Extracting prog: 5m26.101972317s Minimizing prog: 1h59m10.897882477s Simplifying prog options: 7m5.199675482s Extracting C: 1m26.406453113s Simplifying C: 0s extracting reproducer from 12 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat-name_to_handle_at detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 12 programs with base timeout 45s testing program (duration=48s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 4, 23, 18, 10, 10, 3, 2, 15, 4, 11, 28] detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x6eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb9, 0x3}}}}}]}}]}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf0) executing program 0: r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000001000001100000004000780"], 0x18}}, 0x4) r3 = syz_ublk_setup_io_uring(0x6901, &(0x7f0000000400)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x94, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, &(0x7f0000000180)) syz_ublk_setup_io_uring(0xa74, &(0x7f0000000480)={0x0, 0xbfdd, 0x40000, 0x0, 0x1dc}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4}, {0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0x2, 0x10, 0x9, 0x6, 0x2, 0x8, 0x3, 0x0, 0x1, 0x8, 0x1, 0x1, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r15, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r14, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r3, &(0x7f0000000280)='1', 0x1) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x24008080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) executing program 0: r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4949, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) landlock_restrict_self(0xffffffffffffffff, 0xc) executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0xfffffffe, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xffffffff}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-neon\x00'}}}]}, 0x13c}}, 0x20000010) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232", 0x7}], 0x1}, 0x20000885) executing program 1: r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0x2bf}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev/ttyS0\x00', 0x2, 0xe) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TCSBRKP(r2, 0x5425, 0x0) executing program 1: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat-name_to_handle_at detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) program crashed: Internal error in ata_sff_freeze single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat-mkdirat-mkdirat detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat-mkdirat detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat-mkdirat detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv-mkdirat detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE-readv detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid-write$UHID_CREATE detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs-openat$uhid detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet-openat$autofs detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route-socket$inet detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE-socket$nl_route detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-ioctl$MEMWRITE detailed listing: executing program 0: r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r4, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write-socket$nl_generic detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) socket$nl_generic(0x10, 0x3, 0x10) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-openat detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-write-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-openat-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-write-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(0xffffffffffffffff, &(0x7f00000001c0)='ata_generic\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-openat-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='ata_generic\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='ata_generic\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mkdirat-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-socket$inet6_icmp_raw-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-setns-mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$mtd-mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140), 0x0) program crashed: SYZFAIL: posix_spawnp failed ignore low priority crash: SYZFAIL: posix_spawnp failed extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write program did not crash simplifying guilty program options testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write program did not crash testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write program did not crash testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ata_generic\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0', 0xc) program crashed: Internal error in ata_sff_freeze validation run: crashed=true reproducing took 2h19m13.757215382s repro crashed as (corrupted=false): EXT4-fs (vda): shut down requested (2) Aborting journal on device vda-8. Internal error: synchronous external abort: 0000000096000050 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 3625 Comm: syz.2.17 Tainted: G M W syzkaller #0 PREEMPT Tainted: [M]=MACHINE_CHECK, [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 414020c9 (nZcv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __raw_writeb arch/arm64/include/asm/io.h:29 [inline] pc : writeb include/asm-generic/io.h:265 [inline] pc : iowrite8 include/asm-generic/io.h:924 [inline] pc : ata_sff_set_devctl drivers/ata/libata-sff.c:233 [inline] pc : ata_sff_freeze+0x7c/0x90 drivers/ata/libata-sff.c:1616 lr : __ata_port_freeze drivers/ata/libata-eh.c:1124 [inline] lr : ata_eh_freeze_port+0x34/0x5c drivers/ata/libata-eh.c:1167 sp : ffff80008998b960 x29: ffff80008998b960 x28: f3f00000062e4400 x27: 0000000000000000 x26: 0000000000000001 