last executing test programs: 1m47.715661774s ago: executing program 1 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r2, r3, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x20000003, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 1m47.557966748s ago: executing program 1 (id=424): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r0, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001740)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0xc, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x2, 0x58c, 0x0, 0x0, 0x1000, 0x40, 0xffffffffffffffff, 0x0, 0x48}}}, &(0x7f0000000300)=0x0) r4 = open_tree(r2, &(0x7f00000003c0)='./file1\x00', 0x1000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001740)='reno', 0x4) syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x7d03, 0x4004, 0x2, 0x1de, 0x0, r2}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20a3, 0x20, 0x1, 0x309, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6cfb, 0x100, 0x1, 0xf, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf193, 0x10000, 0x3, 0x231, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x612b, 0x0, 0x1, 0x1f3, 0x0, r2}}], 0x4, &(0x7f0000001680)={0x2e, 0x40, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x2, 0xdaf, 0x0, &(0x7f0000000680)=@buf_4k="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"}}, &(0x7f0000001700)) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000001c0)={0x76, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xf65a, 0x100fff}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) 1m47.460101203s ago: executing program 1 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{r3, r4+60000000}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = fsopen(&(0x7f0000000080)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='source', &(0x7f0000000200)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='source', &(0x7f0000000340)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m47.27616228s ago: executing program 1 (id=427): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f0000000280)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m47.18468174s ago: executing program 1 (id=428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m46.270514762s ago: executing program 1 (id=431): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000002500)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002680)={0x1, 0x4, 0xe608}) close_range(r7, 0xffffffffffffffff, 0x0) 1m30.539015297s ago: executing program 32 (id=431): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000002500)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002680)={0x1, 0x4, 0xe608}) close_range(r7, 0xffffffffffffffff, 0x0) 11.347156437s ago: executing program 4 (id=1127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000026c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000002700)) timer_settime(0x0, 0x0, &(0x7f0000002740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580), 0x4) sendto$inet(r0, &(0x7f00000005c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) 11.269993449s ago: executing program 4 (id=1128): socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000004c0)={0x200000000000001, 0x8}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000500)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 10.389775247s ago: executing program 4 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000001580)="707a73408b202e2f", 0x8) 10.328499277s ago: executing program 4 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40ce, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x8000, &(0x7f0000000740)={0xb, 0x0, 0x100000}, 0x20) 10.257028258s ago: executing program 4 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x3, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f00000000c0)=' ', 0x1, 0xe3}]) write(r0, &(0x7f0000000200)='2', 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x8) 10.008366157s ago: executing program 4 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x20, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0xff}], @mld={0x84, 0x0, 0x0, 0x3, 0x9ef, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}, 0x56) 9.840231505s ago: executing program 33 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x20, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0xff}], @mld={0x84, 0x0, 0x0, 0x3, 0x9ef, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}, 0x56) 5.24991665s ago: executing program 5 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xa2012, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd771000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, 0x0) 4.868571108s ago: executing program 3 (id=1199): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000d40)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.371051298s ago: executing program 5 (id=1202): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x4cfe, &(0x7f0000000280)={0x0, 0x45df, 0x81081, 0xfffffffc, 0x200220}, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.876857796s ago: executing program 5 (id=1205): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e44"], 0x47) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000700), 0xffffffffffffffff, 0xc8520) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000740)={"000c1b25", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000007c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) munmap(&(0x7f00005a0000/0x4000)=nil, 0x4000) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 3.870598348s ago: executing program 3 (id=1207): socket$inet(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000380)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x80000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0) 3.711188553s ago: executing program 3 (id=1209): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, 0x0, 0x7c) munlockall() r1 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000740)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x7fffffc, 0x8f96}, {}, {}, {0x0, 0xffffffff}, {0x8000}], '\x00', 0x7fffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 3.38191449s ago: executing program 2 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}, @TCA_NETEM_RATE={0x14, 0x6, {0x80000001, 0x4, 0x6, 0x2af2}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.031375908s ago: executing program 3 (id=1211): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) ftruncate(r1, 0x5) 2.964461849s ago: executing program 2 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e80)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000c00), 0x56) sendmsg$kcm(r6, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000d40)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 2.787391016s ago: executing program 2 (id=1213): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) 2.771854407s ago: executing program 5 (id=1214): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000024c0)={'vcan0\x00'}) write(r0, &(0x7f0000000000)='27', 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=@newtaction={0x14, 0x30, 0x1, 0x3, 0xfffffffe}, 0x14}}, 0xc050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) signalfd4(r2, 0x0, 0x0, 0x69b14617d5b81b87) 2.755109024s ago: executing program 2 (id=1215): syz_open_dev$vim2m(&(0x7f0000000180), 0x7fff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x2, 0x1, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = socket(0x28, 0x5, 0x0) syz_clone(0x20111, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='t', 0x1) landlock_create_ruleset(&(0x7f0000000640)={0x1fff, 0x6}, 0x30, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xc58) tkill(0x0, 0x34) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000006c0)={0x1, 0x5}, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x2}) 2.652985376s ago: executing program 3 (id=1216): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="8d794131bcc4c1", 0x7, 0x4008004, 0x0, 0x0) ioctl$DM_DEV_RENAME(0xffffffffffffffff, 0xc138fd05, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x2c001, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1c0, 0x198, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0xfffffffffffffff7]}, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r1, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 2.652307383s ago: executing program 2 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002140)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000800), 0x56) sendmsg$kcm(r9, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000088000", 0x2e}], 0x1}, 0x4005) 2.537303182s ago: executing program 5 (id=1218): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000580)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x5, 0x54c, 0x3d5, 0x0, 0x0, "05"}}, 0x119) write$UHID_DESTROY(r4, &(0x7f00000006c0), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000400)={r0, &(0x7f0000000300), 0x400, &(0x7f0000000340)={@align=0x2, {0xfff5, 0x9, 0x4, 0xdb2}}, 0x5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x4}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r1, 0x102030405060708, {0x0, 0x1}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x58) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)="0807060504030201", 0x8}}, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x0, 0x1, 0x3}}, 0x18) 2.399956521s ago: executing program 2 (id=1219): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4008004, 0x0, 0x0) 1.799218387s ago: executing program 0 (id=1221): sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000001c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000005145f0625bd7000fddb030000000000000000000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x4000ec0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000200)=0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) 1.688374167s ago: executing program 5 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040c5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB], 0x50}}, 0x4000084) mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x5e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @quote={{0xc, 0x7}, 0x5, &(0x7f0000000140)={0x9, 0xd, 0x40, 0x7, @time={0x3be6, 0x101}, {0x0, 0x4}, {0x24, 0x7}, @raw32={[0x3, 0x9, 0x7]}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0xe, 0x0, 0x6, 0x0, @time={0x4, 0x6}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x47ae}, {}, {0x92}, @time=@time={0x8, 0xa}}], 0x70) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001100010000000000000000000500000a20000000000a05040000000000000000050000000900010073797a3000000000140000001100010000000000000000000500000a"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000001000000000500000a6c000000060a050c0000000000000000050000000900010073797a30000000000900020073797a30000000004000048024000180090001006d6574610000000014000280080002400000000408000140000000011800018008000100667764000c0002800800014000000001140000001100010000000000000000000500000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000480)=0x9) 1.524401706s ago: executing program 0 (id=1223): r0 = gettid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 728.600475ms ago: executing program 3 (id=1224): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000440)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x400, @mcast1, 0x2d4}, @in6={0xa, 0x4e23, 0xffffff7d, @loopback, 0xd}]}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000300)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x18) close(r3) pread64(r1, 0x0, 0x0, 0x0) 505.867576ms ago: executing program 0 (id=1225): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fdffff1f180100002020692500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000002d00000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$9p(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0x40a45323, &(0x7f00000006c0)={{0x80}, 'port1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 379.244064ms ago: executing program 0 (id=1226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x3ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000001c0), 0x56) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000340)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 77.698733ms ago: executing program 0 (id=1227): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc\x00', 0x4) capset(&(0x7f0000000d00)={0x19980330}, &(0x7f0000000d40)={0x200002, 0x200003, 0x803, 0x4, 0x1}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)='127.0.0.1', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000640), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1', 0x1) 0s ago: executing program 0 (id=1228): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./drv/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0000:00:1f.3', 0xc) kernel console output (not intermixed with test programs): 0x8B has invalid maxpacket 16 [ 137.938646][ T5742] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 137.942208][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.942228][ T5742] usb 9-1: Product: syz [ 137.942239][ T5742] usb 9-1: Manufacturer: syz [ 137.942250][ T5742] usb 9-1: SerialNumber: syz [ 137.951256][ T7800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.172877][ T7796] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.411566][ T5742] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0d:07 [ 138.553207][ T7806] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16 [ 138.601128][ T5742] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 138.601215][ T5742] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 138.601433][ T5742] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 138.601444][ T5742] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 138.622934][ T5742] usb 9-1: USB disconnect, device number 3 [ 138.628719][ T5742] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 138.747995][ T5742] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 139.016564][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 139.293753][ T7824] device-mapper: ioctl: Unable to rename non-existent device, syzc2 to uuid LVM-syzc3 [ 139.702770][ T7827] device-mapper: table: 248:3: ram4 too small for target: start=0, len=10368, dev_size=8192 [ 139.702801][ T7827] device-mapper: core: Cannot calculate initial queue limits [ 139.702810][ T7827] device-mapper: ioctl: unable to set up device queue for new table. [ 139.829247][ T43] audit: type=1326 audit(1793019898.817:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.133707][ T7845] ptp ptp0: guarantee physical clock free running [ 140.438549][ T43] audit: type=1326 audit(1793019899.417:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438584][ T43] audit: type=1326 audit(1793019899.417:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438603][ T43] audit: type=1326 audit(1793019899.417:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438623][ T43] audit: type=1326 audit(1793019899.417:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438643][ T43] audit: type=1326 audit(1793019899.427:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438662][ T43] audit: type=1326 audit(1793019899.427:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438681][ T43] audit: type=1326 audit(1793019899.427:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438700][ T43] audit: type=1326 audit(1793019899.427:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.438719][ T43] audit: type=1326 audit(1793019899.427:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7fc00000 [ 140.856017][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 141.030391][ T29] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 141.038312][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.038327][ T29] usb 8-1: Product: syz [ 141.038334][ T29] usb 8-1: Manufacturer: syz [ 141.038341][ T29] usb 8-1: SerialNumber: syz [ 141.042582][ T29] usb 8-1: USB2VGA dongle found at address 11 [ 141.049578][ T29] usb 8-1: Allocated 8 output buffers [ 141.314601][ T7851] mmap: syz.3.600 (7851) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.420344][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 