last executing test programs: 7.609614461s ago: executing program 2 (id=453): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) epoll_create(0x7) 7.490158192s ago: executing program 2 (id=454): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x8) write(r0, 0x0, 0x0) 6.829230422s ago: executing program 2 (id=455): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x100) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 4.721034072s ago: executing program 1 (id=457): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 4.720754152s ago: executing program 2 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 4.720474859s ago: executing program 3 (id=459): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000001540)=0x4, 0x4) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001600)) sendmsg$nl_route(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000014c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x16, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/201, 0x20}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000003c0)={{0x1, 0x1}}) read(r3, &(0x7f0000000400)=""/4067, 0xfe3) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r0, 0x1f) 4.716689335s ago: executing program 0 (id=465): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x3, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(0x0, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00f54e000000000000007d990000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.588528544s ago: executing program 2 (id=460): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 3.697180278s ago: executing program 1 (id=461): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x14400, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bccb", 0x3}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 3.696991524s ago: executing program 3 (id=462): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) epoll_create(0x7) 3.62564638s ago: executing program 3 (id=463): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 2.475908888s ago: executing program 1 (id=464): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x8) write(r0, 0x0, 0x0) 2.474118411s ago: executing program 0 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 2.471561112s ago: executing program 3 (id=474): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d40)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.388215446s ago: executing program 0 (id=466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600), 0x40, &(0x7f0000000640)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000680)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200) r3 = signalfd(r0, &(0x7f0000000000)={[0x1, 0x4]}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x138, 0x1dc, 0xffffffff, 0x1dc, 0xa4, 0x2a4, 0x2a4, 0xffffffff, 0x2a4, 0x2a4, 0x5, &(0x7f0000000040), {[{{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffff00, 'team_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x2, 0x0, 0x18}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0xa, @multicast2, @multicast2, @gre_key=0x8, @port=0x4e21}}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'pim6reg1\x00', 'syzkaller1\x00', {}, {}, 0x2e, 0x1, 0x42}, 0x0, 0x70, 0x94}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ip={@remote, @loopback, 0xffff00, 0xff, 'veth0_to_batadv\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x8, @multicast1, @private=0xa010102, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@broadcast, @empty, 0xff000000, 0xffffff, 'netpci0\x00', 'pimreg1\x00', {}, {0xff}, 0x62, 0x1, 0x23}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xf, "c7b9"}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x80e9, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x400, 0x9) 2.305597976s ago: executing program 0 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x18}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.403600611s ago: executing program 2 (id=468): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3}]}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 1.179017405s ago: executing program 1 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.16489826s ago: executing program 1 (id=470): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000200)={0x0, 0xd, 0xbb, {0xbb, 0xae8c418f1ab794d1, "d69b6807f410ec699038f51942555e2e956a4467bda7fc98d1bcfc50fc4182d0a0e58d700ea3075c595210e2031ab1ffa195b69a9b12ef7b72f90e0632e3cab4cc8f064fd7d508236a60df0f9b630944374d7c96517f5e8aeafd07b104254cea77348101b5fdbf2d419f15db711ccc3c785d337aa8321144c4d034a1410a5fe99889068db72028c5825909143e07ed13fb3e4e8b486dbb0efc50b09486ebcb9740178edcc022cf1492f14b07a3b9a8db28ad284ce62d9b57a6"}}, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.053204837s ago: executing program 0 (id=471): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000600)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 561.478241ms ago: executing program 3 (id=472): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044080}, 0x20008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) epoll_create(0x7) 2.987695ms ago: executing program 0 (id=475): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x14400, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bccb", 0x3}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 972.148µs ago: executing program 1 (id=483): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000c"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./drv/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='0000:00:1f.3\x00', 0xd) 0s ago: executing program 3 (id=484): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000600)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 49.295575][ T6115] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 49.295588][ T6115] usb usb2: Product: UHCI Host Controller [ 49.295596][ T6115] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 49.295604][ T6115] usb usb2: SerialNumber: 0000:00:1d.0 [ 49.303954][ T6115] hub 2-0:1.0: USB hub found [ 49.304174][ T6115] hub 2-0:1.0: 2 ports detected [ 49.375156][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.527438][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.528656][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.528678][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.528689][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.528711][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.532845][ T25] usb 6-1: config 0 descriptor?? [ 49.930523][ T6136] syzkaller0: entered promiscuous mode [ 49.930570][ T6136] syzkaller0: entered allmulticast mode [ 49.989915][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 49.989986][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 50.000031][ T25] usb 6-1: USB disconnect, device number 2 [ 50.700100][ T6152] bridge_slave_0: left allmulticast mode [ 50.700149][ T6152] bridge_slave_0: left promiscuous mode [ 50.700645][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.717713][ T6152] bridge_slave_1: left allmulticast mode [ 50.717736][ T6152] bridge_slave_1: left promiscuous mode [ 50.719196][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.737229][ T6152] bond0: (slave bond_slave_0): Releasing backup interface [ 50.740898][ T6152] bond0: (slave bond_slave_1): Releasing backup interface [ 50.750151][ T6152] team0: Port device team_slave_0 removed [ 50.758627][ T6152] team0: Port device team_slave_1 removed [ 50.759223][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.759238][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.760757][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.760770][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.762977][ T6152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.769812][ T6155] team0: Mode changed to "loadbalance" [ 50.874816][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 50.874829][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 50.874869][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 50.874875][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 50.887341][ T2177] nintendo 0005:057E:2017.0002: unbalanced collection at end of report description [ 50.888069][ T2177] nintendo 0005:057E:2017.0002: HID parse failed [ 50.889563][ T2177] nintendo 0005:057E:2017.0002: probe - fail = -22 [ 50.889621][ T2177] nintendo 0005:057E:2017.0002: probe with driver nintendo failed with error -22 [ 52.779079][ T6208] bridge_slave_0: left allmulticast mode [ 52.779097][ T6208] bridge_slave_0: left promiscuous mode [ 52.779197][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.781422][ T6208] bridge_slave_1: left allmulticast mode [ 52.781435][ T6208] bridge_slave_1: left promiscuous mode [ 52.781553][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.801557][ T6208] bond0: (slave bond_slave_0): Releasing backup interface [ 52.808221][ T6208] bond0: (slave bond_slave_1): Releasing backup interface [ 52.822825][ T6208] team0: Port device team_slave_0 removed [ 52.845580][ T6208] team0: Port device team_slave_1 removed [ 52.845997][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.846008][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.849394][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.849405][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.852430][ T6208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.871910][ T6210] team0: Mode changed to "loadbalance" [ 52.956561][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 52.956610][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.959612][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.959684][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.982663][ T6214] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET) [ 53.325114][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.419028][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 53.495495][ T5881] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.496547][ T5881] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 53.496571][ T5881] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.498873][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.498893][ T5881] usb 6-1: SerialNumber: syz [ 53.504525][ T6225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 53.726480][ T6225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.146459][ T5881] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 54.388659][ T6252] syzkaller0: entered allmulticast mode [ 54.517992][ T55] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 54.518948][ T6225] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 54.719320][ T854] usb 6-1: USB disconnect, device number 3 [ 54.740188][ T854] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 55.045031][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.045071][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.045093][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.045140][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.234866][ T5839] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.415036][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 55.418261][ T5839] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 55.422906][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.422922][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.423128][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 55.423178][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.447478][ T5839] usb 8-1: config 0 descriptor?? [ 56.043072][ T5839] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0003/input/input5 [ 56.070073][ T5839] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0003/input/input6 [ 56.178728][ T5839] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 56.189802][ T6299] bridge0: port 1(syz_tun) entered blocking state [ 56.189898][ T6299] bridge0: port 1(syz_tun) entered disabled state [ 56.190116][ T6299] syz_tun: entered allmulticast mode [ 56.217143][ T6299] syz_tun: entered promiscuous mode [ 56.221203][ T6299] bridge0: port 1(syz_tun) entered blocking state [ 56.221282][ T6299] bridge0: port 1(syz_tun) entered forwarding state [ 56.345283][ T5839] usb 8-1: USB disconnect, device number 2 [ 56.429122][ T6305] FAULT_INJECTION: forcing a failure. [ 56.429122][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 56.429498][ T6305] CPU: 2 UID: 0 PID: 6305 Comm: syz.2.111 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.429525][ T6305] Tainted: [L]=SOFTLOCKUP [ 56.429531][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.429540][ T6305] Call Trace: [ 56.429551][ T6305] [ 56.429559][ T6305] dump_stack_lvl+0x100/0x190 [ 56.429591][ T6305] should_fail_ex.cold+0x5/0xa [ 56.429618][ T6305] should_failslab+0xc2/0x120 [ 56.429647][ T6305] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.429674][ T6305] ? lock_acquire+0x1d1/0x380 [ 56.429694][ T6305] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 56.429715][ T6305] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 56.429732][ T6305] ? trace_contention_end+0x126/0x160 [ 56.429752][ T6305] idr_get_free+0x52e/0xa00 [ 56.429775][ T6305] idr_alloc_u32+0x1ac/0x320 [ 56.429788][ T6305] ? __pfx_idr_alloc_u32+0x10/0x10 [ 56.429800][ T6305] ? tcf_idr_check_alloc+0x598/0x7a0 [ 56.429813][ T6305] ? tcf_idr_check_alloc+0x598/0x7a0 [ 56.429829][ T6305] tcf_idr_check_alloc+0x136/0x7a0 [ 56.429847][ T6305] ? find_held_lock+0x2b/0x80 [ 56.429867][ T6305] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 56.429892][ T6305] ? __nla_parse+0x40/0x60 [ 56.429937][ T6305] tcf_gact_init+0x396/0x8a0 [ 56.429963][ T6305] ? __pfx_tcf_gact_init+0x10/0x10 [ 56.429979][ T6305] ? kasan_save_track+0x14/0x30 [ 56.429998][ T6305] ? tcf_action_init_1+0x2d8/0x6c0 [ 56.430013][ T6305] ? __asan_memcpy+0x3c/0x60 [ 56.430029][ T6305] tcf_action_init_1+0x466/0x6c0 [ 56.430044][ T6305] ? __pfx_tcf_action_init_1+0x10/0x10 [ 56.430057][ T6305] ? tc_action_load_ops+0x1f5/0x3e0 [ 56.430078][ T6305] ? __nla_parse+0x40/0x60 [ 56.430095][ T6305] tcf_action_init+0x43f/0xa60 [ 56.430113][ T6305] ? __pfx_tcf_action_init+0x10/0x10 [ 56.430137][ T6305] ? __kernel_text_address+0xd/0x30 [ 56.430152][ T6305] ? unwind_get_return_address+0x59/0xa0 [ 56.430167][ T6305] ? arch_stack_walk+0xa6/0xf0 [ 56.430191][ T6305] ? kfree_skbmem+0x19a/0x210 [ 56.430207][ T6305] ? kasan_save_stack+0x3f/0x50 [ 56.430222][ T6305] ? kasan_save_stack+0x30/0x50 [ 56.430236][ T6305] ? kasan_save_track+0x14/0x30 [ 56.430251][ T6305] ? kasan_save_free_info+0x3b/0x70 [ 56.430263][ T6305] ? __kasan_slab_free+0x5f/0x80 [ 56.430278][ T6305] ? kmem_cache_free+0x127/0x6c0 [ 56.430291][ T6305] ? kfree_skbmem+0x19a/0x210 [ 56.430306][ T6305] ? consume_skb+0xd1/0x110 [ 56.430319][ T6305] ? nlmon_xmit+0xa5/0xe0 [ 56.430336][ T6305] tcf_action_add+0xed/0x5c0 [ 56.430352][ T6305] ? __pfx_tcf_action_add+0x10/0x10 [ 56.430386][ T6305] ? __nla_parse+0x40/0x60 [ 56.430432][ T6305] tc_ctl_action+0x2e3/0x470 [ 56.430448][ T6305] ? __pfx_tc_ctl_action+0x10/0x10 [ 56.430468][ T6305] ? __pfx_tc_ctl_action+0x10/0x10 [ 56.430483][ T6305] rtnetlink_rcv_msg+0x3c9/0xe90 [ 56.430500][ T6305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.430526][ T6305] ? ref_tracker_free+0x37e/0x6c0 [ 56.430543][ T6305] netlink_rcv_skb+0x159/0x420 [ 56.430556][ T6305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.430573][ T6305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.430591][ T6305] ? netlink_deliver_tap+0x1ae/0xcc0 [ 56.430613][ T6305] netlink_unicast+0x585/0x850 [ 56.430628][ T6305] ? __pfx_netlink_unicast+0x10/0x10 [ 56.430644][ T6305] netlink_sendmsg+0x8b0/0xda0 [ 56.430658][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.430672][ T6305] ? apparmor_socket_sendmsg+0x165/0x280 [ 56.430694][ T6305] ____sys_sendmsg+0xa4d/0xbe0 [ 56.430717][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.430740][ T6305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.430779][ T6305] ___sys_sendmsg+0x190/0x1e0 [ 56.430809][ T6305] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.430828][ T6305] ? futex_wait+0x11e/0x370 [ 56.430849][ T6305] ? find_held_lock+0x2b/0x80 [ 56.430872][ T6305] __sys_sendmsg+0x160/0x210 [ 56.430886][ T6305] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.430907][ T6305] __do_fast_syscall_32+0x13a/0x8b0 [ 56.430921][ T6305] do_fast_syscall_32+0x32/0x70 [ 56.430933][ T6305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.430970][ T6305] RIP: 0023:0xf7ff8fec [ 56.430993][ T6305] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 56.431015][ T6305] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 56.431037][ T6305] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 56.431049][ T6305] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.431060][ T6305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.431071][ T6305] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.431078][ T6305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.431094][ T6305] [ 58.264369][ T6346] FAULT_INJECTION: forcing a failure. [ 58.264369][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 58.264390][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.0.