last executing test programs: 9.185034466s ago: executing program 3 (id=472): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x6, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 7.71600306s ago: executing program 2 (id=474): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0x100, 0x200, 0x6, 0x40, 0x347}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d5}, 0x4c040) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.458175539s ago: executing program 0 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) 7.296346728s ago: executing program 3 (id=477): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/sched/filter\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) write(r1, &(0x7f00000003c0)="216f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b72", 0x60) 7.14508327s ago: executing program 0 (id=478): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220521da58ed4db5440a3b5c3eaf0a93a1d32a4b7"], 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96db, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.234688111s ago: executing program 3 (id=480): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 5.631275382s ago: executing program 2 (id=481): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000540)={0x5f1, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfe9f}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) write$binfmt_elf32(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f454c464a030101050000000000000002000300040000003e03000038000000d600000097700000fe03200001000780080007000000000003000000020000000200000000040000e90a"], 0x58) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8001030, r3, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x204884, &(0x7f0000000080)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.261136601s ago: executing program 1 (id=482): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x841, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002c4c0}, 0x8001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000040)={r5, r4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.259538939s ago: executing program 0 (id=491): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r1, 0x8440}], 0x1, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) 4.983547084s ago: executing program 3 (id=483): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xf32, 0x22880) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x3dd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36e8, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x83}}], 0x1, &(0x7f0000000340)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.880823671s ago: executing program 2 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000001010)="10", 0x1, 0x1080) pwrite64(r0, &(0x7f0000001018)='\n', 0x1, 0x1088) pwrite64(r0, &(0x7f0000001020)='\b', 0x1, 0x1090) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) fsync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1:0', 0x3) 4.742778919s ago: executing program 1 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xff1a, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) 4.680056215s ago: executing program 2 (id=486): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000380), 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x44, 0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r4, 0x0, 0x16, 0x0, &(0x7f0000000240)) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.079570053s ago: executing program 0 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) 3.078331835s ago: executing program 1 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) 3.001780528s ago: executing program 3 (id=490): r0 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$phonet(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001880)={@mcast1, 0x0}, &(0x7f00000018c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0], 0x0, 0xaf, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0xc, 0x20, &(0x7f0000001c80)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x3, 0x2, 0x0, 0x1, 0x8}, @alu={0x7, 0x0, 0x3, 0xb, 0x2, 0x80, 0xfffffffffffffff0}, @alu={0x0, 0x1, 0x8, 0x0, 0x3, 0x20, 0x4}], &(0x7f0000001d80)='GPL\x00', 0x7f, 0x48, &(0x7f0000001dc0)=""/72, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001e80)={0x5, 0xd, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001f00)=[{0x4, 0x4, 0xa, 0x7}, {0x5, 0x3, 0x7, 0x5}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x17, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff2625}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffe0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0x20, '\x00', r8, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x3, 0xf, 0xfffffffa, 0x2}, 0x10, r9, r10, 0x0, &(0x7f0000002000)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 3.001433652s ago: executing program 2 (id=498): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x8}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 1.710792242s ago: executing program 2 (id=492): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/5, 0x5}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.710486791s ago: executing program 3 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='1:0', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='0', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000a40)='active', 0x6) 1.704910107s ago: executing program 1 (id=501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) 1.564922241s ago: executing program 1 (id=494): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1.564310087s ago: executing program 0 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2, 0x0, 0x0, 0xf}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 176.536042ms ago: executing program 1 (id=496): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x8200, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 0s ago: executing program 0 (id=497): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) pwrite64(r0, &(0x7f0000000100)="6269746d030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000100"/192, 0x100, 0x1000) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='readonly', 0x8) kernel console output (not intermixed with test programs): 50.449092][ T5739] bridge_slave_0: entered promiscuous mode [ 50.454549][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.454811][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.454918][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.455064][ T5739] bridge_slave_1: entered allmulticast mode [ 50.456691][ T5739] bridge_slave_1: entered promiscuous mode [ 50.462197][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.505280][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.520064][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.558257][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.565111][ T5746] team0: Port device team_slave_0 added [ 50.572218][ T5751] hsr_slave_0: entered promiscuous mode [ 50.573203][ T5751] hsr_slave_1: entered promiscuous mode [ 50.587498][ T5740] team0: Port device team_slave_0 added [ 50.589256][ T5746] team0: Port device team_slave_1 added [ 50.631614][ T5740] team0: Port device team_slave_1 added [ 50.652736][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.652749][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.652762][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.661223][ T5739] team0: Port device team_slave_0 added [ 50.680009][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.680027][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.680048][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.682216][ T5739] team0: Port device team_slave_1 added [ 50.682756][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.682769][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.682789][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.718839][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.718851][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.718870][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.751611][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.751624][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.751638][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.782515][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.782526][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.782538][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.793997][ T5746] hsr_slave_0: entered promiscuous mode [ 50.794773][ T5746] hsr_slave_1: entered promiscuous mode [ 50.795298][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 50.795366][ T5746] Cannot create hsr debugfs directory [ 50.843100][ T5740] hsr_slave_0: entered promiscuous mode [ 50.844003][ T5740] hsr_slave_1: entered promiscuous mode [ 50.844667][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 50.844686][ T5740] Cannot create hsr debugfs directory [ 50.932772][ T5739] hsr_slave_0: entered promiscuous mode [ 50.933991][ T5739] hsr_slave_1: entered promiscuous mode [ 50.934311][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 50.934323][ T5739] Cannot create hsr debugfs directory [ 51.094468][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.101999][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.131991][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.136421][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.148598][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.151911][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.163971][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.166455][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.201977][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.205709][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.209935][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.214442][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.214929][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.218316][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.226742][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.228998][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.289284][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.291940][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.292385][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.297919][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.298456][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.304695][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.306136][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.312654][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.413491][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.415838][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.421599][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.430104][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.434400][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.434925][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.438462][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.439206][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.443978][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.496199][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.521433][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.521671][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.522331][ T5749] Bluetooth: hci1: command tx timeout [ 51.522524][ T5749] Bluetooth: hci2: command tx timeout [ 51.522847][ T66] Bluetooth: hci3: command tx timeout [ 51.530164][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.547153][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.552814][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.552891][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.579205][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.585429][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.592626][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.593191][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.600650][ T5099] Bluetooth: hci0: command tx timeout [ 51.602091][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.602139][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.605727][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.605859][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.609708][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.609753][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.676119][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.714847][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.733516][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.733593][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.743978][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.744060][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.793607][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.048185][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.088157][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.118929][ T5751] veth0_vlan: entered promiscuous mode [ 52.145604][ T5751] veth1_vlan: entered promiscuous mode [ 52.174795][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.184786][ T5740] veth0_vlan: entered promiscuous mode [ 52.197834][ T5740] veth1_vlan: entered promiscuous mode [ 52.204048][ T5751] veth0_macvtap: entered promiscuous mode [ 52.211278][ T5751] veth1_macvtap: entered promiscuous mode [ 52.232686][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.238872][ T5740] veth0_macvtap: entered promiscuous mode [ 52.247237][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.247813][ T5740] veth1_macvtap: entered promiscuous mode [ 52.261483][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.275986][ T5746] veth0_vlan: entered promiscuous mode [ 52.293496][ T5746] veth1_vlan: entered promiscuous mode [ 52.304520][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.313529][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.361231][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.361246][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.373057][ T5739] veth0_vlan: entered promiscuous mode [ 52.386693][ T5746] veth0_macvtap: entered promiscuous mode [ 52.392645][ T5746] veth1_macvtap: entered promiscuous mode [ 52.402289][ T5739] veth1_vlan: entered promiscuous mode [ 52.417624][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.417645][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.421070][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.449956][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.473659][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.485842][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.485857][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.486221][ T5751] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.494249][ T5739] veth0_macvtap: entered promiscuous mode [ 52.502854][ T5751] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.513333][ T5751] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.516857][ T5739] veth1_macvtap: entered promiscuous mode [ 52.516856][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.529987][ T5751] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.535487][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.535504][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.559155][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.583625][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.586923][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.586943][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.621540][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.621593][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.631073][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.631097][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.651284][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.651562][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.651824][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731517][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731561][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731589][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731616][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731642][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731672][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731701][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731731][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731761][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731791][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.824936][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.824953][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.911442][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.911457][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.613085][ T5099] Bluetooth: hci3: command tx timeout [ 53.613109][ T5099] Bluetooth: hci2: command tx timeout [ 53.613123][ T5099] Bluetooth: hci1: command tx timeout [ 53.680951][ T66] Bluetooth: hci0: command tx timeout [ 54.567129][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 55.366461][ T5931] process 'syz.1.10' launched './file2' with NULL argv: empty string added [ 55.458631][ T5934] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 55.504447][ T43] audit: type=1326 audit(1790099102.046:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.505906][ T43] audit: type=1326 audit(1790099102.046:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.511552][ T43] audit: type=1326 audit(1790099102.056:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.511721][ T43] audit: type=1326 audit(1790099102.056:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.512424][ T43] audit: type=1326 audit(1790099102.056:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.513169][ T43] audit: type=1326 audit(1790099102.056:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.513894][ T43] audit: type=1326 audit(1790099102.056:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.514349][ T43] audit: type=1326 audit(1790099102.056:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.598293][ T43] audit: type=1326 audit(1790099102.136:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.599482][ T43] audit: type=1326 audit(1790099102.136:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 55.680972][ T66] Bluetooth: hci1: command tx timeout [ 55.681000][ T66] Bluetooth: hci2: command tx timeout [ 55.760685][ T5099] Bluetooth: hci0: command tx timeout [ 55.767087][ T5942] i2c i2c-0: delete_device: Can't find device in list [ 57.900700][ T5099] Bluetooth: hci2: command tx timeout [ 57.900727][ T5099] Bluetooth: hci1: command tx timeout [ 57.900741][ T5099] Bluetooth: hci0: command tx timeout [ 58.895433][ T66] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 58.896213][ T66] Bluetooth: hci3: Injecting HCI hardware error event [ 58.900982][ T5099] Bluetooth: hci3: hardware error 0x00 [ 59.521070][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 59.575683][ T5965] i2c i2c-0: delete_device: Can't find device in list [ 61.209173][ T5993] ======================================================= [ 61.209173][ T5993] WARNING: The mand mount option has been deprecated