141.614198][ T29] usb 8-1: Failed to early initialize device [ 141.623203][ T29] usb 8-1: USB disconnect, device number 11 [ 141.646116][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 141.806302][ T9] usb 9-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 141.808327][ T9] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 141.808340][ T9] usb 9-1: config 1 has no interface number 0 [ 141.808357][ T9] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 141.808370][ T9] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 141.808382][ T9] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 141.816387][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.816409][ T9] usb 9-1: Product: syz [ 141.816420][ T9] usb 9-1: Manufacturer: syz [ 141.816432][ T9] usb 9-1: SerialNumber: syz [ 141.828347][ T7860] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 142.067050][ T7858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 142.300156][ T9] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0e:07 [ 142.495114][ T9] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 142.495130][ T9] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 142.501013][ T9] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 142.501028][ T9] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 142.503735][ T7874] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 142.514611][ T9] usb 9-1: USB disconnect, device number 4 [ 142.522478][ T9] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 142.606903][ T9] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 142.907097][ T7879] ptp ptp0: guarantee physical clock free running [ 143.101101][ T7881] xfrm0: entered allmulticast mode [ 143.103676][ T7881] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 143.276985][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 143.364449][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 143.510184][ T5857] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.529035][ T5857] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.529145][ T5857] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.529755][ T5857] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.953955][ T7886] fuse: Invalid rootmode [ 144.216368][ T7890] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.221090][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 144.221105][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 144.601346][ T7900] input: syz1 as /devices/virtual/input/input17 [ 144.640928][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 145.434105][ T7910] Invalid ELF header magic: != ELF [ 145.685948][ T5742] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 145.776942][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.838594][ T5742] usb 7-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 145.839424][ T5742] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.839437][ T5742] usb 7-1: config 1 has no interface number 0 [ 145.839455][ T5742] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.839468][ T5742] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 145.839480][ T5742] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 145.841189][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.841201][ T5742] usb 7-1: Product: syz [ 145.841209][ T5742] usb 7-1: Manufacturer: syz [ 145.841216][ T5742] usb 7-1: SerialNumber: syz [ 145.844438][ T7916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.070751][ T7913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.105883][ T5874] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 146.266830][ T5874] usb 9-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 146.267694][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.267717][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.304747][ T5742] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0f:07 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc3000) [ 146.417887][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 146.417908][ T1128] ata1: failed to read log page 10h (errno=-5) [ 146.417923][ T1128] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 146.417997][ T1128] ata1.00: irq_stat 0x41000008 [ 146.418019][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 146.418029][ T1128] ata1.00: cmd 60/18:70:d6:3f:01/06:00:00:00:00/40 tag 14 ncq dma 798720 in [ 146.418029][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 146.418075][ T1128] ata1.00: status: { DRDY } [ 146.418086][ T1128] ata1.00: error: { ABRT } [ 146.420555][ T1128] ata1.00: configured for UDMA/100 [ 146.421073][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 146.421113][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 146.421205][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 146.421245][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3f d6 00 06 18 00 [ 146.421266][ T1128] I/O error, dev sda, sector 81878 op 0x0:(READ) flags 0x80700 phys_seg 104 prio class 2 [ 146.421721][ T1128] ata1: EH complete [ 146.507180][ T5742] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 146.507333][ T5742] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 146.507652][ T5742] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 146.507770][ T5742] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 146.512281][ T5874] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 146.538637][ T5742] usb 7-1: USB disconnect, device number 13 [ 146.558583][ T5742] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 146.611198][ T5874] wwan wwan0: port wwan0qmi0 attached [ 146.636030][ T5742] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 146.733621][ T5874] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 1e:0c:43:0a:ae:7a [ 146.855228][ T7923] jffs2: notice: (7923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.990601][ T5874] usb 9-1: USB disconnect, device number 5 [ 146.992243][ T5874] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 147.087801][ T5874] wwan wwan0: port wwan0qmi0 disconnected [ 147.408761][ T7939] mac80211_hwsim hwsim5 ..c: renamed from wlan1 [ 147.935879][ T5742] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 147.952710][ T7955] process 'syz.2.625' launched './file0' with NULL argv: empty string added [ 148.095944][ T5742] usb 8-1: Using ep0 maxpacket: 32 [ 148.097617][ T5742] usb 8-1: unable to get BOS descriptor or descriptor too short [ 148.097642][ T5742] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 148.106635][ T5742] usb 8-1: string descriptor 0 read error: -22 [ 148.106700][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.124832][ T5742] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 148.124873][ T5742] dw2102: su3000_power_ctrl: 1, initialized 0 [ 148.124884][ T5742] dvb-usb: bulk message failed: -22 (2/0) [ 148.127629][ T7962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.169814][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.183823][ T5742] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 148.183850][ T5742] usb 8-1: media controller created [ 148.183866][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183874][ T5742] dw2102: i2c transfer failed. [ 148.183880][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183886][ T5742] dw2102: i2c transfer failed. [ 148.183892][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183898][ T5742] dw2102: i2c transfer failed. [ 148.183904][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183910][ T5742] dw2102: i2c transfer failed. [ 148.183915][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183922][ T5742] dw2102: i2c transfer failed. [ 148.183927][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 148.183933][ T5742] dw2102: i2c transfer failed. [ 148.183937][ T5742] dvb-usb: MAC address: 02:02:02:02:02:02 [ 148.223721][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.249328][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 148.249341][ T5742] dw2102: command 0x0e transfer failed. [ 148.249345][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 148.249352][ T5742] dw2102: command 0x0e transfer failed. [ 148.302104][ T7962] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 148.302625][ T7962] overlayfs: failed to look up (tracing) for ino (-66) [ 148.555862][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 148.555879][ T5742] dw2102: command 0x0e transfer failed. [ 148.555884][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 148.555890][ T5742] dw2102: command 0x0e transfer failed. [ 148.555894][ T5742] dvb-usb: bulk message failed: -22 (1/0) [ 148.555900][ T5742] dw2102: command 0x51 transfer failed. [ 148.557282][ T7944] dvb-usb: bulk message failed: -22 (4/0) [ 148.557295][ T7944] dw2102: i2c transfer failed. [ 148.579026][ T5742] DVB: Unable to find symbol ds3000_attach() [ 148.579038][ T5742] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 148.635899][ T5742] rc_core: IR keymap rc-su3000 not found [ 148.635913][ T5742] Registered IR keymap rc-empty [ 148.636437][ T5742] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 148.637523][ T5742] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input18 [ 148.642276][ T5742] dvb-usb: schedule remote query interval to 150 msecs. [ 148.642288][ T5742] dw2102: su3000_power_ctrl: 0, initialized 1 [ 148.642295][ T5742] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 148.646224][ T5742] usb 8-1: USB disconnect, device number 12 [ 148.687470][ T5742] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 148.779032][ T7971] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 148.863526][ T7971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.628'. [ 148.863603][ T7971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.628'. [ 148.863659][ T7971] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 148.894760][ T7972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.629'. [ 149.735977][ T5874] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 149.886546][ T5874] usb 7-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 149.887433][ T5874] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 149.887446][ T5874] usb 7-1: config 1 has no interface number 0 [ 149.887464][ T5874] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 149.887477][ T5874] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 149.887490][ T5874] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 149.889580][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.889592][ T5874] usb 7-1: Product: syz [ 149.889599][ T5874] usb 7-1: Manufacturer: syz [ 149.889607][ T5874] usb 7-1: SerialNumber: syz [ 149.892492][ T7984] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.115129][ T7969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.209366][ T7992] jffs2: notice: (7992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.328582][ T5874] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:10:07 [ 150.522538][ T5874] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 150.522555][ T5874] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 150.522883][ T5874] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 150.522893][ T5874] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 150.527808][ T5874] usb 7-1: USB disconnect, device number 14 [ 150.529533][ T5874] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 150.706754][ T5742] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 151.037127][ T8008] jffs2: notice: (8008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.344283][ T5742] usb 9-1: unable to get BOS descriptor or descriptor too short [ 151.344308][ T5742] usb 9-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 151.344975][ T5742] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 151.344992][ T5742] usb 9-1: can't read configurations, error -71 [ 151.481309][ T5874] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 151.536068][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.415938][ T5742] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 152.495961][ T59] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 152.566037][ T5742] usb 9-1: Using ep0 maxpacket: 32 [ 152.569255][ T5742] usb 9-1: unable to get BOS descriptor or descriptor too short [ 152.569315][ T5742] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 152.573134][ T5742] usb 9-1: string descriptor 0 read error: -22 [ 152.573226][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.585285][ T5742] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 152.585318][ T5742] dw2102: su3000_power_ctrl: 1, initialized 0 [ 152.585331][ T5742] dvb-usb: bulk message failed: -22 (2/0) [ 152.586777][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.587218][ T5742] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 152.587241][ T5742] usb 9-1: media controller created [ 152.587254][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587261][ T5742] dw2102: i2c transfer failed. [ 152.587268][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587274][ T5742] dw2102: i2c transfer failed. [ 152.587280][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587286][ T5742] dw2102: i2c transfer failed. [ 152.587291][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587297][ T5742] dw2102: i2c transfer failed. [ 152.587303][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587309][ T5742] dw2102: i2c transfer failed. [ 152.587314][ T5742] dvb-usb: bulk message failed: -22 (6/0) [ 152.587320][ T5742] dw2102: i2c transfer failed. [ 152.587324][ T5742] dvb-usb: MAC address: 02:02:02:02:02:02 [ 152.600792][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.617580][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 152.617593][ T5742] dw2102: command 0x0e transfer failed. [ 152.617597][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 152.617603][ T5742] dw2102: command 0x0e transfer failed. [ 152.658899][ T59] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 152.658924][ T59] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 152.660193][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.660228][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.660247][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.661345][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.661368][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.661381][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.662293][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.662313][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.662327][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.663234][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.663256][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.663269][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.666268][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.666290][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.666303][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.667097][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.667119][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.667131][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.667867][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.667889][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.667901][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.668637][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.668667][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.668685][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.670320][ T59] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 152.670336][ T59] usb 7-1: Product: syz [ 152.670345][ T59] usb 7-1: Manufacturer: syz [ 152.670354][ T59] usb 7-1: SerialNumber: syz [ 152.672341][ T59] usb 7-1: config 0 descriptor?? [ 152.680177][ T59] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 152.717871][ T8040] xt_connbytes: Forcing CT accounting to be enabled [ 152.718097][ T8040] xt_SECMARK: invalid mode: 0 [ 152.806401][ T8044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.849860][ T8044] md: could not open device unknown-block(1,0). [ 