last executing test programs: 1m49.721127577s ago: executing program 3 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x0, 0x2, 0x1}]}]}}, 0x0, 0x4a}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x840) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 1m48.937091087s ago: executing program 3 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0xdd8c, r7, 0x3e}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="80", 0x1}], 0x1}, 0x4) 1m48.762646064s ago: executing program 3 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r7, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m48.526818035s ago: executing program 3 (id=371): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) creat(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(0x0, 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) 1m48.359005472s ago: executing program 3 (id=377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x240c8884}, 0x20008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x3, 0x80000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000840)={0x0, r3}) r4 = eventfd2(0x8, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000880)={0x0, r4}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r1, r0}, 0xc) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001280)={0x0, 0x0, 0x8000, 0x3ff}) 1m48.141273474s ago: executing program 3 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m48.050971449s ago: executing program 32 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.52027814s ago: executing program 4 (id=945): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 5.506960135s ago: executing program 0 (id=952): clock_gettime(0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) 4.942161625s ago: executing program 2 (id=955): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000400)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000500)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000005c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') creat(&(0x7f0000000640)='./mnt/dir2\x00', 0x202) 4.541655313s ago: executing program 0 (id=956): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) io_setup(0x10000, &(0x7f0000000180)) 4.541477972s ago: executing program 2 (id=957): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 4.541361627s ago: executing program 4 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x11c0, 0x0) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.066066675s ago: executing program 4 (id=960): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) ftruncate(r1, 0x5) 3.561673263s ago: executing program 1 (id=961): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x6, 0x100, 0x6, 0x4, 0x9, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000240), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000580)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000700)={0x13, 0x10, 0x10f, {0x0, r5, 0x3}}, 0x18) 3.50481418s ago: executing program 1 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x3ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000001c0), 0x56) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000340)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 3.32780068s ago: executing program 0 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='270', 0x3) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/events/sched/filter\x00', 0x1, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3.327614376s ago: executing program 1 (id=964): clock_gettime(0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) 3.325850052s ago: executing program 2 (id=965): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./bus/file0\x00', 0x0, 0x31d0000, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 3.046967195s ago: executing program 4 (id=966): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 2.889750865s ago: executing program 2 (id=967): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8, 0x1, 0xec, 0x7fffffff, 0x6, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f0000000040)) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x200000c4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x24000000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000780)={0x10, {{0x2, 0x4e20, @remote}}}, 0x84) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000c00)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x180, 0x2}, 0x0, 0x0, 0x2fe, 0x1, 0x3, 0xfffffffa, 0x10000, 0x6, 0x7f, 0xfff2}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) r3 = openat$binderfs_feature(0xffffff9c, &(0x7f0000001080)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x80010, r3, 0x0) pipe2$watch_queue(&(0x7f0000001100), 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000001140)={0xdddd0000, 0x110000}) 2.34086967s ago: executing program 2 (id=968): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 2.086964582s ago: executing program 0 (id=969): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 2.060979758s ago: executing program 1 (id=970): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000200)={0x0, 0xd, 0xbb, {0xbb, 0xae8c418f1ab794d1, "d69b6807f410ec699038f51942555e2e956a4467bda7fc98d1bcfc50fc4182d0a0e58d700ea3075c595210e2031ab1ffa195b69a9b12ef7b72f90e0632e3cab4cc8f064fd7d508236a60df0f9b630944374d7c96517f5e8aeafd07b104254cea77348101b5fdbf2d419f15db711ccc3c785d337aa8321144c4d034a1410a5fe99889068db72028c5825909143e07ed13fb3e4e8b486dbb0efc50b09486ebcb9740178edcc022cf1492f14b07a3b9a8db28ad284ce62d9b57a6"}}, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.96068151s ago: executing program 4 (id=971): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10003, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) 1.371810342s ago: executing program 1 (id=972): socket$netlink(0x10, 0x3, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 426.91077ms ago: executing program 4 (id=973): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x58000, 0xf000, 0xb, 0x80, 0x84, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0xac, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0x8e, 0x7, 0x1, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x26000, 0xa, 0xfe, 0x5, 0x4, 0xfa, 0x6b, 0x5, 0xa, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x2000, 0x9, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x0, 0x6, 0x7}, {0xeeee0000, 0xeeef0000, 0x9, 0x7, 0xfe, 0x0, 0x0, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x54000, 0x101}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffd, 0x700000000000000, 0x7, 0x1]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sigaltstack(&(0x7f0000000540)={&(0x7f0000000580)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000015c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001600)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001640), 0x0) timer_settime(0x0, 0x0, &(0x7f0000001680)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) copy_file_range(r2, &(0x7f0000000000)=0xfffffffffffffffe, r2, 0x0, 0x6, 0x0) 301.885014ms ago: executing program 1 (id=974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) io_setup(0x10000, &(0x7f0000000180)) 215.845116ms ago: executing program 0 (id=975): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x41, 0x20000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000640)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11.322124ms ago: executing program 2 (id=976): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./drv/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0000:00:1f.3', 0xc) 0s ago: executing program 0 (id=977): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x104a) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = dup(r2) read(r3, &(0x7f0000000140)=""/113, 0x71) kernel console output (not intermixed with test programs): ng interface: batadv_slave_1 [ 150.121185][ T41] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 150.302091][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 150.319689][ T7846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.514561][ T7866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.559'. [ 151.043901][ T7873] netlink: 'syz.2.561': attribute type 12 has an invalid length. [ 151.109261][ T7878] netlink: 'syz.4.563': attribute type 2 has an invalid length. [ 151.763998][ T7906] jffs2: notice: (7906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 6 orphan) and 6 of xref (1 dead, 5 orphan) found. [ 152.212990][ T7917] netlink: 56 bytes leftover after parsing attributes in process `syz.4.571'. [ 152.266762][ T5796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 152.266789][ T5796] CPU: 2 UID: 0 PID: 5796 Comm: kworker/u34:3 Tainted: G Y syzkaller #0 PREEMPT(full) [ 152.266817][ T5796] Tainted: [Y]=FORCED_BIND [ 152.266824][ T5796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.266837][ T5796] Workqueue: hci3 hci_rx_work [ 152.266864][ T5796] Call Trace: [ 152.266871][ T5796] [ 152.266880][ T5796] dump_stack_lvl+0x100/0x190 [ 152.266911][ T5796] sysfs_warn_dup.cold+0x1c/0x28 [ 152.266940][ T5796] sysfs_create_dir_ns+0x24b/0x2b0 [ 152.266969][ T5796] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 152.266999][ T5796] ? find_held_lock+0x2b/0x80 [ 152.267030][ T5796] ? kobject_add_internal+0x25f/0x930 [ 152.267060][ T5796] ? kobject_add_internal+0x25f/0x930 [ 152.267090][ T5796] ? do_raw_spin_unlock+0x145/0x1e0 [ 152.267114][ T5796] kobject_add_internal+0x2c8/0x930 [ 152.267147][ T5796] kobject_add+0x16a/0x1e0 [ 152.267176][ T5796] ? __pfx_kobject_add+0x10/0x10 [ 152.267202][ T5796] ? class_to_subsys+0x10f/0x150 [ 152.267236][ T5796] ? kobject_put+0xb9/0x640 [ 152.267261][ T5796] ? _raw_spin_unlock+0x28/0x50 [ 152.267286][ T5796] device_add+0x294/0x1970 [ 152.267314][ T5796] ? __pfx_dev_set_name+0x10/0x10 [ 152.267335][ T5796] ? __pfx_device_add+0x10/0x10 [ 152.267363][ T5796] ? mgmt_send_event_skb+0x2fb/0x460 [ 152.267399][ T5796] hci_conn_add_sysfs+0x1a3/0x260 [ 152.267429][ T5796] le_conn_complete_evt+0x12f9/0x2200 [ 152.267460][ T5796] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 152.267483][ T5796] ? hci_event_packet+0x186/0xcd0 [ 152.267513][ T5796] hci_le_conn_complete_evt+0x23c/0x3a0 [ 152.267539][ T5796] ? skb_pull_data+0x15f/0x1e0 [ 152.267562][ T5796] hci_le_meta_evt+0x34a/0x5f0 [ 152.267589][ T5796] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 152.267619][ T5796] hci_event_packet+0x51c/0xcd0 [ 152.267644][ T5796] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 152.267671][ T5796] ? __pfx_hci_event_packet+0x10/0x10 [ 152.267701][ T5796] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.267729][ T5796] hci_rx_work+0x6ea/0x10c0 [ 152.267758][ T5796] process_one_work+0xac7/0x1b10 [ 152.267796][ T5796] ? __pfx_process_one_work+0x10/0x10 [ 152.267823][ T5796] ? lock_acquire+0x1d1/0x380 [ 152.267861][ T5796] ? __pfx_hci_rx_work+0x10/0x10 [ 152.267887][ T5796] worker_thread+0x5ef/0xe50 [ 152.267923][ T5796] ? kthread+0x13a/0x450 [ 152.267944][ T5796] ? __pfx_worker_thread+0x10/0x10 [ 152.267967][ T5796] kthread+0x373/0x450 [ 152.267988][ T5796] ? __pfx_kthread+0x10/0x10 [ 152.268019][ T5796] ret_from_fork+0x730/0xd60 [ 152.268042][ T5796] ? __pfx_ret_from_fork+0x10/0x10 [ 152.268064][ T5796] ? __switch_to+0x800/0x10e0 [ 152.268091][ T5796] ? __pfx_kthread+0x10/0x10 [ 152.268117][ T5796] ret_from_fork_asm+0x1a/0x30 [ 152.268151][ T5796] [ 152.268174][ T5796] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 152.268203][ T5796] Bluetooth: hci3: failed to register connection device [ 153.756883][ T7944] netlink: 'syz.2.581': attribute type 39 has an invalid length. [ 153.828318][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.835859][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.839810][ T43] audit: type=1326 audit(1792909228.215:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 155.685665][ T5796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 155.685683][ T5796] CPU: 2 UID: 0 PID: 5796 Comm: kworker/u34:3 Tainted: G Y syzkaller #0 PREEMPT(full) [ 155.685701][ T5796] Tainted: [Y]=FORCED_BIND [ 155.685705][ T5796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.685714][ T5796] Workqueue: hci0 hci_rx_work [ 155.685731][ T5796] Call Trace: [ 155.685736][ T5796] [ 155.685741][ T5796] dump_stack_lvl+0x100/0x190 [ 155.685760][ T5796] sysfs_warn_dup.cold+0x1c/0x28 [ 155.685779][ T5796] sysfs_create_dir_ns+0x24b/0x2b0 [ 155.685799][ T5796] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.685817][ T5796] ? find_held_lock+0x2b/0x80 [ 155.685831][ T5796] ? kobject_add_internal+0x25f/0x930 [ 155.685850][ T5796] ? kobject_add_internal+0x25f/0x930 [ 155.685870][ T5796] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.685884][ T5796] kobject_add_internal+0x2c8/0x930 [ 155.685905][ T5796] kobject_add+0x16a/0x1e0 [ 155.685923][ T5796] ? __pfx_kobject_add+0x10/0x10 [ 155.685952][ T5796] ? class_to_subsys+0x10f/0x150 [ 155.685974][ T5796] ? kobject_put+0xb9/0x640 [ 155.685990][ T5796] ? _raw_spin_unlock+0x28/0x50 [ 155.686005][ T5796] device_add+0x294/0x1970 [ 155.686023][ T5796] ? __pfx_dev_set_name+0x10/0x10 [ 155.686036][ T5796] ? __pfx_device_add+0x10/0x10 [ 155.686054][ T5796] ? mgmt_send_event_skb+0x2fb/0x460 [ 155.686076][ T5796] hci_conn_add_sysfs+0x1a3/0x260 [ 155.686095][ T5796] le_conn_complete_evt+0x12f9/0x2200 [ 155.686114][ T5796] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 155.686128][ T5796] ? hci_event_packet+0x186/0xcd0 [ 155.686146][ T5796] hci_le_conn_complete_evt+0x23c/0x3a0 [ 155.686162][ T5796] ? skb_pull_data+0x15f/0x1e0 [ 155.686176][ T5796] hci_le_meta_evt+0x34a/0x5f0 [ 155.686193][ T5796] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 155.686210][ T5796] hci_event_packet+0x51c/0xcd0 [ 155.686225][ T5796] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 155.686241][ T5796] ? __pfx_hci_event_packet+0x10/0x10 [ 155.686259][ T5796] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.686276][ T5796] hci_rx_work+0x6ea/0x10c0 [ 155.686293][ T5796] process_one_work+0xac7/0x1b10 [ 155.686315][ T5796] ? __pfx_process_one_work+0x10/0x10 [ 155.686331][ T5796] ? lock_acquire+0x1d1/0x380 [ 155.686353][ T5796] ? __pfx_hci_rx_work+0x10/0x10 [ 155.686368][ T5796] worker_thread+0x5ef/0xe50 [ 155.686390][ T5796] ? kthread+0x13a/0x450 [ 155.686403][ T5796] ? __pfx_worker_thread+0x10/0x10 [ 155.686417][ T5796] kthread+0x373/0x450 [ 155.686430][ T5796] ? __pfx_kthread+0x10/0x10 [ 155.686450][ T5796] ret_from_fork+0x730/0xd60 [ 155.686464][ T5796] ? __pfx_ret_from_fork+0x10/0x10 [ 155.686477][ T5796] ? __switch_to+0x800/0x10e0 [ 155.686494][ T5796] ? __pfx_kthread+0x10/0x10 [ 155.686510][ T5796] ret_from_fork_asm+0x1a/0x30 [ 155.686531][ T5796] [ 155.686584][ T5796] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 155.686606][ T5796] Bluetooth: hci0: failed to register connection device [ 155.687088][ T7991] bond2: (slave bond0): Releasing active interface [ 155.734555][ T7991] bond3: (slave dummy0): Releasing active interface [ 155.764515][ T7991] bond0: (slave bond_slave_0): Releasing backup interface [ 155.782148][ T7991] bond0: (slave bond_slave_1): Releasing backup interface [ 155.800015][ T7991] team0: Port device team_slave_0 removed [ 155.812756][ T7991] team0: Port device team_slave_1 removed [ 155.813819][ T7991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.813835][ T7991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.817565][ T7991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.817577][ T7991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.822746][ T7991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.844959][ T7992] team0: Mode changed to "loadbalance" [ 155.939006][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 155.979493][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 156.686450][ T8024] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 156.709946][ T8024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.726712][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.597'. [ 156.729885][ T8024] bond2: entered promiscuous mode [ 156.729905][ T8024] bond2: entered allmulticast mode [ 156.734157][ T8024] tipc: Resetting bearer [ 156.737129][ T8024] tipc: Resetting bearer [ 156.737894][ T8024] tipc: Resetting bearer [ 156.740708][ T8024] bond2: (slave dummy0): making interface the new active one [ 156.740726][ T8024] dummy0: entered promiscuous mode [ 156.740977][ T8024] dummy0: entered allmulticast mode [ 156.741608][ T8024] tipc: Resetting bearer [ 156.741849][ T8024] tipc: Resetting bearer [ 156.745095][ T8024] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 156.759777][ T8029] netlink: 'syz.2.606': attribute type 12 has an invalid length. [ 156.930805][ T8037] netlink: 'syz.1.601': attribute type 39 has an invalid length. [ 158.122144][ T8051] netlink: 56 bytes leftover after parsing attributes in process `syz.0.602'. [ 158.611624][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 159.334078][ T8084] netlink: 'syz.2.612': attribute type 2 has an invalid length. [ 160.514430][ T43] audit: type=1107 audit(1792909233.895:223): pid=8124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6²b' [ 160.984130][ T8134] netlink: 'syz.2.621': attribute type 12 has an invalid length. [ 161.862937][ T8161] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.961121][ T5796] Bluetooth: hci0: command 0x0401 tx timeout [ 162.241386][ T7070] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.392464][ T7070] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 162.393344][ T7070] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.393381][ T7070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.396972][ T7070] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 162.397071][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 162.397100][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 162.399472][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 162.399508][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 162.402940][ T7070] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 162.403919][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 162.403982][ T7070] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 162.406719][ T7070] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 162.606784][ T7068] usb 5-1: USB disconnect, device number 5 [ 162.613133][ T7068] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 162.615212][ T7068] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 162.615496][ T7068] keyspan 5-1:1.0: device disconnected [ 162.979446][ T8181] netlink: 'syz.2.636': attribute type 12 has an invalid length. [ 163.221516][ T7068] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 163.381168][ T7068] usb 6-1: Using ep0 maxpacket: 32 [ 163.382769][ T7068] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.382791][ T7068] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 163.383566][ T7068] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 163.383579][ T7068] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 163.383589][ T7068] usb 6-1: config 14 has no interface number 0 [ 163.383597][ T7068] usb 6-1: config 14 has no interface number 1 [ 163.383623][ T7068] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 163.383635][ T7068] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 163.383647][ T7068] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 163.383660][ T7068] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 163.383673][ T7068] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 163.383686][ T7068] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.383699][ T7068] usb 6-1: config 14 interface 57 has no altsetting 0 [ 163.383707][ T7068] usb 6-1: config 14 interface 228 has no altsetting 0 [ 163.385446][ T7068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.385463][ T7068] usb 6-1: Product: syz [ 163.385475][ T7068] usb 6-1: Manufacturer: syz [ 163.385486][ T7068] usb 6-1: SerialNumber: syz [ 163.701800][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 163.701826][ T1131] ata1.00: irq_stat 0x40000000 [ 163.701841][ T1131] ata1.00: failed command: WRITE DMA EXT [ 163.701851][ T1131] ata1.00: cmd 35/00:40:46:d9:0a/00:05:00:00:00/e0 tag 14 dma 688128 out [ 163.701851][ T1131] res 41/04:40:46:d9:0a/00:05:00:00:00/e0 Emask 0x1 (device error) [ 163.701907][ T1131] ata1.00: status: { DRDY ERR } [ 163.701919][ T1131] ata1.00: error: { ABRT } [ 163.702908][ T1131] ata1.00: configured for UDMA/100 [ 163.702979][ T1131] ata1: EH complete [ 163.816322][ T7068] legousbtower 6-1:14.57: interrupt endpoints not found [ 164.220303][ T7068] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 164.225342][ T7068] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 164.991196][ T7070] usb 6-1: USB disconnect, device number 4 [ 164.995725][ T7070] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 165.621182][ T5796] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 165.686764][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 166.002337][ T8220] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.263683][ T43] audit: type=1326 audit(1792909239.645:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.263836][ T43] audit: type=1326 audit(1792909239.645:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265086][ T43] audit: type=1326 audit(1792909239.645:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265119][ T43] audit: type=1326 audit(1792909239.645:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265145][ T43] audit: type=1326 audit(1792909239.645:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265171][ T43] audit: type=1326 audit(1792909239.645:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265197][ T43] audit: type=1326 audit(1792909239.645:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265540][ T43] audit: type=1326 audit(1792909239.645:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265908][ T43] audit: type=1326 audit(1792909239.645:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.265936][ T43] audit: type=1326 audit(1792909239.645:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 166.433403][ T8233] futex_wake_op: syz.2.651 tries to shift op by 144; fix this program [ 166.539770][ T8233] futex_wake_op: syz.2.651 tries to shift op by 144; fix this program [ 166.951233][ T5795] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.121279][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 167.125787][ T5795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.125829][ T5795] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 167.126755][ T5795] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 167.126776][ T5795] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 167.126793][ T5795] usb 5-1: config 14 has no interface number 0 [ 167.126808][ T5795] usb 5-1: config 14 has no interface number 1 [ 167.126858][ T5795] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 167.126879][ T5795] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 167.126902][ T5795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 167.126924][ T5795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 167.126947][ T5795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 167.126970][ T5795] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.126992][ T5795] usb 5-1: config 14 interface 57 has no altsetting 0 [ 167.127007][ T5795] usb 5-1: config 14 interface 228 has no altsetting 0 [ 167.129068][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.129085][ T5795] usb 5-1: Product: syz [ 167.129099][ T5795] usb 5-1: Manufacturer: syz [ 167.129111][ T5795] usb 5-1: SerialNumber: syz [ 167.565691][ T5795] legousbtower 5-1:14.57: interrupt endpoints not found [ 167.967873][ T5795] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 167.975559][ T5795] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 168.123492][ T5899] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 168.271237][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 168.271897][ T5899] usb 7-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 168.272902][ T5899] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.272920][ T5899] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.272955][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 168.272978][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 168.273012][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.279914][ T5899] hub 7-1:1.0: bad descriptor, ignoring hub [ 168.279934][ T5899] hub 7-1:1.0: probe with driver hub failed with error -5 [ 168.280322][ T5899] cdc_wdm 7-1:1.0: skipping garbage [ 168.280333][ T5899] cdc_wdm 7-1:1.0: skipping garbage [ 168.287768][ T5899] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 168.287784][ T5899] cdc_wdm 7-1:1.0: Unknown control protocol [ 168.404968][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 168.687541][ T41] usb 5-1: USB disconnect, device number 6 [ 168.687660][ C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 168.689827][ T8259] legousbtower: error, can't find device for minor 0 [ 168.695231][ T41] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 168.711164][ T5142] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.811351][ T5881] usb 7-1: USB disconnect, device number 4 [ 168.861863][ T5142] usb 6-1: Using ep0 maxpacket: 32 [ 168.863250][ T5142] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 168.864043][ T5142] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 168.864056][ T5142] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 168.864067][ T5142] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 168.864086][ T5142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.864098][ T5142] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.864109][ T5142] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.864128][ T5142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.865405][ T5142] usb 6-1: config 0 descriptor?? [ 169.004749][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 169.075458][ T5142] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.076697][ T5142] usb 6-1: USB disconnect, device number 5 [ 169.081945][ T5142] usblp0: removed [ 169.521562][ T5142] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 169.671109][ T5142] usb 6-1: Using ep0 maxpacket: 32 [ 169.671850][ T5142] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 169.672779][ T5142] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 169.672798][ T5142] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 169.672814][ T5142] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 169.672851][ T5142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.672870][ T5142] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.672892][ T5142] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.672926][ T5142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.675008][ T5142] usb 6-1: config 0 descriptor?? [ 169.896521][ T5142] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.928343][ T8303] bond2: (slave dummy0): Releasing active interface [ 169.928371][ T8303] dummy0: left promiscuous mode [ 169.928663][ T8303] dummy0: left allmulticast mode [ 169.929833][ T8303] tipc: Resetting bearer [ 169.931912][ T8303] tipc: Resetting bearer [ 169.941645][ T8303] bond0: (slave bond_slave_0): Releasing backup interface [ 169.944372][ T8303] bond_slave_0: left promiscuous mode [ 169.950544][ T8303] bond0: (slave bond_slave_1): Releasing backup interface [ 169.960280][ T8303] bond_slave_1: left promiscuous mode [ 169.969352][ T8303] team0: Port device team_slave_1 removed [ 169.972359][ T8303] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 170.022437][ T8307] syzkaller0: entered promiscuous mode [ 170.022451][ T8307] syzkaller0: entered allmulticast mode [ 170.104509][ T5142] usb 6-1: USB disconnect, device number 6 [ 170.109086][ T5142] usblp0: removed [ 170.678357][ T8320] syzkaller0: entered promiscuous mode [ 170.678371][ T8320] syzkaller0: entered allmulticast mode [ 170.793996][ T8322] netlink: 'syz.1.679': attribute type 12 has an invalid length. [ 171.261126][ T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 171.421636][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 171.430516][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 171.430578][ T41] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 171.431507][ T41] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 171.431520][ T41] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 171.431530][ T41] usb 9-1: config 14 has no interface number 0 [ 171.431538][ T41] usb 9-1: config 14 has no interface number 1 [ 171.431563][ T41] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 171.431575][ T41] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 171.431587][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 171.431599][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 171.431612][ T41] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 171.431625][ T41] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.431637][ T41] usb 9-1: config 14 interface 57 has no altsetting 0 [ 171.431646][ T41] usb 9-1: config 14 interface 228 has no altsetting 0 [ 171.436055][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.436069][ T41] usb 9-1: Product: syz [ 171.436076][ T41] usb 9-1: Manufacturer: syz [ 171.436083][ T41] usb 9-1: SerialNumber: syz [ 171.848177][ T41] legousbtower 9-1:14.57: interrupt endpoints not found [ 172.250512][ T41] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 172.251983][ T41] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 172.707153][ T8352] netlink: 'syz.0.690': attribute type 12 has an invalid length. [ 172.771170][ T5795] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 172.921385][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 172.922013][ T5795] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 172.922969][ T5795] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.922987][ T5795] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.923013][ T5795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 172.923032][ T5795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 172.923063][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.928755][ T5795] hub 6-1:1.0: bad descriptor, ignoring hub [ 172.928768][ T5795] hub 6-1:1.0: probe with driver hub failed with error -5 [ 172.929001][ T5795] cdc_wdm 6-1:1.0: skipping garbage [ 172.929008][ T5795] cdc_wdm 6-1:1.0: skipping garbage [ 172.930884][ T5795] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 172.930894][ T5795] cdc_wdm 6-1:1.0: Unknown control protocol [ 173.017444][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 173.017461][ T43] audit: type=1326 audit(1792909246.395:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.018580][ T43] audit: type=1326 audit(1792909246.395:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.018741][ C0] usb 9-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 173.018790][ T43] audit: type=1326 audit(1792909246.395:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.018883][ T43] audit: type=1326 audit(1792909246.395:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 173.019031][ T5796] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 173.019083][ T43] audit: type=1326 audit(1792909246.395:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.019188][ T43] audit: type=1326 audit(1792909246.395:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.021931][ T43] audit: type=1326 audit(1792909246.395:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.025618][ T5795] usb 9-1: USB disconnect, device number 2 [ 173.032716][ T5795] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 173.114709][ T8361] kvm [8360]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 173.147599][ T8361] kvm [8360]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x187) = 0x8000 [ 173.197187][ T8361] kvm [8360]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 173.226422][ T8361] kvm [8360]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 173.300840][ T8361] kvm [8360]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 173.432829][ T43] audit: type=1326 audit(1792909246.815:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.432956][ T43] audit: type=1326 audit(1792909246.815:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.0.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 173.458207][ T41] usb 6-1: USB disconnect, device number 7 [ 174.298474][ T8373] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.762512][ T8391] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 174.798497][ T8391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.883695][ T8391] bond3: (slave geneve2): making interface the new active one [ 174.890711][ T8391] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 174.942920][ T7980] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.943190][ T7980] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.971150][ T7980] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.971178][ T7980] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.022283][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 175.286482][ T8404] syzkaller0: entered promiscuous mode [ 175.286503][ T8404] syzkaller0: entered allmulticast mode [ 175.448690][ T43] audit: type=1326 audit(1792909248.825:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.705" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 175.453263][ T5796] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 175.511216][ T5142] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 175.552532][ T8408] kvm [8407]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 175.589500][ T8408] kvm [8407]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x187) = 0x8000 [ 175.652447][ T8408] kvm [8407]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 175.671391][ T5142] usb 7-1: Using ep0 maxpacket: 16 [ 175.672156][ T5142] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 175.673713][ T5142] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.673762][ T5142] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.676155][ T5142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.676175][ T5142] usb 7-1: SerialNumber: syz [ 175.679818][ T8408] kvm [8407]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 175.773676][ T8408] kvm [8407]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 176.055251][ T5142] cdc_acm 7-1:1.0: skipping garbage [ 176.063778][ T5142] usb 7-1: USB disconnect, device number 5 [ 176.619511][ T8420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.619528][ T8420] IPv6: NLM_F_CREATE should be set when creating new route [ 176.882912][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.885623][ T8434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.885644][ T8434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.935397][ T8419] syzkaller0: entered promiscuous mode [ 176.935421][ T8419] syzkaller0: entered allmulticast mode [ 176.943289][ T7980] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.943326][ T7980] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.943354][ T7980] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.943382][ T7980] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.979167][ T8429] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.086653][ T8445] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 177.101956][ T8445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.161874][ T8445] macvtap1: entered allmulticast mode [ 177.182375][ T8445] bond4: (slave geneve2): making interface the new active one [ 177.184953][ T8445] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 177.201305][ T7980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.201344][ T7980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.201373][ T7980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.201403][ T7980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.412066][ T8482] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.971344][ T1359] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 180.121123][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 180.121968][ T1359] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 180.122993][ T1359] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.123025][ T1359] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.124070][ T1359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.124090][ T1359] usb 6-1: SerialNumber: syz [ 180.488917][ T1359] cdc_acm 6-1:1.0: skipping garbage [ 180.492977][ T1359] usb 6-1: USB disconnect, device number 8 [ 180.759906][ T8496] tipc: Enabled bearer , priority 0 [ 180.760493][ T8496] syzkaller0: entered promiscuous mode [ 180.760505][ T8496] syzkaller0: entered allmulticast mode [ 180.768442][ T8496] tipc: Resetting bearer [ 180.770744][ T8495] tipc: Resetting bearer [ 180.782161][ T8495] tipc: Disabling bearer [ 180.915004][ T8500] syzkaller0: entered promiscuous mode [ 180.915021][ T8500] syzkaller0: entered allmulticast mode [ 181.301108][ T5795] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 181.471606][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 181.473861][ T5795] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.474681][ T5795] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.474699][ T5795] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.474716][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.474730][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.474742][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.474758][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.474777][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.474796][ T5795] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.475619][ T5795] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.475635][ T5795] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.475653][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.475666][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.475679][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.475691][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.475704][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.475717][ T5795] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.476557][ T5795] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.476572][ T5795] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.476592][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.476604][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.476617][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.476629][ T5795] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.476641][ T5795] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.476655][ T5795] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.478967][ T5795] usb 6-1: string descriptor 0 read error: -22 [ 181.479025][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.490921][ T5795] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 181.748101][ T5795] usb 6-1: USB disconnect, device number 9 [ 182.676693][ T8529] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.888709][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 184.855632][ T8573] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 184.876752][ T8573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.916073][ T8573] macvtap1: entered allmulticast mode [ 184.959478][ T8573] bond2: (slave geneve2): making interface the new active one [ 184.971433][ T8573] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 185.409719][ T8582] tipc: Enabled bearer , priority 0 [ 185.416159][ T8582] syzkaller0: entered promiscuous mode [ 185.416181][ T8582] syzkaller0: entered allmulticast mode [ 185.467152][ T8582] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 185.477422][ T8582] tipc: Resetting bearer [ 185.483039][ T8565] ceph: No mds server is up or the cluster is laggy [ 185.521679][ T8581] tipc: Resetting bearer [ 185.561853][ T8581] tipc: Disabling bearer [ 186.387543][ T7070] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 187.253943][ T7070] usb 6-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 187.255115][ T7070] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 187.255130][ T7070] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 187.259131][ T7070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.259144][ T7070] usb 6-1: Product: syz [ 187.259151][ T7070] usb 6-1: Manufacturer: syz [ 187.259158][ T7070] usb 6-1: SerialNumber: syz [ 187.294321][ T8596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.294394][ T8596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.295433][ T7070] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 187.295445][ T7070] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 187.295463][ T7070] usbserial_generic 6-1:1.0: generic converter detected [ 187.299216][ T7070] usb 6-1: generic converter now attached to ttyUSB0 [ 187.423460][ T8607] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 187.431768][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 187.431790][ T1131] ata1.00: irq_stat 0x40000000 [ 187.431806][ T1131] ata1.00: failed command: READ DMA EXT [ 187.431816][ T1131] ata1.00: cmd 25/00:90:de:4a:01/00:10:00:00:00/e0 tag 27 dma 2170880 in [ 187.431816][ T1131] res 41/04:90:de:4a:01/00:10:00:00:00/e0 Emask 0x1 (device error) [ 187.431863][ T1131] ata1.00: status: { DRDY ERR } [ 187.431873][ T1131] ata1.00: error: { ABRT } [ 187.432677][ T1131] ata1.00: configured for UDMA/100 [ 187.432827][ T1131] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 187.432865][ T1131] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 187.432896][ T1131] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 187.432930][ T1131] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 01 4a de 00 10 90 00 [ 187.432951][ T1131] I/O error, dev sda, sector 84702 op 0x0:(READ) flags 0x80700 phys_seg 105 prio class 2 [ 187.433148][ T1131] ata1: EH complete [ 187.443969][ T8607] bond4: entered promiscuous mode [ 187.444317][ T8607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.468811][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 187.469066][ T8607] bond4: entered allmulticast mode [ 187.536133][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.536208][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537027][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537088][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537259][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537297][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537443][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537498][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537630][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537670][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537855][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.537928][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538073][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538118][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538283][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538327][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538478][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538535][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538673][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.538702][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 