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.264407][ T6346] Tainted: [L]=SOFTLOCKUP [ 58.264411][ T6346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.264418][ T6346] Call Trace: [ 58.264422][ T6346] [ 58.264427][ T6346] dump_stack_lvl+0x100/0x190 [ 58.264447][ T6346] should_fail_ex.cold+0x5/0xa [ 58.264462][ T6346] should_failslab+0xc2/0x120 [ 58.264482][ T6346] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.264499][ T6346] ? __proc_create+0xc1/0x8f0 [ 58.264510][ T6346] ? __proc_create+0x247/0x8f0 [ 58.264524][ T6346] __proc_create+0x247/0x8f0 [ 58.264536][ T6346] ? __pfx___proc_create+0x10/0x10 [ 58.264553][ T6346] proc_mkdir+0x81/0x170 [ 58.264565][ T6346] ? __pfx_proc_mkdir+0x10/0x10 [ 58.264577][ T6346] ? cache_register_net+0x137/0x5e0 [ 58.264590][ T6346] ? cache_register_net+0x137/0x5e0 [ 58.264606][ T6346] cache_register_net+0x18f/0x5e0 [ 58.264620][ T6346] nfsd_export_init+0xb6/0x250 [ 58.264638][ T6346] ? __pfx_nfsd_net_init+0x10/0x10 [ 58.264654][ T6346] nfsd_net_init+0x69/0x480 [ 58.264670][ T6346] ? __pfx_nfsd_net_init+0x10/0x10 [ 58.264686][ T6346] ops_init+0x1e2/0x5f0 [ 58.264717][ T6346] setup_net+0x118/0x3a0 [ 58.264732][ T6346] ? __pfx_setup_net+0x10/0x10 [ 58.264751][ T6346] copy_net_ns+0x345/0x7a0 [ 58.264768][ T6346] create_new_namespaces+0x3ea/0xac0 [ 58.264790][ T6346] unshare_nsproxy_namespaces+0xf2/0x220 [ 58.264808][ T6346] ksys_unshare+0x4a2/0xb30 [ 58.264821][ T6346] ? __pfx_ksys_unshare+0x10/0x10 [ 58.264834][ T6346] ? __sys_setsockopt+0x139/0x190 [ 58.264852][ T6346] __ia32_sys_unshare+0x30/0x40 [ 58.264864][ T6346] __do_fast_syscall_32+0x13a/0x8b0 [ 58.264878][ T6346] do_fast_syscall_32+0x32/0x70 [ 58.264891][ T6346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.264905][ T6346] RIP: 0023:0xf7f73fec [ 58.264918][ T6346] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 58.264923][ T6346] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 58.264934][ T6346] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 58.264941][ T6346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.264948][ T6346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.264954][ T6346] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.264960][ T6346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.264975][ T6346] [ 58.380477][ T5740] Bluetooth: hci2: unexpected event for opcode 0x200d [ 58.796693][ T6359] nvme_fabrics: missing parameter 'transport=%s' [ 58.796706][ T6359] nvme_fabrics: missing parameter 'nqn=%s' [ 59.571480][ T6381] jffs2: notice: (6381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.881850][ T6390] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 60.046324][ T6395] tipc: Started in network mode [ 60.046341][ T6395] tipc: Node identity 669eab81292e, cluster identity 4711 [ 60.046463][ T6395] tipc: Enabled bearer , priority 0 [ 60.049465][ T6395] syzkaller0: entered promiscuous mode [ 60.049478][ T6395] syzkaller0: entered allmulticast mode [ 60.058043][ T6395] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 60.090809][ T6395] tipc: Resetting bearer [ 60.095984][ T6394] tipc: Resetting bearer [ 60.119515][ T6394] tipc: Disabling bearer [ 60.131419][ T6402] Set syz0 is full, maxelem 0 reached [ 60.544786][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.705244][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.706139][ T5839] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 60.706153][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.707398][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.707410][ T5839] usb 5-1: SerialNumber: syz [ 60.711021][ T6411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.920605][ T6411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.332879][ T5839] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 61.341132][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 61.364593][ T6416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.367860][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 61.377999][ T6416] ipvlan2: entered allmulticast mode [ 61.378012][ T6416] bond1: entered allmulticast mode [ 61.390723][ T6418] tipc: Started in network mode [ 61.390738][ T6418] tipc: Node identity a2aabcc65037, cluster identity 4711 [ 61.390805][ T6418] tipc: Enabled bearer , priority 0 [ 61.391103][ T6418] syzkaller0: entered promiscuous mode [ 61.391112][ T6418] syzkaller0: entered allmulticast mode [ 61.394603][ T6418] tipc: Resetting bearer [ 61.397029][ T6414] tipc: Resetting bearer [ 61.409083][ T6414] tipc: Disabling bearer [ 61.515311][ T6433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.637271][ T6437] syzkaller0: entered promiscuous mode [ 61.637316][ T6437] syzkaller0: entered allmulticast mode [ 61.895939][ T1159] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 61.899169][ T6411] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 61.949440][ T6448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 62.037472][ T6448] FAULT_INJECTION: forcing a failure. [ 62.037472][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.037496][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.3.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.037513][ T6448] Tainted: [L]=SOFTLOCKUP [ 62.037518][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.037525][ T6448] Call Trace: [ 62.037530][ T6448] [ 62.037535][ T6448] dump_stack_lvl+0x100/0x190 [ 62.037554][ T6448] should_fail_ex.cold+0x5/0xa [ 62.037583][ T6448] kvm_write_guest_offset_cached+0x1fe/0x510 [ 62.037607][ T6448] kvm_lapic_sync_to_vapic+0x48c/0x6d0 [ 62.037625][ T6448] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10 [ 62.037643][ T6448] ? vmx_load_vmcs01+0x9b/0xe0 [ 62.037657][ T6448] ? vmx_update_cr8_intercept+0x1fd/0x390 [ 62.037674][ T6448] vcpu_run+0xf90/0x61a0 [ 62.037685][ T6448] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 62.037706][ T6448] ? __pfx_vcpu_run+0x10/0x10 [ 62.037720][ T6448] ? lock_acquire+0x1d1/0x380 [ 62.037737][ T6448] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 62.037752][ T6448] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 62.037766][ T6448] ? __local_bh_enable_ip+0xa5/0x120 [ 62.037786][ T6448] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 62.037799][ T6448] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 62.037815][ T6448] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 62.037836][ T6448] kvm_vcpu_ioctl+0x730/0x1700 [ 62.037853][ T6448] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.037868][ T6448] ? tomoyo_path_number_perm+0x188/0x580 [ 62.037883][ T6448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.037902][ T6448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.037924][ T6448] ? do_vfs_ioctl+0x226/0x13e0 [ 62.037938][ T6448] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.037954][ T6448] ? __fget_files+0x34/0x3d0 [ 62.037971][ T6448] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 62.037986][ T6448] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 62.038001][ T6448] ? __fget_files+0x21f/0x3d0 [ 62.038020][ T6448] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 62.038037][ T6448] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 62.038053][ T6448] __do_fast_syscall_32+0x13a/0x8b0 [ 62.038068][ T6448] do_fast_syscall_32+0x32/0x70 [ 62.038080][ T6448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.038094][ T6448] RIP: 0023:0xf73defec [ 62.038108][ T6448] Code: Unable to access opcode bytes at 0xf73defc2. [ 62.038114][ T6448] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 62.038126][ T6448] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 62.038133][ T6448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.038140][ T6448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.038146][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.038152][ T6448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.038167][ T6448] [ 62.043206][ T5824] usb 5-1: USB disconnect, device number 3 [ 62.050277][ T5824] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 62.316426][ T6464] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 62.336572][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.357573][ T6464] bond1: (slave erspan1): making interface the new active one [ 62.358324][ T6464] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 62.639404][ T42] audit: type=1326 audit(1791944764.618:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.640020][ T42] audit: type=1326 audit(1791944764.618:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.644865][ T42] audit: type=1326 audit(1791944764.628:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.644964][ T42] audit: type=1326 audit(1791944764.628:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.645086][ T42] audit: type=1326 audit(1791944764.628:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.649105][ T42] audit: type=1326 audit(1791944764.628:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.649831][ T42] audit: type=1326 audit(1791944764.628:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.652259][ T42] audit: type=1326 audit(1791944764.628:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.653100][ T42] audit: type=1326 audit(1791944764.628:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.655794][ T42] audit: type=1326 audit(1791944764.638:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 62.667694][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 65.247007][ T6515] FAULT_INJECTION: forcing a failure. [ 65.247007][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 65.247030][ T6515] CPU: 2 UID: 0 PID: 6515 Comm: syz.0.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.247046][ T6515] Tainted: [L]=SOFTLOCKUP [ 65.247051][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.247057][ T6515] Call Trace: [ 65.247062][ T6515] [ 65.247066][ T6515] dump_stack_lvl+0x100/0x190 [ 65.247085][ T6515] should_fail_ex.cold+0x5/0xa [ 65.247102][ T6515] should_failslab+0xc2/0x120 [ 65.247120][ T6515] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.247134][ T6515] ? find_held_lock+0x2b/0x80 [ 65.247148][ T6515] ? rpc_mkpipe_data+0x49/0x460 [ 65.247165][ T6515] ? __pfx_nfs4blocklayout_net_init+0x10/0x10 [ 65.247179][ T6515] rpc_mkpipe_data+0x49/0x460 [ 65.247194][ T6515] ? __pfx_nfs4blocklayout_net_init+0x10/0x10 [ 65.247206][ T6515] nfs4blocklayout_net_init+0x95/0x1d0 [ 65.247218][ T6515] ? __pfx_nfs4blocklayout_net_init+0x10/0x10 [ 65.247231][ T6515] ops_init+0x1e2/0x5f0 [ 65.247247][ T6515] setup_net+0x118/0x3a0 [ 65.247261][ T6515] ? __pfx_setup_net+0x10/0x10 [ 65.247280][ T6515] copy_net_ns+0x345/0x7a0 [ 65.247298][ T6515] create_new_namespaces+0x3ea/0xac0 [ 65.247319][ T6515] unshare_nsproxy_namespaces+0xf2/0x220 [ 65.247337][ T6515] ksys_unshare+0x4a2/0xb30 [ 65.247349][ T6515] ? __pfx_ksys_unshare+0x10/0x10 [ 65.247366][ T6515] __ia32_sys_unshare+0x30/0x40 [ 65.247378][ T6515] __do_fast_syscall_32+0x13a/0x8b0 [ 65.247392][ T6515] do_fast_syscall_32+0x32/0x70 [ 65.247404][ T6515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.247418][ T6515] RIP: 0023:0xf7f73fec [ 65.247431][ T6515] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 65.247436][ T6515] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 65.247447][ T6515] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 65.247454][ T6515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.247460][ T6515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.247471][ T6515] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.247478][ T6515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.247492][ T6515] [ 65.475409][ T6521] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 65.475434][ T6521] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 65.475457][ T6521] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 65.481654][ T6521] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.486468][ T6521] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.535711][ T6525] openvswitch: netlink: IPv4 tunnel dst address is zero [ 65.535728][ T6525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.579548][ T6521] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 65.628755][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 65.681764][ T6530] netlink: 'syz.0.168': attribute type 39 has an invalid length. [ 65.716311][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.876285][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.877170][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 65.877185][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.877974][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.877985][ T25] usb 8-1: SerialNumber: syz [ 65.881292][ T6519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.088773][ T6519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.502044][ T25] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 66.816237][ T1158] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 66.816365][ T6519] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 66.926816][ T5839] usb 8-1: USB disconnect, device number 3 [ 66.928680][ T5839] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 67.467296][ T6570] uhci_hcd 0000:00:1d.0: remove, state 4 [ 67.467320][ T6570] usb usb2: USB disconnect, device number 1 [ 67.478271][ T6570] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 67.551941][ T6570] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 67.555088][ T6570] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 67.561135][ T6570] pci 0000:00:1d.0: Adding to iommu group 7 [ 67.565620][ T6570] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 67.644904][ T6570] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 77284 usecs [ 67.708288][ T6570] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 67.710384][ T6570] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 67.710538][ T6570] uhci_hcd 0000:00:1d.0: detected 2 ports [ 67.711104][ T6570] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 67.711900][ T6570] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 67.713599][ T6570] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 67.713612][ T6570] usb usb2: Product: UHCI Host Controller [ 67.713620][ T6570] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 67.713628][ T6570] usb usb2: SerialNumber: 0000:00:1d.0 [ 67.738702][ T6570] hub 2-0:1.0: USB hub found [ 67.738957][ T6570] hub 2-0:1.0: 2 ports detected [ 67.846256][ T5839] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.006681][ T5839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.008097][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.008113][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.008124][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.008143][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.009372][ T5839] usb 8-1: config 0 descriptor?? [ 68.444983][ T5839] usbhid 8-1:0.0: can't add hid device: -71 [ 68.445042][ T5839] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 68.446127][ T5839] usb 8-1: USB disconnect, device number 4 [ 68.642221][ T6588] FAULT_INJECTION: forcing a failure. [ 68.642221][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 68.642255][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.0.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.642282][ T6588] Tainted: [L]=SOFTLOCKUP [ 68.642290][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.642301][ T6588] Call Trace: [ 68.642308][ T6588] [ 68.642316][ T6588] dump_stack_lvl+0x100/0x190 [ 68.642376][ T6588] should_fail_ex.cold+0x5/0xa [ 68.642402][ T6588] should_failslab+0xc2/0x120 [ 68.642435][ T6588] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.642461][ T6588] ? d_instantiate+0x8a/0xb0 [ 68.642481][ T6588] ? alloc_empty_file+0x5b/0x1c0 [ 68.642504][ T6588] alloc_empty_file+0x5b/0x1c0 [ 68.642523][ T6588] alloc_file_pseudo+0x183/0x290 [ 68.642544][ T6588] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 68.642571][ T6588] ? _raw_spin_unlock+0x28/0x50 [ 68.642599][ T6588] ? alloc_fd+0x471/0x7a0 [ 68.642628][ T6588] __anon_inode_getfile+0xe8/0x280 [ 68.642656][ T6588] do_epoll_create+0x3ac/0x540 [ 68.642678][ T6588] __ia32_sys_epoll_create+0x45/0x70 [ 68.642700][ T6588] __do_fast_syscall_32+0x13a/0x8b0 [ 68.642719][ T6588] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.642751][ T6588] do_fast_syscall_32+0x32/0x70 [ 68.642772][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.642796][ T6588] RIP: 0023:0xf7f73fec [ 68.642817][ T6588] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 68.642826][ T6588] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000000fe [ 68.642845][ T6588] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 68.642859][ T6588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.642871][ T6588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.642882][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.642894][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.642921][ T6588] [ 69.165111][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.325495][ T5838] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 69.326808][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.326834][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 69.331714][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.331736][ T5838] usb 6-1: Product: syz [ 69.331748][ T5838] usb 6-1: Manufacturer: syz [ 69.331760][ T5838] usb 6-1: SerialNumber: syz [ 69.341193][ T6596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.341354][ T6596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.343291][ T5838] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 69.343308][ T5838] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 69.343342][ T5838] usbserial_generic 6-1:1.0: generic converter detected [ 69.346625][ T5838] usb 6-1: generic converter now attached to ttyUSB0 [ 69.552128][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552180][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552287][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552317][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552489][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552520][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552663][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552686][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552855][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.552900][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553040][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553082][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553219][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553250][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553468][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553531][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553677][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553728][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.553850][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 69.556265][ T5824] usb 6-1: USB disconnect, device number 4 [ 69.566293][ T5824] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 69.567951][ T5824] usbserial_generic 6-1:1.0: device disconnected [ 69.606307][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 69.974831][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.108939][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 70.108997][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 70.111302][ T6617] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 70.125418][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.126794][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 70.126809][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.128472][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.128483][ T50] usb 7-1: SerialNumber: syz [ 70.131404][ T6611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.132596][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.141974][ T6613] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 70.141991][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.184'. [ 70.153966][ T6617] macvtap1: entered allmulticast mode [ 70.160772][ T6617] bond2: (slave geneve2): making interface the new active one [ 70.162312][ T6617] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 70.343398][ T6611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.367829][ T6626] uhci_hcd 0000:00:1d.0: remove, state 4 [ 70.367849][ T6626] usb usb2: USB disconnect, device number 1 [ 70.385588][ T6626] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 70.447787][ T6627] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 70.450956][ T6627] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 70.458806][ T6627] pci 0000:00:1d.0: Adding to iommu group 7 [ 70.471081][ T6627] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 70.495308][ T6629] tipc: Enabled bearer , priority 0 [ 70.496161][ T6629] syzkaller0: entered promiscuous mode [ 70.496178][ T6629] syzkaller0: entered allmulticast mode [ 70.516366][ T6629] tipc: Resetting bearer [ 70.519678][ T6628] tipc: Resetting bearer [ 70.526950][ T6627] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 54237 usecs [ 70.534574][ T6628] tipc: Disabling bearer [ 70.562509][ T6627] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 70.567883][ T6627] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 70.568049][ T6627] uhci_hcd 0000:00:1d.0: detected 2 ports [ 70.573267][ T6627] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 70.574383][ T6627] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 70.575920][ T6627] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 70.575947][ T6627] usb usb2: Product: UHCI Host Controller [ 70.575961][ T6627] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 70.575974][ T6627] usb usb2: SerialNumber: 0000:00:1d.0 [ 70.583996][ T6627] hub 2-0:1.0: USB hub found [ 70.584283][ T6627] hub 2-0:1.0: 2 ports detected [ 70.624676][ T6631] syzkaller0: entered promiscuous mode [ 70.624690][ T6631] syzkaller0: entered allmulticast mode [ 70.746006][ T5838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.807857][ T50] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 70.890101][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.890138][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.964411][ T3264] cfg80211: failed to load regulatory.db [ 71.210281][ T5838] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.251405][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.251425][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.251436][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.251456][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.375217][ T1159] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 71.378057][ T6611] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 71.516864][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 71.768294][ T5838] usb 6-1: config 0 descriptor?? [ 71.846567][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 71.846580][ T42] audit: type=1800 audit(1791944773.828:45): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.193" name="file0" dev="overlay" ino=323 res=0 errno=0 [ 71.850854][ T5881] usb 7-1: USB disconnect, device number 2 [ 71.852176][ T5881] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 71.936836][ T6659] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 71.998462][ T6665] tmpfs: Unknown parameter '0x0000000000000004' [ 72.216188][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 72.216238][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 72.220765][ T5838] usb 6-1: USB disconnect, device number 5 [ 72.574242][ T6692] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 72.578742][ T6692] FAULT_INJECTION: forcing a failure. [ 72.578742][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 72.578763][ T6692] CPU: 3 UID: 0 PID: 6692 Comm: syz.2.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.578780][ T6692] Tainted: [L]=SOFTLOCKUP [ 72.578784][ T6692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.578790][ T6692] Call Trace: [ 72.578795][ T6692] [ 72.578799][ T6692] dump_stack_lvl+0x100/0x190 [ 72.578819][ T6692] should_fail_ex.cold+0x5/0xa [ 72.578834][ T6692] should_failslab+0xc2/0x120 [ 72.578994][ T6692] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.579025][ T6692] ? skb_clone+0x190/0x400 [ 72.579043][ T6692] skb_clone+0x190/0x400 [ 72.579058][ T6692] netlink_broadcast_filtered+0xb22/0xf20 [ 72.579077][ T6692] netlink_broadcast+0x39/0x50 [ 72.579091][ T6692] kobject_uevent_env+0xcdd/0x18b0 [ 72.579112][ T6692] device_add+0x1173/0x1970 [ 72.579129][ T6692] ? __pfx_device_add+0x10/0x10 [ 72.579143][ T6692] ? __pfx_idr_replace+0x10/0x10 [ 72.579154][ T6692] ? dput.part.0+0x4f/0x240 [ 72.579167][ T6692] ? dput+0x24/0x30 [ 72.579180][ T6692] i2c_register_adapter+0x862/0x13f0 [ 72.579192][ T6692] ? of_alias_get_id+0xb1/0x110 [ 72.579209][ T6692] i801_probe.cold+0x30c/0x84e [ 72.579223][ T6692] ? __pfx_i801_probe+0x10/0x10 [ 72.579239][ T6692] ? mark_held_locks+0x40/0x70 [ 72.579256][ T6692] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.579272][ T6692] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.579317][ T6692] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.579336][ T6692] ? __pfx_i801_probe+0x10/0x10 [ 72.579349][ T6692] local_pci_probe+0xdd/0x1b0 [ 72.579367][ T6692] pci_call_probe+0x176/0x800 [ 72.579385][ T6692] ? pci_match_device+0x147/0x7d0 [ 72.579401][ T6692] ? __pfx_pci_call_probe+0x10/0x10 [ 72.579422][ T6692] ? __pfx_pci_match_device+0x10/0x10 [ 72.579438][ T6692] ? pci_find_host_bridge+0x3c/0x80 [ 72.579457][ T6692] ? up_write+0x2dc/0x5b0 [ 72.579472][ T6692] pci_device_probe+0x25b/0x400 [ 72.579490][ T6692] ? __pfx_pci_device_probe+0x10/0x10 [ 72.579507][ T6692] ? kernfs_create_link+0x1bd/0x240 [ 72.579526][ T6692] ? sysfs_create_link+0x68/0xc0 [ 72.579543][ T6692] ? __pfx_pci_device_probe+0x10/0x10 [ 72.579561][ T6692] really_probe+0x241/0xa60 [ 72.579576][ T6692] __driver_probe_device+0x210/0x460 [ 72.579605][ T6692] device_driver_attach+0xd1/0x220 [ 72.579622][ T6692] bind_store+0xf4/0x190 [ 72.579637][ T6692] ? __pfx_bind_store+0x10/0x10 [ 72.579656][ T6692] drv_attr_store+0x74/0xb0 [ 72.579672][ T6692] ? __pfx_drv_attr_store+0x10/0x10 [ 72.579688][ T6692] sysfs_kf_write+0xf2/0x150 [ 72.579705][ T6692] kernfs_fop_write_iter+0x3e0/0x5f0 [ 72.579718][ T6692] ? __pfx_sysfs_kf_write+0x10/0x10 [ 72.579737][ T6692] vfs_write+0x6af/0x1050 [ 72.579753][ T6692] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 72.579768][ T6692] ? __pfx_vfs_write+0x10/0x10 [ 72.579781][ T6692] ? find_held_lock+0x2b/0x80 [ 72.579804][ T6692] ksys_write+0x12a/0x250 [ 72.579818][ T6692] ? __pfx_ksys_write+0x10/0x10 [ 72.579838][ T6692] __do_fast_syscall_32+0x13a/0x8b0 [ 72.579852][ T6692] do_fast_syscall_32+0x32/0x70 [ 72.579864][ T6692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.579878][ T6692] RIP: 0023:0xf7ff8fec [ 72.579892][ T6692] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 72.579897][ T6692] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 72.579909][ T6692] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800005c0 [ 72.579916][ T6692] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 72.579922][ T6692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.579929][ T6692] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.579935][ T6692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.579950][ T6692] [ 72.589081][ T6692] i2c i2c-1: Memory type 0x07 not supported yet, not instantiating SPD [ 72.664511][ T6694] syzkaller0: entered promiscuous mode [ 72.664530][ T6694] syzkaller0: entered allmulticast mode [ 72.678730][ T2177] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 72.681855][ T2177] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 72.967852][ T2177] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 73.521477][ T2177] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 73.587174][ T6696] ceph: No mds server is up or the cluster is laggy [ 74.678463][ T6722] uhci_hcd 0000:00:1d.0: remove, state 4 [ 74.678486][ T6722] usb usb2: USB disconnect, device number 1 [ 74.699448][ T6722] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 74.766852][ T6729] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 74.773941][ T6729] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 74.789041][ T6729] pci 0000:00:1d.0: Adding to iommu group 7 [ 74.795084][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.795149][ T5740] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 74.802659][ T6729] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 75.054383][ T6729] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 245635 usecs [ 75.121281][ T6729] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 75.124925][ T6729] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 75.125065][ T6729] uhci_hcd 0000:00:1d.0: detected 2 ports [ 75.125737][ T6729] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 75.129778][ T6729] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 75.130699][ T6729] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 75.130711][ T6729] usb usb2: Product: UHCI Host Controller [ 75.130719][ T6729] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 75.130728][ T6729] usb usb2: SerialNumber: 0000:00:1d.0 [ 75.138262][ T6729] hub 2-0:1.0: USB hub found [ 75.141241][ T6729] hub 2-0:1.0: 2 ports detected [ 75.174859][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.326350][ T50] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.327392][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.327419][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.327437][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.327467][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.336058][ T50] usb 8-1: config 0 descriptor?? [ 75.464795][ T5881] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 75.637056][ T5881] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.637894][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.637914][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.637925][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.637943][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.643779][ T5881] usb 5-1: config 0 descriptor?? [ 75.884328][ T50] usbhid 8-1:0.0: can't add hid device: -71 [ 75.884384][ T50] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 76.057538][ T5881] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 76.351844][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 76.715296][ T50] usb 8-1: USB disconnect, device number 5 [ 76.959457][ T6753] netlink: 'syz.2.218': attribute type 21 has an invalid length. [ 76.962138][ T6753] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 77.226132][ T6762] syzkaller0: entered promiscuous mode [ 77.226153][ T6762] syzkaller0: entered allmulticast mode [ 77.607706][ T6767] syzkaller0: entered promiscuous mode [ 77.607720][ T6767] syzkaller0: entered allmulticast mode [ 77.702357][ T6769] tipc: Enabled bearer , priority 0 [ 77.702976][ T6769] syzkaller0: entered promiscuous mode [ 77.702988][ T6769] syzkaller0: entered allmulticast mode [ 77.722606][ T6769] tipc: Resetting bearer [ 77.727524][ T6768] tipc: Resetting bearer [ 77.732343][ T6768] tipc: Disabling bearer [ 77.888593][ T6778] jffs2: notice: (6778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.954783][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.081523][ T2177] usb 5-1: USB disconnect, device number 4 [ 78.105373][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 78.105840][ T50] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 78.107099][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.107120][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.107141][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.108277][ T50] usb 8-1: config 0 descriptor?? [ 78.112805][ T50] pxrc 8-1:0.0: Could not find endpoint [ 78.113335][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 78.145383][ T6787] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 78.319301][ T5740] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 78.320037][ T2177] usb 8-1: USB disconnect, device number 6 [ 78.717961][ T6792] FAULT_INJECTION: forcing a failure. [ 78.717961][ T6792] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.717994][ T6792] CPU: 2 UID: 0 PID: 6792 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.718017][ T6792] Tainted: [L]=SOFTLOCKUP [ 78.718023][ T6792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.718033][ T6792] Call Trace: [ 78.718039][ T6792] [ 78.718047][ T6792] dump_stack_lvl+0x100/0x190 [ 78.718077][ T6792] should_fail_ex.cold+0x5/0xa [ 78.718124][ T6792] get_futex_key+0x1d0/0x14f0 [ 78.718146][ T6792] ? __pfx_get_futex_key+0x10/0x10 [ 78.718174][ T6792] futex_wait_setup+0x91/0x540 [ 78.718205][ T6792] __futex_wait+0x19f/0x300 [ 78.718229][ T6792] ? __pfx___futex_wait+0x10/0x10 [ 78.718250][ T6792] ? __pfx_try_to_wake_up+0x10/0x10 [ 78.718277][ T6792] ? futex_hash+0x311/0x400 [ 78.718326][ T6792] ? __pfx_futex_wake_mark+0x10/0x10 [ 78.718355][ T6792] ? find_held_lock+0x2b/0x80 [ 78.718375][ T6792] ? futex_wake+0x4ea/0x5e0 [ 78.718404][ T6792] futex_wait+0xe6/0x370 [ 78.718427][ T6792] ? __pfx_futex_wait+0x10/0x10 [ 78.718455][ T6792] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.718476][ T6792] ? find_held_lock+0x2b/0x80 [ 78.718496][ T6792] ? ksys_write+0x190/0x250 [ 78.718522][ T6792] ? ksys_write+0x190/0x250 [ 78.718547][ T6792] do_futex+0x265/0x440 [ 78.718568][ T6792] ? __pfx_do_futex+0x10/0x10 [ 78.718590][ T6792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.718614][ T6792] __ia32_sys_futex_time32+0x2f4/0x470 [ 78.718640][ T6792] ? fput+0x7c/0x100 [ 78.718665][ T6792] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 78.718687][ T6792] ? ksys_write+0x1ac/0x250 [ 78.718708][ T6792] ? __pfx_ksys_write+0x10/0x10 [ 78.718737][ T6792] __do_fast_syscall_32+0x13a/0x8b0 [ 78.718758][ T6792] do_fast_syscall_32+0x32/0x70 [ 78.718777][ T6792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.718801][ T6792] RIP: 0023:0xf7f73fec [ 78.718822][ T6792] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 78.718831][ T6792] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 78.718850][ T6792] RAX: ffffffffffffffda RBX: 00000000f7434f88 RCX: 0000000000000080 [ 78.718863][ T6792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 78.718874][ T6792] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 78.718885][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.718894][ T6792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.718919][ T6792] [ 78.885557][ T6797] tipc: Enabled bearer , priority 0 [ 78.885830][ T6797] syzkaller0: entered promiscuous mode [ 78.885840][ T6797] syzkaller0: entered allmulticast mode [ 78.890095][ T6797] tipc: Resetting bearer [ 78.890827][ T6795] tipc: Resetting bearer [ 78.910170][ T6795] tipc: Disabling bearer [ 79.270806][ T6804] warning: `syz.0.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.690862][ T6814] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 79.692075][ T1158] IPVS: starting estimator thread 0... [ 79.804862][ T6815] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.870495][ T6817] binder: 6816:6817 ioctl c0306201 80000080 returned -14 [ 79.942050][ T6819] syzkaller0: entered promiscuous mode [ 79.942068][ T6819] syzkaller0: entered allmulticast mode [ 79.952667][ T6819] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 79.952694][ T6819] TC_ACT_REPEAT abuse ? [ 80.434846][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 80.452805][ T6831] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 80.461382][ T6825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.594814][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 80.595433][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.596531][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.596550][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.596567][ T25] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.596581][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.596609][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.600485][ T25] usbtmc 8-1:16.0: bulk endpoints not found [ 80.794844][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.945308][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.946191][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 80.946205][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.947141][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.947153][ T9] usb 7-1: SerialNumber: syz [ 80.949647][ T6833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.163586][ T6833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.455485][ T6840] e1000e 0000:00:02.0 eth1: removed PHC [ 81.589625][ T6840] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 81.649889][ T9] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 81.802561][ T6843] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 81.814668][ T6843] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 81.817854][ T6843] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 81.817935][ T6843] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 81.818011][ T6843] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 81.818191][ T6843] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 81.818548][ T6843] pci 0000:00:02.0: enabling Extended Tags [ 81.844191][ T6843] pci 0000:00:02.0: Adding to iommu group 2 [ 81.859217][ T6843] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 81.859247][ T6843] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 81.860532][ T6843] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 81.861814][ T6843] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 81.863204][ T6843] pci 0000:00:02.0: BAR 2 [io 0x2020-0x203f]: assigned [ 81.923309][ T6843] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 82.013682][ T6843] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 82.039155][ T37] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 82.039226][ T6833] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 82.112472][ T6843] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 82.112501][ T6843] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 82.112701][ T6843] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 82.197779][ T9] usb 7-1: USB disconnect, device number 3 [ 82.204183][ T9] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 82.388061][ T6872] file system registered [ 82.389867][ T6872] ffs_data_put(): freeing [ 82.396104][ T5740] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 82.396648][ T5740] Bluetooth: hci1: Injecting HCI hardware error event [ 82.397446][ T5731] Bluetooth: hci1: hardware error 0x00 [ 82.542560][ T6883] uhci_hcd 0000:00:1d.0: remove, state 4 [ 82.542595][ T6883] usb usb2: USB disconnect, device number 1 [ 82.557053][ T6883] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 82.626604][ T6884] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 82.630386][ T6884] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 82.635983][ T6884] pci 0000:00:1d.0: Adding to iommu group 7 [ 82.640347][ T6884] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 82.797099][ T6884] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 152926 usecs [ 82.801447][ T6886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.833463][ T6884] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 82.835968][ T6884] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 82.836119][ T6884] uhci_hcd 0000:00:1d.0: detected 2 ports [ 82.837006][ T6884] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 82.838050][ T6884] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 82.839399][ T6884] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 82.839417][ T6884] usb usb2: Product: UHCI Host Controller [ 82.839430][ T6884] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 82.839441][ T6884] usb usb2: SerialNumber: 0000:00:1d.0 [ 82.843358][ T6884] hub 2-0:1.0: USB hub found [ 82.843562][ T6884] hub 2-0:1.0: 2 ports detected [ 82.855935][ T6886] md: invalid raid superblock magic on ram0 [ 82.855945][ T6886] md: ram0 does not have a valid v0.0 superblock, not importing! [ 82.856011][ T6886] md: md_import_device returned -22 [ 82.908156][ T6892] mmap: syz.2.256 (6892): VmData 37433344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 82.917696][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.066979][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.068603][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.068628][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.068756][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.068789][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.084840][ T9] usb 5-1: config 0 descriptor?? [ 83.223170][ T5880] usb 8-1: USB disconnect, device number 7 [ 83.328953][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 83.337299][ T6903] ip6gre1: entered promiscuous mode [ 83.337312][ T6903] ip6gre1: entered allmulticast mode [ 83.535318][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 83.535444][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.538401][ T9] usb 5-1: USB disconnect, device number 5 [ 83.542663][ T6909] tipc: Enabled bearer , priority 0 [ 83.543634][ T6909] syzkaller0: entered promiscuous mode [ 83.543651][ T6909] syzkaller0: entered allmulticast mode [ 83.560499][ T6909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 83.586642][ T6909] tipc: Resetting bearer [ 83.607108][ T6908] tipc: Resetting bearer [ 83.619324][ T6908] tipc: Disabling bearer [ 83.742420][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 83.874958][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.887298][ T6915] Console: switching to colour dummy device 80x25 [ 83.942495][ T6916] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 83.949653][ T6916] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 83.949756][ T6916] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 83.949966][ T6916] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 83.950306][ T6916] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 83.956104][ T6916] pci 0000:00:01.0: Adding to iommu group 1 [ 83.958526][ T6916] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 83.958537][ T6916] pci 0000:00:01.0: vgaarb: bridge control possible [ 83.958544][ T6916] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 83.962702][ T6916] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 83.968704][ T6916] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff]: assigned [ 83.971435][ T6916] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 83.983152][ T6916] [drm] Found bochs VGA, ID 0xb0c5. [ 83.983164][ T6916] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80084000. [ 83.991605][ T6916] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 84.027922][ T5880] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.028897][ T5880] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.028910][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.028919][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.028939][ T5880] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.030379][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.030391][ T5880] usb 7-1: Product: syz [ 84.030399][ T5880] usb 7-1: Manufacturer: syz [ 84.038906][ T5880] cdc_wdm 7-1:1.0: skipping garbage [ 84.038916][ T5880] cdc_wdm 7-1:1.0: skipping garbage [ 84.044061][ T5880] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 84.044071][ T5880] cdc_wdm 7-1:1.0: Unknown control protocol [ 84.076844][ T6916] Console: switching to colour frame buffer device 160x50 [ 84.114073][ T6916] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 84.242488][ T5880] usb 7-1: USB disconnect, device number 4 [ 84.345549][ T5824] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.474828][ T5731] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 84.605558][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.606574][ T5824] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 84.606599][ T5824] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.607806][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.607826][ T5824] usb 5-1: SerialNumber: syz [ 84.610634][ T6919] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 84.850068][ T6919] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 85.316497][ T5824] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 86.551333][ T1159] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 86.553665][ T6919] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 86.670025][ T6948] syzkaller0: entered promiscuous mode [ 86.670039][ T6948] syzkaller0: entered allmulticast mode [ 86.692243][ T25] usb 5-1: USB disconnect, device number 6 [ 86.693898][ T25] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 86.770448][ T6953] capability: warning: `syz.1.275' uses deprecated v2 capabilities in a way that may be insecure [ 87.288327][ T6965] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 87.387143][ T6967] tipc: Enabled bearer , priority 0 [ 87.389585][ T6967] syzkaller0: entered promiscuous mode [ 87.389596][ T6967] syzkaller0: entered allmulticast mode [ 87.403665][ T6967] tipc: Resetting bearer [ 87.404528][ T6966] tipc: Resetting bearer [ 87.426983][ T6966] tipc: Disabling bearer [ 87.912593][ T6982] 9p: Unknown Cache mode or invalid value mm [ 88.235179][ T50] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 88.412871][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 88.413388][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 88.413414][ T50] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 88.430140][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.430162][ T50] usb 8-1: Product: syz [ 88.430174][ T50] usb 8-1: Manufacturer: syz [ 88.430186][ T50] usb 8-1: SerialNumber: syz [ 88.739676][ T50] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.739704][ T50] usb 8-1: MIDIStreaming interface descriptor not found [ 88.856876][ T50] usb 8-1: USB disconnect, device number 8 [ 89.407139][ T7018] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 89.433147][ T7018] bond2: entered promiscuous mode [ 89.433388][ T7018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.473050][ T7023] Set syz1 is full, maxelem 2076 reached [ 89.477543][ T7025] syzkaller0: entered promiscuous mode [ 89.477561][ T7025] syzkaller0: entered allmulticast mode [ 89.561794][ T7018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.561967][ T7018] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 89.561978][ T7018] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 89.577893][ T7018] bond2: (slave wireguard0): making interface the new active one [ 89.577913][ T7018] wireguard0: entered promiscuous mode [ 89.578760][ T7018] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 90.293162][ T7034] Zero length message leads to an empty skb [ 90.643228][ T7054] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 90.643252][ T7054] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 90.643276][ T7054] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 90.727254][ T7054] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 90.957585][ T7058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.957627][ T7058] IPv6: NLM_F_CREATE should be set when creating new route [ 91.068253][ T7058] bridge0: port 3(batadv0) entered disabled state [ 91.068658][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.069876][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.095522][ T7058] batman_adv: batadv0: Interface deactivated: dummy0 [ 91.152229][ T7063] Console: switching to colour dummy device 80x25 [ 91.166545][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.182713][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.252114][ T7064] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 91.270059][ T7064] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 91.270263][ T7064] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff] [ 91.270502][ T7064] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 91.271022][ T7064] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 91.366680][ T7064] pci 0000:00:01.0: Adding to iommu group 1 [ 91.383949][ T7064] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 91.383964][ T7064] pci 0000:00:01.0: vgaarb: bridge control possible [ 91.383972][ T7064] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 91.400359][ T7064] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 91.400649][ T7064] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff]: assigned [ 91.413704][ T7064] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 91.434840][ T5900] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435286][ T5900] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435347][ T5900] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435406][ T5900] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.451889][ T7064] [drm] Found bochs VGA, ID 0xb0c5. [ 91.451900][ T7064] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80084000. [ 91.490752][ T7064] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 91.718652][ T7064] Console: switching to colour frame buffer device 160x50 [ 91.748017][ T7069] syzkaller0: entered promiscuous mode [ 91.748039][ T7069] syzkaller0: entered allmulticast mode [ 91.764406][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 91.764428][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 91.777248][ T7064] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 91.870133][ T7073] syzkaller1: entered promiscuous mode [ 91.870148][ T7073] syzkaller1: entered allmulticast mode [ 91.919352][ T3264] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 91.978430][ T3264] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 91.980151][ T3264] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 92.009657][ T7079] overlay: Unknown parameter 'fscontext' [ 92.064485][ T7082] syzkaller0: entered promiscuous mode [ 92.064506][ T7082] syzkaller0: entered allmulticast mode [ 92.183491][ T3264] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 92.236549][ T3264] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 92.378748][ T7088] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 92.412396][ T7067] ceph: No mds server is up or the cluster is laggy [ 92.416137][ T7072] ceph: No mds server is up or the cluster is laggy [ 92.467741][ T7090] syzkaller0: entered promiscuous mode [ 92.467761][ T7090] syzkaller0: entered allmulticast mode [ 92.473005][ T7090] tipc: Enabled bearer , priority 0 [ 92.485219][ T7090] tipc: Resetting bearer [ 92.496132][ T7089] tipc: Resetting bearer [ 92.529839][ T7089] tipc: Disabling bearer [ 93.378811][ T7113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.701612][ T7140] syzkaller0: entered promiscuous mode [ 94.701625][ T7140] syzkaller0: entered allmulticast mode [ 94.934040][ T7149] syzkaller0: entered promiscuous mode [ 94.934055][ T7149] syzkaller0: entered allmulticast mode [ 95.176461][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.182139][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.185905][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.189990][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.193141][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.293985][ T7162] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 96.377037][ T7180] 0x000000000000-0x000000010000 : "" [ 96.417330][ T7180] ftl_cs: FTL header not found. [ 97.324856][ T5900] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.324902][ T5900] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.324941][ T5900] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.324972][ T5900] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.332056][ T7193] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 97.375613][ T7195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.346'. [ 97.560315][ T7198] netlink: Invalid conntrack helper [ 97.560331][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.620898][ T7202] syzkaller0: entered promiscuous mode [ 97.620917][ T7202] syzkaller0: entered allmulticast mode [ 97.634361][ T7202] 0: reclassify loop, rule prio 0, protocol 800 [ 98.159049][ T7216] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.413912][ T7219] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.425647][ T7219] kvm: pic: non byte read [ 98.427316][ T7219] kvm: pic: level sensitive irq not supported [ 98.427839][ T7219] kvm: pic: non byte read [ 98.429852][ T7219] kvm: pic: level sensitive irq not supported [ 98.430185][ T7219] kvm: pic: non byte read [ 98.431461][ T7219] kvm: pic: level sensitive irq not supported [ 98.431781][ T7219] kvm: pic: non byte read [ 98.432826][ T7219] kvm: pic: level sensitive irq not supported [ 98.433096][ T7219] kvm: pic: non byte read [ 98.884183][ T42] audit: type=1326 audit(1791944800.858:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.884303][ T42] audit: type=1326 audit(1791944800.858:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.884992][ T42] audit: type=1326 audit(1791944800.858:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.885017][ T42] audit: type=1326 audit(1791944800.868:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.885037][ T42] audit: type=1326 audit(1791944800.868:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.924823][ T42] audit: type=1326 audit(1791944800.898:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.925019][ T42] audit: type=1326 audit(1791944800.908:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.925550][ T42] audit: type=1326 audit(1791944800.908:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.926055][ T42] audit: type=1326 audit(1791944800.908:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 98.926241][ T42] audit: type=1326 audit(1791944800.908:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 99.184944][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 99.335320][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 99.336888][ T25] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 99.338005][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 99.340243][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.340255][ T25] usb 7-1: Product: syz [ 99.340262][ T25] usb 7-1: Manufacturer: syz [ 99.340269][ T25] usb 7-1: SerialNumber: syz [ 99.342486][ T25] usb 7-1: config 0 descriptor?? [ 99.362256][ T25] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 99.363460][ T25] usb 7-1: Detected FT232R [ 99.439862][ T7242] jffs2: notice: (7242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.519542][ T61] IPVS: starting estimator thread 0... [ 99.520199][ T7243] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 99.587123][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 99.599464][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 99.600829][ T25] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 99.601802][ T25] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 99.603334][ T25] usb 7-1: USB disconnect, device number 5 [ 99.605005][ T7245] IPVS: using max 21 ests per chain, 50400 per kthread [ 99.625855][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.626149][ T25] ftdi_sio 7-1:0.0: device disconnected [ 101.337777][ T7268] syzkaller0: entered promiscuous mode [ 101.337798][ T7268] syzkaller0: entered allmulticast mode [ 102.470844][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 102.896565][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 102.908802][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 103.359319][ T7311] uhci_hcd 0000:00:1d.0: remove, state 4 [ 103.359343][ T7311] usb usb2: USB disconnect, device number 1 [ 103.367378][ T7311] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 103.433982][ T7311] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 103.437448][ T7311] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 103.440442][ T7311] pci 0000:00:1d.0: Adding to iommu group 7 [ 103.443578][ T7311] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 103.493952][ T7297] FAULT_INJECTION: forcing a failure. [ 103.493952][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 103.493986][ T7297] CPU: 2 UID: 0 PID: 7297 Comm: syz.1.