T7094] dump_stack_lvl+0x100/0x190 [ 78.565122][ T7094] should_fail_ex.cold+0x5/0xa [ 78.565149][ T7094] should_failslab+0xc2/0x120 [ 78.565188][ T7094] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 78.565217][ T7094] ? __kasan_kmalloc+0xaa/0xb0 [ 78.565243][ T7094] ? apply_subsystem_event_filter+0x44d/0x17a0 [ 78.565280][ T7094] kstrdup+0x51/0xe0 [ 78.565304][ T7094] apply_subsystem_event_filter+0x44d/0x17a0 [ 78.565342][ T7094] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 78.565377][ T7094] ? _copy_from_user+0x59/0xd0 [ 78.565400][ T7094] subsystem_filter_write+0x95/0x120 [ 78.565431][ T7094] vfs_write+0x2aa/0x1050 [ 78.565455][ T7094] ? __pfx_subsystem_filter_write+0x10/0x10 [ 78.565504][ T7094] ? lock_acquire+0x1d1/0x380 [ 78.565533][ T7094] ? __fget_files+0x34/0x3d0 [ 78.565560][ T7094] ? __pfx_vfs_write+0x10/0x10 [ 78.565582][ T7094] ? find_held_lock+0x2b/0x80 [ 78.565610][ T7094] ? __fget_files+0x215/0x3d0 [ 78.565641][ T7094] ? __fget_files+0x21f/0x3d0 [ 78.565674][ T7094] ksys_write+0x12a/0x250 [ 78.565697][ T7094] ? __pfx_ksys_write+0x10/0x10 [ 78.565730][ T7094] __do_fast_syscall_32+0x13a/0x8b0 [ 78.565755][ T7094] do_fast_syscall_32+0x32/0x70 [ 78.565776][ T7094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.565801][ T7094] RIP: 0023:0xf7fb3fec [ 78.565821][ T7094] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 78.565830][ T7094] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 78.565849][ T7094] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 78.565863][ T7094] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 78.565874][ T7094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.565886][ T7094] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.565896][ T7094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.565922][ T7094] [ 78.714395][ T7102] 0x0000000000ec-0x0000000000f2 : "" [ 78.718895][ T7102] ftl_cs: FTL header corrupt! [ 78.726365][ T7103] udevd[7103]: open /dev/null failed: Not a directory [ 78.944973][ T7112] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.147651][ T7112] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.448066][ T854] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 79.461936][ T7127] __nla_validate_parse: 20 callbacks suppressed [ 79.461954][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 79.482732][ T5893] wiimote 0005:057E:0330.0005: hidraw2: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 79.482946][ T5893] wiimote 0005:057E:0330.0005: New device registered [ 79.497431][ T7126] wiimote 0005:057E:0330.0005: Device removed [ 79.510276][ T7129] udevd[7129]: open /dev/null failed: Not a directory [ 79.605639][ T854] usb 8-1: Using ep0 maxpacket: 8 [ 79.606468][ T854] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.607406][ T854] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 79.607444][ T854] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.607461][ T854] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.607480][ T854] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.607498][ T854] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.607531][ T854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.812854][ T854] usb 8-1: GET_CAPABILITIES returned 0 [ 79.812893][ T854] usbtmc 8-1:16.0: can't read capabilities [ 80.060782][ T72] usb 8-1: USB disconnect, device number 5 [ 80.565621][ T5893] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2) [ 80.566594][ T5893] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 80.566613][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 80.566633][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.566645][ T5893] Workqueue: events wiimote_init_worker [ 80.566674][ T5893] Call Trace: [ 80.566680][ T5893] [ 80.566689][ T5893] dump_stack_lvl+0x100/0x190 [ 80.566716][ T5893] sysfs_warn_dup.cold+0x1c/0x28 [ 80.566743][ T5893] sysfs_do_create_link_sd+0x113/0x140 [ 80.566771][ T5893] sysfs_create_link+0x61/0xc0 [ 80.566797][ T5893] device_add+0x675/0x1970 [ 80.566823][ T5893] ? __pfx_device_add+0x10/0x10 [ 80.566845][ T5893] ? lockdep_init_map_type+0x5c/0x250 [ 80.566874][ T5893] ? __raw_spin_lock_init+0x3a/0x110 [ 80.566896][ T5893] __power_supply_register.part.0+0x9cf/0x13b0 [ 80.566929][ T5893] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 80.566959][ T5893] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 80.566985][ T5893] ? kasprintf+0xc7/0x100 [ 80.567002][ T5893] ? __pfx_kasprintf+0x10/0x10 [ 80.567022][ T5893] ? trace_kmalloc+0xeb/0x110 [ 80.567048][ T5893] ? __kasan_kmalloc+0xaa/0xb0 [ 80.567100][ T5893] power_supply_register+0xce/0x110 [ 80.567128][ T5893] wiimod_battery_probe+0x21e/0x370 [ 80.567160][ T5893] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 80.567185][ T5893] ? input_ff_create+0x256/0x310 [ 80.567204][ T5893] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 80.567233][ T5893] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 80.567258][ T5893] wiimote_init_worker+0xd55/0x2730 [ 80.567290][ T5893] ? __pfx_wiimote_init_worker+0x10/0x10 [ 80.567316][ T5893] ? lock_acquire+0x1d1/0x380 [ 80.567339][ T5893] ? process_one_work+0xa2c/0x1b10 [ 80.567364][ T5893] ? process_one_work+0x906/0x1b10 [ 80.567386][ T5893] ? process_one_work+0x906/0x1b10 [ 80.567413][ T5893] process_one_work+0xac7/0x1b10 [ 80.567445][ T5893] ? __pfx_process_one_work+0x10/0x10 [ 80.567468][ T5893] ? lock_acquire+0x1d1/0x380 [ 80.567500][ T5893] ? __pfx_wiimote_init_worker+0x10/0x10 [ 80.567526][ T5893] worker_thread+0x5ef/0xe50 [ 80.567555][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 80.567578][ T5893] ? kthread+0x13a/0x450 [ 80.567597][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 80.567616][ T5893] kthread+0x373/0x450 [ 80.567636][ T5893] ? __pfx_kthread+0x10/0x10 [ 80.567656][ T5893] ret_from_fork+0x730/0xd60 [ 80.567676][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 80.567692][ T5893] ? native_load_gs_index+0x1e/0xc0 [ 80.567730][ T5893] ? __switch_to+0x800/0x10f0 [ 80.567753][ T5893] ? __pfx_kthread+0x10/0x10 [ 80.567775][ T5893] ret_from_fork_asm+0x1a/0x30 [ 80.567805][ T5893] [ 80.568495][ T5893] wiimote 0005:057E:0330.0005: cannot register battery device [ 80.945481][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 80.946809][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 80.947258][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 80.947570][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 80.947851][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 80.990189][ T7140] FAULT_INJECTION: forcing a failure. [ 80.990189][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 80.990215][ T7140] CPU: 1 UID: 0 PID: 7140 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT(full) [ 80.990234][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.990244][ T7140] Call Trace: [ 80.990249][ T7140] [ 80.990256][ T7140] dump_stack_lvl+0x100/0x190 [ 80.990283][ T7140] should_fail_ex.cold+0x5/0xa [ 80.990305][ T7140] should_failslab+0xc2/0x120 [ 80.990330][ T7140] __kmalloc_noprof+0xfc/0x840 [ 80.990353][ T7140] ? process_preds+0x452/0x1d90 [ 80.990381][ T7140] process_preds+0x452/0x1d90 [ 80.990415][ T7140] apply_subsystem_event_filter+0x4a0/0x17a0 [ 80.990447][ T7140] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 80.990478][ T7140] ? _copy_from_user+0x59/0xd0 [ 80.990497][ T7140] subsystem_filter_write+0x95/0x120 [ 80.990523][ T7140] vfs_write+0x2aa/0x1050 [ 80.990544][ T7140] ? __pfx_subsystem_filter_write+0x10/0x10 [ 80.990568][ T7140] ? lock_acquire+0x1d1/0x380 [ 80.990590][ T7140] ? __fget_files+0x34/0x3d0 [ 80.990612][ T7140] ? __pfx_vfs_write+0x10/0x10 [ 80.990630][ T7140] ? find_held_lock+0x2b/0x80 [ 80.990649][ T7140] ? __fget_files+0x215/0x3d0 [ 80.990675][ T7140] ? __fget_files+0x21f/0x3d0 [ 80.990703][ T7140] ksys_write+0x12a/0x250 [ 80.990723][ T7140] ? __pfx_ksys_write+0x10/0x10 [ 80.990751][ T7140] __do_fast_syscall_32+0x13a/0x8b0 [ 80.990772][ T7140] do_fast_syscall_32+0x32/0x70 [ 80.990789][ T7140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.990809][ T7140] RIP: 0023:0xf7f17fec [ 80.990826][ T7140] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 80.990834][ T7140] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 80.990850][ T7140] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 80.990861][ T7140] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 80.990871][ T7140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.990880][ T7140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.990890][ T7140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.990913][ T7140] [ 81.127971][ T7148] 0x0000000000ec-0x0000000000f2 : "" [ 81.133405][ T7148] ftl_cs: FTL header corrupt! [ 81.137142][ T7149] udevd[7149]: open /dev/null failed: Not a directory [ 81.156549][ T7150] 0x0000000000ec-0x0000000000f2 : "" [ 81.162276][ T7150] ftl_cs: FTL header corrupt! [ 81.167794][ T7151] udevd[7151]: open /dev/null failed: Not a directory [ 81.205647][ T854] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.212641][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 81.233534][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 81.385630][ T854] usb 5-1: Using ep0 maxpacket: 8 [ 81.386866][ T854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.387882][ T854] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.387913][ T854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.387929][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.387945][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.387961][ T854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.387988][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.395849][ T7158] 0x0000000000ec-0x0000000000f2 : "" [ 81.398228][ T7158] ftl_cs: FTL header corrupt! [ 81.411851][ T7160] udevd[7160]: open /dev/null failed: Not a directory [ 81.593595][ T854] usb 5-1: GET_CAPABILITIES returned 0 [ 81.593619][ T854] usbtmc 5-1:16.0: can't read capabilities [ 81.839328][ T30] usb 5-1: USB disconnect, device number 6 [ 82.404076][ T9] wiimote 0005:057E:0330.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 82.404203][ T9] wiimote 0005:057E:0330.0006: New device registered [ 82.407226][ T7168] wiimote 0005:057E:0330.0006: Device removed [ 82.413381][ T7170] udevd[7170]: open /dev/null failed: Not a directory [ 83.435586][ T9] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 83.445556][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input16 [ 83.450132][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input17 [ 83.454671][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input15 [ 83.568063][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 83.568659][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 83.803836][ T7190] 0x0000000000ec-0x0000000000f2 : "" [ 83.807422][ T7190] ftl_cs: FTL header corrupt! [ 83.814151][ T7191] udevd[7191]: open /dev/null failed: Not a directory [ 83.935697][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.095569][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 84.096055][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.097042][ T30] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 84.097067][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.097078][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.097090][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.097102][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.097121][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.301406][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 84.301429][ T30] usbtmc 8-1:16.0: can't read capabilities [ 84.559949][ T5892] usb 8-1: USB disconnect, device number 6 [ 84.874635][ T7199] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 84.890522][ T7199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.936899][ T7202] __nla_validate_parse: 4 callbacks suppressed [ 84.936913][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 84.937719][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 84.938204][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 84.938673][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 84.939067][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 84.963684][ T7204] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 84.991359][ T7206] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 85.000582][ T7206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.052137][ T7209] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 85.061773][ T7209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.105934][ T7214] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 85.115134][ T7214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 85.169959][ T7221] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 85.184745][ T7221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.185797][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 85.186412][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 85.186628][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 85.186797][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 85.186958][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 85.277992][ T7232] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 85.288912][ T7232] 8021q: adding VLAN 0 to HW filter on device bond6 [ 85.358184][ T7237] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 85.371070][ T7237] 8021q: adding VLAN 0 to HW filter on device bond7 [ 85.472154][ T7241] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 85.495651][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.665556][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 85.666254][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.667160][ T30] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 85.667196][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.667214][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.667233][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.667252][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.667283][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.872549][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 85.872572][ T30] usbtmc 8-1:16.0: can't read capabilities [ 86.049836][ T7249] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 86.059339][ T7249] 8021q: adding VLAN 0 to HW filter on device bond8 [ 86.078132][ T7252] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 86.088291][ T7252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.119099][ T5892] usb 8-1: USB disconnect, device number 7 [ 86.120464][ T7257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 86.180078][ T7262] 0x0000000000ec-0x0000000000f2 : "" [ 86.185895][ T7262] ftl_cs: FTL header corrupt! [ 86.188292][ T7263] udevd[7263]: open /dev/null failed: Not a directory [ 86.320373][ T7265] 8021q: adding VLAN 0 to HW filter on device bond10 [ 86.427924][ T7269] 0x0000000000ec-0x0000000000f2 : "" [ 86.431216][ T7269] ftl_cs: FTL header corrupt! [ 86.435395][ T7270] udevd[7270]: open /dev/null failed: Not a directory [ 87.908395][ T30] wiimote 0005:057E:0330.0007: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 87.909630][ T30] wiimote 0005:057E:0330.0007: New device registered [ 87.911063][ T7294] wiimote 0005:057E:0330.0007: Device removed [ 87.916705][ T7296] udevd[7296]: open /dev/null failed: Not a directory [ 88.106085][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 88.265729][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 88.266244][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.267561][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 88.267585][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.267601][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.267612][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.267624][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.267643][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.470879][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 88.470902][ T9] usbtmc 8-1:16.0: can't read capabilities [ 88.713364][ T6528] usb 8-1: USB disconnect, device number 8 [ 88.955627][ T30] wiimote 0005:057E:0330.0007: detected device: Nintendo Wii Remote Plus (Gen 2) [ 88.967199][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input19 [ 88.969796][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input20 [ 88.974886][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0007/input/input18 [ 89.541310][ T7325] 0x0000000000ec-0x0000000000f2 : "" [ 89.543815][ T7325] ftl_cs: FTL header corrupt! [ 89.550696][ T7326] udevd[7326]: open /dev/null failed: Not a directory [ 89.651422][ T7332] 0x0000000000ec-0x0000000000f2 : "" [ 89.653066][ T7332] ftl_cs: FTL header corrupt! [ 89.660622][ T7333] udevd[7333]: open /dev/null failed: Not a directory [ 89.858311][ T7336] FAULT_INJECTION: forcing a failure. [ 