x25: ffff800081f4d580 x24: ffff80008279e8e0 x23: 0000000000000000 x22: 0000000000000000 x21: f8f0000007918000 x20: 0000000000000000 x19: f8f0000007918000 x18: 00000000ffffffff x17: 0000000000000000 x16: 0000000000000000 x15: f8f000000791a3f6 x14: 0000000000000000 x13: 0000000000067f7c x12: 0000000000004308 x11: fff000000314a808 x10: ffff800082ea0000 x9 : 0000000000000000 x8 : f2f0000004a1c000 x7 : ffffc1ffc01286c0 x6 : ffffc1ffc01286c0 x5 : 0000340000000000 x4 : 01ffe00000000000 x3 : ffff800082d46be8 x2 : 0000000000000000 x1 : 000000000000000a x0 : ffff800083f2d002 Call trace: writeb include/asm-generic/io.h:264 [inline] (P) iowrite8 include/asm-generic/io.h:924 [inline] (P) ata_sff_set_devctl drivers/ata/libata-sff.c:233 [inline] (P) ata_sff_freeze+0x7c/0x90 drivers/ata/libata-sff.c:1616 (P) __ata_port_freeze drivers/ata/libata-eh.c:1124 [inline] ata_eh_freeze_port+0x34/0x5c drivers/ata/libata-eh.c:1167 ata_host_start+0x13c/0x228 drivers/ata/libata-core.c:6110 ata_pci_sff_activate_host+0x50/0x340 drivers/ata/libata-sff.c:2285 ata_pci_init_one+0x19c/0x1d4 drivers/ata/libata-sff.c:2412 ata_pci_bmdma_init_one+0x14/0x20 drivers/ata/libata-sff.c:3180 ata_generic_init_one+0xc4/0x1ac drivers/ata/ata_generic.c:209 local_pci_probe+0x40/0xa8 drivers/pci/pci-driver.c:332 pci_call_probe drivers/pci/pci-driver.c:394 [inline] __pci_device_probe drivers/pci/pci-driver.c:455 [inline] pci_device_probe+0xd8/0x288 drivers/pci/pci-driver.c:489 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0xbc/0x2bc drivers/base/dd.c:706 __driver_probe_device+0x11c/0x184 drivers/base/dd.c:868 device_driver_attach+0x48/0xac drivers/base/dd.c:1203 bind_store+0x7c/0xd8 drivers/base/bus.c:267 drv_attr_store+0x24/0x40 drivers/base/bus.c:125 sysfs_kf_write+0x7c/0x98 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x138/0x200 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x244/0x36c fs/read_write.c:687 ksys_write+0x70/0x108 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x18/0x24 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x54/0x10c arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x1c/0x34 arch/arm64/kernel/syscall.c:140 el0_svc+0x38/0x1fc arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:590 Code: d65f03c0 f9404800 b4fffe60 d50332bf (39000001) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: d65f03c0 ret 4: f9404800 ldr x0, [x0, #144] 8: b4fffe60 cbz x0, 0xffffffffffffffd4 c: d50332bf dmb oshst * 10: 39000001 strb w1, [x0] <-- trapping instruction final repro crashed as (corrupted=false): EXT4-fs (vda): shut down requested (2) Aborting journal on device vda-8. Internal error: synchronous external abort: 0000000096000050 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 3625 Comm: syz.2.17 Tainted: G M W syzkaller #0 PREEMPT Tainted: [M]=MACHINE_CHECK, [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 414020c9 (nZcv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __raw_writeb arch/arm64/include/asm/io.h:29 [inline] pc : writeb include/asm-generic/io.h:265 [inline] pc : iowrite8 include/asm-generic/io.h:924 [inline] pc : ata_sff_set_devctl drivers/ata/libata-sff.c:233 [inline] pc : ata_sff_freeze+0x7c/0x90 drivers/ata/libata-sff.c:1616 lr : __ata_port_freeze drivers/ata/libata-eh.c:1124 [inline] lr : ata_eh_freeze_port+0x34/0x5c drivers/ata/libata-eh.c:1167 sp : ffff80008998b960 x29: ffff80008998b960 x28: f3f00000062e4400 x27: 0000000000000000 x26: 0000000000000001 x25: ffff800081f4d580 x24: ffff80008279e8e0 x23: 0000000000000000 x22: 0000000000000000 x21: f8f0000007918000 x20: 0000000000000000 x19: f8f0000007918000 x18: 00000000ffffffff x17: 0000000000000000 x16: 0000000000000000 x15: f8f000000791a3f6 x14: 0000000000000000 x13: 0000000000067f7c x12: 0000000000004308 x11: fff000000314a808 x10: ffff800082ea0000 x9 : 0000000000000000 x8 : f2f0000004a1c000 x7 : ffffc1ffc01286c0 x6 : ffffc1ffc01286c0 x5 : 0000340000000000 x4 : 01ffe00000000000 x3 : ffff800082d46be8 x2 : 0000000000000000 x1 : 000000000000000a x0 : ffff800083f2d002 Call trace: writeb include/asm-generic/io.h:264 [inline] (P) iowrite8 include/asm-generic/io.h:924 [inline] (P) ata_sff_set_devctl drivers/ata/libata-sff.c:233 [inline] (P) ata_sff_freeze+0x7c/0x90 drivers/ata/libata-sff.c:1616 (P) __ata_port_freeze drivers/ata/libata-eh.c:1124 [inline] ata_eh_freeze_port+0x34/0x5c drivers/ata/libata-eh.c:1167 ata_host_start+0x13c/0x228 drivers/ata/libata-core.c:6110 ata_pci_sff_activate_host+0x50/0x340 drivers/ata/libata-sff.c:2285 ata_pci_init_one+0x19c/0x1d4 drivers/ata/libata-sff.c:2412 ata_pci_bmdma_init_one+0x14/0x20 drivers/ata/libata-sff.c:3180 ata_generic_init_one+0xc4/0x1ac drivers/ata/ata_generic.c:209 local_pci_probe+0x40/0xa8 drivers/pci/pci-driver.c:332 pci_call_probe drivers/pci/pci-driver.c:394 [inline] __pci_device_probe drivers/pci/pci-driver.c:455 [inline] pci_device_probe+0xd8/0x288 drivers/pci/pci-driver.c:489 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0xbc/0x2bc drivers/base/dd.c:706 __driver_probe_device+0x11c/0x184 drivers/base/dd.c:868 device_driver_attach+0x48/0xac drivers/base/dd.c:1203 bind_store+0x7c/0xd8 drivers/base/bus.c:267 drv_attr_store+0x24/0x40 drivers/base/bus.c:125 sysfs_kf_write+0x7c/0x98 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x138/0x200 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x244/0x36c fs/read_write.c:687 ksys_write+0x70/0x108 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x18/0x24 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x54/0x10c arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x1c/0x34 arch/arm64/kernel/syscall.c:140 el0_svc+0x38/0x1fc arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:590 Code: d65f03c0 f9404800 b4fffe60 d50332bf (39000001) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: d65f03c0 ret 4: f9404800 ldr x0, [x0, #144] 8: b4fffe60 cbz x0, 0xffffffffffffffd4 c: d50332bf dmb oshst * 10: 39000001 strb w1, [x0] <-- trapping instruction