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.494012][ T7297] Tainted: [L]=SOFTLOCKUP [ 103.494019][ T7297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.494031][ T7297] Call Trace: [ 103.494037][ T7297] [ 103.494044][ T7297] dump_stack_lvl+0x100/0x190 [ 103.494126][ T7297] should_fail_ex.cold+0x5/0xa [ 103.494150][ T7297] should_failslab+0xc2/0x120 [ 103.494241][ T7297] __kmalloc_noprof+0xfc/0x840 [ 103.494266][ T7297] ? hash_ip4_add+0x1ee2/0x25e0 [ 103.494322][ T7297] hash_ip4_add+0x1ee2/0x25e0 [ 103.494341][ T7311] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 49419 usecs [ 103.494362][ T7297] ? __pfx_hash_ip4_add+0x10/0x10 [ 103.494395][ T7297] hash_ip4_uadt+0x586/0x910 [ 103.494418][ T7297] ? __pfx_hash_ip4_add+0x10/0x10 [ 103.494445][ T7297] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 103.494468][ T7297] ? lock_acquire+0x1d1/0x380 [ 103.494501][ T7297] ? __local_bh_enable_ip+0xa5/0x120 [ 103.494531][ T7297] call_ad.isra.0+0x171/0x950 [ 103.494558][ T7297] ? __pfx_hash_ip4_resize+0x10/0x10 [ 103.494586][ T7297] ? __pfx_call_ad.isra.0+0x10/0x10 [ 103.494611][ T7297] ? __pfx___nla_validate_parse+0x10/0x10 [ 103.494648][ T7297] ? __nla_parse+0x40/0x60 [ 103.494677][ T7297] ip_set_ad.isra.0+0x3f1/0x8b0 [ 103.494698][ T7297] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 103.494715][ T7297] ? trace_contention_end+0x126/0x160 [ 103.494764][ T7297] ? find_held_lock+0x2b/0x80 [ 103.494792][ T7297] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 103.494824][ T7297] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.494852][ T7297] ? stack_trace_save+0x8e/0xc0 [ 103.494899][ T7297] ? __lock_acquire+0x5c0/0x1f40 [ 103.494929][ T7297] netlink_rcv_skb+0x159/0x420 [ 103.494948][ T7297] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.494974][ T7297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.495004][ T7297] ? ns_capable+0xd2/0xf0 [ 103.495031][ T7297] nfnetlink_rcv+0x1b3/0x440 [ 103.495054][ T7297] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 103.495076][ T7297] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.495109][ T7297] netlink_unicast+0x585/0x850 [ 103.495132][ T7297] ? __pfx_netlink_unicast+0x10/0x10 [ 103.495157][ T7297] netlink_sendmsg+0x8b0/0xda0 [ 103.495180][ T7297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.495207][ T7297] ? apparmor_socket_sendmsg+0x165/0x280 [ 103.495232][ T7297] ____sys_sendmsg+0xa4d/0xbe0 [ 103.495259][ T7297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.495280][ T7297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.495316][ T7297] ___sys_sendmsg+0x190/0x1e0 [ 103.495345][ T7297] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.495372][ T7297] ? futex_wait+0x11e/0x370 [ 103.495405][ T7297] ? find_held_lock+0x2b/0x80 [ 103.495440][ T7297] __sys_sendmsg+0x160/0x210 [ 103.495461][ T7297] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.495496][ T7297] __do_fast_syscall_32+0x13a/0x8b0 [ 103.495552][ T7297] do_fast_syscall_32+0x32/0x70 [ 103.495573][ T7297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.495595][ T7297] RIP: 0023:0xf748efec [ 103.495615][ T7297] Code: Unable to access opcode bytes at 0xf748efc2. [ 103.495623][ T7297] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 103.495642][ T7297] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 103.495656][ T7297] RDX: 00000000240008c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.495666][ T7297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.495677][ T7297] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.495688][ T7297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.495712][ T7297] [ 103.525050][ T7311] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 103.526838][ T7311] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 103.527093][ T7311] uhci_hcd 0000:00:1d.0: detected 2 ports [ 103.527680][ T7311] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 103.528488][ T7311] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 103.529384][ T7311] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 103.529396][ T7311] usb usb2: Product: UHCI Host Controller [ 103.529404][ T7311] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 103.529413][ T7311] usb usb2: SerialNumber: 0000:00:1d.0 [ 103.533051][ T7311] hub 2-0:1.0: USB hub found [ 103.533385][ T7311] hub 2-0:1.0: 2 ports detected [ 103.674828][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.744785][ T2177] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 103.915280][ T2177] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.916270][ T2177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.916285][ T2177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.916296][ T2177] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.916320][ T2177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.917662][ T2177] usb 7-1: config 0 descriptor?? [ 104.211977][ T7317] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 104.240898][ T63] e1000 0000:00:06.0 eth0: Reset adapter [ 104.398860][ T2177] usbhid 7-1:0.0: can't add hid device: -71 [ 104.398914][ T2177] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 104.400044][ T2177] usb 7-1: USB disconnect, device number 6 [ 104.402394][ T7325] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 104.485351][ T7321] syzkaller0: entered promiscuous mode [ 104.485366][ T7321] syzkaller0: entered allmulticast mode [ 104.989359][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 104.991024][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 104.993465][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 105.114918][ T7355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.152101][ T7350] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 105.293434][ T7355] md/raid:md0: invalid chunk size 0 [ 105.293451][ T7355] md: pers->run() failed ... [ 106.476109][ T2177] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 115.735728][ T2177] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 115.918624][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.921962][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.932045][ T7389] batman_adv: batadv0: Interface activated: dummy0 [ 115.932060][ T7389] batadv0: mtu less than device minimum [ 115.932553][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.933039][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.933523][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.934059][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.934566][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.935140][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.935631][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.936148][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.936633][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.985475][ T7389] bridge0: port 3(batadv0) entered blocking state [ 115.985564][ T7389] bridge0: port 3(batadv0) entered forwarding state [ 115.985769][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.036438][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.064629][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.077491][ T7389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.077508][ T7389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.080049][ T7389] veth1_vlan: left promiscuous mode [ 116.087481][ T7389] veth0_vlan: left promiscuous mode [ 116.092150][ T7389] veth0_vlan: entered promiscuous mode [ 116.093212][ T7389] veth1_vlan: entered promiscuous mode [ 116.097762][ T7389] veth1_macvtap: left promiscuous mode [ 116.098311][ T7389] veth0_macvtap: left promiscuous mode [ 116.105371][ T7389] veth0_macvtap: entered promiscuous mode [ 116.105896][ T7389] veth1_macvtap: entered promiscuous mode [ 116.109656][ T7389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.110415][ T7389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.110971][ T7389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.111562][ T7389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.113595][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.125487][ T7389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.127489][ T7389] bond2: entered allmulticast mode [ 116.127504][ T7389] geneve2: entered allmulticast mode [ 116.127680][ T7389] macvtap1: left allmulticast mode [ 116.127692][ T7389] bond2: left allmulticast mode [ 116.127702][ T7389] geneve2: left allmulticast mode [ 116.128572][ T7389] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.129339][ T7389] geneve2: entered promiscuous mode [ 116.136680][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.136775][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.139101][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.139189][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.184837][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.184865][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.184883][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.184900][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.771525][ T7415] FAULT_INJECTION: forcing a failure. [ 124.771525][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 124.771558][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.2.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.771585][ T7415] Tainted: [L]=SOFTLOCKUP [ 124.771592][ T7415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.771604][ T7415] Call Trace: [ 124.771612][ T7415] [ 124.771620][ T7415] dump_stack_lvl+0x100/0x190 [ 124.771652][ T7415] should_fail_ex.cold+0x5/0xa [ 124.771679][ T7415] should_failslab+0xc2/0x120 [ 124.771733][ T7415] __kvmalloc_node_noprof+0x113/0x9b0 [ 124.771762][ T7415] ? __kasan_kmalloc+0xaa/0xb0 [ 124.771788][ T7415] ? do_replace_table+0x1c5/0x760 [ 124.771823][ T7415] do_replace_table+0x1c5/0x760 [ 124.771858][ T7415] xt_register_table+0x384/0x9a0 [ 124.771894][ T7415] ? __pfx_xt_register_table+0x10/0x10 [ 124.771923][ T7415] ? xt_alloc_table_info+0x44/0xa0 [ 124.771951][ T7415] ? __asan_memset+0x23/0x50 [ 124.771978][ T7415] ipt_register_table+0x137/0x2b0 [ 124.772011][ T7415] ? __pfx_ipt_register_table+0x10/0x10 [ 124.772039][ T7415] ? __kmalloc_noprof+0x350/0x840 [ 124.772073][ T7415] ? ipt_alloc_initial_table+0x5b8/0x700 [ 124.772106][ T7415] iptable_raw_table_init+0x63/0x90 [ 124.772127][ T7415] xt_find_table_lock+0x2db/0x520 [ 124.772160][ T7415] xt_request_find_table_lock+0x28/0xf0 [ 124.772190][ T7415] get_info+0x196/0x5f0 [ 124.772221][ T7415] ? __pfx_get_info+0x10/0x10 [ 124.772249][ T7415] ? find_held_lock+0x2b/0x80 [ 124.772279][ T7415] ? sockopt_release_sock+0x57/0x70 [ 124.772309][ T7415] ? lock_acquire+0x1d1/0x380 [ 124.772338][ T7415] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 124.772371][ T7415] ? rcu_is_watching+0x13/0xc0 [ 124.772401][ T7415] ? bpf_lsm_capable+0x9/0x10 [ 124.772422][ T7415] ? security_capable+0x80/0x260 [ 124.772458][ T7415] do_ipt_get_ctl+0x209/0xab0 [ 124.772490][ T7415] ? __mutex_unlock_slowpath+0x35d/0x930 [ 124.772512][ T7415] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 124.772543][ T7415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.772567][ T7415] ? lock_acquire+0x1d1/0x380 [ 124.772601][ T7415] ? nf_sockopt_find.isra.0+0x222/0x290 [ 124.772629][ T7415] nf_getsockopt+0x7c/0xe0 [ 124.772654][ T7415] ip_getsockopt+0x192/0x1e0 [ 124.772675][ T7415] ? __pfx_ip_getsockopt+0x10/0x10 [ 124.772696][ T7415] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 124.772724][ T7415] ? trace_sched_exit_tp+0x120/0x160 [ 124.772759][ T7415] sctp_getsockopt+0x19b/0x70e0 [ 124.772787][ T7415] ? aa_inet_opt_perm+0x30d/0x970 [ 124.772823][ T7415] ? __pfx_sctp_getsockopt+0x10/0x10 [ 124.772849][ T7415] ? lock_acquire+0x1d1/0x380 [ 124.772878][ T7415] ? futex_unqueue+0x29/0x2c0 [ 124.772901][ T7415] ? find_held_lock+0x2b/0x80 [ 124.772924][ T7415] ? futex_unqueue+0x133/0x2c0 [ 124.772944][ T7415] ? futex_unqueue+0x133/0x2c0 [ 124.772990][ T7415] ? futex_unqueue+0x13d/0x2c0 [ 124.773013][ T7415] ? __futex_wait+0x256/0x300 [ 124.773050][ T7415] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.773082][ T7415] ? find_held_lock+0x2b/0x80 [ 124.773111][ T7415] ? aa_sock_opt_perm+0x114/0x1e0 [ 124.773145][ T7415] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 124.773176][ T7415] do_sock_getsockopt+0x50a/0x6e0 [ 124.773207][ T7415] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 124.773241][ T7415] ? __fget_files+0x34/0x3d0 [ 124.773275][ T7415] ? find_held_lock+0x2b/0x80 [ 124.773306][ T7415] ? __fget_files+0x21f/0x3d0 [ 124.773339][ T7415] __sys_getsockopt+0x133/0x1d0 [ 124.773371][ T7415] ? __ia32_sys_getsockopt+0xbc/0x160 [ 124.773394][ T7415] __ia32_sys_getsockopt+0xbc/0x160 [ 124.773417][ T7415] ? __do_fast_syscall_32+0xb3/0x8b0 [ 124.773437][ T7415] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.773467][ T7415] __do_fast_syscall_32+0x13a/0x8b0 [ 124.773490][ T7415] do_fast_syscall_32+0x32/0x70 [ 124.773511][ T7415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.773536][ T7415] RIP: 0023:0xf7ff8fec [ 124.773558][ T7415] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 124.773567][ T7415] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 124.773586][ T7415] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000 [ 124.773599][ T7415] RDX: 0000000000000040 RSI: 0000000080000040 RDI: 00000000800000c0 [ 124.773612][ T7415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.773624][ T7415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.773637][ T7415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.773666][ T7415] [ 124.903421][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 124.903441][ T42] audit: type=1800 audit(1791944826.878:101): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.397" name="/" dev="fuse" ino=1 res=0 errno=0 [ 125.220028][ T7437] netlink: 'syz.0.398': attribute type 2 has an invalid length. [ 125.244881][ T5882] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 125.366116][ T7437] : entered promiscuous mode [ 125.405519][ T5882] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 125.406693][ T5882] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.407864][ T5882] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.410380][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.410399][ T5882] usb 8-1: Product: syz [ 125.410411][ T5882] usb 8-1: Manufacturer: syz [ 125.410423][ T5882] usb 8-1: SerialNumber: syz [ 125.417106][ T5882] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 125.423023][ T5882] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 125.426357][ T5882] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 128.650772][ T7462] syzkaller0: entered promiscuous mode [ 128.650792][ T7462] syzkaller0: entered allmulticast mode [ 128.737553][ T7466] lo: entered allmulticast mode [ 128.738162][ T7466] bond0: entered allmulticast mode [ 128.738695][ T7466] dummy0: entered allmulticast mode [ 128.739141][ T7466] eql: entered allmulticast mode [ 128.739566][ T7466] ifb0: entered allmulticast mode [ 128.743941][ T7466] ifb1: entered allmulticast mode [ 128.752456][ T7466] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 128.761579][ T7466] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 128.764290][ T7466] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 128.764948][ T7466] hwsim0: entered allmulticast mode [ 128.765240][ T7466] ieee802154 phy0 wpan0: entered allmulticast mode [ 128.765461][ T7466] ieee802154 phy1 wpan1: entered allmulticast mode [ 128.765727][ T7466] teql0: entered allmulticast mode [ 128.765786][ T7466] tunl0: entered allmulticast mode [ 128.765856][ T7466] gre0: entered allmulticast mode [ 128.765921][ T7466] gretap0: entered allmulticast mode [ 128.768017][ T7466] erspan0: entered allmulticast mode [ 128.768094][ T7466] ip_vti0: entered allmulticast mode [ 128.768232][ T7466] ip6_vti0: entered allmulticast mode [ 128.768321][ T7466] sit0: entered allmulticast mode [ 128.768390][ T7466] ip6tnl0: entered allmulticast mode [ 128.768458][ T7466] ip6gre0: entered allmulticast mode [ 128.768524][ T7466] lapb0: entered allmulticast mode [ 128.768732][ T7466] lapb1: entered allmulticast mode [ 128.770516][ T7466] lapb2: entered allmulticast mode [ 128.770773][ T7466] lapb3: entered allmulticast mode [ 128.771076][ T7466] lapb5: entered allmulticast mode [ 128.771276][ T7466] lapb6: entered allmulticast mode [ 128.771466][ T7466] lowpan0: entered allmulticast mode [ 128.772796][ T7466] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 128.772892][ T7466] @: entered allmulticast mode [ 128.772988][ T7466] lapb4: entered allmulticast mode [ 128.887889][ T7432] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 128.955865][ T7469] input: syz0 as /devices/virtual/input/input7 [ 128.992180][ T7432] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 129.073771][ T5824] usb 8-1: USB disconnect, device number 9 [ 129.105741][ T5824] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 129.121557][ T5824] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 129.130396][ T5824] ti_usb_3410_5052 8-1:2.0: device disconnected [ 129.948410][ T7489] LUN: removable file: (no medium) [ 131.594800][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.594819][ T50] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 131.596347][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.341607][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.341638][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.918378][ T7556] jffs2: notice: (7556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.249960][ T7560] net_ratelimit: 54 callbacks suppressed [ 133.249973][ T7560] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.263091][ T7563] binder: 7562:7563 ioctl c0306201 80000080 returned -14 [ 133.582642][ T7573] jffs2: notice: (7573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.019672][ T7576] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 134.028406][ T7576] bond3: entered promiscuous mode [ 134.028567][ T7576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.067422][ T7576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.067601][ T7576] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 134.067612][ T7576] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 134.096706][ T7576] bond3: (slave wireguard0): making interface the new active one [ 134.096729][ T7576] wireguard0: entered promiscuous mode [ 134.097491][ T7576] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 134.794860][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.795482][ T50] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 134.795497][ T50] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 135.056527][ T7600] uhci_hcd 0000:00:1d.0: remove, state 4 [ 135.056549][ T7600] usb usb2: USB disconnect, device number 1 [ 135.070687][ T7600] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 135.136562][ T7600] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 135.139379][ T7600] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 135.142278][ T7600] pci 0000:00:1d.0: Adding to iommu group 7 [ 135.152892][ T7600] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 135.201911][ T7600] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 47705 usecs [ 135.238606][ T7600] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 135.240001][ T7600] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 135.240109][ T7600] uhci_hcd 0000:00:1d.0: detected 2 ports [ 135.240999][ T7600] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 135.241832][ T7600] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 135.242637][ T7600] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 135.242649][ T7600] usb usb2: Product: UHCI Host Controller [ 135.242657][ T7600] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 135.242666][ T7600] usb usb2: SerialNumber: 0000:00:1d.0 [ 135.259247][ T7600] hub 2-0:1.0: USB hub found [ 135.259694][ T7600] hub 2-0:1.0: 2 ports detected [ 135.371168][ T7607] jffs2: notice: (7607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.422890][ T7610] FAULT_INJECTION: forcing a failure. [ 135.422890][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 135.422913][ T7610] CPU: 2 UID: 0 PID: 7610 Comm: syz.3.436 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.422930][ T7610] Tainted: [L]=SOFTLOCKUP [ 135.422936][ T7610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.422943][ T7610] Call Trace: [ 135.422947][ T7610] [ 135.422952][ T7610] dump_stack_lvl+0x100/0x190 [ 135.422972][ T7610] should_fail_ex.cold+0x5/0xa [ 135.422988][ T7610] should_failslab+0xc2/0x120 [ 135.423006][ T7610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 135.423023][ T7610] ? __kernfs_new_node+0xd2/0xa10 [ 135.423037][ T7610] __kernfs_new_node+0xd2/0xa10 [ 135.423050][ T7610] ? __pfx___kernfs_new_node+0x10/0x10 [ 135.423062][ T7610] ? lock_acquire+0x1d1/0x380 [ 135.423079][ T7610] ? kernfs_root+0x23/0x2a0 [ 135.423096][ T7610] ? find_held_lock+0x2b/0x80 [ 135.423109][ T7610] ? kernfs_root+0xee/0x2a0 [ 135.423124][ T7610] ? kernfs_root+0xee/0x2a0 [ 135.423144][ T7610] kernfs_new_node+0x117/0x150 [ 135.423158][ T7610] __kernfs_create_file+0x53/0x350 [ 135.423174][ T7610] sysfs_add_file_mode_ns+0x207/0x3c0 [ 135.423214][ T7610] internal_create_group+0x593/0xfb0 [ 135.423236][ T7610] ? __pfx_internal_create_group+0x10/0x10 [ 135.423256][ T7610] ? kernfs_create_link+0x1bd/0x240 [ 135.423273][ T7610] internal_create_groups+0x9d/0x150 [ 135.423293][ T7610] device_add+0x71a/0x1970 [ 135.423309][ T7610] ? __pfx_device_add+0x10/0x10 [ 135.423324][ T7610] ? kfree_const+0x5a/0x70 [ 135.423336][ T7610] ? kfree+0x1e5/0x6d0 [ 135.423353][ T7610] device_create_groups_vargs+0x1f8/0x270 [ 135.423370][ T7610] device_create+0xed/0x130 [ 135.423386][ T7610] ? __pfx_device_create+0x10/0x10 [ 135.423403][ T7610] ? __pfx_vsnprintf+0x10/0x10 [ 135.423421][ T7610] ? __pfx___debug_object_init+0x10/0x10 [ 135.423435][ T7610] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.423454][ T7610] bdi_register_va+0x114/0x820 [ 135.423477][ T7610] ? __pfx_bdi_register_va+0x10/0x10 [ 135.423500][ T7610] ? lockdep_init_map_type+0x5c/0x250 [ 135.423526][ T7610] ? bdi_init+0x3f4/0x5b0 [ 135.423550][ T7610] super_setup_bdi_name+0xff/0x250 [ 135.423570][ T7610] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 135.423589][ T7610] ? __raw_spin_lock_init+0x3a/0x110 [ 135.423603][ T7610] ? ceph_get_tree+0x9e1/0x1fd0 [ 135.423624][ T7610] ceph_get_tree+0xa02/0x1fd0 [ 135.423641][ T7610] ? security_capable+0x80/0x260 [ 135.423661][ T7610] vfs_get_tree+0x92/0x320 [ 135.423673][ T7610] path_mount+0x7d0/0x2850 [ 135.423686][ T7610] ? __pfx_path_mount+0x10/0x10 [ 135.423701][ T7610] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.423720][ T7610] ? putname+0xb1/0x110 [ 135.423737][ T7610] ? kmem_cache_free+0x127/0x6c0 [ 135.423757][ T7610] ? __ia32_sys_mount+0x292/0x310 [ 135.423769][ T7610] __ia32_sys_mount+0x292/0x310 [ 135.423781][ T7610] ? __pfx___ia32_sys_mount+0x10/0x10 [ 135.423797][ T7610] __do_fast_syscall_32+0x13a/0x8b0 [ 135.423813][ T7610] do_fast_syscall_32+0x32/0x70 [ 135.423826][ T7610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.423841][ T7610] RIP: 0023:0xf73defec [ 135.423854][ T7610] Code: Unable to access opcode bytes at 0xf73defc2. [ 135.423860][ T7610] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 135.423871][ T7610] RAX: ffffffffffffffda RBX: 0000000080003100 RCX: 0000000080003000 [ 135.423879][ T7610] RDX: 0000000080003200 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.423886][ T7610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.423894][ T7610] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.423901][ T7610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.423916][ T7610] [ 135.425163][ T63] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.432356][ T7610] ceph: No mds server is up or the cluster is laggy [ 135.595579][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.596481][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.596497][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.596509][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.596528][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.597941][ T63] usb 5-1: config 0 descriptor?? [ 135.620797][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 135.726498][ T7618] nvme_fabrics: missing parameter 'transport=%s' [ 135.729123][ T7618] nvme_fabrics: missing parameter 'nqn=%s' [ 136.597045][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 136.598504][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 136.619359][ T63] usb 5-1: USB disconnect, device number 7 [ 136.799871][ T7621] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 136.807611][ T7625] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.814338][ T7621] bond1: entered promiscuous mode [ 136.814553][ T7621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.837316][ T7626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 136.839757][ T7621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.839959][ T7621] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 136.839971][ T7621] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 136.844558][ T7621] bond1: (slave wireguard0): making interface the new active one [ 136.844570][ T7621] wireguard0: entered promiscuous mode [ 136.846295][ T7621] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 136.874835][ T50] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 136.874851][ T50] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 136.875369][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.942494][ T7626] FAULT_INJECTION: forcing a failure. [ 136.942494][ T7626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.942518][ T7626] CPU: 1 UID: 0 PID: 7626 Comm: syz.1.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.942547][ T7626] Tainted: [L]=SOFTLOCKUP [ 136.942553][ T7626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.942561][ T7626] Call Trace: [ 136.942566][ T7626] [ 136.942572][ T7626] dump_stack_lvl+0x100/0x190 [ 136.942594][ T7626] should_fail_ex.cold+0x5/0xa [ 136.942611][ T7626] kvm_write_guest_offset_cached+0x1fe/0x510 [ 136.942635][ T7626] kvm_lapic_sync_to_vapic+0x48c/0x6d0 [ 136.942655][ T7626] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10 [ 136.942673][ T7626] ? vmx_load_vmcs01+0x9b/0xe0 [ 136.942688][ T7626] ? vmx_update_cr8_intercept+0x1fd/0x390 [ 136.942705][ T7626] vcpu_run+0xf90/0x61a0 [ 136.942716][ T7626] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 136.942747][ T7626] ? __pfx_vcpu_run+0x10/0x10 [ 136.942766][ T7626] ? lock_acquire+0x1d1/0x380 [ 136.942796][ T7626] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 136.942815][ T7626] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 136.942830][ T7626] ? __local_bh_enable_ip+0xa5/0x120 [ 136.942850][ T7626] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 136.942863][ T7626] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 136.942880][ T7626] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 136.942901][ T7626] kvm_vcpu_ioctl+0x730/0x1700 [ 136.942917][ T7626] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 136.942932][ T7626] ? tomoyo_path_number_perm+0x188/0x580 [ 136.942948][ T7626] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.942968][ T7626] ? futex_wait+0x11e/0x370 [ 136.942989][ T7626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.943010][ T7626] ? do_vfs_ioctl+0x226/0x13e0 [ 136.943024][ T7626] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 136.943041][ T7626] ? __fget_files+0x34/0x3d0 [ 136.943060][ T7626] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 136.943077][ T7626] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 136.943093][ T7626] ? __fget_files+0x21f/0x3d0 [ 136.943111][ T7626] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 136.943127][ T7626] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 136.943143][ T7626] __do_fast_syscall_32+0x13a/0x8b0 [ 136.943158][ T7626] do_fast_syscall_32+0x32/0x70 [ 136.943170][ T7626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.943185][ T7626] RIP: 0023:0xf748efec [ 136.943200][ T7626] Code: Unable to access opcode bytes at 0xf748efc2. [ 136.943205][ T7626] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 136.943217][ T7626] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 136.943225][ T7626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.943232][ T7626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.943238][ T7626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.943245][ T7626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.943259][ T7626] [ 137.044820][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 137.200040][ T5880] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 137.201076][ T5880] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 137.201100][ T5880] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 137.203068][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.203089][ T5880] usb 7-1: Product: syz [ 137.203102][ T5880] usb 7-1: Manufacturer: syz [ 137.203114][ T5880] usb 7-1: SerialNumber: syz [ 137.208870][ T7625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.208963][ T7625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.209839][ T5880] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 137.209850][ T5880] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 137.209868][ T5880] usbserial_generic 7-1:1.0: generic converter detected [ 137.218167][ T5880] usb 7-1: generic converter now attached to ttyUSB0 [ 137.426237][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.426323][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.426478][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.426528][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.426679][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.426711][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427059][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427109][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427267][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427314][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427471][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427521][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427658][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427842][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.427891][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428040][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428255][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428289][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428643][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428692][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428842][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.428891][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.429048][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.429096][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.429248][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 137.432429][ T5880] usb 7-1: USB disconnect, device number 7 [ 137.439173][ T5880] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 137.439762][ T5880] usbserial_generic 7-1:1.0: device disconnected [ 138.049853][ T7653] FAULT_INJECTION: forcing a failure. [ 138.049853][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 138.049888][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.2.