152.849921][ T8044] md: md_import_device returned -16 [ 152.943140][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 152.943155][ T5742] dw2102: command 0x0e transfer failed. [ 152.943159][ T5742] dvb-usb: bulk message failed: -22 (3/0) [ 152.943165][ T5742] dw2102: command 0x0e transfer failed. [ 152.943169][ T5742] dvb-usb: bulk message failed: -22 (1/0) [ 152.943176][ T5742] dw2102: command 0x51 transfer failed. [ 152.944167][ T8025] dvb-usb: bulk message failed: -22 (4/0) [ 152.944185][ T8025] dw2102: i2c transfer failed. [ 152.980613][ T5742] DVB: Unable to find symbol ds3000_attach() [ 152.980624][ T5742] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 153.001874][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.002377][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.056241][ T5742] rc_core: IR keymap rc-su3000 not found [ 153.056254][ T5742] Registered IR keymap rc-empty [ 153.056820][ T5742] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 153.057762][ T5742] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input19 [ 153.058886][ T5742] dvb-usb: schedule remote query interval to 150 msecs. [ 153.058897][ T5742] dw2102: su3000_power_ctrl: 0, initialized 1 [ 153.058903][ T5742] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 153.059642][ T5742] usb 9-1: USB disconnect, device number 7 [ 153.110571][ T5742] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 153.136606][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.154568][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.167210][ T59] usb 7-1: USB disconnect, device number 15 [ 153.171363][ T59] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 153.275923][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.275950][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.275968][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.275985][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.497918][ T8072] mac80211_hwsim hwsim11 ..c: renamed from wlan1 (while UP) [ 153.559874][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 153.615967][ T5884] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 153.805437][ T5884] usb 8-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 153.806581][ T5884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.806608][ T5884] usb 8-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 153.821335][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.821349][ T5884] usb 8-1: Product: syz [ 153.821356][ T5884] usb 8-1: Manufacturer: syz [ 153.821363][ T5884] usb 8-1: SerialNumber: syz [ 153.837597][ T5884] usb-storage 8-1:1.0: USB Mass Storage device detected [ 153.838383][ T8077] netlink: 'syz.0.647': attribute type 6 has an invalid length. [ 153.862634][ T5884] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 153.864947][ T5884] scsi host7: usb-storage 8-1:1.0 [ 154.102493][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 154.155068][ T8031] Process accounting resumed [ 154.573167][ T5742] usb 8-1: USB disconnect, device number 13 [ 155.447085][ T65] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:142a4d80-09ac-45a4-8cb7-41950aa4a281. [ 155.496078][ T8084] nvme nvme0: creating 4 I/O queues. [ 155.515252][ T8084] nvme nvme0: new ctrl: "testsubsys" [ 156.303321][ T8101] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 159.155914][ T859] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.315934][ T859] usb 5-1: Using ep0 maxpacket: 32 [ 159.318030][ T859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.318068][ T859] usb 5-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 159.319007][ T859] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 159.319065][ T859] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.321760][ T859] usb 5-1: language id specifier not provided by device, defaulting to English [ 159.323376][ T859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.323398][ T859] usb 5-1: Product: syz [ 159.323411][ T859] usb 5-1: Manufacturer: І [ 159.323424][ T859] usb 5-1: SerialNumber: syz [ 159.445347][ T43] kauditd_printk_skb: 4403 callbacks suppressed [ 159.445361][ T43] audit: type=1400 audit(1793019918.427:4424): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8142 comm="syz.4.666" name="p" offset=33 [ 159.502173][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 159.745290][ T8151] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 159.752021][ T8151] FAULT_INJECTION: forcing a failure. [ 159.752021][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 159.752043][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.3.667 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 159.752061][ T8151] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 159.752066][ T8151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.752073][ T8151] Call Trace: [ 159.752077][ T8151] [ 159.752082][ T8151] dump_stack_lvl+0x100/0x190 [ 159.752103][ T8151] should_fail_ex.cold+0x5/0xa [ 159.752130][ T8151] should_failslab+0xc2/0x120 [ 159.752149][ T8151] __kmalloc_noprof+0xfc/0x840 [ 159.752162][ T8151] ? __pfx_genl_unbind+0x10/0x10 [ 159.752177][ T8151] ? __pfx_genl_release+0x10/0x10 [ 159.752191][ T8151] ? ops_init+0x77/0x5f0 [ 159.752209][ T8151] ops_init+0x77/0x5f0 [ 159.752224][ T8151] setup_net+0x118/0x3a0 [ 159.752238][ T8151] ? __pfx_setup_net+0x10/0x10 [ 159.752253][ T8151] ? bpf_lsm_namespace_init+0x9/0x10 [ 159.752266][ T8151] copy_net_ns+0x340/0x7a0 [ 159.752283][ T8151] create_new_namespaces+0x3ea/0xac0 [ 159.752303][ T8151] unshare_nsproxy_namespaces+0xf6/0x210 [ 159.752337][ T8151] ksys_unshare+0x44f/0x980 [ 159.752349][ T8151] ? __pfx_ksys_unshare+0x10/0x10 [ 159.752364][ T8151] ? __might_fault+0xc5/0x140 [ 159.752386][ T8151] __ia32_sys_unshare+0x30/0x40 [ 159.752403][ T8151] __do_fast_syscall_32+0x14b/0x8c0 [ 159.752424][ T8151] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.752445][ T8151] do_fast_syscall_32+0x32/0x70 [ 159.752467][ T8151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.752490][ T8151] RIP: 0023:0xf7f92fbc [ 159.752504][ T8151] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 159.752515][ T8151] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 159.752527][ T8151] RAX: ffffffffffffffda RBX: 000000004a000200 RCX: 0000000000000000 [ 159.752535][ T8151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.752541][ T8151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.752547][ T8151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.752553][ T8151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.752568][ T8151] [ 159.794105][ T8151] sit1: entered allmulticast mode [ 159.820470][ T859] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.870754][ T859] usb 5-1: USB disconnect, device number 13 [ 160.390420][ T8158] usb usb4: usbfs: process 8158 (syz.4.669) did not claim interface 0 before use [ 160.573703][ T8163] syzkaller0: entered promiscuous mode [ 160.573719][ T8163] syzkaller0: entered allmulticast mode [ 161.105936][ T8055] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 161.135955][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.255900][ T8055] usb 7-1: Using ep0 maxpacket: 16 [ 161.256538][ T8055] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 161.258039][ T8055] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.258064][ T8055] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.260142][ T8055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.260162][ T8055] usb 7-1: Product: syz [ 161.260173][ T8055] usb 7-1: Manufacturer: syz [ 161.260184][ T8055] usb 7-1: SerialNumber: syz [ 161.295159][ T8055] usb 7-1: 0:2 : does not exist [ 161.345901][ T5884] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 161.455973][ T5144] Bluetooth: hci4: command tx timeout [ 161.587975][ T8165] jffs2: notice: (8165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.721731][ T5884] usb 8-1: unable to get BOS descriptor or descriptor too short [ 161.721770][ T5884] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 161.723944][ T5884] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 161.723973][ T5884] usb 8-1: can't read configurations, error -71 [ 162.070891][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 162.582757][ T36] IPVS: starting estimator thread 0... [ 162.663989][ T5144] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 162.668977][ T8186] IPVS: using max 28 ests per chain, 67200 per kthread [ 163.739469][ T50] usb 7-1: USB disconnect, device number 16 [ 163.882561][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 163.943730][ T8206] syzkaller0: entered promiscuous mode [ 163.943745][ T8206] syzkaller0: entered allmulticast mode [ 163.944944][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 164.127626][ T8200] Invalid ELF header magic: != ELF [ 164.239921][ T8215] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 164.239938][ T8215] device-mapper: ioctl: error adding target to table [ 164.253076][ T43] audit: type=1326 audit(1793019923.231:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.684" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x0 [ 165.161837][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 165.161903][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 165.845935][ T5874] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 165.998325][ T5874] usb 8-1: Using ep0 maxpacket: 16 [ 165.998798][ T5874] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 165.999603][ T5874] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.999614][ T5874] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.003018][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.003031][ T5874] usb 8-1: Product: syz [ 166.003038][ T5874] usb 8-1: Manufacturer: syz [ 166.003045][ T5874] usb 8-1: SerialNumber: syz [ 166.006932][ T5874] usb 8-1: 0:2 : does not exist [ 167.100940][ T8258] null_blk: my_zoned_dev: using native zone append [ 167.131197][ T8258] null_blk: disk my_zoned_dev created [ 167.292128][ T8266] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 167.364541][ T8269] Invalid ELF header magic: != ELF [ 168.501843][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 168.713822][ T5874] usb 8-1: USB disconnect, device number 16 [ 169.266023][ T5874] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 169.416697][ T5874] usb 8-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 169.417682][ T5874] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 169.417702][ T5874] usb 8-1: config 0 has no interface number 0 [ 169.417731][ T5874] usb 8-1: config 0 interface 41 has no altsetting 0 [ 169.422788][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.422815][ T5874] usb 8-1: Product: syz [ 169.422827][ T5874] usb 8-1: Manufacturer: syz [ 169.422838][ T5874] usb 8-1: SerialNumber: syz [ 169.425044][ T5874] usb 8-1: config 0 descriptor?? [ 169.876133][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 169.976098][ T8287] lo: entered promiscuous mode [ 169.988018][ T8287] tunl0: entered promiscuous mode [ 169.993772][ T8287] gre0: entered promiscuous mode [ 170.010158][ T8287] gretap0: entered promiscuous mode [ 170.019869][ T8287] erspan0: entered promiscuous mode [ 170.026949][ T8287] ip_vti0: entered promiscuous mode [ 170.028403][ T8287] ip6_vti0: entered promiscuous mode [ 170.175319][ T8287] sit0: entered promiscuous mode [ 170.179803][ T8287] ip6tnl0: entered promiscuous mode [ 170.181091][ T8287] ip6gre0: entered promiscuous mode [ 170.213731][ T8287] syz_tun: entered promiscuous mode [ 170.218062][ T8287] ip6gretap0: entered promiscuous mode [ 170.219700][ T8287] vcan0: entered promiscuous mode [ 170.221383][ T8287] bond0: entered promiscuous mode [ 170.221393][ T8287] bond_slave_0: entered promiscuous mode [ 170.221580][ T8287] bond_slave_1: entered promiscuous mode [ 170.223258][ T8287] team0: entered promiscuous mode [ 170.223268][ T8287] team_slave_0: entered promiscuous mode [ 170.223399][ T8287] team_slave_1: entered promiscuous mode [ 170.225120][ T8287] dummy0: entered promiscuous mode [ 170.236163][ T8287] nlmon0: entered promiscuous mode [ 170.237201][ T8287] batadv0: entered promiscuous mode [ 170.238820][ T8287] veth0: entered promiscuous mode [ 170.240293][ T8287] veth1: entered promiscuous mode [ 170.254716][ T8287] wg0: entered promiscuous mode [ 170.258339][ T8287] wg1: entered promiscuous mode [ 170.259990][ T8287] wg2: entered promiscuous mode [ 170.263130][ T8287] veth0_to_bridge: entered promiscuous mode [ 170.273114][ T8287] bridge_slave_0: entered promiscuous mode [ 170.274994][ T8287] veth1_to_bridge: entered promiscuous mode [ 170.284635][ T8287] bridge_slave_1: entered promiscuous mode [ 170.289281][ T8287] veth0_to_bond: entered promiscuous mode [ 170.293687][ T8287] veth1_to_bond: entered promiscuous mode [ 170.302131][ T8287] veth0_to_team: entered promiscuous mode [ 170.309280][ T8287] veth1_to_team: entered promiscuous mode [ 170.315176][ T8287] veth0_to_batadv: entered promiscuous mode [ 170.322071][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.322131][ T8287] batadv_slave_0: entered promiscuous mode [ 170.323814][ T8287] veth1_to_batadv: entered promiscuous mode [ 170.326164][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.326194][ T8287] batadv_slave_1: entered promiscuous mode [ 170.327953][ T8287] xfrm0: entered promiscuous mode [ 170.329172][ T8287] veth0_to_hsr: entered promiscuous mode [ 170.331696][ T8287] veth1_to_hsr: entered promiscuous mode [ 170.334894][ T8287] hsr0: entered promiscuous mode [ 170.336692][ T8287] veth1_virt_wifi: entered promiscuous mode [ 170.338572][ T8287] veth0_virt_wifi: entered promiscuous mode [ 170.340100][ T8287] virt_wifi0: entered promiscuous mode [ 170.343676][ T8287] vlan0: entered promiscuous mode [ 170.345119][ T8287] vlan1: entered promiscuous mode [ 170.350503][ T8287] macvlan0: entered promiscuous mode [ 170.353824][ T8287] macvlan1: entered promiscuous mode [ 170.355378][ T8287] ipvlan0: entered promiscuous mode [ 170.355509][ T8287] ipvlan1: entered promiscuous mode [ 170.362962][ T8287] macvtap0: entered promiscuous mode [ 170.365715][ T8287] macsec0: entered promiscuous mode [ 170.373248][ T8287] geneve0: entered promiscuous mode [ 170.376538][ T8287] geneve1: entered promiscuous mode [ 170.379221][ T8287] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 170.381277][ T8287] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 170.383378][ T8287] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 170.385247][ T8287] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 170.390629][ T8287] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 170.390898][ T8287] ip6gre1: entered promiscuous mode [ 170.392571][ T8287] sit1: entered promiscuous mode [ 170.406057][ T5876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.406102][ T5876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.406128][ T5876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.406185][ T5876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.483115][ T5874] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 170.483257][ T5874] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 170.495006][ T5874] usb 8-1: USB disconnect, device number 17 [ 171.098244][ T8326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 171.137148][ T65] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:142a4d80-09ac-45a4-8cb7-41950aa4a281. [ 171.139673][ T8326] nvme nvme1: creating 4 I/O queues. [ 171.144208][ T8326] nvme nvme1: new ctrl: "testsubsys" [ 171.295930][ T8312] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 172.395944][ T8312] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.395984][ T8312] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 