187.576065][ T5142] usb 6-1: USB disconnect, device number 10 [ 187.580528][ T5142] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 187.580892][ T5142] usbserial_generic 6-1:1.0: device disconnected [ 187.595963][ T8607] bond4: (slave bridge0): making interface the new active one [ 187.595987][ T8607] bridge0: entered promiscuous mode [ 187.596165][ T8607] bridge0: entered allmulticast mode [ 187.629617][ T8607] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 187.848603][ T8613] tipc: Enabled bearer , priority 0 [ 187.849641][ T8613] syzkaller0: entered promiscuous mode [ 187.849660][ T8613] syzkaller0: entered allmulticast mode [ 187.947171][ T8615] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 187.949685][ T8613] tipc: Resetting bearer [ 187.958331][ T8612] tipc: Resetting bearer [ 187.973689][ T8612] tipc: Disabling bearer [ 188.952680][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 188.952697][ T43] audit: type=1326 audit(1792909262.335:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.952738][ T43] audit: type=1326 audit(1792909262.335:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.962327][ T43] audit: type=1326 audit(1792909262.345:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.963109][ T43] audit: type=1326 audit(1792909262.345:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.963586][ T43] audit: type=1326 audit(1792909262.345:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.983821][ T43] audit: type=1326 audit(1792909262.365:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.984276][ T43] audit: type=1326 audit(1792909262.365:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.984441][ T43] audit: type=1326 audit(1792909262.365:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.986013][ T43] audit: type=1326 audit(1792909262.365:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 188.986324][ T43] audit: type=1326 audit(1792909262.365:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.1.776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 191.328454][ T8651] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 191.349164][ T8651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.391509][ T8651] macvtap1: entered allmulticast mode [ 191.410709][ T8651] bond5: (slave geneve3): making interface the new active one [ 191.414728][ T8651] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 191.567221][ T8659] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 191.630581][ T8667] syzkaller0: entered promiscuous mode [ 191.630596][ T8667] syzkaller0: entered allmulticast mode [ 191.636503][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 191.636526][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 191.712974][ T8661] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.772058][ T1028] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.931794][ T1028] usb 5-1: Using ep0 maxpacket: 32 [ 191.942961][ T1028] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.942994][ T1028] usb 5-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 191.943911][ T1028] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 191.943928][ T1028] usb 5-1: config 8 has no interface number 0 [ 191.943957][ T1028] usb 5-1: config 8 interface 188 has no altsetting 0 [ 191.946527][ T1028] usb 5-1: string descriptor 0 read error: -22 [ 191.946615][ T1028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.959012][ T1028] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 191.959040][ T1028] dw2102: su3000_power_ctrl: 1, initialized 0 [ 191.969738][ T1028] dvb-usb: bulk message failed: -22 (2/0) [ 191.985071][ T1028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.988036][ T1028] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 191.988079][ T1028] usb 5-1: media controller created [ 191.988471][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988483][ T1028] dw2102: i2c transfer failed. [ 191.988506][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988515][ T1028] dw2102: i2c transfer failed. [ 191.988523][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988542][ T1028] dw2102: i2c transfer failed. [ 191.988550][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988559][ T1028] dw2102: i2c transfer failed. [ 191.988568][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988576][ T1028] dw2102: i2c transfer failed. [ 191.988584][ T1028] dvb-usb: bulk message failed: -22 (6/0) [ 191.988600][ T1028] dw2102: i2c transfer failed. [ 191.988605][ T1028] dvb-usb: MAC address: 02:02:02:02:02:02 [ 192.015674][ T1028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.031470][ T1028] dvb-usb: bulk message failed: -22 (3/0) [ 192.031484][ T1028] dw2102: command 0x0e transfer failed. [ 192.032289][ T1028] dvb-usb: bulk message failed: -22 (3/0) [ 192.032308][ T1028] dw2102: command 0x0e transfer failed. [ 192.271294][ T8654] tps6598x 2-0003: failed to read vendor ID: -11, vid: 0x0 [ 192.288870][ T8654] i2c i2c-2: new_device: Instantiated device tps6598x at 0x03 [ 192.341681][ T1028] dvb-usb: bulk message failed: -22 (3/0) [ 192.341703][ T1028] dw2102: command 0x0e transfer failed. [ 192.341711][ T1028] dvb-usb: bulk message failed: -22 (3/0) [ 192.341722][ T1028] dw2102: command 0x0e transfer failed. [ 192.341730][ T1028] dvb-usb: bulk message failed: -22 (1/0) [ 192.341755][ T1028] dw2102: command 0x51 transfer failed. [ 192.382636][ T1028] DVB: Unable to find symbol ds3000_attach() [ 192.382650][ T1028] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 192.501115][ T1028] rc_core: IR keymap rc-su3000 not found [ 192.501134][ T1028] Registered IR keymap rc-empty [ 192.557246][ T1028] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 192.594902][ T1028] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8 [ 192.650091][ T1028] dvb-usb: schedule remote query interval to 150 msecs. [ 192.650107][ T1028] dw2102: su3000_power_ctrl: 0, initialized 1 [ 192.650115][ T1028] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 192.675512][ T1028] usb 5-1: USB disconnect, device number 7 [ 192.791511][ T8657] udevd[8657]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 192.792168][ T8657] udevd[8657]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 193.070401][ T1028] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 193.813299][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.813347][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.343511][ T8711] syzkaller0: entered promiscuous mode [ 194.343525][ T8711] syzkaller0: entered allmulticast mode [ 194.757646][ T8422] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 194.805924][ T8422] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input9 [ 194.815881][ T8716] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.850459][ T8422] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 195.015958][ T8728] fido_id[8728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.722108][ T8719] ceph: No mds server is up or the cluster is laggy [ 195.893088][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 195.893129][ T5148] Bluetooth: hci1: command 0x0c24 tx timeout [ 195.893175][ T5802] Bluetooth: hci0: command 0x0401 tx timeout [ 196.490167][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 196.490180][ T43] audit: type=1326 audit(1792909269.865:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.490295][ T43] audit: type=1326 audit(1792909269.865:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.509652][ T43] audit: type=1326 audit(1792909269.885:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.509680][ T43] audit: type=1326 audit(1792909269.885:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.509699][ T43] audit: type=1326 audit(1792909269.885:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.533524][ T43] audit: type=1326 audit(1792909269.905:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.534053][ T43] audit: type=1326 audit(1792909269.915:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.534250][ T43] audit: type=1326 audit(1792909269.915:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.534796][ T43] audit: type=1326 audit(1792909269.915:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.535026][ T43] audit: type=1326 audit(1792909269.915:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.4.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 196.820216][ T8749] 9p: p9: multiple sources not supported [ 200.029643][ T8790] syzkaller0: entered promiscuous mode [ 200.029664][ T8790] syzkaller0: entered allmulticast mode [ 200.401164][ T5142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.561222][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 200.566933][ T5142] usb 5-1: New USB device found: idVendor=05ac, idProduct=023f, bcdDevice=0.40 [ 200.570243][ T5142] usb 5-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 200.570282][ T5142] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.570309][ T5142] usb 5-1: config 1 interface 0 has no altsetting 0 [ 200.572820][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.572844][ T5142] usb 5-1: Product: syz [ 200.572860][ T5142] usb 5-1: Manufacturer: syz [ 200.572875][ T5142] usb 5-1: SerialNumber: syz [ 200.806765][ T5142] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input10 [ 200.815722][ T5182] bcm5974 5-1:1.0: could not read from device [ 200.818224][ T5182] bcm5974 5-1:1.0: could not read from device [ 200.818544][ T5142] usb 5-1: USB disconnect, device number 8 [ 200.819271][ T5182] bcm5974 5-1:1.0: could not read from device [ 200.892015][ T1131] ata1.00: limiting speed to UDMA/66:PIO4 [ 200.892036][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 [ 200.892052][ T1131] ata1.00: irq_stat 0x40000000 [ 200.892067][ T1131] ata1.00: failed command: READ DMA EXT [ 200.892077][ T1131] ata1.00: cmd 25/00:40:46:3b:01/00:05:00:00:00/e0 tag 14 dma 688128 in [ 200.892077][ T1131] res 41/04:40:46:3b:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 200.892127][ T1131] ata1.00: status: { DRDY ERR } [ 200.892139][ T1131] ata1.00: error: { ABRT } [ 200.892191][ T1131] ata1: hard resetting link [ 200.916170][ T5792] Bluetooth: hci3: link tx timeout [ 200.916186][ T5792] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.921743][ T5792] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.922050][ T5803] Bluetooth: hci3: link tx timeout [ 200.922061][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.922074][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925145][ T5803] Bluetooth: hci3: link tx timeout [ 200.925157][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925170][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925320][ T5803] Bluetooth: hci3: link tx timeout [ 200.925330][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925343][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925417][ T5803] Bluetooth: hci3: link tx timeout [ 200.925427][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925439][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925511][ T5803] Bluetooth: hci3: link tx timeout [ 200.925520][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925533][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925603][ T5803] Bluetooth: hci3: link tx timeout [ 200.925613][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925625][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925695][ T5803] Bluetooth: hci3: link tx timeout [ 200.925705][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925724][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925795][ T5803] Bluetooth: hci3: link tx timeout [ 200.925804][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925817][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925888][ T5803] Bluetooth: hci3: link tx timeout [ 200.925897][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.925909][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.925980][ T5803] Bluetooth: hci3: link tx timeout [ 200.925990][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926002][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926078][ T5803] Bluetooth: hci3: link tx timeout [ 200.926088][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926100][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926172][ T5803] Bluetooth: hci3: link tx timeout [ 200.926181][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926193][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926321][ T5803] Bluetooth: hci3: link tx timeout [ 200.926331][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926343][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926464][ T5803] Bluetooth: hci3: link tx timeout [ 200.926474][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926486][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926557][ T5803] Bluetooth: hci3: link tx timeout [ 200.926566][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926578][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926649][ T5803] Bluetooth: hci3: link tx timeout [ 200.926659][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926671][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926770][ T5803] Bluetooth: hci3: link tx timeout [ 200.926780][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926792][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926865][ T5803] Bluetooth: hci3: link tx timeout [ 200.926874][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926886][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.926959][ T5803] Bluetooth: hci3: link tx timeout [ 200.926968][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.926981][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.927053][ T5803] Bluetooth: hci3: link tx timeout [ 200.927062][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.927074][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.927145][ T5803] Bluetooth: hci3: link tx timeout [ 200.927154][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.927166][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.927237][ T5803] Bluetooth: hci3: link tx timeout [ 200.927247][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.927259][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.927330][ T5803] Bluetooth: hci3: link tx timeout [ 