89.858311][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.858344][ T7336] CPU: 2 UID: 0 PID: 7336 Comm: syz.1.441 Not tainted syzkaller #0 PREEMPT(full) [ 89.858365][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.858377][ T7336] Call Trace: [ 89.858384][ T7336] [ 89.858392][ T7336] dump_stack_lvl+0x100/0x190 [ 89.858422][ T7336] should_fail_ex.cold+0x5/0xa [ 89.858448][ T7336] strncpy_from_user+0x3b/0x2d0 [ 89.858472][ T7336] __do_sys_add_key+0xd4/0x460 [ 89.858503][ T7336] ? __pfx___do_sys_add_key+0x10/0x10 [ 89.858530][ T7336] ? ksys_write+0x1ac/0x250 [ 89.858561][ T7336] __do_fast_syscall_32+0x13a/0x8b0 [ 89.858587][ T7336] do_fast_syscall_32+0x32/0x70 [ 89.858608][ T7336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.858638][ T7336] RIP: 0023:0xf7f92fec [ 89.858659][ T7336] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 89.858667][ T7336] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 89.858687][ T7336] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 89.858700][ T7336] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000027f00f9 [ 89.858712][ T7336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.858723][ T7336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.858735][ T7336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.858761][ T7336] [ 90.388431][ T7346] 0x0000000000ec-0x0000000000f2 : "" [ 90.391526][ T7346] ftl_cs: FTL header corrupt! [ 90.395292][ T7347] udevd[7347]: open /dev/null failed: Not a directory [ 90.457209][ T7348] __nla_validate_parse: 35 callbacks suppressed [ 90.457222][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 91.075078][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 91.079432][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 91.079903][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 91.080255][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 91.080563][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 91.210991][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.446'. [ 91.345688][ T5828] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 91.495827][ T5828] usb 8-1: Using ep0 maxpacket: 8 [ 91.496561][ T5828] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.497512][ T5828] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 91.497550][ T5828] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.497568][ T5828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.497587][ T5828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.497607][ T5828] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.497639][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.702807][ T5828] usb 8-1: GET_CAPABILITIES returned 0 [ 91.702835][ T5828] usbtmc 8-1:16.0: can't read capabilities [ 91.713830][ T7361] FAULT_INJECTION: forcing a failure. [ 91.713830][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.713850][ T7361] CPU: 2 UID: 0 PID: 7361 Comm: syz.2.450 Not tainted syzkaller #0 PREEMPT(full) [ 91.713864][ T7361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.713871][ T7361] Call Trace: [ 91.713875][ T7361] [ 91.713880][ T7361] dump_stack_lvl+0x100/0x190 [ 91.713899][ T7361] should_fail_ex.cold+0x5/0xa [ 91.713914][ T7361] strncpy_from_user+0x3b/0x2d0 [ 91.713929][ T7361] __do_sys_add_key+0xd4/0x460 [ 91.713948][ T7361] ? __pfx___do_sys_add_key+0x10/0x10 [ 91.713965][ T7361] ? ksys_write+0x1ac/0x250 [ 91.713984][ T7361] __do_fast_syscall_32+0x13a/0x8b0 [ 91.713998][ T7361] do_fast_syscall_32+0x32/0x70 [ 91.714010][ T7361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.714024][ T7361] RIP: 0023:0xf7f17fec [ 91.714036][ T7361] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 91.714042][ T7361] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 91.714053][ T7361] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 91.714060][ T7361] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000027dd2390 [ 91.714067][ T7361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.714074][ T7361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.714081][ T7361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.714095][ T7361] [ 91.966762][ T61] usb 8-1: USB disconnect, device number 9 [ 92.134765][ T7377] 0x0000000000ec-0x0000000000f2 : "" [ 92.139200][ T7377] ftl_cs: FTL header corrupt! [ 92.145654][ T7378] udevd[7378]: open /dev/null failed: Not a directory [ 92.209620][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 92.520117][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 92.520902][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 92.622977][ T7386] 0x0000000000ec-0x0000000000f2 : "" [ 92.627375][ T7386] ftl_cs: FTL header corrupt! [ 92.631293][ T7387] udevd[7387]: open /dev/null failed: Not a directory [ 92.924469][ T7394] FAULT_INJECTION: forcing a failure. [ 92.924469][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.924492][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.1.461 Not tainted syzkaller #0 PREEMPT(full) [ 92.924505][ T7394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.924511][ T7394] Call Trace: [ 92.924516][ T7394] [ 92.924521][ T7394] dump_stack_lvl+0x100/0x190 [ 92.924540][ T7394] should_fail_ex.cold+0x5/0xa [ 92.924555][ T7394] strncpy_from_user+0x3b/0x2d0 [ 92.924571][ T7394] __do_sys_add_key+0xd4/0x460 [ 92.924594][ T7394] ? __pfx___do_sys_add_key+0x10/0x10 [ 92.924616][ T7394] __do_fast_syscall_32+0x13a/0x8b0 [ 92.924631][ T7394] do_fast_syscall_32+0x32/0x70 [ 92.924644][ T7394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.924658][ T7394] RIP: 0023:0xf7f92fec [ 92.924675][ T7394] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 92.924681][ T7394] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 92.924693][ T7394] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 92.924701][ T7394] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000000a8b457 [ 92.924708][ T7394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.924717][ T7394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.924724][ T7394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.924738][ T7394] [ 93.256622][ T7409] 0x0000000000ec-0x0000000000f2 : "" [ 93.258378][ T7409] ftl_cs: FTL header corrupt! [ 93.266174][ T7410] udevd[7410]: open /dev/null failed: Not a directory [ 93.345614][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 93.505952][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 93.507543][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.508486][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 93.508525][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.508543][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.508561][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.508579][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.508611][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.714359][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 93.714399][ T10] usbtmc 6-1:16.0: can't read capabilities [ 93.968913][ T9] usb 6-1: USB disconnect, device number 6 [ 94.057839][ T7422] FAULT_INJECTION: forcing a failure. [ 94.057839][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.057867][ T7422] CPU: 2 UID: 0 PID: 7422 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(full) [ 94.057886][ T7422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.057896][ T7422] Call Trace: [ 94.057903][ T7422] [ 94.057909][ T7422] dump_stack_lvl+0x100/0x190 [ 94.057934][ T7422] should_fail_ex.cold+0x5/0xa [ 94.057956][ T7422] strncpy_from_user+0x3b/0x2d0 [ 94.057976][ T7422] __do_sys_add_key+0xd4/0x460 [ 94.058003][ T7422] ? __pfx___do_sys_add_key+0x10/0x10 [ 94.058032][ T7422] ? ksys_write+0x1ac/0x250 [ 94.058060][ T7422] __do_fast_syscall_32+0x13a/0x8b0 [ 94.058081][ T7422] do_fast_syscall_32+0x32/0x70 [ 94.058098][ T7422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.058117][ T7422] RIP: 0023:0xf7f17fec [ 94.058134][ T7422] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 94.058141][ T7422] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 94.058158][ T7422] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 94.058169][ T7422] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000015cc7067 [ 94.058178][ T7422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.058187][ T7422] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.058196][ T7422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.058222][ T7422] [ 94.096966][ T6528] wiimote 0005:057E:0330.0008: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 