172.407929][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.407973][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.407995][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.434323][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.434369][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.434391][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.769938][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.769978][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.770000][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.772604][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.772644][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.772666][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.774033][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.774070][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.774091][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.775493][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.775527][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.775548][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.777124][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.777155][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.777172][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.778077][ T8312] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.778107][ T8312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.778123][ T8312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.779933][ T8312] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.779950][ T8312] usb 8-1: Product: syz [ 172.779960][ T8312] usb 8-1: Manufacturer: syz [ 172.779969][ T8312] usb 8-1: SerialNumber: syz [ 172.785064][ T8312] usb 8-1: config 0 descriptor?? [ 172.791871][ T8312] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 173.034199][ T8334] lo: left promiscuous mode [ 173.034395][ T8334] tunl0: left promiscuous mode [ 173.034565][ T8334] gre0: left promiscuous mode [ 173.034704][ T8334] gretap0: left promiscuous mode [ 173.034856][ T8334] erspan0: left promiscuous mode [ 173.035023][ T8334] ip_vti0: left promiscuous mode [ 173.035203][ T8334] ip6_vti0: left promiscuous mode [ 173.035346][ T8334] sit0: left promiscuous mode [ 173.035476][ T8334] ip6tnl0: left promiscuous mode [ 173.035647][ T8334] ip6gre0: left promiscuous mode [ 173.036181][ T8334] syz_tun: left promiscuous mode [ 173.036359][ T8334] ip6gretap0: left promiscuous mode [ 173.036505][ T8334] vcan0: left promiscuous mode [ 173.036696][ T8334] bond0: left promiscuous mode [ 173.037067][ T8334] team0: left promiscuous mode [ 173.037367][ T8334] dummy0: left promiscuous mode [ 173.037488][ T8334] nlmon0: left promiscuous mode [ 173.037599][ T8334] batadv0: left promiscuous mode [ 173.037674][ T8334] veth0: left promiscuous mode [ 173.037779][ T8334] veth1: left promiscuous mode [ 173.037844][ T8334] wg0: left promiscuous mode [ 173.037962][ T8334] wg1: left promiscuous mode [ 173.038083][ T8334] wg2: left promiscuous mode [ 173.038149][ T8334] veth0_to_bridge: left promiscuous mode [ 173.038255][ T8334] bridge_slave_0: left promiscuous mode [ 173.038356][ T8334] veth1_to_bridge: left promiscuous mode [ 173.038430][ T8334] bridge_slave_1: left promiscuous mode [ 173.038560][ T8334] veth0_to_bond: left promiscuous mode [ 173.038675][ T8334] bond_slave_0: left promiscuous mode [ 173.038746][ T8334] veth1_to_bond: left promiscuous mode [ 173.038868][ T8334] bond_slave_1: left promiscuous mode [ 173.038974][ T8334] veth0_to_team: left promiscuous mode [ 173.039117][ T8334] team_slave_0: left promiscuous mode [ 173.039187][ T8334] veth1_to_team: left promiscuous mode [ 173.040315][ T8334] team_slave_1: left promiscuous mode [ 173.040447][ T8334] veth0_to_batadv: left promiscuous mode [ 173.040555][ T8334] batadv_slave_0: left promiscuous mode [ 173.040624][ T8334] veth1_to_batadv: left promiscuous mode [ 173.040730][ T8334] batadv_slave_1: left promiscuous mode [ 173.040866][ T8334] xfrm0: left promiscuous mode [ 173.040940][ T8334] veth0_to_hsr: left promiscuous mode [ 173.041114][ T8334] veth1_to_hsr: left promiscuous mode [ 173.041328][ T8334] hsr0: left promiscuous mode [ 173.041396][ T8334] veth1_virt_wifi: left promiscuous mode [ 173.041519][ T8334] veth0_virt_wifi: left promiscuous mode [ 173.041661][ T8334] virt_wifi0: left promiscuous mode [ 173.045392][ T8334] vlan0: left promiscuous mode [ 173.045644][ T8334] vlan1: left promiscuous mode [ 173.046016][ T8334] macvlan0: left promiscuous mode [ 173.046134][ T8334] macvlan1: left promiscuous mode [ 173.046206][ T8334] ipvlan0: left promiscuous mode [ 173.046317][ T8334] ipvlan1: left promiscuous mode [ 173.046609][ T8334] macvtap0: left promiscuous mode [ 173.046683][ T8334] macsec0: left promiscuous mode [ 173.046790][ T8334] geneve0: left promiscuous mode [ 173.046914][ T8334] geneve1: left promiscuous mode [ 173.047001][ T8334] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 173.047120][ T8334] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 173.047231][ T8334] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 173.047297][ T8334] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 173.047399][ T8334] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 173.047477][ T8334] ip6gre1: left promiscuous mode [ 173.047485][ T8334] ip6gre1: left allmulticast mode [ 173.047599][ T8334] sit1: left promiscuous mode [ 173.047607][ T8334] sit1: left allmulticast mode [ 173.166714][ T8312] usb 8-1: USB disconnect, device number 18 [ 173.169425][ T8312] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 173.637864][ T8363] syzkaller1: entered promiscuous mode [ 173.637878][ T8363] syzkaller1: entered allmulticast mode [ 173.699623][ T68] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 173.699643][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u34:0 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 173.699660][ T68] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 173.699665][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.699673][ T68] Workqueue: hci1 hci_rx_work [ 173.699688][ T68] Call Trace: [ 173.699692][ T68] [ 173.699697][ T68] dump_stack_lvl+0x100/0x190 [ 173.699715][ T68] sysfs_warn_dup.cold+0x1c/0x28 [ 173.699733][ T68] sysfs_create_dir_ns+0x24b/0x2b0 [ 173.699745][ T68] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.699755][ T68] ? find_held_lock+0x2b/0x80 [ 173.699769][ T68] ? kobject_add_internal+0x25f/0x930 [ 173.699784][ T68] ? kobject_add_internal+0x25f/0x930 [ 173.699800][ T68] ? do_raw_spin_unlock+0x145/0x1e0 [ 173.699814][ T68] kobject_add_internal+0x2c8/0x930 [ 173.699832][ T68] kobject_add+0x16a/0x1e0 [ 173.699847][ T68] ? __pfx_kobject_add+0x10/0x10 [ 173.699861][ T68] ? class_to_subsys+0x10f/0x150 [ 173.699875][ T68] ? kobject_put+0xb9/0x640 [ 173.699888][ T68] ? _raw_spin_unlock+0x28/0x50 [ 173.699908][ T68] device_add+0x294/0x1970 [ 173.699919][ T68] ? __pfx_dev_set_name+0x10/0x10 [ 173.699931][ T68] ? __pfx_device_add+0x10/0x10 [ 173.699942][ T68] ? mgmt_send_event_skb+0x2fb/0x460 [ 173.699960][ T68] hci_conn_add_sysfs+0x1a3/0x260 [ 173.699975][ T68] le_conn_complete_evt+0x12f9/0x2200 [ 173.699991][ T68] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 173.700002][ T68] ? hci_event_packet+0x186/0xcd0 [ 173.700017][ T68] hci_le_conn_complete_evt+0x23c/0x3a0 [ 173.700030][ T68] ? skb_pull_data+0x15f/0x1e0 [ 173.700048][ T68] hci_le_meta_evt+0x34a/0x5f0 [ 173.700061][ T68] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 173.700075][ T68] hci_event_packet+0x51c/0xcd0 [ 173.700088][ T68] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 173.700101][ T68] ? __pfx_hci_event_packet+0x10/0x10 [ 173.700115][ T68] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.700129][ T68] hci_rx_work+0x6ea/0x10c0 [ 173.700143][ T68] process_one_work+0xac7/0x1b10 [ 173.700164][ T68] ? __pfx_process_one_work+0x10/0x10 [ 173.700180][ T68] ? lock_acquire+0x1d1/0x380 [ 173.700195][ T68] ? __pfx_hci_rx_work+0x10/0x10 [ 173.700208][ T68] worker_thread+0x5ef/0xe50 [ 173.700228][ T68] ? kthread+0x13a/0x450 [ 173.700240][ T68] ? __pfx_worker_thread+0x10/0x10 [ 173.700253][ T68] kthread+0x373/0x450 [ 173.700266][ T68] ? __pfx_kthread+0x10/0x10 [ 173.700279][ T68] ret_from_fork+0x730/0xd60 [ 173.700291][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 173.700303][ T68] ? __switch_to+0x800/0x10e0 [ 173.700318][ T68] ? __pfx_kthread+0x10/0x10 [ 173.700331][ T68] ret_from_fork_asm+0x1a/0x30 [ 173.700350][ T68] [ 173.700362][ T68] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.700380][ T68] Bluetooth: hci1: failed to register connection device [ 173.799848][ T8377] tipc: Enabling of bearer rejected, failed to enable media [ 173.882514][ T8377] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 173.890836][ T8380] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 174.017133][ T8380] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 174.297868][ T8359] Process accounting resumed [ 174.495764][ T43] audit: type=1400 audit(1793019933.471:4426): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8398 comm="syz.3.727" name="p" offset=33 [ 174.554379][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 175.105925][ T5891] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 175.146260][ T68] Bluetooth: hci1: command 0x0406 tx timeout [ 175.476995][ T5891] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.479174][ T5891] usb 7-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 175.479262][ T5891] usb 7-1: config 0 interface 0 has no altsetting 0 [ 175.482098][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.482111][ T5891] usb 7-1: Product: syz [ 175.482191][ T5891] usb 7-1: Manufacturer: syz [ 175.482199][ T5891] usb 7-1: SerialNumber: syz [ 175.501221][ T5891] usb 7-1: config 0 descriptor?? [ 175.719407][ T5891] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 175.751332][ T50] usb 7-1: USB disconnect, device number 17 [ 175.803223][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.343672][ T8427] syzkaller1: entered promiscuous mode [ 176.343695][ T8427] syzkaller1: entered allmulticast mode [ 176.488205][ T68] Bluetooth: hci1: unexpected cc 0x041a length: 8 > 7 [ 176.488236][ T68] Bluetooth: hci1: unexpected event for opcode 0x041a [ 176.531208][ T68] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 177.093070][ T8454] 9pnet: Found fid 0 not clunked [ 177.197208][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.198278][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.198972][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.314866][ T8461] infiniband sy0: set down [ 177.314903][ T50] wg0 speed is unknown, defaulting to 1000 [ 177.314937][ T8461] infiniband sy0: added wg0 [ 177.325749][ T8461] smbdirect: ib_dev[sy0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 177.325857][ T8461] smbdirect: ib_dev[sy0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 177.325894][ T8461] smbdirect: ib_dev[sy0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 177.346975][ T8461] RDS/IB: sy0: added [ 177.347022][ T8461] smc: adding ib device sy0 with port count 1 [ 177.347038][ T8461] smc: ib device sy0 port 1 has no pnetid [ 177.349209][ T50] wg0 speed is unknown, defaulting to 1000 [ 177.352538][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.436997][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.548748][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.629960][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.712975][ T8461] wg0 speed is unknown, defaulting to 1000 [ 177.785706][ T8490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.754'. [ 179.031137][ T8506] MTDSB: Device #1 doesn't appear to exist [ 179.031137][ T8506] [ 179.855892][ T68] Bluetooth: hci1: command 0x0406 tx timeout [ 180.858603][ T8548] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 180.858741][ T8548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.776'. [ 180.959299][ T8561] jffs2: notice: (8561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.972341][ T8563] ALSA: mixer_oss: invalid OSS volume '' [ 180.972360][ T8563] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 180.972390][ T8563] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 180.972412][ T8563] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 180.972426][ T8563] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 180.972436][ T8563] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 180.972459][ T8563] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 180.972471][ T8563] ALSA: mixer_oss: invalid OSS volume '|~\' [ 180.972501][ T8563] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 180.972511][ T8563] ALSA: mixer_oss: invalid OSS volume 'I :' [ 180.972526][ T8563] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 180.972551][ T8563] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 180.972571][ T8563] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 180.972608][ T8563] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 181.112949][ T8576] xt_policy: too many policy elements [ 181.200849][ T68] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 181.225286][ T8589] device-mapper: table: 248:6: integrity: Device lookup failed (-EBUSY) [ 181.225309][ T8589] device-mapper: ioctl: error adding target to table [ 181.818290][ T8606] xt_socket: unknown flags 0xfa [ 182.194160][ T8614] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 182.266846][ T8625] device-mapper: raid: Choosing default region size of 4MiB [ 182.267445][ T8625] device-mapper: table: 248:7: raid: Component device(s) too small (-EINVAL) [ 182.267459][ T8625] device-mapper: ioctl: error adding target to table [ 182.416077][ T5742] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.435968][ T50] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 182.444413][ T8641] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.586691][ T5742] usb 5-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 182.587633][ T5742] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 182.587673][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.588645][ T5742] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 182.588666][ T5742] usb 5-1: Manufacturer: syz [ 182.590949][ T5742] usb 5-1: config 0 descriptor?? [ 182.618496][ T50] usb 8-1: New USB device found: idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 182.622057][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.622080][ T50] usb 8-1: Product: syz [ 182.622091][ T50] usb 8-1: Manufacturer: syz [ 182.622103][ T50] usb 8-1: SerialNumber: syz [ 182.624170][ T50] usb 8-1: config 0 descriptor?? [ 182.649683][ T8646] device-mapper: table: 248:8: crypt: Error decoding and setting key (-ENOKEY) [ 182.649699][ T8646] device-mapper: ioctl: error adding target to table [ 182.676120][ T5742] rc_core: IR keymap rc-hauppauge not found [ 182.676137][ T5742] Registered IR keymap rc-empty [ 182.678125][ T5742] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 182.680856][ T5742] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 182.799715][ T50] usb 5-1: USB disconnect, device number 14 [ 182.831302][ T5877] usb 8-1: USB disconnect, device number 19 [ 182.905993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.330418][ T8669] device-mapper: table: 248:9: striped: Couldn't parse stripe destination (-ENOENT) [ 183.330442][ T8669] device-mapper: ioctl: error adding target to table [ 183.366989][ T8674] rdma_rxe: rxe_newlink: failed to add wg0 [ 183.378594][ T8680] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 183.430392][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.839'. [ 183.446190][ T8694] jffs2: notice: (8694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.473013][ T8700] xt_policy: too many policy elements [ 183.942764][ T8780] jffs2: notice: (8780) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.015935][ T8313] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 184.166913][ T8313] usb 9-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 184.167895][ T8313] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.167931][ T8313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.172878][ T8313] metro_usb 9-1:1.0: Metrologic USB to Serial converter detected [ 184.186527][ T8313] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 184.345975][ T5877] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 184.377131][ T8313] usb 9-1: USB