200.927340][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.927352][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.927423][ T5803] Bluetooth: hci3: link tx timeout [ 200.927432][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.928787][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.928889][ T5803] Bluetooth: hci3: link tx timeout [ 200.928899][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.928911][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.928985][ T5803] Bluetooth: hci3: link tx timeout [ 200.930368][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.930382][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.930477][ T5803] Bluetooth: hci3: link tx timeout [ 200.930487][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.930499][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.930659][ T5803] Bluetooth: hci3: link tx timeout [ 200.930669][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.930681][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.930776][ T5803] Bluetooth: hci3: link tx timeout [ 200.930786][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.930799][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.930933][ T5803] Bluetooth: hci3: link tx timeout [ 200.930943][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.930955][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.932074][ T5803] Bluetooth: hci3: link tx timeout [ 200.932085][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.932098][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.932174][ T5803] Bluetooth: hci3: link tx timeout [ 200.932184][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.932196][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.932576][ T5803] Bluetooth: hci3: link tx timeout [ 200.932586][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.932598][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.932670][ T5803] Bluetooth: hci3: link tx timeout [ 200.932679][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.932692][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.932825][ T5803] Bluetooth: hci3: link tx timeout [ 200.932834][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.932846][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.936765][ T5803] Bluetooth: hci3: link tx timeout [ 200.936776][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.936789][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.939511][ T5803] Bluetooth: hci3: link tx timeout [ 200.939522][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.939534][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.939662][ T5803] Bluetooth: hci3: link tx timeout [ 200.939671][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.939683][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.939757][ T5803] Bluetooth: hci3: link tx timeout [ 200.939765][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.939776][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.939840][ T5803] Bluetooth: hci3: link tx timeout [ 200.939849][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.939860][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.939925][ T5803] Bluetooth: hci3: link tx timeout [ 200.939933][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.939944][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940008][ T5803] Bluetooth: hci3: link tx timeout [ 200.940016][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940027][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940091][ T5803] Bluetooth: hci3: link tx timeout [ 200.940100][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940110][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940175][ T5803] Bluetooth: hci3: link tx timeout [ 200.940183][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940194][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940257][ T5803] Bluetooth: hci3: link tx timeout [ 200.940265][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940276][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940339][ T5803] Bluetooth: hci3: link tx timeout [ 200.940347][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940357][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940420][ T5803] Bluetooth: hci3: link tx timeout [ 200.940428][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940439][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940502][ T5803] Bluetooth: hci3: link tx timeout [ 200.940510][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940520][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940582][ T5803] Bluetooth: hci3: link tx timeout [ 200.940590][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940601][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940754][ T5803] Bluetooth: hci3: link tx timeout [ 200.940763][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940774][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940840][ T5803] Bluetooth: hci3: link tx timeout [ 200.940848][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940858][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.940921][ T5803] Bluetooth: hci3: link tx timeout [ 200.940929][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.940940][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941083][ T5803] Bluetooth: hci3: link tx timeout [ 200.941092][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941103][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941173][ T5803] Bluetooth: hci3: link tx timeout [ 200.941182][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941192][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941257][ T5803] Bluetooth: hci3: link tx timeout [ 200.941268][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941279][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941352][ T5803] Bluetooth: hci3: link tx timeout [ 200.941360][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941371][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941436][ T5803] Bluetooth: hci3: link tx timeout [ 200.941444][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941455][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941519][ T5803] Bluetooth: hci3: link tx timeout [ 200.941528][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941538][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941603][ T5803] Bluetooth: hci3: link tx timeout [ 200.941611][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941622][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941686][ T5803] Bluetooth: hci3: link tx timeout [ 200.941694][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941705][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941874][ T5803] Bluetooth: hci3: link tx timeout [ 200.941883][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941893][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.941958][ T5803] Bluetooth: hci3: link tx timeout [ 200.941966][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.941977][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942040][ T5803] Bluetooth: hci3: link tx timeout [ 200.942048][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942059][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942123][ T5803] Bluetooth: hci3: link tx timeout [ 200.942131][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942142][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942208][ T5803] Bluetooth: hci3: link tx timeout [ 200.942217][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942227][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942323][ T5803] Bluetooth: hci3: link tx timeout [ 200.942332][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942345][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942414][ T5803] Bluetooth: hci3: link tx timeout [ 200.942423][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942435][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.942504][ T5803] Bluetooth: hci3: link tx timeout [ 200.942513][ T5803] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.942525][ T5803] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 200.989427][ T8806] ntfs3: Unknown parameter 'ecryptfs_sig' [ 201.091231][ T8795] ceph: No mds server is up or the cluster is laggy [ 201.214654][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 201.231818][ T1131] ata1.00: configured for UDMA/66 [ 201.232017][ T1131] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 201.232052][ T1131] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 201.232083][ T1131] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 201.232118][ T1131] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3b 46 00 05 40 00 [ 201.232148][ T1131] I/O error, dev sda, sector 80710 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 201.232271][ T1131] ata1: EH complete [ 201.498978][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 201.498994][ T43] audit: type=1326 audit(1792909274.875:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.499034][ T43] audit: type=1326 audit(1792909274.875:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.499069][ T43] audit: type=1326 audit(1792909274.875:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.499103][ T43] audit: type=1326 audit(1792909274.875:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.499138][ T43] audit: type=1326 audit(1792909274.875:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.561255][ T43] audit: type=1326 audit(1792909274.935:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 201.562901][ T43] audit: type=1326 audit(1792909274.945:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 201.648903][ T8817] syzkaller0: entered promiscuous mode [ 201.648918][ T8817] syzkaller0: entered allmulticast mode [ 201.658594][ T8817] 0: reclassify loop, rule prio 0, protocol 800 [ 201.663584][ T43] audit: type=1326 audit(1792909275.045:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 201.765345][ T43] audit: type=1326 audit(1792909275.145:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 201.864380][ T43] audit: type=1326 audit(1792909275.245:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 203.001185][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 203.031168][ T8845] comedi comedi1: Minor 3 could not be opened [ 203.042902][ T8845] syz.0.823: attempt to access beyond end of device [ 203.042902][ T8845] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 203.042932][ T8845] gfs2: error -5 reading superblock [ 204.475307][ T8862] input: syz0 as /devices/virtual/input/input11 [ 204.581315][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 204.581333][ T1131] ata1.00: irq_stat 0x40000000 [ 204.581342][ T1131] ata1.00: failed command: READ DMA EXT [ 204.581349][ T1131] ata1.00: cmd 25/00:88:76:1b:01/00:16:00:00:00/e0 tag 8 dma 2953216 in [ 204.581349][ T1131] res 41/04:88:76:1b:01/00:16:00:00:00/e0 Emask 0x1 (device error) [ 204.581378][ T1131] ata1.00: status: { DRDY ERR } [ 204.581386][ T1131] ata1.00: error: { ABRT } [ 204.582503][ T1131] ata1.00: configured for UDMA/66 [ 204.582599][ T1131] sd 0:0:0:0: [sda] tag#8 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 204.582622][ T1131] sd 0:0:0:0: [sda] tag#8 Sense Key : Aborted Command [current] [ 204.582676][ T1131] sd 0:0:0:0: [sda] tag#8 Add. Sense: No additional sense information [ 204.582695][ T1131] sd 0:0:0:0: [sda] tag#8 CDB: Read(10) 28 00 00 01 1b 76 00 16 88 00 [ 204.582708][ T1131] I/O error, dev sda, sector 72566 op 0x0:(READ) flags 0x80700 phys_seg 86 prio class 2 [ 204.582946][ T1131] ata1: EH complete [ 204.841502][ T5792] Bluetooth: hci0: command 0x0401 tx timeout [ 204.841587][ T5803] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 205.007014][ T8873] lo: entered allmulticast mode [ 205.009598][ T8873] bond0: entered allmulticast mode [ 205.009885][ T8873] dummy0: entered allmulticast mode [ 205.010046][ T8873] eql: entered allmulticast mode [ 205.010130][ T8873] ifb0: entered allmulticast mode [ 205.014529][ T8873] ifb1: entered allmulticast mode [ 205.034142][ T8873] e1000 0000:00:07.0 eth0: entered allmulticast mode [ 205.039384][ T8871] FAULT_INJECTION: forcing a failure. [ 205.039384][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 205.039406][ T8871] CPU: 2 UID: 0 PID: 8871 Comm: syz.1.830 Tainted: G Y syzkaller #0 PREEMPT(full) [ 205.039422][ T8871] Tainted: [Y]=FORCED_BIND [ 205.039427][ T8871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.039433][ T8871] Call Trace: [ 205.039438][ T8871] [ 205.039442][ T8871] dump_stack_lvl+0x100/0x190 [ 205.039462][ T8871] should_fail_ex.cold+0x5/0xa [ 205.039478][ T8871] should_failslab+0xc2/0x120 [ 205.039496][ T8871] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 205.039511][ T8871] ? alloc_vmap_area+0x1829/0x2bc0 [ 205.039529][ T8871] alloc_vmap_area+0x1829/0x2bc0 [ 205.039548][ T8871] ? kasan_save_track+0x14/0x30 [ 205.039563][ T8871] ? __kasan_kmalloc+0xaa/0xb0 [ 205.039577][ T8871] ? __pfx_alloc_vmap_area+0x10/0x10 [ 205.039591][ T8871] ? register_lock_class+0x3f/0x7b0 [ 205.039602][ T8871] ? __get_vm_area_node+0x124/0x350 [ 205.039619][ T8871] __get_vm_area_node+0x1ed/0x350 [ 205.039637][ T8871] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 205.039654][ T8871] ? n_tty_open+0x1a/0x170 [ 205.039669][ T8871] ? look_up_lock_class+0x55/0x120 [ 205.039685][ T8871] ? tty_ldisc_lock+0x65/0xb0 [ 205.039697][ T8871] ? n_tty_open+0x1a/0x170 [ 205.039719][ T8871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.039740][ T8871] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 205.039758][ T8871] ? n_tty_open+0x1a/0x170 [ 205.039773][ T8871] __vmalloc_node_noprof+0xad/0xf0 [ 205.039789][ T8871] ? n_tty_open+0x1a/0x170 [ 205.039804][ T8871] ? __pfx_n_tty_open+0x10/0x10 [ 205.039819][ T8871] n_tty_open+0x1a/0x170 [ 205.039834][ T8871] tty_ldisc_open+0xa2/0x120 [ 205.039858][ T8871] tty_ldisc_setup+0x40/0xf0 [ 205.039872][ T8871] tty_init_dev.part.0+0x1b5/0x470 [ 205.039887][ T8871] tty_init_dev+0x60/0x80 [ 205.039901][ T8871] ? __pfx_ptmx_open+0x10/0x10 [ 205.039917][ T8871] ptmx_open+0x128/0x360 [ 205.039934][ T8871] ? __pfx_ptmx_open+0x10/0x10 [ 205.039950][ T8871] chrdev_open+0x234/0x6a0 [ 205.039966][ T8871] ? __pfx_apparmor_file_open+0x10/0x10 [ 205.039982][ T8871] ? __pfx_chrdev_open+0x10/0x10 [ 205.039998][ T8871] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 205.040013][ T8871] do_dentry_open+0x674/0x1470 [ 205.040028][ T8871] ? __pfx_chrdev_open+0x10/0x10 [ 205.040046][ T8871] vfs_open_consume+0xcc/0x460 [ 205.040059][ T8871] path_openat+0x1547/0x23f0 [ 205.040079][ T8871] ? __pfx_path_openat+0x10/0x10 [ 205.040099][ T8871] do_file_open+0x20e/0x430 [ 205.040116][ T8871] ? __pfx_do_file_open+0x10/0x10 [ 205.040142][ T8871] ? _raw_spin_unlock+0x28/0x50 [ 205.040153][ T8871] ? alloc_fd+0x471/0x7a0 [ 205.040173][ T8871] do_sys_openat2+0x163/0x1d0 [ 205.040184][ T8871] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.040201][ T8871] __ia32_compat_sys_openat+0x12d/0x210 [ 205.040215][ T8871] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 205.040234][ T8871] __do_fast_syscall_32+0x14b/0x8c0 [ 205.040250][ T8871] do_fast_syscall_32+0x32/0x70 [ 205.040264][ T8871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.040278][ T8871] RIP: 0023:0xf73fefbc [ 205.040289][ T8871] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.040299][ T8871] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 205.040311][ T8871] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 205.040318][ T8871] RDX: 0000000000121301 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.040324][ T8871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.040330][ T8871] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.040336][ T8871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.040351][ T8871] [ 205.054839][ T8873] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 205.062060][ T8873] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 205.062255][ T8873] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 205.062589][ T8873] hwsim0: entered allmulticast mode [ 205.062656][ T8873] ieee802154 phy0 wpan0: entered allmulticast mode [ 205.062745][ T8873] ieee802154 phy1 wpan1: entered allmulticast mode [ 205.062825][ T8873] teql0: entered allmulticast mode [ 205.062900][ T8873] tunl0: entered allmulticast mode [ 205.062949][ T8873] gre0: entered allmulticast mode [ 205.063008][ T8873] gretap0: entered allmulticast mode [ 205.063071][ T8873] erspan0: entered allmulticast mode [ 205.063116][ T8873] ip_vti0: entered allmulticast mode [ 205.063154][ T8873] ip6_vti0: entered allmulticast mode [ 205.063204][ T8873] sit0: entered allmulticast mode [ 205.063250][ T8873] ip6tnl0: entered allmulticast mode [ 205.075519][ T8873] ip6gre0: entered allmulticast mode [ 205.075652][ T8873] lapb0: entered allmulticast mode [ 205.075947][ T8873] lapb1: entered allmulticast mode [ 205.076494][ T8873] lapb2: entered allmulticast mode [ 205.076776][ T8873] lapb3: entered allmulticast mode [ 205.077191][ T8873] lapb4: entered allmulticast mode [ 205.085828][ T8873] lapb5: entered allmulticast mode [ 205.085991][ T8873] lapb6: entered allmulticast mode [ 205.086323][ T8873] lowpan0: entered allmulticast mode [ 205.086413][ T8873] rxe_eth0: entered allmulticast mode [ 205.086738][ T8873] bond1: entered allmulticast mode [ 205.089473][ T8873] lapb7: entered allmulticast mode [ 205.089661][ T8873] netdevsim netdevsim3 eth2: entered allmulticast mode [ 205.115503][ T8873] netdevsim netdevsim3 eth3: entered allmulticast mode [ 205.121705][ T8873] netdevsim netdevsim3 eth4: entered allmulticast mode [ 205.122208][ T8873] netdevsim netdevsim3 eth5: entered allmulticast mode [ 205.126873][ T8873] ieee802154 phy1 wpan3: entered allmulticast mode [ 205.511131][ T1359] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.548122][ T8881] syzkaller0: entered promiscuous mode [ 205.548147][ T8881] syzkaller0: entered allmulticast mode [ 205.662670][ T1359] usb 5-1: Using ep0 maxpacket: 8 [ 205.667427][ T1359] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.670083][ T1359] usb 5-1: config 0 has no interfaces? [ 205.670118][ T1359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.672185][ T1359] usb 5-1: config 0 descriptor?? [ 205.893930][ T1028] usb 5-1: USB disconnect, device number 9 [ 206.311815][ T8893] jffs2: notice: (8893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 6 orphan) and 6 of xref (1 dead, 5 orphan) found. [ 206.750901][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 206.750919][ T43] audit: type=1326 audit(1792909280.125:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.2.841" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45fbc code=0x0 [ 209.323201][ T8945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.358134][ T8947] FAULT_INJECTION: forcing a failure. [ 209.358134][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 209.358158][ T8947] CPU: 3 UID: 0 PID: 8947 Comm: syz.4.860 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 209.358174][ T8947] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 209.358179][ T8947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.358185][ T8947] Call Trace: [ 209.358189][ T8947] [ 209.358194][ T8947] dump_stack_lvl+0x100/0x190 [ 209.358214][ T8947] should_fail_ex.cold+0x5/0xa [ 209.358231][ T8947] should_failslab+0xc2/0x120 [ 209.358248][ T8947] __kvmalloc_node_noprof+0x113/0x9b0 [ 209.358263][ T8947] ? lockdep_init_map_type+0x5c/0x250 [ 209.358275][ T8947] ? simple_xattr_alloc+0x6c/0xd0 [ 209.358290][ T8947] simple_xattr_alloc+0x6c/0xd0 [ 209.358303][ T8947] simple_xattr_set+0xa8/0x3cb0 [ 209.358314][ T8947] ? do_raw_spin_lock+0x128/0x260 [ 209.358326][ T8947] ? find_held_lock+0x2b/0x80 [ 209.358339][ T8947] ? shmem_xattr_handler_set+0x2f2/0x3c0 [ 209.358355][ T8947] ? shmem_xattr_handler_set+0x326/0x3c0 [ 209.358365][ T8947] shmem_xattr_handler_set+0x326/0x3c0 [ 209.358378][ T8947] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 209.358389][ T8947] __vfs_setxattr+0x175/0x1e0 [ 209.358407][ T8947] ? __pfx___vfs_setxattr+0x10/0x10 [ 209.358422][ T8947] ? apparmor_capable+0x1d7/0x4d0 [ 209.358461][ T8947] __vfs_setxattr_noperm+0x127/0x660 [ 209.358482][ T8947] __vfs_setxattr_locked+0x127/0x2b0 [ 209.358502][ T8947] vfs_setxattr+0x14a/0x390 [ 209.358521][ T8947] ? __pfx_vfs_setxattr+0x10/0x10 [ 209.358545][ T8947] ovl_fill_super+0x1296/0x5d30 [ 209.358579][ T8947] ? __pfx_ovl_fill_super+0x10/0x10 [ 209.358597][ T8947] ? ovl_next_opt+0x143/0x1c0 [ 209.358614][ T8947] ? rcu_is_watching+0x13/0xc0 [ 209.358629][ T8947] ? apparmor_capable+0x1d7/0x4d0 [ 209.358646][ T8947] ? __pfx_ovl_fill_super+0x10/0x10 [ 209.358660][ T8947] get_tree_nodev+0xdd/0x190 [ 209.358676][ T8947] vfs_get_tree+0x92/0x320 [ 209.358689][ T8947] path_mount+0x7d0/0x2850 [ 209.358702][ T8947] ? __pfx_path_mount+0x10/0x10 [ 209.358712][ T8947] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.358728][ T8947] ? putname+0xb1/0x110 [ 209.358744][ T8947] ? kmem_cache_free+0x127/0x6c0 [ 209.358760][ T8947] ? __ia32_sys_mount+0x292/0x310 [ 209.358771][ T8947] __ia32_sys_mount+0x292/0x310 [ 209.358782][ T8947] ? __pfx___ia32_sys_mount+0x10/0x10 [ 209.358799][ T8947] __do_fast_syscall_32+0x14b/0x8c0 [ 209.358815][ T8947] do_fast_syscall_32+0x32/0x70 [ 209.358832][ T8947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.358847][ T8947] RIP: 0023:0xf7fc3fbc [ 209.358856][ T8947] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 209.358867][ T8947] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 209.358878][ T8947] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 209.358885][ T8947] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 00000000800006c0 [ 209.358891][ T8947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.358897][ T8947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.358904][ T8947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.358918][ T8947] [ 209.358953][ T8947] overlayfs: failed to set xattr on upper [ 209.358958][ T8947] overlayfs: ...falling back to redirect_dir=nofollow. [ 209.358962][ T8947] overlayfs: ...falling back to index=off. [ 209.358965][ T8947] overlayfs: ...falling back to uuid=null. [ 209.380965][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.443842][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.803157][ T43] audit: type=1326 audit(1792909283.185:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.805372][ T43] audit: type=1326 audit(1792909283.185:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.807447][ T43] audit: type=1326 audit(1792909283.185:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.808132][ T43] audit: type=1326 audit(1792909283.185:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.835419][ T43] audit: type=1326 audit(1792909283.215:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.846763][ T43] audit: type=1326 audit(1792909283.225:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.846803][ T43] audit: type=1326 audit(1792909283.225:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.846836][ T43] audit: type=1326 audit(1792909283.225:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.849092][ T43] audit: type=1326 audit(1792909283.225:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.853" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 209.924423][ T8959] capability: warning: `syz.4.855' uses deprecated v2 capabilities in a way that may be insecure [ 209.937626][ T8959] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 209.937773][ T8959] udc dummy_udc.0: failed to start g1: -19 [ 209.946028][ T8959] UDC core: g1: couldn't find an available UDC or it's busy [ 210.072920][ T8964] overlayfs: missing 'lowerdir' [ 210.082232][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 210.505465][ T8972] program syz.4.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.668547][ T8974] FAULT_INJECTION: forcing a failure. [ 210.668547][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 210.668581][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.1.862 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 210.668611][ T8974] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 210.668620][ T8974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.668631][ T8974] Call Trace: [ 210.668638][ T8974] [ 210.668647][ T8974] dump_stack_lvl+0x100/0x190 [ 210.668678][ T8974] should_fail_ex.cold+0x5/0xa [ 210.668722][ T8974] should_failslab+0xc2/0x120 [ 210.668754][ T8974] kmem_cache_alloc_noprof+0x92/0x6a0 [ 210.668779][ T8974] ? __proc_create+0xc1/0x8f0 [ 210.668803][ T8974] ? __proc_create+0x247/0x8f0 [ 210.668833][ T8974] __proc_create+0x247/0x8f0 [ 210.668858][ T8974] ? __pfx___proc_create+0x10/0x10 [ 210.668885][ T8974] ? _raw_write_unlock+0x28/0x50 [ 210.668911][ T8974] proc_create_reg+0x75/0x170 [ 210.668937][ T8974] proc_create_data+0x86/0x110 [ 210.668961][ T8974] ? __pfx_proc_create_data+0x10/0x10 [ 210.668985][ T8974] ? cache_register_net+0x137/0x5e0 [ 210.669034][ T8974] ? cache_register_net+0x137/0x5e0 [ 210.669063][ T8974] cache_register_net+0x1e0/0x5e0 [ 210.669092][ T8974] ip_map_cache_create+0x8b/0x130 [ 210.669115][ T8974] ? __pfx_sunrpc_init_net+0x10/0x10 [ 210.669134][ T8974] sunrpc_init_net+0x55/0x1b0 [ 210.669155][ T8974] ops_init+0x1e2/0x5f0 [ 210.669193][ T8974] setup_net+0x118/0x3a0 [ 210.669223][ T8974] ? __pfx_setup_net+0x10/0x10 [ 210.669254][ T8974] ? bpf_lsm_namespace_init+0x9/0x10 [ 210.669290][ T8974] copy_net_ns+0x340/0x7a0 [ 210.669311][ T8974] create_new_namespaces+0x3ea/0xac0 [ 210.669350][ T8974] unshare_nsproxy_namespaces+0xf6/0x210 [ 210.669383][ T8974] ksys_unshare+0x44f/0x980 [ 210.669403][ T8974] ? __pfx_ksys_unshare+0x10/0x10 [ 210.669424][ T8974] ? __might_fault+0xc5/0x140 [ 210.669449][ T8974] __ia32_sys_unshare+0x30/0x40 [ 210.669468][ T8974] __do_fast_syscall_32+0x14b/0x8c0 [ 210.669498][ T8974] do_fast_syscall_32+0x32/0x70 [ 210.669523][ T8974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.669548][ T8974] RIP: 0023:0xf73fefbc [ 210.669565][ T8974] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 210.669583][ T8974] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 210.669602][ T8974] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 210.669615][ T8974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.669626][ T8974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.669637][ T8974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.669649][ T8974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.669671][ T8974] [ 210.884442][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 210.900786][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 211.488165][ T8995] FAULT_INJECTION: forcing a failure. [ 211.488165][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 211.488187][ T8995] CPU: 2 UID: 0 PID: 8995 Comm: syz.2.869 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 211.488203][ T8995] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 211.488208][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.488214][ T8995] Call Trace: [ 211.488218][ T8995] [ 211.488223][ T8995] dump_stack_lvl+0x100/0x190 [ 211.488243][ T8995] should_fail_ex.cold+0x5/0xa [ 211.488265][ T8995] should_failslab+0xc2/0x120 [ 211.488288][ T8995] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 211.488309][ T8995] ? __d_alloc+0x34/0xad0 [ 211.488340][ T8995] __d_alloc+0x34/0xad0 [ 211.488367][ T8995] d_alloc+0x4a/0x1e0 [ 211.488394][ T8995] lookup_one_qstr_excl+0x171/0x250 [ 211.488416][ T8995] start_renaming_dentry+0x34b/0x650 [ 211.488449][ T8995] ovl_check_rename_whiteout+0x252/0x620 [ 211.488480][ T8995] ? __pfx_ovl_check_rename_whiteout+0x10/0x10 [ 211.488504][ T8995] ? task_work_add+0x201/0x3b0 [ 211.488541][ T8995] ? __fput_deferred+0x217/0x4a0 [ 211.488570][ T8995] ? __pfx___fput_deferred+0x10/0x10 [ 211.488608][ T8995] ovl_fill_super+0x114b/0x5d30 [ 211.488671][ T8995] ? __pfx_ovl_fill_super+0x10/0x10 [ 211.488701][ T8995] ? ovl_next_opt+0x143/0x1c0 [ 211.488727][ T8995] ? rcu_is_watching+0x13/0xc0 [ 211.488752][ T8995] ? apparmor_capable+0x1d7/0x4d0 [ 211.488778][ T8995] ? __pfx_ovl_fill_super+0x10/0x10 [ 211.488802][ T8995] get_tree_nodev+0xdd/0x190 [ 211.488826][ T8995] vfs_get_tree+0x92/0x320 [ 211.488850][ T8995] path_mount+0x7d0/0x2850 [ 211.488874][ T8995] ? __pfx_path_mount+0x10/0x10 [ 211.488891][ T8995] ? lockdep_hardirqs_on+0x7d/0x110 [ 211.488918][ T8995] ? putname+0xb1/0x110 [ 211.488943][ T8995] ? kmem_cache_free+0x127/0x6c0 [ 211.488972][ T8995] ? __ia32_sys_mount+0x292/0x310 [ 211.489011][ T8995] __ia32_sys_mount+0x292/0x310 [ 211.489034][ T8995] ? __pfx___ia32_sys_mount+0x10/0x10 [ 211.489063][ T8995] __do_fast_syscall_32+0x14b/0x8c0 [ 211.489097][ T8995] do_fast_syscall_32+0x32/0x70 [ 211.489123][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.489146][ T8995] RIP: 0023:0xf7f45fbc [ 211.489162][ T8995] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.489180][ T8995] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 211.489199][ T8995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 211.489212][ T8995] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 00000000800006c0 [ 211.489222][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.489233][ T8995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.489243][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.489269][ T8995] [ 211.690820][ T5803] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 211.690844][ T5803] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 212.081095][ T5795] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 212.216815][ T9025] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 212.216828][ T9025] netlink: 'syz.0.878': attribute type 2 has an invalid length. [ 212.242258][ T9026] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 212.255617][ T5795] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 212.256602][ T5795] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.258052][ T5795] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.260439][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.260452][ T5795] usb 7-1: Product: syz [ 212.260459][ T5795] usb 7-1: Manufacturer: syz [ 212.260466][ T5795] usb 7-1: SerialNumber: syz [ 212.268612][ T5795] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 212.270807][ T5795] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 212.279355][ T5795] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 212.393092][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 212.393113][ T1131] ata1.00: irq_stat 0x40000000 [ 212.393123][ T1131] ata1.00: failed command: READ DMA EXT [ 212.393535][ T1131] ata1.00: cmd 25/00:40:6e:5b:01/00:05:00:00:00/e0 tag 14 dma 688128 in [ 212.393535][ T1131] res 41/04:40:6e:5b:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 212.393987][ T1131] ata1.00: status: { DRDY ERR } [ 212.393996][ T1131] ata1.00: error: { ABRT } [ 212.399939][ T1131] ata1.00: configured for UDMA/66 [ 212.402917][ T1131] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 212.403056][ T1131] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 212.404116][ T1131] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 212.404302][ T1131] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 5b 6e 00 05 40 00 [ 212.404521][ T1131] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 212.404978][ T1131] ata1: EH complete [ 212.652761][ T9032] lo speed is unknown, defaulting to 1000 [ 212.652979][ T9032] lo speed is unknown, defaulting to 1000 [ 212.663656][ T9032] lo speed is unknown, defaulting to 1000 [ 212.670402][ T9032] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 212.670449][ T9032] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 212.670529][ T9032] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 212.713417][ T9032] lo speed is unknown, defaulting to 1000 [ 212.714730][ T9032] lo speed is unknown, defaulting to 1000 [ 212.716273][ T9032] lo speed is unknown, defaulting to 1000 [ 212.717685][ T9032] lo speed is unknown, defaulting to 1000 [ 214.108850][ T9060] syzkaller0: entered promiscuous mode [ 214.108869][ T9060] syzkaller0: entered allmulticast mode [ 214.117027][ T9060] 0: reclassify loop, rule prio 0, protocol 800 [ 214.301395][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 214.301413][ T43] audit: type=1326 audit(1792909287.675:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.301591][ T43] audit: type=1326 audit(1792909287.685:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.308063][ T43] audit: type=1326 audit(1792909287.685:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.308105][ T43] audit: type=1326 audit(1792909287.685:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.308146][ T43] audit: type=1326 audit(1792909287.685:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.313803][ T43] audit: type=1326 audit(1792909287.695:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.314225][ T43] audit: type=1326 audit(1792909287.695:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.314402][ T43] audit: type=1326 audit(1792909287.695:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.314940][ T43] audit: type=1326 audit(1792909287.695:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.315327][ T43] audit: type=1326 audit(1792909287.695:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x7ffc0000 [ 214.425132][ T5803] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 214.425164][ T5803] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 214.883837][ T9071] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 215.164201][ T9076] FAULT_INJECTION: forcing a failure. [ 215.164201][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 215.164224][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.0.896 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 215.164256][ T9076] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 215.164261][ T9076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.164268][ T9076] Call Trace: [ 215.164272][ T9076] [ 215.164277][ T9076] dump_stack_lvl+0x100/0x190 [ 215.164297][ T9076] should_fail_ex.cold+0x5/0xa [ 215.164314][ T9076] should_failslab+0xc2/0x120 [ 215.164332][ T9076] __kvmalloc_node_noprof+0x113/0x9b0 [ 215.164346][ T9076] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 215.164358][ T9076] ? percpu_ref_init+0xec/0x3f0 [ 215.164370][ T9076] ? io_alloc_cache_init+0x38/0x170 [ 215.164385][ T9076] io_alloc_cache_init+0x38/0x170 [ 215.164398][ T9076] io_uring_setup.cold+0x4aa/0x1c0e [ 215.164418][ T9076] ? find_held_lock+0x2b/0x80 [ 215.164433][ T9076] ? __pfx_io_uring_setup+0x10/0x10 [ 215.164452][ T9076] ? __lock_acquire+0x5c0/0x1f40 [ 215.164477][ T9076] ? find_held_lock+0x2b/0x80 [ 215.164507][ T9076] ? __might_fault+0xc5/0x140 [ 215.164524][ T9076] ? __might_fault+0xc5/0x140 [ 215.164538][ T9076] __ia32_sys_io_uring_setup+0xc2/0x170 [ 215.164556][ T9076] __do_fast_syscall_32+0x14b/0x8c0 [ 215.164574][ T9076] do_fast_syscall_32+0x32/0x70 [ 215.164589][ T9076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.164603][ T9076] RIP: 0023:0xf7f47fbc [ 215.164612][ T9076] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 215.164623][ T9076] RSP: 002b:00000000f53f64bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 215.164635][ T9076] RAX: ffffffffffffffda RBX: 0000000000007042 RCX: 0000000080000e00 [ 215.164642][ T9076] RDX: 00000000f71611d7 RSI: 0000000000000001 RDI: 00000000f53f653c [ 215.164649][ T9076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.164656][ T9076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.164663][ T9076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.164678][ T9076] [ 215.170552][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 215.190116][ T9076] bridge0: entered promiscuous mode [ 215.190130][ T9076] bridge0: entered allmulticast mode [ 215.298259][ T9083] syzkaller0: entered promiscuous mode [ 215.298272][ T9083] syzkaller0: entered allmulticast mode [ 215.407683][ T9091] syzkaller0: entered promiscuous mode [ 215.407698][ T9091] syzkaller0: entered allmulticast mode [ 215.802502][ T9014] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 215.918721][ T9014] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 215.930881][ T1028] usb 7-1: USB disconnect, device number 6 [ 216.155527][ T1028] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 216.357875][ T1028] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 216.419848][ T1028] ti_usb_3410_5052 7-1:2.0: device disconnected [ 217.023928][ T9138] ata3.00: invalid multi_count 1 ignored [ 217.196150][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 217.441130][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 217.591190][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 217.592348][ T24] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.593389][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 217.593417][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.593443][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.593463][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.593479][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.593499][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.593520][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.593541][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.594838][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 217.594868][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.594903][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.594928][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.594949][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.594971][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.594994][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.595017][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.596338][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 217.596367][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.596398][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.596422][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.596444][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.596461][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.596479][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.596499][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.600242][ T24] usb 5-1: string descriptor 0 read error: -22 [ 217.600337][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.737419][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 218.094701][ T7068] usb 5-1: USB disconnect, device number 10 [ 218.316046][ T9157] lo: entered allmulticast mode [ 220.396587][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 220.396607][ T43] audit: type=1326 audit(1792909293.775:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.396650][ T43] audit: type=1326 audit(1792909293.775:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.425883][ T43] audit: type=1326 audit(1792909293.805:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.428885][ T43] audit: type=1326 audit(1792909293.805:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.429065][ T43] audit: type=1326 audit(1792909293.805:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.434534][ T43] audit: type=1326 audit(1792909293.815:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.434781][ T43] audit: type=1326 audit(1792909293.815:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.435240][ T43] audit: type=1326 audit(1792909293.815:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.435496][ T43] audit: type=1326 audit(1792909293.815:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 220.435650][ T43] audit: type=1326 audit(1792909293.815:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7ffc0000 [ 222.705190][ T9223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.705408][ T9223] block device autoloading is deprecated and will be removed. [ 222.883517][ T9226] md/raid:md4: device ram8 operational as raid disk 0 [ 222.893942][ T9226] md/raid:md4: not enough operational devices (2/3 failed) [ 223.022782][ T9226] md/raid:md4: failed to run raid set. [ 223.022795][ T9226] md: pers->run() failed ... [ 223.022934][ T9223] md: could not open device unknown-block(1,9). [ 223.022960][ T9223] md: error, md_import_device() returned -16 [ 223.041267][ T9229] md/raid:md4: device ram8 operational as raid disk 0 [ 223.053334][ T9229] md/raid:md4: not enough operational devices (2/3 failed) [ 223.155837][ T9229] md/raid:md4: failed to run raid set. [ 223.155851][ T9229] md: pers->run() failed ... [ 223.155899][ T9230] md: md4 stopped. [ 223.281822][ T9210] ceph: No mds server is up or the cluster is laggy [ 223.283192][ T9216] ceph: No mds server is up or the cluster is laggy [ 223.470800][ T9234] syzkaller0: entered promiscuous mode [ 223.470813][ T9234] syzkaller0: entered allmulticast mode [ 227.397168][ T9276] FAULT_INJECTION: forcing a failure. [ 227.397168][ T9276] name failslab, interval 1, probability 0, space 0, times 0 [ 227.397191][ T9276] CPU: 2 UID: 0 PID: 9276 Comm: syz.0.951 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 227.397209][ T9276] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 227.397214][ T9276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.397220][ T9276] Call Trace: [ 227.397225][ T9276] [ 227.397229][ T9276] dump_stack_lvl+0x100/0x190 [ 227.397249][ T9276] should_fail_ex.cold+0x5/0xa [ 227.397266][ T9276] should_failslab+0xc2/0x120 [ 227.397284][ T9276] kmem_cache_alloc_noprof+0x92/0x6a0 [ 227.397298][ T9276] ? security_file_alloc+0x34/0x2c0 [ 227.397318][ T9276] security_file_alloc+0x34/0x2c0 [ 227.397335][ T9276] init_file+0x95/0x480 [ 227.397351][ T9276] alloc_empty_file+0x79/0x1c0 [ 227.397365][ T9276] alloc_file_pseudo+0x17e/0x290 [ 227.397379][ T9276] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 227.397390][ T9276] ? alloc_fd+0x471/0x7a0 [ 227.397408][ T9276] sock_alloc_file+0x50/0x210 [ 227.397425][ T9276] __sys_socket+0x1c0/0x260 [ 227.397437][ T9276] ? __pfx___sys_socket+0x10/0x10 [ 227.397449][ T9276] ? __might_fault+0xc5/0x140 [ 227.397462][ T9276] __ia32_sys_socket+0x72/0xb0 [ 227.397475][ T9276] __do_fast_syscall_32+0x14b/0x8c0 [ 227.397489][ T9276] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.397506][ T9276] do_fast_syscall_32+0x32/0x70 [ 227.397526][ T9276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.397544][ T9276] RIP: 0023:0xf7f47fbc [ 227.397558][ T9276] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.397572][ T9276] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 227.397584][ T9276] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000003 [ 227.397592][ T9276] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 00000000f53f653c [ 227.397605][ T9276] RBP: 00000000f53f65ec R08: 0000000000000000 R09: 0000000000000000 [ 227.397612][ T9276] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 227.397619][ T9276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.397641][ T9276] [ 227.813985][ T9281] FAULT_INJECTION: forcing a failure. [ 227.813985][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 227.814019][ T9281] CPU: 1 UID: 0 PID: 9281 Comm: syz.1.953 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 227.814050][ T9281] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 227.814058][ T9281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.814070][ T9281] Call Trace: [ 227.814078][ T9281] [ 227.814086][ T9281] dump_stack_lvl+0x100/0x190 [ 227.814125][ T9281] should_fail_ex.cold+0x5/0xa [ 227.814154][ T9281] ? __pfx_ovl_inode_set+0x10/0x10 [ 227.814178][ T9281] should_failslab+0xc2/0x120 [ 227.814206][ T9281] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 227.814232][ T9281] ? __pfx_ovl_inode_test+0x10/0x10 [ 227.814255][ T9281] ? ovl_alloc_inode+0x25/0x190 [ 227.814281][ T9281] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 227.814305][ T9281] ? __pfx_ovl_inode_test+0x10/0x10 [ 227.814329][ T9281] ? __pfx_ovl_inode_set+0x10/0x10 [ 227.814351][ T9281] ovl_alloc_inode+0x25/0x190 [ 227.814375][ T9281] alloc_inode+0x68/0x250 [ 227.814398][ T9281] iget5_locked+0x5f/0xa0 [ 227.814421][ T9281] ovl_get_trap_inode+0xb2/0x210 [ 227.814450][ T9281] ovl_fill_super+0x2bc3/0x5d30 [ 227.814498][ T9281] ? __pfx_ovl_fill_super+0x10/0x10 [ 227.814527][ T9281] ? ovl_next_opt+0x143/0x1c0 [ 227.814554][ T9281] ? rcu_is_watching+0x13/0xc0 [ 227.814580][ T9281] ? apparmor_capable+0x1d7/0x4d0 [ 227.814630][ T9281] ? __pfx_ovl_fill_super+0x10/0x10 [ 227.814656][ T9281] get_tree_nodev+0xdd/0x190 [ 227.814684][ T9281] vfs_get_tree+0x92/0x320 [ 227.814706][ T9281] path_mount+0x7d0/0x2850 [ 227.814730][ T9281] ? __pfx_path_mount+0x10/0x10 [ 227.814748][ T9281] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.814775][ T9281] ? putname+0xb1/0x110 [ 227.814802][ T9281] ? kmem_cache_free+0x127/0x6c0 [ 227.814832][ T9281] ? __ia32_sys_mount+0x292/0x310 [ 227.814851][ T9281] __ia32_sys_mount+0x292/0x310 [ 227.814871][ T9281] ? __pfx___ia32_sys_mount+0x10/0x10 [ 227.814899][ T9281] __do_fast_syscall_32+0x14b/0x8c0 [ 227.814928][ T9281] do_fast_syscall_32+0x32/0x70 [ 227.814953][ T9281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.814977][ T9281] RIP: 0023:0xf73fefbc [ 227.814994][ T9281] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.815013][ T9281] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 227.815032][ T9281] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 227.815045][ T9281] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 00000000800006c0 [ 227.815056][ T9281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.815068][ T9281] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.815079][ T9281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.815111][ T9281] [ 227.894458][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 227.894474][ T43] audit: type=1326 audit(1792909301.275:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.894661][ T43] audit: type=1326 audit(1792909301.275:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.899193][ T43] audit: type=1326 audit(1792909301.275:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.902108][ T43] audit: type=1326 audit(1792909301.275:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.902149][ T43] audit: type=1326 audit(1792909301.275:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.906112][ T43] audit: type=1326 audit(1792909301.285:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.906457][ T43] audit: type=1326 audit(1792909301.285:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.906671][ T43] audit: type=1326 audit(1792909301.285:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.907227][ T43] audit: type=1326 audit(1792909301.285:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 227.907639][ T43] audit: type=1326 audit(1792909301.285:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.1.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 229.494780][ T9308] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.948069][ T9316] FAULT_INJECTION: forcing a failure. [ 229.948069][ T9316] name failslab, interval 1, probability 0, space 0, times 0 [ 229.948096][ T9316] CPU: 1 UID: 0 PID: 9316 Comm: syz.0.963 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 229.948130][ T9316] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 229.948136][ T9316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.948145][ T9316] Call Trace: [ 229.948149][ T9316] [ 229.948154][ T9316] dump_stack_lvl+0x100/0x190 [ 229.948174][ T9316] should_fail_ex.cold+0x5/0xa [ 229.948191][ T9316] should_failslab+0xc2/0x120 [ 229.948208][ T9316] __kmalloc_noprof+0xfc/0x840 [ 229.948221][ T9316] ? bpf_lsm_capable+0x9/0x10 [ 229.948237][ T9316] ? security_capable+0x80/0x260 [ 229.948250][ T9316] ? ovl_fill_super+0x28fa/0x5d30 [ 229.948268][ T9316] ovl_fill_super+0x28fa/0x5d30 [ 229.948294][ T9316] ? __pfx_ovl_fill_super+0x10/0x10 [ 229.948311][ T9316] ? ovl_next_opt+0x143/0x1c0 [ 229.948325][ T9316] ? rcu_is_watching+0x13/0xc0 [ 229.948339][ T9316] ? apparmor_capable+0x1d7/0x4d0 [ 229.948355][ T9316] ? __pfx_ovl_fill_super+0x10/0x10 [ 229.948369][ T9316] get_tree_nodev+0xdd/0x190 [ 229.948384][ T9316] vfs_get_tree+0x92/0x320 [ 229.948395][ T9316] path_mount+0x7d0/0x2850 [ 229.948409][ T9316] ? __pfx_path_mount+0x10/0x10 [ 229.948418][ T9316] ? lockdep_hardirqs_on+0x7d/0x110 [ 229.948446][ T9316] ? putname+0xb1/0x110 [ 229.948463][ T9316] ? kmem_cache_free+0x127/0x6c0 [ 229.948479][ T9316] ? __ia32_sys_mount+0x292/0x310 [ 229.948490][ T9316] __ia32_sys_mount+0x292/0x310 [ 229.948501][ T9316] ? __pfx___ia32_sys_mount+0x10/0x10 [ 229.948516][ T9316] __do_fast_syscall_32+0x14b/0x8c0 [ 229.948533][ T9316] do_fast_syscall_32+0x32/0x70 [ 229.948548][ T9316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.948563][ T9316] RIP: 0023:0xf7f47fbc [ 229.948573][ T9316] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 229.948584][ T9316] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 229.948595][ T9316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000640 [ 229.948602][ T9316] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 00000000800006c0 [ 229.948608][ T9316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.948614][ T9316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.948620][ T9316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.948635][ T9316] [ 230.838877][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 230.839736][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 230.843073][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 232.104878][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 232.928727][ T9355] syzkaller0: entered promiscuous mode [ 232.928750][ T9355] syzkaller0: entered allmulticast mode [ 232.936676][ T9355] 0: reclassify loop, rule prio 0, protocol 800 [ 233.065277][ T9358] ------------[ cut here ]------------ [ 233.065288][ T9358] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 233.065300][ T9358] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#0: syz.2.976/9358 [ 233.078586][ T9358] Modules linked in: [ 233.080331][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.2.976 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 233.084887][ T9358] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 233.087087][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.091047][ T9358] RIP: 0010:device_release+0x1dd/0x270 [ 233.093289][ T9358] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 4d 39 98 fb 48 8d 3d b6 3e 00 0c 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 34 39 98 fb 48 89 da 48 b8 00 00 [ 233.101502][ T9358] RSP: 0018:ffffc9000622fa20 EFLAGS: 00010287 [ 233.104025][ T9358] RAX: 000000000000411e RBX: ffff888044748020 RCX: ffffc900077c3000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.107210][ T9358] RDX: 0000000000080000 RSI: ffff88806cc93f60 RDI: ffffffff92758000 [ 233.110767][ T9358] RBP: ffff88806cc93f60 R08: 0000000000000001 R09: 0000000000000000 [ 233.114254][ T9358] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805010d400 [ 233.117687][ T9358] R13: dffffc0000000000 R14: ffff88806cc93f60 R15: 0000000000000000 [ 233.121168][ T9358] FS: 0000000000000000(0000) GS:ffff8880952b8000(0063) knlGS:00000000f53f6b40 [ 233.125001][ T9358] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 233.127834][ T9358] CR2: 00000000f7f3a190 CR3: 0000000060b36000 CR4: 0000000000352ef0 [ 233.131521][ T9358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.134920][ T9358] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 233.138508][ T9358] Call Trace: [ 233.140046][ T9358] [ 233.141372][ T9358] kobject_put+0x1f7/0x640 [ 233.143268][ T9358] device_unregister+0x2f/0xe0 [ 233.145294][ T9358] i2c_unregister_device+0xf5/0x270 [ 233.147500][ T9358] i2c_deregister_clients+0x255/0x460 [ 233.149734][ T9358] i2c_del_adapter+0x13a/0x2e0 [ 233.151749][ T9358] i801_remove+0xa4/0x3d0 [ 233.153455][ T9358] pci_device_remove+0xb2/0x1d0 [ 233.155248][ T9358] ? __pfx_pci_device_remove+0x10/0x10 [ 233.157203][ T9358] device_remove+0xcb/0x180 [ 233.158833][ T9358] device_release_driver_internal+0x44e/0x620 [ 233.161155][ T9358] unbind_store+0x129/0x150 [ 233.162857][ T9358] ? __pfx_unbind_store+0x10/0x10 [ 233.164460][ T9358] drv_attr_store+0x74/0xb0 [ 233.165967][ T9358] ? __pfx_drv_attr_store+0x10/0x10 [ 233.167598][ T9358] sysfs_kf_write+0xf2/0x150 [ 233.169096][ T9358] kernfs_fop_write_iter+0x3e0/0x5f0 [ 233.171249][ T9358] ? __pfx_sysfs_kf_write+0x10/0x10 [ 233.173282][ T9358] vfs_write+0x6af/0x1050 [ 233.175036][ T9358] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 233.177373][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 233.179246][ T9358] ? find_held_lock+0x2b/0x80 [ 233.181254][ T9358] ksys_write+0x12a/0x250 [ 233.183095][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 233.185024][ T9358] __do_fast_syscall_32+0x14b/0x8c0 [ 233.187002][ T9358] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.188997][ T9358] do_fast_syscall_32+0x32/0x70 [ 233.190842][ T9358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.193393][ T9358] RIP: 0023:0xf7f45fbc [ 233.194959][ T9358] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 233.202302][ T9358] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 233.205510][ T9358] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 233.208508][ T9358] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 233.211612][ T9358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.214641][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.217063][ T9358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.219546][ T9358] [ 233.220527][ T9358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.222790][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.2.976 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 233.226133][ T9358] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 233.227936][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.231039][ T9358] Call Trace: [ 233.232092][ T9358] [ 233.233034][ T9358] dump_stack_lvl+0x100/0x190 [ 233.234524][ T9358] vpanic+0x553/0x970 [ 233.235795][ T9358] ? __pfx_vpanic+0x10/0x10 [ 233.237222][ T9358] panic+0xd1/0xe0 [ 233.238414][ T9358] ? __pfx_panic+0x10/0x10 [ 233.239819][ T9358] check_panic_on_warn.cold+0x19/0x34 [ 233.241494][ T9358] ? device_release+0x1da/0x270 [ 233.243013][ T9358] __warn.cold+0x191/0x318 [ 233.244423][ T9358] __report_bug+0x30f/0x440 [ 233.245880][ T9358] ? device_release+0x1da/0x270 [ 233.247394][ T9358] ? __pfx___report_bug+0x10/0x10 [ 233.249034][ T9358] ? do_raw_spin_lock+0x128/0x260 [ 233.250604][ T9358] ? find_held_lock+0x2b/0x80 [ 233.252081][ T9358] ? kobj_kset_leave+0x160/0x210 [ 233.253647][ T9358] report_bug_entry+0xe2/0x290 [ 233.255160][ T9358] ? device_release+0x1dd/0x270 [ 233.256683][ T9358] handle_bug+0x1cd/0x2a0 [ 233.258066][ T9358] exc_invalid_op+0x17/0x50 [ 233.259490][ T9358] asm_exc_invalid_op+0x1a/0x20 [ 233.261016][ T9358] RIP: 0010:device_release+0x1dd/0x270 [ 233.262708][ T9358] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 4d 39 98 fb 48 8d 3d b6 3e 00 0c 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 34 39 98 fb 48 89 da 48 b8 00 00 [ 233.268656][ T9358] RSP: 0018:ffffc9000622fa20 EFLAGS: 00010287 [ 233.270501][ T9358] RAX: 000000000000411e RBX: ffff888044748020 RCX: ffffc900077c3000 [ 233.273011][ T9358] RDX: 0000000000080000 RSI: ffff88806cc93f60 RDI: ffffffff92758000 [ 233.275513][ T9358] RBP: ffff88806cc93f60 R08: 0000000000000001 R09: 0000000000000000 [ 233.278010][ T9358] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805010d400 [ 233.280500][ T9358] R13: dffffc0000000000 R14: ffff88806cc93f60 R15: 0000000000000000 [ 233.283000][ T9358] kobject_put+0x1f7/0x640 [ 233.284444][ T9358] device_unregister+0x2f/0xe0 [ 233.286008][ T9358] i2c_unregister_device+0xf5/0x270 [ 233.287677][ T9358] i2c_deregister_clients+0x255/0x460 [ 233.289397][ T9358] i2c_del_adapter+0x13a/0x2e0 [ 233.290944][ T9358] i801_remove+0xa4/0x3d0 [ 233.292324][ T9358] pci_device_remove+0xb2/0x1d0 [ 233.294151][ T9358] ? __pfx_pci_device_remove+0x10/0x10 [ 233.296299][ T9358] device_remove+0xcb/0x180 [ 233.297948][ T9358] device_release_driver_internal+0x44e/0x620 [ 233.299905][ T9358] unbind_store+0x129/0x150 [ 233.301364][ T9358] ? __pfx_unbind_store+0x10/0x10 [ 233.302946][ T9358] drv_attr_store+0x74/0xb0 [ 233.304362][ T9358] ? __pfx_drv_attr_store+0x10/0x10 [ 233.306007][ T9358] sysfs_kf_write+0xf2/0x150 [ 233.307452][ T9358] kernfs_fop_write_iter+0x3e0/0x5f0 [ 233.309114][ T9358] ? __pfx_sysfs_kf_write+0x10/0x10 [ 233.310744][ T9358] vfs_write+0x6af/0x1050 [ 233.312095][ T9358] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 233.313908][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 233.315407][ T9358] ? find_held_lock+0x2b/0x80 [ 233.316881][ T9358] ksys_write+0x12a/0x250 [ 233.318310][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 233.320243][ T9358] __do_fast_syscall_32+0x14b/0x8c0 [ 233.322322][ T9358] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.324392][ T9358] do_fast_syscall_32+0x32/0x70 [ 233.326350][ T9358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.328860][ T9358] RIP: 0023:0xf7f45fbc [ 233.330202][ T9358] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 233.336114][ T9358] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 233.338708][ T9358] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 233.341171][ T9358] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 233.343590][ T9358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.346103][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.348564][ T9358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.351168][ T9358] [ 233.352859][ T9358] Kernel Offset: disabled [ 233.354257][ T9358] Rebooting in 86400 seconds..