94.097143][ T6528] wiimote 0005:057E:0330.0008: New device registered [ 94.098600][ T7423] wiimote 0005:057E:0330.0008: Device removed [ 94.104120][ T7425] udevd[7425]: open /dev/null failed: Not a directory [ 94.721170][ T7438] 0x0000000000ec-0x0000000000f2 : "" [ 94.722719][ T7438] ftl_cs: FTL header corrupt! [ 94.728841][ T7439] udevd[7439]: open /dev/null failed: Not a directory [ 95.115591][ T6528] wiimote 0005:057E:0330.0008: detected device: Nintendo Wii Remote Plus (Gen 2) [ 95.122032][ T6528] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input22 [ 95.124954][ T6528] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input23 [ 95.141918][ T6528] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input21 [ 95.225621][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 95.395658][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 95.398191][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.399152][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 95.399190][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.399208][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.399225][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.399243][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.399273][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.607075][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 95.607099][ T9] usbtmc 8-1:16.0: can't read capabilities [ 95.670350][ T7457] __nla_validate_parse: 19 callbacks suppressed [ 95.670369][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.671531][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.671920][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.672240][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.672548][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.763687][ T7460] 0x0000000000ec-0x0000000000f2 : "" [ 95.769119][ T7460] ftl_cs: FTL header corrupt! [ 95.775656][ T7461] udevd[7461]: open /dev/null failed: Not a directory [ 95.786803][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 95.853013][ T5804] usb 8-1: USB disconnect, device number 10 [ 96.478584][ T7470] netlink: 64 bytes leftover after parsing attributes in process `syz.3.491'. [ 96.490612][ T7470] syzkaller1: entered promiscuous mode [ 96.490630][ T7470] syzkaller1: entered allmulticast mode [ 96.698876][ T7477] 0x0000000000ec-0x0000000000f2 : "" [ 96.700805][ T7477] ftl_cs: FTL header corrupt! [ 96.707964][ T7478] udevd[7478]: open /dev/null failed: Not a directory [ 96.730324][ T7480] FAULT_INJECTION: forcing a failure. [ 96.730324][ T7480] name failslab, interval 1, probability 0, space 0, times 0 [ 96.730346][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(full) [ 96.730359][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.730365][ T7480] Call Trace: [ 96.730370][ T7480] [ 96.730374][ T7480] dump_stack_lvl+0x100/0x190 [ 96.730393][ T7480] should_fail_ex.cold+0x5/0xa [ 96.730409][ T7480] should_failslab+0xc2/0x120 [ 96.730428][ T7480] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.730445][ T7480] ? prepare_creds+0x2c/0x950 [ 96.730463][ T7480] prepare_creds+0x2c/0x950 [ 96.730479][ T7480] __sys_setreuid+0x109/0xb00 [ 96.730498][ T7480] __do_fast_syscall_32+0x13a/0x8b0 [ 96.730512][ T7480] do_fast_syscall_32+0x32/0x70 [ 96.730524][ T7480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.730538][ T7480] RIP: 0023:0xf73befec [ 96.730571][ T7480] Code: Unable to access opcode bytes at 0xf73befc2. [ 96.730577][ T7480] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 96.730589][ T7480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 96.730597][ T7480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.730604][ T7480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.730611][ T7480] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.730619][ T7480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.730634][ T7480] [ 96.773782][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 96.874456][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 96.875471][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 98.055610][ T5828] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 98.114333][ T7498] syzkaller1: entered promiscuous mode [ 98.114347][ T7498] syzkaller1: entered allmulticast mode [ 98.215566][ T5828] usb 8-1: Using ep0 maxpacket: 8 [ 98.216055][ T5828] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.216959][ T5828] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 98.216981][ T5828] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.216993][ T5828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.217005][ T5828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.217016][ T5828] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.217035][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.422944][ T5828] usb 8-1: GET_CAPABILITIES returned 0 [ 98.422967][ T5828] usbtmc 8-1:16.0: can't read capabilities [ 98.676455][ T5828] usb 8-1: USB disconnect, device number 11 [ 99.280296][ T7525] 0x0000000000ec-0x0000000000f2 : "" [ 99.288428][ T7525] ftl_cs: FTL header corrupt! [ 99.293341][ T7526] udevd[7526]: open /dev/null failed: Not a directory [ 99.546234][ T7532] 0x0000000000ec-0x0000000000f2 : "" [ 99.548774][ T7532] ftl_cs: FTL header corrupt! [ 99.553923][ T7533] udevd[7533]: open /dev/null failed: Not a directory [ 100.076426][ T7545] validate_nla: 2 callbacks suppressed [ 100.076445][ T7545] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 100.089284][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.110647][ T7545] bond2: (slave geneve2): making interface the new active one [ 100.111447][ T7545] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 100.445585][ T6528] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.595698][ T6528] usb 5-1: Using ep0 maxpacket: 8 [ 100.596216][ T6528] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.597080][ T6528] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.597109][ T6528] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.597123][ T6528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.597142][ T6528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.597159][ T6528] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.597189][ T6528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.800822][ T6528] usb 5-1: GET_CAPABILITIES returned 0 [ 100.800846][ T6528] usbtmc 5-1:16.0: can't read capabilities [ 100.927207][ T10] wiimote 0005:057E:0330.0009: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 100.927973][ T10] wiimote 0005:057E:0330.0009: New device registered [ 100.929486][ T7552] wiimote 0005:057E:0330.0009: Device removed [ 100.932503][ T7554] udevd[7554]: open /dev/null failed: Not a directory [ 101.064488][ T35] usb 5-1: USB disconnect, device number 7 [ 101.594103][ T7561] __nla_validate_parse: 18 callbacks suppressed [ 101.594119][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 101.723804][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 101.724377][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 101.724869][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 101.725194][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 101.725613][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 101.814258][ T7579] 0x0000000000ec-0x0000000000f2 : "" [ 101.817312][ T7579] ftl_cs: FTL header corrupt! [ 101.824311][ T7580] udevd[7580]: open /dev/null failed: Not a directory [ 101.837170][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 102.005588][ T10] wiimote 0005:057E:0330.0009: detected device: Nintendo Wii Remote Plus (Gen 2) [ 102.013802][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input25 [ 102.017280][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input26 [ 102.023945][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input24 [ 102.834789][ T7598] 0x0000000000ec-0x0000000000f2 : "" [ 102.838903][ T7598] ftl_cs: FTL header corrupt! [ 102.847936][ T7599] udevd[7599]: open /dev/null failed: Not a directory [ 102.886135][ T854] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.912320][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 103.055642][ T854] usb 5-1: Using ep0 maxpacket: 8 [ 103.056104][ T854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.056884][ T854] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 103.056908][ T854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.056920][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.056931][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.056943][ T854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.056961][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.262569][ T854] usb 5-1: GET_CAPABILITIES returned 0 [ 103.262594][ T854] usbtmc 5-1:16.0: can't read capabilities [ 103.514485][ T854] usb 5-1: USB disconnect, device number 8 [ 103.965471][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 103.970254][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 104.308357][ T7618] FAULT_INJECTION: forcing a failure. [ 104.308357][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 104.308384][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.2.544 Not tainted syzkaller #0 PREEMPT(full) [ 104.308398][ T7618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.308407][ T7618] Call Trace: [ 104.308413][ T7618] [ 104.308420][ T7618] dump_stack_lvl+0x100/0x190 [ 104.308449][ T7618] should_fail_ex.cold+0x5/0xa [ 104.308473][ T7618] should_failslab+0xc2/0x120 [ 104.308497][ T7618] __kmalloc_noprof+0xfc/0x840 [ 104.308522][ T7618] ? process_preds+0x452/0x1d90 [ 104.308553][ T7618] process_preds+0x452/0x1d90 [ 104.308589][ T7618] apply_subsystem_event_filter+0x4a0/0x17a0 [ 104.308620][ T7618] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 104.308653][ T7618] ? _copy_from_user+0x59/0xd0 [ 104.308674][ T7618] subsystem_filter_write+0x95/0x120 [ 104.308699][ T7618] vfs_write+0x2aa/0x1050 [ 104.308722][ T7618] ? __pfx_subsystem_filter_write+0x10/0x10 [ 104.308749][ T7618] ? lock_acquire+0x1d1/0x380 [ 104.308774][ T7618] ? __fget_files+0x34/0x3d0 [ 104.308796][ T7618] ? __pfx_vfs_write+0x10/0x10 [ 104.308814][ T7618] ? find_held_lock+0x2b/0x80 [ 104.308835][ T7618] ? __fget_files+0x215/0x3d0 [ 104.308864][ T7618] ? __fget_files+0x21f/0x3d0 [ 104.308890][ T7618] ksys_write+0x12a/0x250 [ 104.308911][ T7618] ? __pfx_ksys_write+0x10/0x10 [ 104.308941][ T7618] __do_fast_syscall_32+0x13a/0x8b0 [ 104.308964][ T7618] do_fast_syscall_32+0x32/0x70 [ 104.308984][ T7618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.309000][ T7618] RIP: 0023:0xf7f17fec [ 104.309020][ T7618] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 104.309028][ T7618] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 104.309046][ T7618] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 104.309058][ T7618] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.309068][ T7618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.309079][ T7618] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.309088][ T7618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.309108][ T7618] [ 105.255703][ T5828] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.405723][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 105.406406][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.407194][ T5828] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 105.407216][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.407228][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.407240][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.407251][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.407270][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.612854][ T5828] usb 5-1: GET_CAPABILITIES returned 0 [ 105.612893][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 105.866582][ T61] usb 5-1: USB disconnect, device number 9 [ 106.488346][ T7653] 0x0000000000ec-0x0000000000f2 : "" [ 106.490288][ T7653] ftl_cs: FTL header corrupt! [ 106.503725][ T7654] udevd[7654]: open /dev/null failed: Not a directory [ 106.722779][ T7663] FAULT_INJECTION: forcing a failure. [ 106.722779][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 106.722801][ T7663] CPU: 3 UID: 0 PID: 7663 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(full) [ 106.722814][ T7663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.722821][ T7663] Call Trace: [ 106.722825][ T7663] [ 106.722830][ T7663] dump_stack_lvl+0x100/0x190 [ 106.722849][ T7663] should_fail_ex.cold+0x5/0xa [ 106.722864][ T7663] should_failslab+0xc2/0x120 [ 106.722884][ T7663] __kmalloc_noprof+0xfc/0x840 [ 106.722915][ T7663] ? process_preds+0x452/0x1d90 [ 106.722954][ T7663] process_preds+0x452/0x1d90 [ 106.722980][ T7663] apply_subsystem_event_filter+0x4a0/0x17a0 [ 106.723003][ T7663] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 106.723026][ T7663] ? _copy_from_user+0x59/0xd0 [ 106.723039][ T7663] subsystem_filter_write+0x95/0x120 [ 106.723059][ T7663] vfs_write+0x2aa/0x1050 [ 106.723074][ T7663] ? __pfx_subsystem_filter_write+0x10/0x10 [ 106.723092][ T7663] ? lock_acquire+0x1d1/0x380 [ 106.723112][ T7663] ? __fget_files+0x34/0x3d0 [ 106.723127][ T7663] ? __pfx_vfs_write+0x10/0x10 [ 106.723140][ T7663] ? find_held_lock+0x2b/0x80 [ 106.723154][ T7663] ? __fget_files+0x215/0x3d0 [ 106.723172][ T7663] ? __fget_files+0x21f/0x3d0 [ 106.723192][ T7663] ksys_write+0x12a/0x250 [ 106.723207][ T7663] ? __pfx_ksys_write+0x10/0x10 [ 106.723227][ T7663] __do_fast_syscall_32+0x13a/0x8b0 [ 106.723242][ T7663] do_fast_syscall_32+0x32/0x70 [ 106.723254][ T7663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.723268][ T7663] RIP: 0023:0xf7f17fec [ 106.723281][ T7663] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 106.723286][ T7663] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 106.723298][ T7663] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 106.723306][ T7663] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.723313][ T7663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.723320][ T7663] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.723327][ T7663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.723343][ T7663] [ 106.836649][ T7667] __nla_validate_parse: 15 callbacks suppressed [ 106.836669][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 106.995748][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 107.023297][ T10] wiimote 0005:057E:0330.000A: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 107.023491][ T10] wiimote 0005:057E:0330.000A: New device registered [ 107.025275][ T7672] wiimote 0005:057E:0330.000A: Device removed [ 107.030231][ T7674] udevd[7674]: open /dev/null failed: Not a directory [ 107.145670][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 107.147029][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.148016][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 107.148055][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.148073][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.148091][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.148109][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.148141][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.353639][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 107.353663][ T9] usbtmc 6-1:16.0: can't read capabilities [ 107.453075][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 107.454337][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 107.454683][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 107.455125][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 107.455444][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 107.541705][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 107.597789][ T61] usb 6-1: USB disconnect, device number 7 [ 108.075740][ T6938] wiimote 0005:057E:0330.000A: detected device: Nintendo Wii Remote Plus (Gen 2) [ 108.092615][ T6938] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input28 [ 108.095060][ T6938] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input29 [ 108.102789][ T6938] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input27 [ 108.434520][ T7688] FAULT_INJECTION: forcing a failure. [ 108.434520][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 108.434541][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.1.572 Not tainted syzkaller #0 PREEMPT(full) [ 108.434555][ T7688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.434562][ T7688] Call Trace: [ 108.434567][ T7688] [ 108.434571][ T7688] dump_stack_lvl+0x100/0x190 [ 108.434604][ T7688] should_fail_ex.cold+0x5/0xa [ 108.434621][ T7688] should_failslab+0xc2/0x120 [ 108.434639][ T7688] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 108.434656][ T7688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.434669][ T7688] ? append_filter_err+0x3d6/0x620 [ 108.434689][ T7688] kmemdup_nul+0x49/0xd0 [ 108.434703][ T7688] append_filter_err+0x3d6/0x620 [ 108.434722][ T7688] apply_subsystem_event_filter+0x711/0x17a0 [ 108.434744][ T7688] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 108.434766][ T7688] ? _copy_from_user+0x59/0xd0 [ 108.434779][ T7688] subsystem_filter_write+0x95/0x120 [ 108.434798][ T7688] vfs_write+0x2aa/0x1050 [ 108.434814][ T7688] ? __pfx_subsystem_filter_write+0x10/0x10 [ 108.434831][ T7688] ? lock_acquire+0x1d1/0x380 [ 108.434848][ T7688] ? __fget_files+0x34/0x3d0 [ 108.434863][ T7688] ? __pfx_vfs_write+0x10/0x10 [ 108.434876][ T7688] ? find_held_lock+0x2b/0x80 [ 108.434890][ T7688] ? __fget_files+0x215/0x3d0 [ 108.434908][ T7688] ? __fget_files+0x21f/0x3d0 [ 108.434954][ T7688] ksys_write+0x12a/0x250 [ 108.434975][ T7688] ? __pfx_ksys_write+0x10/0x10 [ 108.434994][ T7688] __do_fast_syscall_32+0x13a/0x8b0 [ 108.435008][ T7688] do_fast_syscall_32+0x32/0x70 [ 108.435021][ T7688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.435036][ T7688] RIP: 0023:0xf7f92fec [ 108.435049][ T7688] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 108.435054][ T7688] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 108.435066][ T7688] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 108.435073][ T7688] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.435080][ T7688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.435086][ T7688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.435093][ T7688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.435108][ T7688] [ 108.584912][ T7694] syzkaller1: entered promiscuous mode [ 108.584932][ T7694] syzkaller1: entered allmulticast mode [ 108.770726][ T43] audit: type=1800 audit(1792039964.938:3): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file1" dev="sda1" ino=2038 res=0 errno=0 [ 109.627269][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 109.628164][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 109.628368][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 109.905590][ T6528] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 110.055592][ T6528] usb 8-1: Using ep0 maxpacket: 8 [ 110.056331][ T6528] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.057292][ T6528] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 110.057329][ T6528] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.057347][ T6528] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.057367][ T6528] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.057386][ T6528] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.057418][ T6528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.262180][ T6528] usb 8-1: GET_CAPABILITIES returned 0 [ 110.262219][ T6528] usbtmc 8-1:16.0: can't read capabilities [ 110.500764][ T7603] usb 8-1: USB disconnect, device number 12 [ 110.555993][ T7717] 0x0000000000ec-0x0000000000f2 : "" [ 110.558501][ T7717] ftl_cs: FTL header corrupt! [ 110.569306][ T7718] udevd[7718]: open /dev/null failed: Not a directory [ 110.909690][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888051766400: rx timeout, send abort [ 110.909947][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff888051766400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.051851][ T7721] syzkaller1: entered promiscuous mode [ 111.051871][ T7721] syzkaller1: entered allmulticast mode [ 112.211921][ T7732] __nla_validate_parse: 5 callbacks suppressed [ 112.211945][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 112.377155][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 112.377714][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 112.377866][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 112.378007][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 112.378182][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 112.655663][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 112.792489][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 112.793460][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 112.793775][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 112.793984][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 112.805561][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 112.808119][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.809005][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 112.809028][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.809040][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.809052][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.809063][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.809082][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.013707][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 113.013731][ T9] usbtmc 7-1:16.0: can't read capabilities [ 113.267314][ T9] usb 7-1: USB disconnect, device number 7 [ 113.322766][ T7751] syzkaller1: entered promiscuous mode [ 113.322781][ T7751] syzkaller1: entered allmulticast mode [ 113.377298][ T7753] FAULT_INJECTION: forcing a failure. [ 113.377298][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 113.377319][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 113.377332][ T7753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.377339][ T7753] Call Trace: [ 113.377344][ T7753] [ 113.377349][ T7753] dump_stack_lvl+0x100/0x190 [ 113.377368][ T7753] should_fail_ex.cold+0x5/0xa [ 113.377383][ T7753] should_failslab+0xc2/0x120 [ 113.377402][ T7753] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.377416][ T7753] ? apply_subsystem_event_filter+0x539/0x17a0 [ 113.377437][ T7753] apply_subsystem_event_filter+0x539/0x17a0 [ 113.377459][ T7753] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 113.377480][ T7753] ? _copy_from_user+0x59/0xd0 [ 113.377494][ T7753] subsystem_filter_write+0x95/0x120 [ 113.377513][ T7753] vfs_write+0x2aa/0x1050 [ 113.377528][ T7753] ? __pfx_subsystem_filter_write+0x10/0x10 [ 113.377545][ T7753] ? lock_acquire+0x1d1/0x380 [ 113.377562][ T7753] ? __fget_files+0x34/0x3d0 [ 113.377577][ T7753] ? __pfx_vfs_write+0x10/0x10 [ 113.377591][ T7753] ? find_held_lock+0x2b/0x80 [ 113.377604][ T7753] ? __fget_files+0x215/0x3d0 [ 113.377622][ T7753] ? __fget_files+0x21f/0x3d0 [ 113.377641][ T7753] ksys_write+0x12a/0x250 [ 113.377655][ T7753] ? __pfx_ksys_write+0x10/0x10 [ 113.377674][ T7753] __do_fast_syscall_32+0x13a/0x8b0 [ 113.377688][ T7753] do_fast_syscall_32+0x32/0x70 [ 113.377700][ T7753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.377715][ T7753] RIP: 0023:0xf7f92fec [ 113.377728][ T7753] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 113.377733][ T7753] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 113.377745][ T7753] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 113.377753][ T7753] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.377760][ T7753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.377767][ T7753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.377775][ T7753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.377790][ T7753] [ 113.567315][ T9] wiimote 0005:057E:0330.000B: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 113.567448][ T9] wiimote 0005:057E:0330.000B: New device registered [ 113.571361][ T7758] wiimote 0005:057E:0330.000B: Device removed [ 113.575343][ T7761] udevd[7761]: open /dev/null failed: Not a directory [ 113.863984][ T7765] 0x0000000000ec-0x0000000000f2 : "" [ 113.870315][ T7765] ftl_cs: FTL header corrupt! [ 113.878866][ T7766] udevd[7766]: open /dev/null failed: Not a directory [ 114.449823][ T7777] FAULT_INJECTION: forcing a failure. [ 114.449823][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 114.449851][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 114.449871][ T7777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.449880][ T7777] Call Trace: [ 114.449887][ T7777] [ 114.449894][ T7777] dump_stack_lvl+0x100/0x190 [ 114.449919][ T7777] should_fail_ex.cold+0x5/0xa [ 114.449940][ T7777] should_failslab+0xc2/0x120 [ 114.449967][ T7777] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.449989][ T7777] ? apply_subsystem_event_filter+0x42e/0x17a0 [ 114.450022][ T7777] apply_subsystem_event_filter+0x42e/0x17a0 [ 114.450056][ T7777] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 114.450090][ T7777] ? _copy_from_user+0x59/0xd0 [ 114.450112][ T7777] subsystem_filter_write+0x95/0x120 [ 114.450143][ T7777] vfs_write+0x2aa/0x1050 [ 114.450167][ T7777] ? __pfx_subsystem_filter_write+0x10/0x10 [ 