disconnect, device number 9 [ 184.380813][ T8313] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 184.381306][ T8313] metro_usb 9-1:1.0: device disconnected [ 184.496010][ T5877] usb 8-1: Using ep0 maxpacket: 8 [ 184.496781][ T5877] usb 8-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 184.497740][ T5877] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.497763][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.497784][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.499703][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.499722][ T5877] usb 8-1: Product: syz [ 184.499733][ T5877] usb 8-1: Manufacturer: syz [ 184.499745][ T5877] usb 8-1: SerialNumber: syz [ 184.502369][ T5877] usb 8-1: config 0 descriptor?? [ 184.503073][ T8798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.555875][ T5877] rc_core: IR keymap rc-streamzap not found [ 184.555888][ T5877] Registered IR keymap rc-empty [ 184.556549][ T5877] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 184.557359][ T5877] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 184.713051][ T5877] usb 8-1: USB disconnect, device number 20 [ 184.769649][ T8802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.886'. [ 184.806359][ T8804] device-mapper: table: 248:11: integrity: Device lookup failed (-EBUSY) [ 184.806380][ T8804] device-mapper: ioctl: error adding target to table [ 184.917910][ T8813] device-mapper: table: 248:12: ram9 too small for target: start=0, len=14344, dev_size=8192 [ 184.917930][ T8813] device-mapper: core: Cannot calculate initial queue limits [ 184.917935][ T8813] device-mapper: ioctl: unable to set up device queue for new table. [ 185.410549][ T8871] netlink: 'syz.4.918': attribute type 4 has an invalid length. [ 185.411454][ T8870] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 185.411470][ T8870] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 185.411487][ T8870] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 185.411497][ T8870] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 185.411503][ T8870] page dumped because: unmovable page [ 185.411525][ T8870] page_owner info is not present (never set?) [ 185.516084][ T5742] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 185.686369][ T5742] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.686397][ T5742] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 185.687366][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.687395][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.687411][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.689287][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.689310][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.689323][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.690022][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.690042][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.690054][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.690796][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.690816][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.690829][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.691618][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.691638][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.691651][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.692512][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.692545][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.692564][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.693412][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.693433][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.693445][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.694237][ T5742] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.694257][ T5742] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.694270][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.696047][ T5742] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.696060][ T5742] usb 8-1: Product: syz [ 185.696067][ T5742] usb 8-1: Manufacturer: syz [ 185.696074][ T5742] usb 8-1: SerialNumber: syz [ 185.699535][ T5742] usb 8-1: config 0 descriptor?? [ 185.705278][ T5742] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.956846][ C3] usb 8-1: yurex_control_callback - control failed: -71 [ 185.957400][ T50] usb 8-1: USB disconnect, device number 21 [ 185.960357][ T50] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 186.218525][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.375905][ T8963] device-mapper: table: 248:13: crypt: Error decoding and setting key (-ENOKEY) [ 186.375927][ T8963] device-mapper: ioctl: error adding target to table [ 186.556867][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 186.712691][ T9003] FAULT_INJECTION: forcing a failure. [ 186.712691][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 186.712729][ T9003] CPU: 0 UID: 0 PID: 9003 Comm: syz.2.975 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 186.712756][ T9003] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 186.712764][ T9003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.712773][ T9003] Call Trace: [ 186.712779][ T9003] [ 186.712786][ T9003] dump_stack_lvl+0x100/0x190 [ 186.712815][ T9003] should_fail_ex.cold+0x5/0xa [ 186.712839][ T9003] should_failslab+0xc2/0x120 [ 186.712867][ T9003] __kmalloc_cache_noprof+0x91/0x6d0 [ 186.712888][ T9003] ? snd_timer_user_open+0x53/0x160 [ 186.712911][ T9003] ? __pfx_snd_timer_user_open+0x10/0x10 [ 186.712931][ T9003] snd_timer_user_open+0x53/0x160 [ 186.712951][ T9003] snd_open+0x201/0x450 [ 186.712970][ T9003] ? __pfx_snd_open+0x10/0x10 [ 186.712987][ T9003] chrdev_open+0x234/0x6a0 [ 186.713012][ T9003] ? __pfx_apparmor_file_open+0x10/0x10 [ 186.713035][ T9003] ? __pfx_chrdev_open+0x10/0x10 [ 186.713061][ T9003] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 186.713086][ T9003] do_dentry_open+0x674/0x1470 [ 186.713109][ T9003] ? __pfx_chrdev_open+0x10/0x10 [ 186.713137][ T9003] vfs_open_consume+0xcc/0x460 [ 186.713156][ T9003] path_openat+0x1547/0x23f0 [ 186.713185][ T9003] ? __pfx_path_openat+0x10/0x10 [ 186.713219][ T9003] do_file_open+0x20e/0x430 [ 186.713245][ T9003] ? __pfx_do_file_open+0x10/0x10 [ 186.713286][ T9003] ? _raw_spin_unlock+0x28/0x50 [ 186.713311][ T9003] ? alloc_fd+0x471/0x7a0 [ 186.713343][ T9003] do_sys_openat2+0x163/0x1d0 [ 186.713362][ T9003] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.713381][ T9003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.713406][ T9003] __ia32_compat_sys_openat+0x12d/0x210 [ 186.713426][ T9003] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 186.713456][ T9003] __do_fast_syscall_32+0x14b/0x8c0 [ 186.713479][ T9003] do_fast_syscall_32+0x32/0x70 [ 186.713500][ T9003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.713522][ T9003] RIP: 0023:0xf742efbc [ 186.713534][ T9003] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 186.713551][ T9003] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 186.713569][ T9003] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080021640 [ 186.713580][ T9003] RDX: 00000000000a8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.713591][ T9003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.713602][ T9003] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.713612][ T9003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.713636][ T9003] [ 186.745918][ T50] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 186.753058][ T43] audit: type=1326 audit(1793019945.731:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.753109][ T43] audit: type=1326 audit(1793019945.731:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.754496][ T43] audit: type=1326 audit(1793019945.731:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.754773][ T43] audit: type=1326 audit(1793019945.731:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.754857][ T43] audit: type=1326 audit(1793019945.731:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.755156][ T43] audit: type=1326 audit(1793019945.731:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.756355][ T43] audit: type=1326 audit(1793019945.741:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.756564][ T43] audit: type=1326 audit(1793019945.741:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.758069][ T43] audit: type=1326 audit(1793019945.741:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71877ab code=0x7ffc0000 [ 186.758547][ T43] audit: type=1326 audit(1793019945.741:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9004 comm="syz.2.976" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 186.804399][ T9009] overlay: filesystem on ./bus not supported as upperdir [ 186.905940][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 186.906664][ T50] usb 8-1: New USB device found: idVendor=258a, idProduct=6a88, bcdDevice=0.00 [ 186.909746][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.909775][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.912421][ T50] usb 8-1: config 0 descriptor?? [ 186.994335][ T9016] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 187.067309][ T9016] udc usbip-vudc.0: failed to start g1: -19 [ 187.070447][ T9016] UDC core: g1: couldn't find an available UDC or it's busy [ 187.328953][ T50] input: HID 258a:6a88 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:258A:6A88.0004/input/input22 [ 187.416461][ T5877] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 187.426965][ T50] itetech 0003:258A:6A88.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 187.530369][ T50] usb 8-1: USB disconnect, device number 22 [ 187.586274][ T5877] usb 9-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 187.587083][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.587099][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.587112][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 187.588575][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.588587][ T5877] usb 9-1: Product: syz [ 187.588594][ T5877] usb 9-1: Manufacturer: syz [ 187.588601][ T5877] usb 9-1: SerialNumber: syz [ 187.589945][ T5877] usb 9-1: config 0 descriptor?? [ 187.590465][ T9030] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.656509][ T5877] rc_core: IR keymap rc-streamzap not found [ 187.656521][ T5877] Registered IR keymap rc-empty [ 187.657050][ T5877] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 187.657803][ T5877] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input23 [ 187.804263][ T50] usb 9-1: USB disconnect, device number 10 [ 187.926128][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 187.946161][ T9048] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.993'. [ 188.399876][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 188.402274][ T1128] ata1.00: configured for UDMA/100 [ 188.424902][ T9080] FAULT_INJECTION: forcing a failure. [ 188.424902][ T9080] name failslab, interval 1, probability 0, space 0, times 0 [ 188.424931][ T9080] CPU: 2 UID: 0 PID: 9080 Comm: syz.2.1008 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 188.424952][ T9080] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 188.424958][ T9080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.424966][ T9080] Call Trace: [ 188.424971][ T9080] [ 188.424977][ T9080] dump_stack_lvl+0x100/0x190 [ 188.425002][ T9080] should_fail_ex.cold+0x5/0xa [ 188.425025][ T9080] should_failslab+0xc2/0x120 [ 188.425047][ T9080] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.425064][ T9080] ? x509_cert_parse+0x50/0x910 [ 188.425085][ T9080] x509_cert_parse+0x50/0x910 [ 188.425105][ T9080] x509_key_preparse+0x65/0x9c0 [ 188.425127][ T9080] asymmetric_key_preparse+0xce/0x1d0 [ 188.425141][ T9080] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 188.425158][ T9080] __key_create_or_update+0x3f6/0xe10 [ 188.425183][ T9080] ? __pfx___key_create_or_update+0x10/0x10 [ 188.425204][ T9080] ? lookup_user_key+0x477/0x13e0 [ 188.425223][ T9080] ? __lock_acquire+0x5c0/0x1f40 [ 188.425237][ T9080] ? __pfx_lookup_user_key+0x10/0x10 [ 188.425273][ T9080] key_create_or_update+0x42/0x60 [ 188.425297][ T9080] __do_sys_add_key+0x2e8/0x460 [ 188.425313][ T9080] ? __might_fault+0xc5/0x140 [ 188.425328][ T9080] ? __pfx___do_sys_add_key+0x10/0x10 [ 188.425351][ T9080] __do_fast_syscall_32+0x14b/0x8c0 [ 188.425373][ T9080] do_fast_syscall_32+0x32/0x70 [ 188.425391][ T9080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.425409][ T9080] RIP: 0023:0xf742efbc [ 188.425420][ T9080] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.425433][ T9080] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 188.425449][ T9080] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 188.425459][ T9080] RDX: 00000000800002c0 RSI: 0000000000000006 RDI: 00000000ffffffff [ 188.425469][ T9080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.425477][ T9080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.425486][ T9080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.425505][ T9080] [ 188.442907][ T9083] FAULT_INJECTION: forcing a failure. [ 188.442907][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 188.442937][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.4.1011 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 188.442959][ T9083] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 188.442964][ T9083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.442972][ T9083] Call Trace: [ 188.442977][ T9083] [ 188.442983][ T9083] dump_stack_lvl+0x100/0x190 [ 188.443010][ T9083] should_fail_ex.cold+0x5/0xa [ 188.443026][ T9083] should_failslab+0xc2/0x120 [ 188.443044][ T9083] __kmalloc_node_noprof+0xff/0x870 [ 188.443059][ T9083] ? get_callchain_buffers+0x1e5/0x380 [ 188.443075][ T9083] get_callchain_buffers+0x1e5/0x380 [ 188.443087][ T9083] ? security_capable+0x80/0x260 [ 188.443102][ T9083] stack_map_alloc+0x316/0x610 [ 188.443119][ T9083] map_create+0x874/0x3150 [ 188.443135][ T9083] ? __lock_acquire+0x5c0/0x1f40 [ 188.443149][ T9083] ? __pfx_map_create+0x10/0x10 [ 188.443164][ T9083] ? lock_acquire+0x1d1/0x380 [ 188.443173][ T9083] ? __might_fault+0xc5/0x140 [ 188.443185][ T9083] ? __might_fault+0xc5/0x140 [ 188.443202][ T9083] __sys_bpf+0x14cb/0x4b60 [ 188.443232][ T9083] ? __pfx___sys_bpf+0x10/0x10 [ 188.443247][ T9083] ? find_held_lock+0x2b/0x80 [ 188.443261][ T9083] ? futex_wake+0x4ea/0x5e0 [ 188.443290][ T9083] ? rcu_read_lock_any_held+0x6a/0x90 [ 188.443306][ T9083] ? find_held_lock+0x2b/0x80 [ 188.443319][ T9083] ? ksys_write+0x190/0x250 [ 188.443335][ T9083] ? ksys_write+0x190/0x250 [ 188.443358][ T9083] ? lock_acquire+0x1d1/0x380 [ 188.443369][ T9083] ? __might_fault+0xc5/0x140 [ 188.443380][ T9083] ? find_held_lock+0x2b/0x80 [ 188.443395][ T9083] ? __ia32_sys_bpf+0xcc/0x170 [ 188.443410][ T9083] __ia32_sys_bpf+0xcc/0x170 [ 188.443426][ T9083] ? __might_fault+0x111/0x140 [ 188.443437][ T9083] __do_fast_syscall_32+0x14b/0x8c0 [ 188.443451][ T9083] do_fast_syscall_32+0x32/0x70 [ 188.443464][ T9083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.443477][ T9083] RIP: 0023:0xf745efbc [ 188.443486][ T9083] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.443496][ T9083] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 188.443507][ T9083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180 [ 188.443514][ T9083] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.443520][ T9083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.443527][ T9083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.443533][ T9083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.443547][ T9083] [ 188.507850][ T9089] FAULT_INJECTION: forcing a failure. [ 188.507850][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 188.507872][ T9089] CPU: 2 UID: 0 PID: 9089 Comm: syz.2.1012 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 188.507889][ T9089] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 188.507893][ T9089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.507899][ T9089] Call Trace: [ 188.507904][ T9089] [ 188.507909][ T9089] dump_stack_lvl+0x100/0x190 [ 188.507927][ T9089] should_fail_ex.cold+0x5/0xa [ 188.507943][ T9089] should_failslab+0xc2/0x120 [ 188.507961][ T9089] __kmalloc_noprof+0xfc/0x840 [ 188.507975][ T9089] ? alloc_pipe_info+0x1e7/0x590 [ 188.507993][ T9089] alloc_pipe_info+0x1e7/0x590 [ 188.508010][ T9089] create_pipe_files+0x8c/0x930 [ 188.508027][ T9089] do_pipe2+0xbd/0x1e0 [ 188.508041][ T9089] ? lock_acquire+0x1d1/0x380 [ 188.508051][ T9089] ? __pfx_do_pipe2+0x10/0x10 [ 188.508066][ T9089] ? find_held_lock+0x2b/0x80 [ 188.508079][ T9089] ? __might_fault+0xc5/0x140 [ 188.508093][ T9089] __ia32_sys_pipe2+0x53/0x80 [ 188.508109][ T9089] __do_fast_syscall_32+0x14b/0x8c0 [ 188.508124][ T9089] do_fast_syscall_32+0x32/0x70 [ 188.508136][ T9089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.508164][ T9089] RIP: 0023:0xf742efbc [ 188.508174][ T9089] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.508184][ T9089] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000014b [ 188.508195][ T9089] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 188.508203][ T9089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.508209][ T9089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.508215][ T9089] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.508222][ T9089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.508236][ T9089] [ 188.645416][ T9103] FAULT_INJECTION: forcing a failure. [ 188.645416][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 188.645449][ T9103] CPU: 3 UID: 0 PID: 9103 Comm: syz.2.1019 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 188.645475][ T9103] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 188.645483][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.645493][ T9103] Call Trace: [ 188.645498][ T9103] [ 188.645505][ T9103] dump_stack_lvl+0x100/0x190 [ 188.645536][ T9103] should_fail_ex.cold+0x5/0xa [ 188.645561][ T9103] should_failslab+0xc2/0x120 [ 188.645590][ T9103] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.645611][ T9103] ? __might_fault+0xc5/0x140 [ 188.645630][ T9103] ? tcp_fastopen_reset_cipher+0x54/0x3b0 [ 188.645656][ T9103] tcp_fastopen_reset_cipher+0x54/0x3b0 [ 188.645677][ T9103] do_tcp_setsockopt+0x29c/0x2b50 [ 188.645710][ T9103] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 188.645741][ T9103] ? __lock_acquire+0x5c0/0x1f40 [ 188.645761][ T9103] ? rcu_read_lock_any_held+0x6a/0x90 [ 188.645806][ T9103] ? find_held_lock+0x2b/0x80 [ 188.645843][ T9103] ? find_held_lock+0x2b/0x80 [ 188.645870][ T9103] tcp_setsockopt+0xe2/0x100 [ 188.645894][ T9103] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.645920][ T9103] do_sock_setsockopt+0xf3/0x1d0 [ 188.645938][ T9103] __sys_setsockopt+0x119/0x190 [ 188.645955][ T9103] __ia32_sys_setsockopt+0xbc/0x160 [ 188.645968][ T9103] ? __might_fault+0x111/0x140 [ 188.645979][ T9103] __do_fast_syscall_32+0x14b/0x8c0 [ 188.645995][ T9103] do_fast_syscall_32+0x32/0x70 [ 188.646007][ T9103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.646021][ T9103] RIP: 0023:0xf742efbc [ 188.646032][ T9103] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.646043][ T9103] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 188.646054][ T9103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 188.646060][ T9103] RDX: 0000000000000021 RSI: 0000000080000180 RDI: 0000000000000010 [ 188.646067][ T9103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.646073][ T9103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.646079][ T9103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.646093][ T9103] [ 189.457743][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 189.457970][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 189.463346][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 189.463430][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 189.516459][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 189.518654][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 189.729656][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 189.729736][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 189.778889][ T29] libceph: connect (1)[c::]:6789 error -101 [ 189.779846][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 190.212514][ T9165] fuse: Unknown parameter 'group_i00000000000000000000' [ 190.236289][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 190.236421][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 190.268158][ T9122] ceph: No mds server is up or the cluster is laggy [ 190.268197][ T9126] ceph: No mds server is up or the cluster is laggy [ 190.287313][ T29] libceph: connect (1)[c::]:6789 error -101 [ 190.287430][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 190.666292][ T5742] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 190.817566][ T5742] usb 8-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 190.818290][ T5742] usb 8-1: config 0 has no interfaces? [ 190.818729][ T5742] usb 8-1: config 0 has no interfaces? [ 190.820511][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.820528][ T5742] usb 8-1: Product: syz [ 190.820539][ T5742] usb 8-1: Manufacturer: syz [ 190.820550][ T5742] usb 8-1: SerialNumber: syz [ 190.822676][ T5742] usb 8-1: config 0 descriptor?? [ 191.034766][ T9180] FAULT_INJECTION: forcing a failure. [ 191.034766][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 191.034799][ T9180] CPU: 3 UID: 0 PID: 9180 Comm: syz.3.1043 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 191.034826][ T9180] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 191.034833][ T9180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.034844][ T9180] Call Trace: [ 191.034851][ T9180] [ 191.034858][ T9180] dump_stack_lvl+0x100/0x190 [ 191.034889][ T9180] should_fail_ex.cold+0x5/0xa [ 191.034915][ T9180] should_failslab+0xc2/0x120 [ 191.034942][ T9180] kmem_cache_alloc_noprof+0x92/0x6a0 [ 191.034967][ T9180] ? __kernfs_new_node+0xd2/0xa10 [ 191.034993][ T9180] __kernfs_new_node+0xd2/0xa10 [ 191.035014][ T9180] ? __pfx_stack_trace_save+0x10/0x10 [ 191.035044][ T9180] ? stack_depot_save_flags+0x27/0x9f0 [ 191.035067][ T9180] ? __pfx___kernfs_new_node+0x10/0x10 [ 191.035091][ T9180] ? lock_acquire+0x1d1/0x380 [ 191.035107][ T9180] ? kernfs_root+0x23/0x2a0 [ 191.035126][ T9180] ? find_held_lock+0x2b/0x80 [ 191.035148][ T9180] ? kernfs_root+0xee/0x2a0 [ 191.035165][ T9180] ? kernfs_root+0xee/0x2a0 [ 191.035190][ T9180] kernfs_new_node+0x194/0x200 [ 191.035213][ T9180] ? __pfx_kernfs_new_node+0x10/0x10 [ 191.035251][ T9180] __kernfs_create_file+0x53/0x350 [ 191.035281][ T9180] sysfs_add_file_mode_ns+0x207/0x3c0 [ 191.035316][ T9180] sysfs_create_file_ns+0x145/0x1e0 [ 191.035345][ T9180] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 191.035373][ T9180] ? module_add_driver+0x1e2/0x420 [ 191.035395][ T9180] ? sysfs_do_create_link_sd+0xbb/0x140 [ 191.035421][ T9180] driver_create_file+0x4a/0x70 [ 191.035472][ T9180] bus_add_driver+0x39d/0x620 [ 191.035500][ T9180] driver_register+0x1e2/0x360 [ 191.035530][ T9180] ? rcu_is_watching+0x13/0xc0 [ 191.035557][ T9180] usb_gadget_register_driver_owner+0x132/0x210 [ 191.035579][ T9180] raw_ioctl+0x1a85/0x2b80 [ 191.035602][ T9180] ? __pfx_raw_ioctl+0x10/0x10 [ 191.035622][ T9180] ? __pfx_raw_ioctl+0x10/0x10 [ 191.035640][ T9180] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 191.035666][ T9180] __do_fast_syscall_32+0x14b/0x8c0 [ 191.035690][ T9180] do_fast_syscall_32+0x32/0x70 [ 191.035711][ T9180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.035735][ T9180] RIP: 0023:0xf7f92fbc [ 191.035750][ T9180] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 191.035768][ T9180] RSP: 002b:00000000f5444424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 191.035786][ T9180] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 191.035798][ T9180] RDX: 0000000000000000 RSI: 00000000f741dff4 RDI: 00000000f54454c0 [ 191.035809][ T9180] RBP: 00000000f741dff4 R08: 0000000000000000 R09: 0000000000000000 [ 191.035820][ T9180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.035831][ T9180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.035855][ T9180] [ 191.036002][ T9180] bus_add_driver: uevent attr (raw-gadget.1) failed [ 191.037031][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.037650][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.044455][ T5891] usb 8-1: USB disconnect, device number 23 [ 192.125253][ T9208] FAULT_INJECTION: forcing a failure. [ 192.125253][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 192.125278][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.3.1055 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 192.125295][ T9208] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 192.125299][ T9208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.125306][ T9208] Call Trace: [ 192.125310][ T9208] [ 192.125315][ T9208] dump_stack_lvl+0x100/0x190 [ 192.125335][ T9208] should_fail_ex.cold+0x5/0xa [ 192.125352][ T9208] should_failslab+0xc2/0x120 [ 192.125370][ T9208] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.125383][ T9208] ? find_held_lock+0x2b/0x80 [ 192.125397][ T9208] ? tipc_conn_alloc+0x48/0x590 [ 192.125418][ T9208] tipc_conn_alloc+0x48/0x590 [ 192.125436][ T9208] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 192.125450][ T9208] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 192.125463][ T9208] ? net_generic+0xea/0x2a0 [ 192.125478][ T9208] tipc_group_create+0x4ab/0x660 [ 192.125493][ T9208] tipc_setsockopt+0x611/0xe30 [ 192.125509][ T9208] ? __pfx_tipc_setsockopt+0x10/0x10 [ 192.125523][ T9208] ? lock_acquire+0x1d1/0x380 [ 192.125533][ T9208] ? __fget_files+0x34/0x3d0 [ 192.125555][ T9208] ? __pfx_tipc_setsockopt+0x10/0x10 [ 192.125571][ T9208] do_sock_setsockopt+0xf3/0x1d0 [ 192.125589][ T9208] __sys_setsockopt+0x119/0x190 [ 192.125605][ T9208] __ia32_sys_setsockopt+0xbc/0x160 [ 192.125618][ T9208] ? __might_fault+0x111/0x140 [ 192.125631][ T9208] __do_fast_syscall_32+0x14b/0x8c0 [ 192.125648][ T9208] do_fast_syscall_32+0x32/0x70 [ 192.125662][ T9208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.125677][ T9208] RIP: 0023:0xf7f92fbc [ 192.125686][ T9208] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.125697][ T9208] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 192.125708][ T9208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000010f [ 192.125716][ T9208] RDX: 0000000000000087 RSI: 0000000080000180 RDI: 00000000000004bd [ 192.125722][ T9208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.125729][ T9208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.125736][ T9208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.125752][ T9208] [ 192.748999][ T9151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.927630][ T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 193.305207][ T68] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 193.674307][ T9271] input: syz0 as /devices/virtual/input/input28 [ 193.717296][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 193.741451][ T9275] fuse: Bad value for 'fd' [ 193.781033][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.781083][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.918674][ T9287] FAULT_INJECTION: forcing a failure. [ 193.918674][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 193.918708][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.3.1086 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 193.918735][ T9287] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 193.918742][ T9287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.918752][ T9287] Call Trace: [ 193.918758][ T9287] [ 193.918766][ T9287] dump_stack_lvl+0x100/0x190 [ 193.918796][ T9287] should_fail_ex.cold+0x5/0xa [ 193.918830][ T9287] should_failslab+0xc2/0x120 [ 193.918858][ T9287] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 193.918886][ T9287] ? request_key_auth_new+0x16d/0xb40 [ 193.918921][ T9287] kmemdup_noprof+0x29/0x60 [ 193.918951][ T9287] request_key_auth_new+0x16d/0xb40 [ 193.918979][ T9287] ? __pfx_request_key_auth_new+0x10/0x10 [ 193.919016][ T9287] request_key_and_link+0x105f/0x1380 [ 193.919047][ T9287] ? __pfx_request_key_and_link+0x10/0x10 [ 193.919071][ T9287] ? key_type_lookup+0x1e/0x100 [ 193.919104][ T9287] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 193.919127][ T9287] ? __pfx_keyring_search_iterator+0x10/0x10 [ 193.919147][ T9287] ? __pfx_down_read+0x10/0x10 [ 193.919171][ T9287] ? _copy_from_user+0x59/0xd0 [ 193.919200][ T9287] __do_sys_request_key+0x2a2/0x3c0 [ 193.919223][ T9287] ? __pfx___do_sys_request_key+0x10/0x10 [ 193.919257][ T9287] __do_fast_syscall_32+0x14b/0x8c0 [ 193.919281][ T9287] do_fast_syscall_32+0x32/0x70 [ 193.919300][ T9287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.919322][ T9287] RIP: 0023:0xf7f92fbc [ 193.919337][ T9287] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 193.919354][ T9287] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 193.919374][ T9287] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080001ffb [ 193.919385][ T9287] RDX: 0000000080001fee RSI: 00000000fffffffe RDI: 0000000000000000 [ 193.919397][ T9287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.919407][ T9287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.919416][ T9287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.919440][ T9287] [ 194.037259][ T9294] device-mapper: table: 248:9: raid: Invalid flags combination (-EINVAL) [ 194.037274][ T9294] device-mapper: ioctl: error adding target to table [ 194.140796][ T9301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.304065][ T9314] fuse: Bad value for 'fd' [ 194.340719][ T9318] FAULT_INJECTION: forcing a failure. [ 194.340719][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 194.340778][ T9318] CPU: 3 UID: 0 PID: 9318 Comm: syz.3.1098 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 194.340801][ T9318] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 194.340806][ T9318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.340815][ T9318] Call Trace: [ 194.340820][ T9318] [ 194.340826][ T9318] dump_stack_lvl+0x100/0x190 [ 194.340852][ T9318] should_fail_ex.cold+0x5/0xa [ 194.340873][ T9318] should_failslab+0xc2/0x120 [ 194.340897][ T9318] __kmalloc_noprof+0xfc/0x840 [ 194.340918][ T9318] ? kvm_io_bus_register_dev+0x1d2/0x720 [ 194.340942][ T9318] kvm_io_bus_register_dev+0x1d2/0x720 [ 194.340968][ T9318] kvm_pic_init+0x22f/0x380 [ 194.340997][ T9318] kvm_arch_vm_ioctl+0xdf2/0x1650 [ 194.341014][ T9318] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 194.341034][ T9318] ? register_lock_class+0x3f/0x7b0 [ 194.341053][ T9318] ? find_held_lock+0x2b/0x80 [ 194.341076][ T9318] ? ima_match_policy+0x8c4/0x23f0 [ 194.341095][ T9318] ? ima_match_policy+0x8c4/0x23f0 [ 194.341120][ T9318] ? __lock_acquire+0x5c0/0x1f40 [ 194.341146][ T9318] ? __lock_acquire+0x5c0/0x1f40 [ 194.341170][ T9318] ? __lock_acquire+0x5c0/0x1f40 [ 194.341194][ T9318] ? __lock_acquire+0x5c0/0x1f40 [ 194.341224][ T9318] ? lock_acquire+0x1d1/0x380 [ 194.341241][ T9318] ? is_bpf_text_address+0x25/0x1a0 [ 194.341264][ T9318] ? find_held_lock+0x2b/0x80 [ 194.341293][ T9318] ? is_bpf_text_address+0x8a/0x1a0 [ 194.341314][ T9318] ? is_bpf_text_address+0x8a/0x1a0 [ 194.341337][ T9318] ? bpf_ksym_find+0x124/0x1c0 [ 194.341367][ T9318] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 194.341401][ T9318] ? is_bpf_text_address+0x94/0x1a0 [ 194.341425][ T9318] ? kernel_text_address+0x8d/0x100 [ 194.341470][ T9318] ? __pfx_widen_string+0x10/0x10 [ 194.341498][ T9318] ? __kernel_text_address+0xd/0x30 [ 194.341524][ T9318] ? unwind_get_return_address+0x59/0xa0 [ 194.341552][ T9318] ? arch_stack_walk+0xa6/0xf0 [ 194.341584][ T9318] ? tomoyo_path_number_perm+0x46d/0x580 [ 194.341613][ T9318] ? stack_trace_save+0x8e/0xc0 [ 194.341642][ T9318] ? __pfx_stack_trace_save+0x10/0x10 [ 194.341672][ T9318] ? stack_depot_save_flags+0x27/0x9f0 [ 194.341700][ T9318] kvm_vm_ioctl+0xdca/0x2950 [ 194.341718][ T9318] ? kasan_save_stack+0x3f/0x50 [ 194.341742][ T9318] ? kasan_save_stack+0x30/0x50 [ 194.341765][ T9318] ? kasan_save_track+0x14/0x30 [ 194.341787][ T9318] ? kasan_save_free_info+0x3b/0x70 [ 194.341806][ T9318] ? __kasan_slab_free+0x5f/0x80 [ 194.341831][ T9318] ? kfree+0x22b/0x6d0 [ 194.341848][ T9318] ? tomoyo_path_number_perm+0x46d/0x580 [ 194.341874][ T9318] ? security_file_ioctl_compat+0xd3/0x230 [ 194.341902][ T9318] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 194.341923][ T9318] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 194.341980][ T9318] ? kasan_quarantine_put+0x104/0x240 [ 194.342004][ T9318] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.342025][ T9318] ? find_held_lock+0x2b/0x80 [ 194.342048][ T9318] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.342075][ T9318] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.342107][ T9318] ? tomoyo_path_number_perm+0x188/0x580 [ 194.342136][ T9318] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.342174][ T9318] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.342196][ T9318] ? do_vfs_ioctl+0x226/0x13e0 [ 194.342220][ T9318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 194.342247][ T9318] kvm_vm_compat_ioctl+0x2f7/0x410 [ 194.342268][ T9318] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 194.342291][ T9318] ? __fget_files+0x34/0x3d0 [ 194.342318][ T9318] ? find_held_lock+0x2b/0x80 [ 194.342341][ T9318] ? __fget_files+0x215/0x3d0 [ 194.342365][ T9318] ? hook_file_ioctl_common+0x140/0x440 [ 194.342401][ T9318] ? __fget_files+0x21f/0x3d0 [ 194.342433][ T9318] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 194.342455][ T9318] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 194.342484][ T9318] __do_fast_syscall_32+0x14b/0x8c0 [ 194.342509][ T9318] do_fast_syscall_32+0x32/0x70 [ 194.342531][ T9318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.342555][ T9318] RIP: 0023:0xf7f92fbc [ 194.342571][ T9318] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 194.342589][ T9318] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 194.342608][ T9318] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae60 [ 194.342620][ T9318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.342631][ T9318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.342643][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.342654][ T9318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.342680][ T9318] [ 195.457338][ T9339] fuse: Bad value for 'fd' [ 195.515909][ T8313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.680458][ T8312] kernel read not supported for file /input/event0 (pid: 8312 comm: kworker/0:9) [ 195.686547][ T8313] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 195.687380][ T8313] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 195.687396][ T8313] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 195.687409][ T8313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.687428][ T8313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.689316][ T9327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.689379][ T9327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.690715][ T8313] pl2303 5-1:1.0: pl2303 converter detected [ 195.699720][ T8313] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 195.872703][ T9219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.966768][ T5877] usb 5-1: USB disconnect, device number 15 [ 195.975908][ T9327] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 195.975962][ T9327] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 195.975999][ T9327] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 195.976056][ T9327] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 195.976079][ T9327] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 195.998924][ T5877] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 195.999256][ T5877] pl2303 5-1:1.0: device disconnected [ 196.561719][ T9398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 196.561736][ T9398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.561803][ T9398] vhci_hcd vhci_hcd.0: Device attached [ 196.565178][ T9400] vhci_hcd: connection closed [ 196.568345][ T5876] vhci_hcd vhci_hcd.0: stop threads [ 196.568366][ T5876] vhci_hcd vhci_hcd.0: release socket [ 196.568381][ T5876] vhci_hcd vhci_hcd.0: disconnect device [ 196.569541][ T9399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.976647][ T9425] TC_ACT_REPEAT abuse ? [ 197.085989][ T5877] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 197.247052][ T5877] usb 8-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 197.248115][ T5877] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.248140][ T5877] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 197.248159][ T5877] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.248192][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.251807][ T9423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.251965][ T9423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.254117][ T5877] pl2303 8-1:1.0: pl2303 converter detected [ 197.258300][ T5877] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 197.387454][ T68] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 197.387491][ T68] Bluetooth: hci1: Injecting HCI hardware error event [ 197.389452][ T5784] Bluetooth: hci1: hardware error 0x00 [ 197.511563][ T29] usb 8-1: USB disconnect, device number 24 [ 197.512835][ T9423] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 197.512928][ T9423] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 197.512993][ T9423] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 197.513073][ T9423] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 197.513112][ T9423] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 197.524725][ T29] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 197.525196][ T29] pl2303 8-1:1.0: device disconnected [ 197.671166][ T9453] FAULT_INJECTION: forcing a failure. [ 197.671166][ T9453] name failslab, interval 1, probability 0, space 0, times 0 [ 197.671196][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.4.1143 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 197.671221][ T9453] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 197.671227][ T9453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.671236][ T9453] Call Trace: [ 197.671242][ T9453] [ 197.671248][ T9453] dump_stack_lvl+0x100/0x190 [ 197.671278][ T9453] should_fail_ex.cold+0x5/0xa [ 197.671302][ T9453] should_failslab+0xc2/0x120 [ 197.671327][ T9453] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 197.671353][ T9453] ? __trace_uprobe_create+0x26b/0x2310 [ 197.671380][ T9453] kstrdup+0x51/0xe0 [ 197.671397][ T9453] __trace_uprobe_create+0x26b/0x2310 [ 197.671429][ T9453] ? __pfx___trace_uprobe_create+0x10/0x10 [ 197.671449][ T9453] ? trace_kmalloc+0xeb/0x110 [ 197.671471][ T9453] ? __kasan_kmalloc+0xaa/0xb0 [ 197.671515][ T9453] ? __kmalloc_noprof+0x350/0x840 [ 197.671536][ T9453] ? argv_split+0x173/0x420 [ 197.671561][ T9453] ? argv_split+0x359/0x420 [ 197.671578][ T9453] ? __pfx___trace_uprobe_create+0x10/0x10 [ 197.671601][ T9453] trace_probe_create+0xef/0x100 [ 197.671620][ T9453] ? __pfx_trace_probe_create+0x10/0x10 [ 197.671645][ T9453] dyn_event_create+0x50/0x90 [ 197.671669][ T9453] create_or_delete_trace_uprobe+0x5a/0xb0 [ 197.671690][ T9453] trace_parse_run_command+0x1ab/0x3b0 [ 197.671708][ T9453] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 197.671733][ T9453] vfs_write+0x2aa/0x1050 [ 197.671756][ T9453] ? __pfx_probes_write+0x10/0x10 [ 197.671774][ T9453] ? lock_acquire+0x1d1/0x380 [ 197.671789][ T9453] ? __fget_files+0x34/0x3d0 [ 197.671812][ T9453] ? __pfx_vfs_write+0x10/0x10 [ 197.671840][ T9453] ? find_held_lock+0x2b/0x80 [ 197.671863][ T9453] ? __fget_files+0x215/0x3d0 [ 197.671890][ T9453] ? __fget_files+0x21f/0x3d0 [ 197.671924][ T9453] ksys_write+0x12a/0x250 [ 197.671949][ T9453] ? __pfx_ksys_write+0x10/0x10 [ 197.671977][ T9453] __do_fast_syscall_32+0x14b/0x8c0 [ 197.672001][ T9453] do_fast_syscall_32+0x32/0x70 [ 197.672021][ T9453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.672045][ T9453] RIP: 0023:0xf745efbc [ 197.672059][ T9453] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 197.672077][ T9453] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 197.672095][ T9453] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001580 [ 197.672106][ T9453] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.672115][ T9453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.672125][ T9453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.672134][ T9453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.672171][ T9453] [ 197.674657][ T9448] Invalid ELF header magic: != ELF [ 197.708645][ T9456] device-mapper: table: 248:13: linear: Device lookup failed (-EBUSY) [ 197.708659][ T9456] device-mapper: ioctl: error adding target to table [ 198.097402][ T9476] TC_ACT_REPEAT abuse ? [ 198.273520][ T9479] TC_ACT_REPEAT abuse ? [ 198.319910][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.323099][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.331905][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.332643][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.334008][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.425699][ T9485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.581531][ T9480] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.591273][ T9496] fuse: Invalid rootmode [ 198.654993][ T9480] wg0 speed is unknown, defaulting to 1000 [ 198.909054][ T9473] nvme nvme2: failed to connect socket: -512 [ 198.962489][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.962570][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.962634][ T9480] bridge_slave_0: entered allmulticast mode [ 198.963390][ T9480] bridge_slave_0: entered promiscuous mode [ 198.964711][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.964780][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.964839][ T9480] bridge_slave_1: entered allmulticast mode [ 198.965494][ T9480] bridge_slave_1: entered promiscuous mode [ 198.978773][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.980079][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.991943][ T9480] team0: Port device team_slave_0 added [ 198.993422][ T9480] team0: Port device team_slave_1 added [ 199.009591][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.009602][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.009615][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.010591][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.010598][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.010610][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.031653][ T9480] hsr_slave_0: entered promiscuous mode [ 199.032096][ T9480] hsr_slave_1: entered promiscuous mode [ 199.032607][ T9480] debugfs: 'hsr0' already exists in 'hsr' [ 199.032666][ T9480] Cannot create hsr debugfs directory [ 199.313436][ T9535] fuse: Bad value for 'rootmode' [ 199.466114][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 200.416035][ T5784] Bluetooth: hci3: command tx timeout [ 200.592459][ T9548] overlayfs: statfs failed on './file0' [ 200.816498][ T9557] fuse: fd is not a fuse device [ 201.978712][ T9518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.994702][ T9530] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 202.026799][ T9480] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.030352][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.031105][ T9480] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.038883][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.039918][ T9480] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.053366][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.054080][ T9480] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.057250][ T9480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.123874][ T9582] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.125193][ T9582] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.127539][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.135612][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.139644][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.139706][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.143938][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.144017][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.250808][ T9585] : renamed from dummy0 [ 202.378449][ T9605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.425098][ T9611] gadgetfs: bound to dummy_udc driver [ 202.439410][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.452559][ T9611] FAULT_INJECTION: forcing a failure. [ 202.452559][ T9611] name failslab, interval 1, probability 0, space 0, times 0 [ 202.452582][ T9611] CPU: 0 UID: 0 PID: 9611 Comm: syz.0.1193 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 202.452625][ T9611] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 202.452631][ T9611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.452637][ T9611] Call Trace: [ 202.452641][ T9611] [ 202.452646][ T9611] dump_stack_lvl+0x100/0x190 [ 202.452666][ T9611] should_fail_ex.cold+0x5/0xa [ 202.452682][ T9611] should_failslab+0xc2/0x120 [ 202.452699][ T9611] kmem_cache_alloc_noprof+0x92/0x6a0 [ 202.452713][ T9611] ? ima_inode_get+0x11f/0x580 [ 202.452730][ T9611] ima_inode_get+0x11f/0x580 [ 202.452747][ T9611] process_measurement+0x1213/0x2350 [ 202.452764][ T9611] ? find_held_lock+0x2b/0x80 [ 202.452780][ T9611] ? __pfx_process_measurement+0x10/0x10 [ 202.452798][ T9611] ? rcu_is_watching+0x13/0xc0 [ 202.452812][ T9611] ? trace_contention_end+0x126/0x160 [ 202.452836][ T9611] ? mark_held_locks+0x40/0x70 [ 202.452856][ T9611] ima_file_check+0xc8/0x120 [ 202.452872][ T9611] ? __pfx_ima_file_check+0x10/0x10 [ 202.452890][ T9611] security_file_post_open+0xc4/0x210 [ 202.452907][ T9611] path_openat+0x5d0/0x23f0 [ 202.452924][ T9611] ? __pfx_path_openat+0x10/0x10 [ 202.452944][ T9611] do_file_open+0x20e/0x430 [ 202.452960][ T9611] ? __pfx_do_file_open+0x10/0x10 [ 202.452986][ T9611] ? _raw_spin_unlock+0x28/0x50 [ 202.453002][ T9611] ? alloc_fd+0x471/0x7a0 [ 202.453021][ T9611] do_sys_openat2+0x163/0x1d0 [ 202.453033][ T9611] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.453049][ T9611] __ia32_compat_sys_openat+0x12d/0x210 [ 202.453061][ T9611] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 202.453079][ T9611] __do_fast_syscall_32+0x14b/0x8c0 [ 202.453093][ T9611] do_fast_syscall_32+0x32/0x70 [ 202.453105][ T9611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.453120][ T9611] RIP: 0023:0xf7f27fbc [ 202.453129][ T9611] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 202.453140][ T9611] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 202.453151][ T9611] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 202.453157][ T9611] RDX: 0000000000000002 RSI: 0000000000000024 RDI: 0000000000000000 [ 202.453164][ T9611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.453170][ T9611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.453175][ T9611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.453189][ T9611] [ 202.495947][ T5784] Bluetooth: hci3: command tx timeout [ 202.584845][ T9480] veth0_vlan: entered promiscuous mode [ 202.593798][ T9480] veth1_vlan: entered promiscuous mode [ 202.608241][ T9480] veth0_macvtap: entered promiscuous mode [ 202.611459][ T9480] veth1_macvtap: entered promiscuous mode [ 202.627473][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.632314][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.685002][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.685025][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.722626][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.722640][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.735932][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.735958][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.735977][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.735994][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.865742][ T9630] : renamed from dummy0 (while UP) [ 204.269950][ T5857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.390849][ T5857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.452132][ T5857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.517236][ T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 204.533851][ T5857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.654583][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 204.654596][ T43] audit: type=1326 audit(1793019963.631:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9650 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7fc00000 [ 204.666124][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 204.668572][ T59] usb 5-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 204.669394][ T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.669406][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.669426][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 204.669439][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 204.669458][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.677183][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 204.677207][ T59] hub 5-1:1.0: probe with driver hub failed with error -5 [ 204.677563][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 204.677571][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 204.685538][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 204.685552][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 204.722889][ T5857] bridge_slave_1: left promiscuous mode [ 204.725136][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.734014][ T5857] bridge_slave_0: left allmulticast mode [ 204.734037][ T5857] bridge_slave_0: left promiscuous mode [ 204.734210][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.972636][ T5857] bond0 (unregistering): left promiscuous mode [ 204.972661][ T5857] bond_slave_0: left promiscuous mode [ 204.972930][ T5857] bond_slave_1: left promiscuous mode [ 204.994264][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.001699][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.007524][ T5857] bond0 (unregistering): Released all slaves [ 205.014385][ T9682] tipc: Enabling of bearer rejected, failed to enable media [ 205.017306][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 205.268766][ T5742] usb 5-1: USB disconnect, device number 16 [ 205.270841][ T9664] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 205.275482][ T9684] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 205.359590][ T9708] FAULT_INJECTION: forcing a failure. [ 205.359590][ T9708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.359622][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.5.1214 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 205.359644][ T9708] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 205.359651][ T9708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.359662][ T9708] Call Trace: [ 205.359668][ T9708] [ 205.359675][ T9708] dump_stack_lvl+0x100/0x190 [ 205.359703][ T9708] should_fail_ex.cold+0x5/0xa [ 205.359724][ T9708] ? prepare_alloc_pages+0x16d/0x5b0 [ 205.359748][ T9708] should_fail_alloc_page+0xeb/0x140 [ 205.359775][ T9708] prepare_alloc_pages+0x1f0/0x5b0 [ 205.359804][ T9708] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 205.359832][ T9708] ? lock_acquire+0x1d1/0x380 [ 205.359849][ T9708] ? do_raw_spin_lock+0x128/0x260 [ 205.359869][ T9708] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 205.359889][ T9708] ? _raw_spin_unlock_irq+0x2e/0x50 [ 205.359915][ T9708] ? snd_seq_timer_open+0x438/0x5c0 [ 205.359940][ T9708] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 205.359969][ T9708] ? do_raw_spin_lock+0x128/0x260 [ 205.359988][ T9708] ? find_held_lock+0x2b/0x80 [ 205.360007][ T9708] ? mark_held_locks+0x40/0x70 [ 205.360034][ T9708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 205.360060][ T9708] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.360075][ T9708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.360105][ T9708] ? snd_seq_queue_alloc+0x3c8/0x540 [ 205.360124][ T9708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.360165][ T9708] ? policy_nodemask+0xed/0x4f0 [ 205.360186][ T9708] alloc_pages_mpol+0x201/0x560 [ 205.360205][ T9708] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 205.360223][ T9708] ? alloc_seq_queue+0x121/0x180 [ 205.360236][ T9708] ___kmalloc_large_node+0x103/0x170 [ 205.360255][ T9708] __kmalloc_large_node_noprof+0x1c/0x70 [ 205.360273][ T9708] __kmalloc_noprof+0x5a3/0x840 [ 205.360300][ T9708] ? find_held_lock+0x2b/0x80 [ 205.360321][ T9708] ? snd_seq_oss_readq_new+0x70/0x210 [ 205.360350][ T9708] snd_seq_oss_readq_new+0x70/0x210 [ 205.360369][ T9708] snd_seq_oss_open+0x47e/0xa40 [ 205.360392][ T9708] odev_open+0x6f/0x90 [ 205.360416][ T9708] ? __pfx_odev_open+0x10/0x10 [ 205.360440][ T9708] soundcore_open+0x2e3/0x5a0 [ 205.360466][ T9708] ? __pfx_soundcore_open+0x10/0x10 [ 205.360488][ T9708] chrdev_open+0x234/0x6a0 [ 205.360512][ T9708] ? __pfx_apparmor_file_open+0x10/0x10 [ 205.360540][ T9708] ? __pfx_chrdev_open+0x10/0x10 [ 205.360559][ T9708] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 205.360607][ T9708] do_dentry_open+0x674/0x1470 [ 205.360645][ T9708] ? __pfx_chrdev_open+0x10/0x10 [ 205.360673][ T9708] vfs_open_consume+0xcc/0x460 [ 205.360695][ T9708] path_openat+0x1547/0x23f0 [ 205.360724][ T9708] ? __pfx_path_openat+0x10/0x10 [ 205.360750][ T9708] do_file_open+0x20e/0x430 [ 205.360779][ T9708] ? __pfx_do_file_open+0x10/0x10 [ 205.360824][ T9708] ? _raw_spin_unlock+0x28/0x50 [ 205.360845][ T9708] ? alloc_fd+0x471/0x7a0 [ 205.360874][ T9708] do_sys_openat2+0x163/0x1d0 [ 205.360893][ T9708] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.360911][ T9708] ? find_held_lock+0x2b/0x80 [ 205.360929][ T9708] ? __fget_files+0x215/0x3d0 [ 205.360955][ T9708] __ia32_compat_sys_openat+0x12d/0x210 [ 205.360974][ T9708] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 205.361008][ T9708] __do_fast_syscall_32+0x14b/0x8c0 [ 205.361030][ T9708] do_fast_syscall_32+0x32/0x70 [ 205.361044][ T9708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.361066][ T9708] RIP: 0023:0xf73fefbc [ 205.361080][ T9708] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.361096][ T9708] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 205.361114][ T9708] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 205.361125][ T9708] RDX: 0000000000080a02 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.361134][ T9708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.361140][ T9708] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.361149][ T9708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.361172][ T9708] [ 205.487939][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.648620][ T8310] sony 0005:054C:03D5.0005: UNIQ does not contain a MAC address; duplicate check skipped [ 205.769613][ T8310] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0005/input/input29 [ 205.904786][ T8310] sony 0005:054C:03D5.0005: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 205.934308][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.997723][ T9735] fido_id[9735]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.153430][ T5857] batadv0: left promiscuous mode [ 206.217028][ T5857] hsr_slave_0: left promiscuous mode [ 206.236485][ T5857] hsr_slave_1: left promiscuous mode [ 206.237008][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.237043][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.244077][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.244091][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.293708][ T5857] veth1_macvtap: left promiscuous mode [ 206.293767][ T5857] veth0_macvtap: left promiscuous mode [ 206.293815][ T5857] veth1_vlan: left promiscuous mode [ 206.293874][ T5857] veth0_vlan: left promiscuous mode [ 206.330052][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'. [ 206.459033][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1222'. [ 206.855100][ T5857] team0 (unregistering): Port device team_slave_1 removed [ 206.871216][ T5857] team0 (unregistering): Port device team_slave_0 removed [ 207.058885][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 207.453521][ T9763] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 207.486139][ T5857] IPVS: stop unused estimator thread 0... [ 207.869080][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 207.869129][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 207.872825][ T5784] Bluetooth: hci3: hardware error 0x00 [ 208.074427][ T9771] ------------[ cut here ]------------ [ 208.074440][ T9771] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 208.074453][ T9771] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#2: syz.0.1228/9771 [ 208.086546][ T9771] Modules linked in: [ 208.089281][ T9771] CPU: 2 UID: 0 PID: 9771 Comm: syz.0.1228 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 208.093945][ T9771] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 208.096772][ T9771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.101224][ T9771] RIP: 0010:device_release+0x1dd/0x270 [ 208.103418][ T9771] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 ad b7 95 fb 48 8d 3d 06 4f fe 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 94 b7 95 fb 48 89 da 48 b8 00 00 [ 208.111033][ T9771] RSP: 0018:ffffc90005e97a20 EFLAGS: 00010287 [ 208.113490][ T9771] RAX: 0000000000004272 RBX: ffff888025c8d020 RCX: ffffc90007b51000 [ 208.116921][ T9771] RDX: 0000000000080000 RSI: ffff88806e2b9020 RDI: ffffffff927613f0 [ 208.120105][ T9771] RBP: ffff88806e2b9020 R08: 0000000000000001 R09: 0000000000000000 [ 208.123443][ T9771] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880620cb400 [ 208.127301][ T9771] R13: dffffc0000000000 R14: ffff88806e2b9020 R15: 0000000000000000 [ 208.130495][ T9771] FS: 0000000000000000(0000) GS:ffff8880954a0000(0063) knlGS:00000000f53d6b40 [ 208.134556][ T9771] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 208.137822][ T9771] CR2: 00000000f739a040 CR3: 000000005651a000 CR4: 0000000000352ef0 [ 208.141300][ T9771] Call Trace: [ 208.142885][ T9771] [ 208.144275][ T9771] kobject_put+0x1f7/0x640 [ 208.146604][ T9771] device_unregister+0x2f/0xe0 [ 208.149117][ T9771] i2c_unregister_device+0xf5/0x270 [ 208.151336][ T9771] i2c_deregister_clients+0x255/0x460 [ 208.153579][ T9771] i2c_del_adapter+0x13a/0x2e0 [ 208.155600][ T9771] i801_remove+0xa4/0x3d0 [ 208.157546][ T9771] pci_device_remove+0xb2/0x1d0 [ 208.159645][ T9771] ? __pfx_pci_device_remove+0x10/0x10 [ 208.161966][ T9771] device_remove+0xcb/0x180 [ 208.163946][ T9771] device_release_driver_internal+0x44e/0x620 [ 208.166530][ T9771] unbind_store+0x129/0x150 [ 208.168620][ T9771] ? __pfx_unbind_store+0x10/0x10 [ 208.170783][ T9771] drv_attr_store+0x74/0xb0 [ 208.172747][ T9771] ? __pfx_drv_attr_store+0x10/0x10 [ 208.174989][ T9771] sysfs_kf_write+0xf2/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.194969][ T9771] kernfs_fop_write_iter+0x3e0/0x5f0 [ 208.197901][ T9771] ? __pfx_sysfs_kf_write+0x10/0x10 [ 208.200051][ T9771] vfs_write+0x6af/0x1050 [ 208.201828][ T9771] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 208.204261][ T9771] ? __pfx_vfs_write+0x10/0x10 [ 208.206340][ T9771] ? find_held_lock+0x2b/0x80 [ 208.208285][ T9771] ksys_write+0x12a/0x250 [ 208.210154][ T9771] ? __pfx_ksys_write+0x10/0x10 [ 208.212250][ T9771] __do_fast_syscall_32+0x14b/0x8c0 [ 208.214453][ T9771] do_fast_syscall_32+0x32/0x70 [ 208.216625][ T9771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.219350][ T9771] RIP: 0023:0xf7f27fbc [ 208.221111][ T9771] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 208.229273][ T9771] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 208.232780][ T9771] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 208.236255][ T9771] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 208.239579][ T9771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.242784][ T9771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.246185][ T9771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.249510][ T9771] [ 208.250858][ T9771] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.254096][ T9771] CPU: 2 UID: 0 PID: 9771 Comm: syz.0.1228 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 208.258648][ T9771] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 208.260991][ T9771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.265390][ T9771] Call Trace: [ 208.266890][ T9771] [ 208.268178][ T9771] dump_stack_lvl+0x100/0x190 [ 208.270144][ T9771] vpanic+0x553/0x970 [ 208.271713][ T9771] ? __pfx_vpanic+0x10/0x10 [ 208.273685][ T9771] panic+0xd1/0xe0 [ 208.275307][ T9771] ? __pfx_panic+0x10/0x10 [ 208.277216][ T9771] check_panic_on_warn.cold+0x19/0x34 [ 208.279473][ T9771] ? device_release+0x1da/0x270 [ 208.281554][ T9771] __warn.cold+0x191/0x318 [ 208.283457][ T9771] __report_bug+0x30f/0x440 [ 208.285390][ T9771] ? device_release+0x1da/0x270 [ 208.287439][ T9771] ? __pfx___report_bug+0x10/0x10 [ 208.289585][ T9771] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 208.291779][ T9771] ? do_raw_spin_lock+0x128/0x260 [ 208.293985][ T9771] ? find_held_lock+0x2b/0x80 [ 208.295971][ T9771] ? kobj_kset_leave+0x160/0x210 [ 208.298105][ T9771] report_bug_entry+0xe2/0x290 [ 208.300129][ T9771] ? device_release+0x1dd/0x270 [ 208.302149][ T9771] handle_bug+0x1cd/0x2a0 [ 208.304000][ T9771] exc_invalid_op+0x17/0x50 [ 208.305917][ T9771] asm_exc_invalid_op+0x1a/0x20 [ 208.307956][ T9771] RIP: 0010:device_release+0x1dd/0x270 [ 208.310240][ T9771] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 ad b7 95 fb 48 8d 3d 06 4f fe 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 94 b7 95 fb 48 89 da 48 b8 00 00 [ 208.318207][ T9771] RSP: 0018:ffffc90005e97a20 EFLAGS: 00010287 [ 208.320761][ T9771] RAX: 0000000000004272 RBX: ffff888025c8d020 RCX: ffffc90007b51000 [ 208.324048][ T9771] RDX: 0000000000080000 RSI: ffff88806e2b9020 RDI: ffffffff927613f0 [ 208.327367][ T9771] RBP: ffff88806e2b9020 R08: 0000000000000001 R09: 0000000000000000 [ 208.330680][ T9771] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880620cb400 [ 208.334001][ T9771] R13: dffffc0000000000 R14: ffff88806e2b9020 R15: 0000000000000000 [ 208.337283][ T9771] kobject_put+0x1f7/0x640 [ 208.339185][ T9771] device_unregister+0x2f/0xe0 [ 208.341233][ T9771] i2c_unregister_device+0xf5/0x270 [ 208.343435][ T9771] i2c_deregister_clients+0x255/0x460 [ 208.345742][ T9771] i2c_del_adapter+0x13a/0x2e0 [ 208.347785][ T9771] i801_remove+0xa4/0x3d0 [ 208.349750][ T9771] pci_device_remove+0xb2/0x1d0 [ 208.351877][ T9771] ? __pfx_pci_device_remove+0x10/0x10 [ 208.354196][ T9771] device_remove+0xcb/0x180 [ 208.356122][ T9771] device_release_driver_internal+0x44e/0x620 [ 208.358705][ T9771] unbind_store+0x129/0x150 [ 208.360654][ T9771] ? __pfx_unbind_store+0x10/0x10 [ 208.362789][ T9771] drv_attr_store+0x74/0xb0 [ 208.364717][ T9771] ? __pfx_drv_attr_store+0x10/0x10 [ 208.366872][ T9771] sysfs_kf_write+0xf2/0x150 [ 208.368844][ T9771] kernfs_fop_write_iter+0x3e0/0x5f0 [ 208.371060][ T9771] ? __pfx_sysfs_kf_write+0x10/0x10 [ 208.373259][ T9771] vfs_write+0x6af/0x1050 [ 208.375130][ T9771] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 208.377578][ T9771] ? __pfx_vfs_write+0x10/0x10 [ 208.379515][ T9771] ? find_held_lock+0x2b/0x80 [ 208.381523][ T9771] ksys_write+0x12a/0x250 [ 208.383333][ T9771] ? __pfx_ksys_write+0x10/0x10 [ 208.385410][ T9771] __do_fast_syscall_32+0x14b/0x8c0 [ 208.387516][ T9771] do_fast_syscall_32+0x32/0x70 [ 208.389581][ T9771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.392198][ T9771] RIP: 0023:0xf7f27fbc [ 208.393943][ T9771] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 208.401816][ T9771] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 208.405279][ T9771] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 208.408528][ T9771] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 208.411748][ T9771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.414856][ T9771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.418017][ T9771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.421123][ T9771] [ 208.423073][ T9771] Kernel Offset: disabled [ 208.424801][ T9771] Rebooting in 86400 seconds..