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.049915][ T7653] Tainted: [L]=SOFTLOCKUP [ 138.049922][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.049933][ T7653] Call Trace: [ 138.049940][ T7653] [ 138.049949][ T7653] dump_stack_lvl+0x100/0x190 [ 138.049984][ T7653] should_fail_ex.cold+0x5/0xa [ 138.050037][ T7653] should_failslab+0xc2/0x120 [ 138.050072][ T7653] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 138.050102][ T7653] ? find_held_lock+0x2b/0x80 [ 138.050127][ T7653] ? sock_alloc_inode+0x26/0x2c0 [ 138.050157][ T7653] ? __pfx_sock_alloc_inode+0x10/0x10 [ 138.050185][ T7653] sock_alloc_inode+0x26/0x2c0 [ 138.050212][ T7653] ? __pfx_sock_alloc_inode+0x10/0x10 [ 138.050238][ T7653] alloc_inode+0x68/0x250 [ 138.050259][ T7653] sock_alloc+0x44/0x280 [ 138.050281][ T7653] ? security_socket_create+0x7f/0x250 [ 138.050321][ T7653] __sock_create+0xc2/0x860 [ 138.050355][ T7653] __sys_socket+0x14d/0x260 [ 138.050383][ T7653] ? xfd_validate_state+0x129/0x190 [ 138.050415][ T7653] ? __pfx___sys_socket+0x10/0x10 [ 138.050456][ T7653] __ia32_sys_socket+0x72/0xb0 [ 138.050474][ T7653] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.050506][ T7653] __do_fast_syscall_32+0x13a/0x8b0 [ 138.050530][ T7653] do_fast_syscall_32+0x32/0x70 [ 138.050551][ T7653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.050575][ T7653] RIP: 0023:0xf7ff8fec [ 138.050595][ T7653] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 138.050604][ T7653] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 138.050624][ T7653] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 138.050637][ T7653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.050649][ T7653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.050662][ T7653] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.050675][ T7653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.050702][ T7653] [ 138.050744][ T7653] socket: no more sockets [ 138.384171][ T7661] nvme_fabrics: missing parameter 'transport=%s' [ 138.384183][ T7661] nvme_fabrics: missing parameter 'nqn=%s' [ 139.149730][ T5824] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 139.225967][ T5880] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 139.405381][ T5824] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 139.485325][ T5880] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 139.617765][ T7664] ceph: No mds server is up or the cluster is laggy [ 139.618963][ T7665] ceph: No mds server is up or the cluster is laggy [ 141.927727][ T7691] FAULT_INJECTION: forcing a failure. [ 141.927727][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 141.927749][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.927765][ T7691] Tainted: [L]=SOFTLOCKUP [ 141.927769][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.927776][ T7691] Call Trace: [ 141.927779][ T7691] [ 141.927784][ T7691] dump_stack_lvl+0x100/0x190 [ 141.927804][ T7691] should_fail_ex.cold+0x5/0xa [ 141.927819][ T7691] should_failslab+0xc2/0x120 [ 141.927837][ T7691] kmem_cache_alloc_noprof+0x92/0x6a0 [ 141.927853][ T7691] ? __pfx_map_id_range_down+0x10/0x10 [ 141.927869][ T7691] ? rcu_is_watching+0x13/0xc0 [ 141.927881][ T7691] ? security_inode_alloc+0x3b/0x2c0 [ 141.927897][ T7691] security_inode_alloc+0x3b/0x2c0 [ 141.927911][ T7691] inode_init_always_gfp+0xc6f/0xfb0 [ 141.927930][ T7691] alloc_inode+0x8e/0x250 [ 141.927943][ T7691] sock_alloc+0x44/0x280 [ 141.927958][ T7691] ? security_socket_create+0x7f/0x250 [ 141.927971][ T7691] __sock_create+0xc2/0x860 [ 141.927990][ T7691] __sys_socket+0x14d/0x260 [ 141.928007][ T7691] ? xfd_validate_state+0x129/0x190 [ 141.928024][ T7691] ? __pfx___sys_socket+0x10/0x10 [ 141.928045][ T7691] __ia32_sys_socket+0x72/0xb0 [ 141.928055][ T7691] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.928073][ T7691] __do_fast_syscall_32+0x13a/0x8b0 [ 141.928087][ T7691] do_fast_syscall_32+0x32/0x70 [ 141.928098][ T7691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.928113][ T7691] RIP: 0023:0xf73defec [ 141.928125][ T7691] Code: Unable to access opcode bytes at 0xf73defc2. [ 141.928131][ T7691] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 141.928142][ T7691] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 141.928149][ T7691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.928174][ T7691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.928183][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.928190][ T7691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.928206][ T7691] [ 141.928243][ T7691] socket: no more sockets [ 142.169346][ T7697] jffs2: notice: (7697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.107396][ T7707] nvme_fabrics: missing parameter 'transport=%s' [ 144.107409][ T7707] nvme_fabrics: missing parameter 'nqn=%s' [ 144.430918][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 144.434117][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 144.439134][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 144.475589][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 145.083146][ T7728] FAULT_INJECTION: forcing a failure. [ 145.083146][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 145.083169][ T7728] CPU: 0 UID: 0 PID: 7728 Comm: syz.3.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.083184][ T7728] Tainted: [L]=SOFTLOCKUP [ 145.083188][ T7728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.083195][ T7728] Call Trace: [ 145.083199][ T7728] [ 145.083204][ T7728] dump_stack_lvl+0x100/0x190 [ 145.083224][ T7728] should_fail_ex.cold+0x5/0xa [ 145.083240][ T7728] should_failslab+0xc2/0x120 [ 145.083259][ T7728] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 145.083276][ T7728] ? find_held_lock+0x2b/0x80 [ 145.083290][ T7728] ? sock_alloc_inode+0x26/0x2c0 [ 145.083307][ T7728] ? __pfx_sock_alloc_inode+0x10/0x10 [ 145.083323][ T7728] sock_alloc_inode+0x26/0x2c0 [ 145.083338][ T7728] ? __pfx_sock_alloc_inode+0x10/0x10 [ 145.083354][ T7728] alloc_inode+0x68/0x250 [ 145.083370][ T7728] sock_alloc+0x44/0x280 [ 145.083389][ T7728] ? security_socket_create+0x7f/0x250 [ 145.083410][ T7728] __sock_create+0xc2/0x860 [ 145.083442][ T7728] __sys_socket+0x14d/0x260 [ 145.083469][ T7728] ? fput+0x7c/0x100 [ 145.083489][ T7728] ? __pfx___sys_socket+0x10/0x10 [ 145.083506][ T7728] ? ksys_write+0x1ac/0x250 [ 145.083520][ T7728] ? __pfx_ksys_write+0x10/0x10 [ 145.083537][ T7728] __ia32_sys_socket+0x72/0xb0 [ 145.083547][ T7728] ? lockdep_hardirqs_on+0x7d/0x110 [ 145.083564][ T7728] __do_fast_syscall_32+0x13a/0x8b0 [ 145.083578][ T7728] do_fast_syscall_32+0x32/0x70 [ 145.083590][ T7728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.083605][ T7728] RIP: 0023:0xf73defec [ 145.083618][ T7728] Code: Unable to access opcode bytes at 0xf73defc2. [ 145.083624][ T7728] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 145.083641][ T7728] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 145.083649][ T7728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.083656][ T7728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.083663][ T7728] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.083670][ T7728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.083685][ T7728] [ 145.083692][ T7728] socket: no more sockets [ 145.116194][ C0] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 145.646152][ T7731] ------------[ cut here ]------------ [ 145.646168][ T7731] Device '1-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 145.646181][ T7731] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#1: syz.1.483/7731 [ 145.657894][ T7731] Modules linked in: [ 145.659541][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.1.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.663829][ T7731] Tainted: [L]=SOFTLOCKUP [ 145.665609][ T7731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.669599][ T7731] RIP: 0010:device_release+0x1dd/0x270 [ 145.671834][ T7731] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 0d 51 a1 fb 48 8d 3d 56 91 e7 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 f4 50 a1 fb 48 89 da 48 b8 00 00 [ 145.679661][ T7731] RSP: 0000:ffffc900041a7a20 EFLAGS: 00010287 [ 145.682123][ T7731] RAX: 00000000000044e4 RBX: ffff88802a0d9020 RCX: ffffc9000cca2000 [ 145.685388][ T7731] RDX: 0000000000080000 RSI: ffff888022c5b0e0 RDI: ffffffff9251e2c0 [ 145.688460][ T7731] RBP: ffff888022c5b0e0 R08: 0000000000000001 R09: 0000000000000000 [ 145.691627][ T7731] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888014d0a400 [ 145.694869][ T7731] R13: dffffc0000000000 R14: ffff888022c5b0e0 R15: 0000000000000000 [ 145.698008][ T7731] FS: 0000000000000000(0000) GS:ffff88809584a000(0063) knlGS:00000000f54a6b40 [ 145.701486][ T7731] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 145.704149][ T7731] CR2: 0000000080010000 CR3: 0000000071151000 CR4: 0000000000352ef0 [ 145.707403][ T7731] Call Trace: [ 145.708760][ T7731] [ 145.709995][ T7731] kobject_put+0x1f7/0x640 [ 145.711876][ T7731] device_unregister+0x2f/0xe0 [ 145.713919][ T7731] i2c_unregister_device+0xf5/0x270 [ 145.716258][ T7731] i2c_deregister_clients+0x255/0x460 [ 145.718388][ T7731] i2c_del_adapter+0x13a/0x2e0 [ 145.720461][ T7731] i801_remove+0xa4/0x3d0 [ 145.722222][ T7731] pci_device_remove+0xb2/0x1d0 [ 145.724312][ T7731] ? __pfx_pci_device_remove+0x10/0x10 [ 145.726693][ T7731] device_remove+0xcb/0x180 [ 145.728663][ T7731] device_release_driver_internal+0x44e/0x620 [ 145.731321][ T7731] unbind_store+0xf8/0x110 [ 145.733127][ T7731] ? __pfx_unbind_store+0x10/0x10 [ 145.735394][ T7731] drv_attr_store+0x74/0xb0 [ 145.737355][ T7731] ? __pfx_drv_attr_store+0x10/0x10 [ 145.739141][ T7731] sysfs_kf_write+0xf2/0x150 [ 145.740606][ T7731] kernfs_fop_write_iter+0x3e0/0x5f0 [ 145.742288][ T7731] ? __pfx_sysfs_kf_write+0x10/0x10 [ 145.743953][ T7731] vfs_write+0x6af/0x1050 [ 145.745370][ T7731] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 145.747216][ T7731] ? __pfx_vfs_write+0x10/0x10 [ 145.748692][ T7731] ? find_held_lock+0x2b/0x80 [ 145.750212][ T7731] ksys_write+0x12a/0x250 [ 145.751594][ T7731] ? __pfx_ksys_write+0x10/0x10 [ 145.753148][ T7731] __do_fast_syscall_32+0x13a/0x8b0 [ 145.755994][ T7731] do_fast_syscall_32+0x32/0x70 [ 145.758205][ T7731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.761081][ T7731] RIP: 0023:0xf748efec [ 145.762845][ T7731] Code: Unable to access opcode bytes at 0xf748efc2. [ 145.765726][ T7731] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 145.769269][ T7731] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 145.772625][ T7731] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 145.776161][ T7731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.779481][ T7731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.782829][ T7731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.785953][ T7731] [ 145.787113][ T7731] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.789373][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.1.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.792749][ T7731] Tainted: [L]=SOFTLOCKUP [ 145.794166][ T7731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.797253][ T7731] Call Trace: [ 145.798330][ T7731] [ 145.799288][ T7731] dump_stack_lvl+0x100/0x190 [ 145.800769][ T7731] vpanic+0x553/0x970 [ 145.801999][ T7731] ? __pfx_vpanic+0x10/0x10 [ 145.803481][ T7731] panic+0xd1/0xe0 [ 145.804675][ T7731] ? __pfx_panic+0x10/0x10 [ 145.806100][ T7731] check_panic_on_warn.cold+0x19/0x34 [ 145.807798][ T7731] ? device_release+0x1da/0x270 [ 145.809363][ T7731] __warn.cold+0x191/0x318 [ 145.810802][ T7731] __report_bug+0x30f/0x440 [ 145.812273][ T7731] ? device_release+0x1da/0x270 [ 145.814087][ T7731] ? __pfx___report_bug+0x10/0x10 [ 145.816263][ T7731] ? do_raw_spin_lock+0x128/0x260 [ 145.818410][ T7731] ? find_held_lock+0x2b/0x80 [ 145.820403][ T7731] ? kobj_kset_leave+0x160/0x210 [ 145.822527][ T7731] report_bug_entry+0xe2/0x290 [ 145.824579][ T7731] ? device_release+0x1dd/0x270 [ 145.826654][ T7731] handle_bug+0x1cd/0x2a0 [ 145.828486][ T7731] exc_invalid_op+0x17/0x50 [ 145.830527][ T7731] asm_exc_invalid_op+0x1a/0x20 [ 145.832464][ T7731] RIP: 0010:device_release+0x1dd/0x270 [ 145.834581][ T7731] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 0d 51 a1 fb 48 8d 3d 56 91 e7 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 f4 50 a1 fb 48 89 da 48 b8 00 00 [ 145.841904][ T7731] RSP: 0000:ffffc900041a7a20 EFLAGS: 00010287 [ 145.844159][ T7731] RAX: 00000000000044e4 RBX: ffff88802a0d9020 RCX: ffffc9000cca2000 [ 145.847111][ T7731] RDX: 0000000000080000 RSI: ffff888022c5b0e0 RDI: ffffffff9251e2c0 [ 145.850072][ T7731] RBP: ffff888022c5b0e0 R08: 0000000000000001 R09: 0000000000000000 [ 145.852995][ T7731] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888014d0a400 [ 145.856116][ T7731] R13: dffffc0000000000 R14: ffff888022c5b0e0 R15: 0000000000000000 [ 145.859235][ T7731] kobject_put+0x1f7/0x640 [ 145.861019][ T7731] device_unregister+0x2f/0xe0 [ 145.862910][ T7731] i2c_unregister_device+0xf5/0x270 [ 145.864889][ T7731] i2c_deregister_clients+0x255/0x460 [ 145.866939][ T7731] i2c_del_adapter+0x13a/0x2e0 [ 145.868755][ T7731] i801_remove+0xa4/0x3d0 [ 145.870403][ T7731] pci_device_remove+0xb2/0x1d0 [ 145.872254][ T7731] ? __pfx_pci_device_remove+0x10/0x10 [ 145.874232][ T7731] device_remove+0xcb/0x180 [ 145.875842][ T7731] device_release_driver_internal+0x44e/0x620 [ 145.877766][ T7731] unbind_store+0xf8/0x110 [ 145.879431][ T7731] ? __pfx_unbind_store+0x10/0x10 [ 145.881050][ T7731] drv_attr_store+0x74/0xb0 [ 145.882496][ T7731] ? __pfx_drv_attr_store+0x10/0x10 [ 145.884164][ T7731] sysfs_kf_write+0xf2/0x150 [ 145.885584][ T7731] kernfs_fop_write_iter+0x3e0/0x5f0 [ 145.887383][ T7731] ? __pfx_sysfs_kf_write+0x10/0x10 [ 145.889354][ T7731] vfs_write+0x6af/0x1050 [ 145.890704][ T7731] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 145.892473][ T7731] ? __pfx_vfs_write+0x10/0x10 [ 145.893987][ T7731] ? find_held_lock+0x2b/0x80 [ 145.895476][ T7731] ksys_write+0x12a/0x250 [ 145.896865][ T7731] ? __pfx_ksys_write+0x10/0x10 [ 145.898457][ T7731] __do_fast_syscall_32+0x13a/0x8b0 [ 145.900108][ T7731] do_fast_syscall_32+0x32/0x70 [ 145.901643][ T7731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.903610][ T7731] RIP: 0023:0xf748efec [ 145.904890][ T7731] Code: Unable to access opcode bytes at 0xf748efc2. [ 145.906952][ T7731] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 145.909569][ T7731] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 145.911895][ T7731] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 145.914401][ T7731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.916831][ T7731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.919379][ T7731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.921872][ T7731] [ 145.923482][ T7731] Kernel Offset: disabled [ 145.924783][ T7731] Rebooting in 86400 seconds..