114.450194][ T7777] ? lock_acquire+0x1d1/0x380 [ 114.450221][ T7777] ? __fget_files+0x34/0x3d0 [ 114.450245][ T7777] ? __pfx_vfs_write+0x10/0x10 [ 114.450267][ T7777] ? find_held_lock+0x2b/0x80 [ 114.450290][ T7777] ? __fget_files+0x215/0x3d0 [ 114.450319][ T7777] ? __fget_files+0x21f/0x3d0 [ 114.450352][ T7777] ksys_write+0x12a/0x250 [ 114.450375][ T7777] ? __pfx_ksys_write+0x10/0x10 [ 114.450407][ T7777] __do_fast_syscall_32+0x13a/0x8b0 [ 114.450431][ T7777] do_fast_syscall_32+0x32/0x70 [ 114.450450][ T7777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.450475][ T7777] RIP: 0023:0xf7f92fec [ 114.450495][ T7777] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 114.450504][ T7777] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 114.450523][ T7777] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 114.450537][ T7777] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.450548][ T7777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.450559][ T7777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.450570][ T7777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.450596][ T7777] [ 114.583139][ T7780] syzkaller1: entered promiscuous mode [ 114.583153][ T7780] syzkaller1: entered allmulticast mode [ 114.635595][ T9] wiimote 0005:057E:0330.000B: detected device: Nintendo Wii Remote Plus (Gen 2) [ 114.640852][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input31 [ 114.644237][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input32 [ 114.646269][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input30 [ 114.925644][ T5804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.075581][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 115.076490][ T5804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.077376][ T5804] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 115.077410][ T5804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.077433][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.077452][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.077469][ T5804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.077495][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.285368][ T5804] usb 6-1: GET_CAPABILITIES returned 0 [ 115.285391][ T5804] usbtmc 6-1:16.0: can't read capabilities [ 115.362538][ T7787] 0x0000000000ec-0x0000000000f2 : "" [ 115.366427][ T7787] ftl_cs: FTL header corrupt! [ 115.374009][ T7788] udevd[7788]: open /dev/null failed: Not a directory [ 115.530830][ T854] usb 6-1: USB disconnect, device number 8 [ 116.974823][ T7803] FAULT_INJECTION: forcing a failure. [ 116.974823][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 116.974845][ T7803] CPU: 3 UID: 0 PID: 7803 Comm: syz.1.617 Not tainted syzkaller #0 PREEMPT(full) [ 116.974858][ T7803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.974865][ T7803] Call Trace: [ 116.974869][ T7803] [ 116.974874][ T7803] dump_stack_lvl+0x100/0x190 [ 116.974918][ T7803] should_fail_ex.cold+0x5/0xa [ 116.974935][ T7803] should_failslab+0xc2/0x120 [ 116.974953][ T7803] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 116.974970][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.974983][ T7803] ? append_filter_err+0x3d6/0x620 [ 116.975003][ T7803] kmemdup_nul+0x49/0xd0 [ 116.975017][ T7803] append_filter_err+0x3d6/0x620 [ 116.975040][ T7803] apply_subsystem_event_filter+0x711/0x17a0 [ 116.975063][ T7803] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 116.975084][ T7803] ? _copy_from_user+0x59/0xd0 [ 116.975098][ T7803] subsystem_filter_write+0x95/0x120 [ 116.975117][ T7803] vfs_write+0x2aa/0x1050 [ 116.975133][ T7803] ? __pfx_subsystem_filter_write+0x10/0x10 [ 116.975151][ T7803] ? lock_acquire+0x1d1/0x380 [ 116.975168][ T7803] ? __fget_files+0x34/0x3d0 [ 116.975183][ T7803] ? __pfx_vfs_write+0x10/0x10 [ 116.975196][ T7803] ? find_held_lock+0x2b/0x80 [ 116.975211][ T7803] ? __fget_files+0x215/0x3d0 [ 116.975230][ T7803] ? __fget_files+0x21f/0x3d0 [ 116.975250][ T7803] ksys_write+0x12a/0x250 [ 116.975264][ T7803] ? __pfx_ksys_write+0x10/0x10 [ 116.975283][ T7803] __do_fast_syscall_32+0x13a/0x8b0 [ 116.975297][ T7803] do_fast_syscall_32+0x32/0x70 [ 116.975309][ T7803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.975324][ T7803] RIP: 0023:0xf7f92fec [ 116.975337][ T7803] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 116.975342][ T7803] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 116.975353][ T7803] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 116.975361][ T7803] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.975367][ T7803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.975374][ T7803] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.975380][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.975395][ T7803] [ 117.781677][ T7814] 0x0000000000ec-0x0000000000f2 : "" [ 117.787946][ T7814] ftl_cs: FTL header corrupt! [ 117.804357][ T7815] udevd[7815]: open /dev/null failed: Not a directory [ 117.872819][ T7818] __nla_validate_parse: 14 callbacks suppressed [ 117.872837][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 117.971385][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 117.972438][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 117.973378][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 117.973934][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 118.045602][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 118.195586][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 118.196067][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.197062][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 118.197099][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.197117][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.197135][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.197153][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.197183][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.403212][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 118.403236][ T10] usbtmc 8-1:16.0: can't read capabilities [ 118.656424][ T5817] usb 8-1: USB disconnect, device number 13 [ 118.908079][ T7831] FAULT_INJECTION: forcing a failure. [ 118.908079][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 118.908099][ T7831] CPU: 0 UID: 0 PID: 7831 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT(full) [ 118.908112][ T7831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.908119][ T7831] Call Trace: [ 118.908123][ T7831] [ 118.908128][ T7831] dump_stack_lvl+0x100/0x190 [ 118.908147][ T7831] should_fail_ex.cold+0x5/0xa [ 118.908162][ T7831] should_failslab+0xc2/0x120 [ 118.908181][ T7831] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.908196][ T7831] ? apply_subsystem_event_filter+0x42e/0x17a0 [ 118.908217][ T7831] apply_subsystem_event_filter+0x42e/0x17a0 [ 118.908240][ T7831] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 118.908260][ T7831] ? _copy_from_user+0x59/0xd0 [ 118.908273][ T7831] subsystem_filter_write+0x95/0x120 [ 118.908292][ T7831] vfs_write+0x2aa/0x1050 [ 118.908307][ T7831] ? __pfx_subsystem_filter_write+0x10/0x10 [ 118.908324][ T7831] ? lock_acquire+0x1d1/0x380 [ 118.908341][ T7831] ? __fget_files+0x34/0x3d0 [ 118.908373][ T7831] ? __pfx_vfs_write+0x10/0x10 [ 118.908387][ T7831] ? find_held_lock+0x2b/0x80 [ 118.908402][ T7831] ? __fget_files+0x215/0x3d0 [ 118.908425][ T7831] ? __fget_files+0x21f/0x3d0 [ 118.908444][ T7831] ksys_write+0x12a/0x250 [ 118.908458][ T7831] ? __pfx_ksys_write+0x10/0x10 [ 118.908478][ T7831] __do_fast_syscall_32+0x13a/0x8b0 [ 118.908494][ T7831] do_fast_syscall_32+0x32/0x70 [ 118.908507][ T7831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.908521][ T7831] RIP: 0023:0xf7fb3fec [ 118.908534][ T7831] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 118.908540][ T7831] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 118.908552][ T7831] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 118.908559][ T7831] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.908565][ T7831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.908572][ T7831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.908579][ T7831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.908594][ T7831] [ 119.080937][ T7836] 0x0000000000ec-0x0000000000f2 : "" [ 119.085873][ T7836] ftl_cs: FTL header corrupt! [ 119.092737][ T7837] udevd[7837]: open /dev/null failed: Not a directory [ 119.161412][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 119.757270][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 119.758325][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 119.758793][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 119.759223][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 119.793315][ T30] wiimote 0005:057E:0330.000C: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 119.793441][ T30] wiimote 0005:057E:0330.000C: New device registered [ 119.797339][ T7853] wiimote 0005:057E:0330.000C: Device removed [ 119.801544][ T7856] udevd[7856]: open /dev/null failed: Not a directory [ 120.795680][ T30] wiimote 0005:057E:0330.000C: detected device: Nintendo Wii Remote Plus (Gen 2) [ 120.808928][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input34 [ 120.813509][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input35 [ 120.820805][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input33 [ 120.876196][ T72] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 121.035601][ T72] usb 8-1: Using ep0 maxpacket: 8 [ 121.036300][ T72] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.037246][ T72] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 121.037282][ T72] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.037301][ T72] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.037321][ T72] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.037341][ T72] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.037372][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.244091][ T72] usb 8-1: GET_CAPABILITIES returned 0 [ 121.244130][ T72] usbtmc 8-1:16.0: can't read capabilities [ 121.487354][ T61] usb 8-1: USB disconnect, device number 14 [ 121.526743][ T7881] 0x0000000000ec-0x0000000000f2 : "" [ 121.533272][ T7881] ftl_cs: FTL header corrupt! [ 121.538961][ T7882] udevd[7882]: open /dev/null failed: Not a directory [ 122.235252][ T7892] 0x0000000000ec-0x0000000000f2 : "" [ 122.243052][ T7892] ftl_cs: FTL header corrupt! [ 122.252164][ T7893] udevd[7893]: open /dev/null failed: Not a directory [ 123.237362][ T7901] __nla_validate_parse: 6 callbacks suppressed [ 123.237380][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 123.733013][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 123.927242][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.930023][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.930133][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.930925][ T6131] ------------[ cut here ]------------ [ 123.930937][ T6131] DEBUG_LOCKS_WARN_ON(l->owner) [ 123.930943][ T6131] WARNING: ./include/linux/local_lock_internal.h:47 at gro_cell_poll+0x5aa/0x6c0, CPU#2: napi/gre0-0/6131 [ 123.930975][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931027][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931075][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931124][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931170][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931219][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.931267][ T7911] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 123.967283][ T6131] Modules linked in: [ 123.968961][ T6131] CPU: 2 UID: 0 PID: 6131 Comm: napi/gre0-0 Not tainted syzkaller #0 PREEMPT(full) [ 123.972860][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.977185][ T6131] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 [ 123.979563][ T6131] Code: 8d 3d c3 3a 99 08 48 c7 c6 c0 08 3d 8d 67 48 0f b9 3a e9 59 fe ff ff e8 3d 54 50 f8 48 8d 3d b6 3a 99 08 48 c7 c6 80 08 3d 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 f7 9b [ 123.987969][ T6131] RSP: 0018:ffffc9000e827b70 EFLAGS: 00010293 [ 123.990628][ T6131] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 [ 123.994033][ T6131] RDX: ffff88806db4cb00 RSI: ffffffff8d3d0880 RDI: ffffffff925488f0 [ 123.997422][ T6131] RBP: ffffe8ffabe47e38 R08: 0000000000000005 R09: 0000000000000000 [ 124.000735][ T6131] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 124.003908][ T6131] R13: ffffffff9c9ad5c0 R14: 0000000000000000 R15: 0000000000000000 [ 124.007301][ T6131] FS: 0000000000000000(0000) GS:ffff88809594a000(0000) knlGS:0000000000000000 [ 124.011039][ T6131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.013786][ T6131] CR2: 000000003361cff8 CR3: 0000000044667000 CR4: 0000000000352ef0 [ 124.017196][ T6131] Call Trace: [ 124.018615][ T6131] [ 124.019897][ T6131] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.022098][ T6131] __napi_poll.constprop.0+0xaf/0x450 [ 124.024451][ T6131] napi_threaded_poll_loop+0x52f/0x870 [ 124.026970][ T6131] ? napi_threaded_poll_loop+0xfe/0x870 [ 124.029465][ T6131] ? __pfx_napi_threaded_poll_loop+0x10/0x10 [ 124.032012][ T6131] napi_threaded_poll+0x3a8/0x4b0 [ 124.033869][ T6131] ? napi_threaded_poll+0xac/0x4b0 [ 124.036074][ T6131] ? __pfx_napi_threaded_poll+0x10/0x10 [ 124.038275][ T6131] ? __kthread_parkme+0x18f/0x230 [ 124.040380][ T6131] ? kthread+0x13a/0x450 [ 124.042124][ T6131] ? __pfx_napi_threaded_poll+0x10/0x10 [ 124.044389][ T6131] kthread+0x373/0x450 [ 124.046094][ T6131] ? __pfx_kthread+0x10/0x10 [ 124.047991][ T6131] ret_from_fork+0x730/0xd60 [ 124.049868][ T6131] ? __pfx_ret_from_fork+0x10/0x10 [ 124.051924][ T6131] ? __switch_to+0x800/0x10f0 [ 124.053842][ T6131] ? __pfx_kthread+0x10/0x10 [ 124.055851][ T6131] ret_from_fork_asm+0x1a/0x30 [ 124.057767][ T6131] [ 124.059140][ T6131] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.062117][ T6131] CPU: 2 UID: 0 PID: 6131 Comm: napi/gre0-0 Not tainted syzkaller #0 PREEMPT(full) [ 124.065773][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.069800][ T6131] Call Trace: [ 124.071253][ T6131] [ 124.072497][ T6131] dump_stack_lvl+0x100/0x190 [ 124.074323][ T6131] vpanic+0x553/0x970 [ 124.075962][ T6131] ? __pfx_vpanic+0x10/0x10 [ 124.077788][ T6131] ? lock_release+0x24d/0x310 [ 124.079717][ T6131] panic+0xd1/0xe0 [ 124.081320][ T6131] ? __pfx_panic+0x10/0x10 [ 124.083114][ T6131] check_panic_on_warn.cold+0x19/0x34 [ 124.085229][ T6131] ? gro_cell_poll+0x5aa/0x6c0 [ 124.087187][ T6131] __warn.cold+0x191/0x318 [ 124.089020][ T6131] __report_bug+0x30f/0x440 [ 124.090927][ T6131] ? gro_cell_poll+0x5aa/0x6c0 [ 124.092907][ T6131] ? __pfx___report_bug+0x10/0x10 [ 124.094959][ T6131] ? __lock_acquire+0x5c0/0x1f40 [ 124.097090][ T6131] ? __lock_acquire+0x5c0/0x1f40 [ 124.099142][ T6131] report_bug_entry+0xe2/0x290 [ 124.101210][ T6131] ? gro_cell_poll+0x5b1/0x6c0 [ 124.103126][ T6131] handle_bug+0x1cd/0x2a0 [ 124.104882][ T6131] exc_invalid_op+0x17/0x50 [ 124.106747][ T6131] asm_exc_invalid_op+0x1a/0x20 [ 124.108572][ T6131] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 [ 124.110649][ T6131] Code: 8d 3d c3 3a 99 08 48 c7 c6 c0 08 3d 8d 67 48 0f b9 3a e9 59 fe ff ff e8 3d 54 50 f8 48 8d 3d b6 3a 99 08 48 c7 c6 80 08 3d 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 f7 9b [ 124.116262][ T6131] RSP: 0018:ffffc9000e827b70 EFLAGS: 00010293 [ 124.118083][ T6131] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 [ 124.120520][ T6131] RDX: ffff88806db4cb00 RSI: ffffffff8d3d0880 RDI: ffffffff925488f0 [ 124.122896][ T6131] RBP: ffffe8ffabe47e38 R08: 0000000000000005 R09: 0000000000000000 [ 124.125248][ T6131] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 124.127657][ T6131] R13: ffffffff9c9ad5c0 R14: 0000000000000000 R15: 0000000000000000 [ 124.130105][ T6131] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.131772][ T6131] __napi_poll.constprop.0+0xaf/0x450 [ 124.133442][ T6131] napi_threaded_poll_loop+0x52f/0x870 [ 124.135143][ T6131] ? napi_threaded_poll_loop+0xfe/0x870 [ 124.136834][ T6131] ? __pfx_napi_threaded_poll_loop+0x10/0x10 [ 124.138666][ T6131] napi_threaded_poll+0x3a8/0x4b0 [ 124.140196][ T6131] ? napi_threaded_poll+0xac/0x4b0 [ 124.141749][ T6131] ? __pfx_napi_threaded_poll+0x10/0x10 [ 124.143470][ T6131] ? __kthread_parkme+0x18f/0x230 [ 124.145000][ T6131] ? kthread+0x13a/0x450 [ 124.146282][ T6131] ? __pfx_napi_threaded_poll+0x10/0x10 [ 124.147994][ T6131] kthread+0x373/0x450 [ 124.149344][ T6131] ? __pfx_kthread+0x10/0x10 [ 124.151215][ T6131] ret_from_fork+0x730/0xd60 [ 124.153079][ T6131] ? __pfx_ret_from_fork+0x10/0x10 [ 124.155152][ T6131] ? __switch_to+0x800/0x10f0 [ 124.157073][ T6131] ? __pfx_kthread+0x10/0x10 [ 124.158967][ T6131] ret_from_fork_asm+0x1a/0x30 [ 124.160931][ T6131] [ 124.162940][ T6131] Kernel Offset: disabled [ 124.164771][ T6131] Rebooting in 86400 seconds..