and [ 61.209173][ T5993] and is ignored by this kernel. Remove the mand [ 61.209173][ T5993] option from the mount to silence this warning. [ 61.209173][ T5993] ======================================================= [ 61.227022][ T5993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.379162][ T5993] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 61.379692][ T5993] overlayfs: failed to look up (tracing) for ino (-66) [ 61.531765][ T5099] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.277578][ T5998] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.746632][ T6006] i2c i2c-0: delete_device: Can't find device in list [ 62.905544][ T6009] i2c i2c-0: delete_device: Can't find device in list [ 65.434752][ T6030] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.769841][ T6035] i2c i2c-0: delete_device: Can't find device in list [ 66.110550][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.273445][ T5894] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 66.276693][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.276717][ T5894] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 66.279756][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.279772][ T5894] usb 6-1: Product: syz [ 66.279782][ T5894] usb 6-1: Manufacturer: syz [ 66.279790][ T5894] usb 6-1: SerialNumber: syz [ 66.579452][ T5894] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 67.053039][ T35] usb 6-1: USB disconnect, device number 2 [ 67.111989][ T6050] i2c i2c-0: delete_device: Can't find device in list [ 67.363682][ T35] usblp0: removed [ 68.005935][ T6065] ublk0: read batch cmd buffer failed [ 68.006380][ T6065] ublk0: read batch cmd buffer failed [ 68.055370][ T6065] ublk0: read batch cmd buffer failed [ 68.056473][ T6065] ublk0: read batch cmd buffer failed [ 68.256653][ T6068] i2c i2c-0: delete_device: Can't find device in list [ 68.632887][ T1354] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.732767][ T6074] i2c i2c-0: delete_device: Can't find device in list [ 68.840112][ T6080] i2c i2c-0: delete_device: Can't find device in list [ 68.862506][ T1354] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 68.863973][ T1354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.864061][ T1354] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.868010][ T1354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.868063][ T1354] usb 5-1: Product: syz [ 68.868107][ T1354] usb 5-1: Manufacturer: syz [ 68.869207][ T1354] usb 5-1: SerialNumber: syz [ 69.149138][ T6085] overlayfs: failed to resolve './file0': -2 [ 69.595049][ T988] cfg80211: failed to load regulatory.db [ 69.753887][ T6090] syz.0.51 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.252608][ T6097] i2c i2c-0: delete_device: Can't find device in list [ 70.600780][ T1354] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.676681][ T6104] i2c i2c-0: delete_device: Can't find device in list [ 70.762530][ T1354] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.764768][ T1354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 70.764796][ T1354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 70.764820][ T1354] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.764852][ T1354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.777097][ T1354] usb 8-1: config 0 descriptor?? [ 70.778997][ T6108] i2c i2c-0: delete_device: Can't find device in list [ 70.809899][ T66] Bluetooth: hci0: command 0x0406 tx timeout [ 70.982270][ T42] usb 5-1: USB disconnect, device number 2 [ 71.051717][ T6111] i2c i2c-0: delete_device: Can't find device in list [ 71.125526][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125590][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.211945][ T6117] overlayfs: overlapping lowerdir path [ 71.218271][ T6117] overlayfs: overlapping lowerdir path [ 71.378049][ T1354] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 71.706646][ T6102] Zero length message leads to an empty skb [ 71.742911][ T62] usb 8-1: USB disconnect, device number 2 [ 72.291698][ T6122] fido_id[6122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 72.376724][ T6125] netlink: 'syz.0.67': attribute type 12 has an invalid length. [ 72.796067][ T6129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.010658][ T6136] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 73.011334][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.013288][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.045012][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.046128][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.046647][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.046743][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.052893][ T6136] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.314304][ T6143] i2c i2c-0: delete_device: Can't find device in list [ 73.538718][ T6146] i2c i2c-0: delete_device: Can't find device in list [ 73.582281][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 73.583074][ T6136] bridge_slave_1: left allmulticast mode [ 73.583419][ T6136] bridge_slave_1: left promiscuous mode [ 73.586407][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.636878][ T6112] syz.1.72 (6112) used greatest stack depth: 18792 bytes left [ 73.679474][ T6136] bridge_slave_0: left allmulticast mode [ 73.679885][ T6136] bridge_slave_0: left promiscuous mode [ 73.693365][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.816355][ T6152] netlink: 'syz.0.75': attribute type 88 has an invalid length. [ 73.843862][ T6150] loop5: detected capacity change from 0 to 7 [ 73.900260][ T6150] Dev loop5: unable to read RDB block 7 [ 73.900672][ T6150] loop5: AHDI p1 p3 p4 [ 73.900723][ T6150] loop5: partition table partially beyond EOD, truncated [ 73.912615][ T6136] bond0: (slave bridge0): Releasing backup interface [ 73.913993][ T6150] loop5: p1 size 100663296 extends beyond EOD, truncated [ 73.996362][ T6150] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 74.204536][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 74.410337][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.411826][ T6162] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 74.553086][ T6106] syz.1.62 (6106) used greatest stack depth: 18632 bytes left [ 74.582329][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.585326][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.585344][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.585354][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.585378][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.586929][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.586960][ T10] usb 7-1: Product: syz [ 74.586973][ T10] usb 7-1: Manufacturer: syz [ 74.601173][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 74.601186][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 74.604187][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.604200][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 74.780576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 74.819094][ T10] usb 7-1: USB disconnect, device number 2 [ 74.969118][ T6176] ublk2: read batch cmd buffer failed [ 74.969455][ T6176] ublk2: read batch cmd buffer failed [ 75.018654][ T6176] ublk2: read batch cmd buffer failed [ 75.020290][ T6176] ublk2: read batch cmd buffer failed [ 75.818549][ T6200] i2c i2c-0: delete_device: Can't find device in list [ 76.193229][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.731075][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.786179][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.786202][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.786212][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.786236][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.884375][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.884392][ T10] usb 7-1: Product: syz [ 76.884400][ T10] usb 7-1: Manufacturer: syz [ 77.067984][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 77.067999][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 77.078895][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 77.078914][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.197074][ T35] usb 7-1: USB disconnect, device number 3 [ 77.651301][ T6227] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.651316][ T6227] UDF-fs: Scanning with blocksize 512 failed [ 77.652083][ T6227] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.652094][ T6227] UDF-fs: Scanning with blocksize 1024 failed [ 77.652234][ T6227] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.652242][ T6227] UDF-fs: Scanning with blocksize 2048 failed [ 77.652345][ T6227] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 77.652353][ T6227] UDF-fs: Scanning with blocksize 4096 failed [ 77.716405][ T6230] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.760618][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.924294][ T35] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 77.925755][ T35] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 77.925813][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.925823][ T35] usb 7-1: config 0 has no interfaces? [ 77.925837][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.930101][ T35] usb 7-1: config 0 descriptor?? [ 77.971920][ T6230] md/raid:md0: not clean -- starting background reconstruction [ 77.972644][ T6230] md/raid:md0: device ram0 operational as raid disk 0 [ 77.990977][ T6230] md/raid:md0: starting dirty degraded array with PPL. [ 77.990994][ T6230] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 78.006605][ T6230] md/raid:md0: PPL space too small on ram0 [ 78.176229][ T62] usb 7-1: USB disconnect, device number 4 [ 78.389579][ T6230] md/raid:md0: failed to run raid set. [ 78.389591][ T6230] md: pers->run() failed ... [ 78.525374][ T6242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.573220][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 79.852158][ T6263] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 79.957827][ T6270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.181183][ T6270] md/raid1:md0: active with 1 out of 1 mirrors [ 80.469456][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.99'. [ 80.863665][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 80.885417][ T6285] FAULT_INJECTION: forcing a failure. [ 80.885417][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.885441][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT(full) [ 80.885455][ T6285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.885462][ T6285] Call Trace: [ 80.885466][ T6285] [ 80.885472][ T6285] dump_stack_lvl+0x100/0x190 [ 80.885492][ T6285] should_fail_ex.cold+0x5/0xa [ 80.885506][ T6285] copy_fpstate_to_sigframe+0x82d/0xae0 [ 80.885526][ T6285] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 80.885546][ T6285] ? collect_signal+0x271/0x550 [ 80.885559][ T6285] ? x86_task_fpu+0x5f/0x90 [ 80.885572][ T6285] get_sigframe+0x3fb/0x940 [ 80.885589][ T6285] ? __pfx_get_sigframe+0x10/0x10 [ 80.885602][ T6285] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.885617][ T6285] ? siginfo_layout+0x156/0x290 [ 80.885632][ T6285] ? get_signal+0x16b/0x21e0 [ 80.885650][ T6285] ia32_setup_frame+0xe5/0x990 [ 80.885670][ T6285] ? __pfx_ia32_setup_frame+0x10/0x10 [ 80.885690][ T6285] arch_do_signal_or_restart+0x571/0x7a0 [ 80.885722][ T6285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 80.885745][ T6285] exit_to_user_mode_loop+0x139/0x700 [ 80.885762][ T6285] ? rcu_is_watching+0x13/0xc0 [ 80.885775][ T6285] __do_fast_syscall_32+0x59f/0x8b0 [ 80.885809][ T6285] do_fast_syscall_32+0x32/0x70 [ 80.885827][ T6285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.885842][ T6285] RIP: 0023:0xf7fc6fec [ 80.885855][ T6285] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 80.885860][ T6285] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 80.885872][ T6285] RAX: 0000000000000144 RBX: 0000000000000009 RCX: 00000000800035c0 [ 80.885879][ T6285] RDX: 0000000000004810 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.885886][ T6285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.885892][ T6285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.885899][ T6285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.885913][ T6285] [ 81.017615][ T6291] null_blk: nullb1: using native zone append [ 81.049217][ T6291] null_blk: disk nullb1 created [ 81.610682][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.770540][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 81.774064][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.775704][ T35] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 81.775779][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.775800][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.775819][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.775839][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.775879][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.025095][ T35] usb 7-1: usb_control_msg returned -32 [ 82.025137][ T35] usbtmc 7-1:16.0: can't read capabilities [ 82.567957][ T6305] FAULT_INJECTION: forcing a failure. [ 82.567957][ T6305] name failslab, interval 1, probability 0, space 0, times 1 [ 82.567990][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 82.568013][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.568024][ T6305] Call Trace: [ 82.568030][ T6305] [ 82.568037][ T6305] dump_stack_lvl+0x100/0x190 [ 82.568068][ T6305] should_fail_ex.cold+0x5/0xa [ 82.568093][ T6305] should_failslab+0xc2/0x120 [ 82.568120][ T6305] __kmalloc_noprof+0xfc/0x840 [ 82.568142][ T6305] ? __register_sysctl_table+0xac/0x1650 [ 82.568172][ T6305] __register_sysctl_table+0xac/0x1650 [ 82.568198][ T6305] ? trace_kmalloc+0xeb/0x110 [ 82.568222][ T6305] ? __kasan_kmalloc+0xaa/0xb0 [ 82.568244][ T6305] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 82.568372][ T6305] ? __pfx___register_sysctl_table+0x10/0x10 [ 82.568399][ T6305] ? register_pidns_sysctls+0x48/0x1c0 [ 82.568424][ T6305] ? __asan_memcpy+0x3c/0x60 [ 82.568448][ T6305] register_pidns_sysctls+0x11d/0x1c0 [ 82.568470][ T6305] ? __ns_common_init+0x299/0x4b0 [ 82.568490][ T6305] copy_pid_ns+0x680/0x10a0 [ 82.568521][ T6305] ? __pfx_copy_pid_ns+0x10/0x10 [ 82.568552][ T6305] ? __pfx_copy_mnt_ns+0x10/0x10 [ 82.568580][ T6305] ? create_new_namespaces+0x30/0xac0 [ 82.568612][ T6305] create_new_namespaces+0x2aa/0xac0 [ 82.568646][ T6305] unshare_nsproxy_namespaces+0xf2/0x220 [ 82.568675][ T6305] ksys_unshare+0x4a2/0xa70 [ 82.568695][ T6305] ? __pfx_ksys_unshare+0x10/0x10 [ 82.568724][ T6305] __ia32_sys_unshare+0x30/0x40 [ 82.568743][ T6305] __do_fast_syscall_32+0x13a/0x8b0 [ 82.568777][ T6305] do_fast_syscall_32+0x32/0x70 [ 82.568804][ T6305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.568830][ T6305] RIP: 0023:0xf7f56fec [ 82.568852][ T6305] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 82.568862][ T6305] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 82.568881][ T6305] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 82.568894][ T6305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.568905][ T6305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.568916][ T6305] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.568927][ T6305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.568952][ T6305] [ 82.803364][ T6315] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 82.811250][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.811529][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.935823][ T43] audit: type=1326 audit(1790099129.476:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.936115][ T43] audit: type=1326 audit(1790099129.476:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.939401][ T43] audit: type=1326 audit(1790099129.476:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.939685][ T43] audit: type=1326 audit(1790099129.476:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.939930][ T43] audit: type=1326 audit(1790099129.476:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.940562][ T43] audit: type=1326 audit(1790099129.476:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.940700][ T43] audit: type=1326 audit(1790099129.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 82.941411][ T43] audit: type=1326 audit(1790099129.486:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 83.018814][ T6320] kvm [6319]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 83.022689][ T6320] kvm [6319]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 83.029060][ T43] audit: type=1326 audit(1790099129.566:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 83.029194][ T43] audit: type=1326 audit(1790099129.566:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.3.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 84.249002][ T988] usb 7-1: USB disconnect, device number 5 [ 84.262970][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 84.265186][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 84.314379][ T6340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.330081][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 84.341103][ T6342] i2c i2c-0: delete_device: Can't find device in list [ 84.412078][ T6348] i2c i2c-0: delete_device: Can't find device in list [ 84.642681][ T6357] IPVS: ip_vs_add_dest(): server weight less than zero [ 84.646414][ T64] IPVS: starting estimator thread 0... [ 84.648147][ T6355] i2c i2c-0: delete_device: Can't find device in list [ 84.730588][ T6358] IPVS: using max 43 ests per chain, 103200 per kthread [ 85.009317][ T6362] atomic_op ffff88804c64f1e0 conn xmit_atomic 0000000000000000 [ 85.912649][ T6380] netlink: 'syz.1.126': attribute type 7 has an invalid length. [ 86.857618][ T6384] 0x000000000001-0x000000010001 : "" [ 86.880607][ T6384] ftl_cs: FTL header not found. [ 87.257525][ T6388] Console: switching to colour dummy device 80x25 [ 87.464693][ T6392] i2c i2c-0: delete_device: Can't find device in list [ 87.508902][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 88.335027][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 91.238772][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 91.511366][ T6461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'. [ 91.560617][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 91.721512][ T5893] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 91.722934][ T5893] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.722958][ T5893] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.728188][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.728212][ T5893] usb 8-1: Product: syz [ 91.728220][ T5893] usb 8-1: Manufacturer: syz [ 91.728227][ T5893] usb 8-1: SerialNumber: syz [ 92.288290][ T6471] loop1: detected capacity change from 0 to 65536 [ 92.367582][ T6473] device-mapper: ioctl: The device has no table. [ 92.474253][ T6471] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 92.474289][ T6471] device-mapper: ioctl: error adding target to table [ 93.071530][ T62] usb 8-1: USB disconnect, device number 3 [ 93.331641][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.332191][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.409821][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.418604][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.817375][ T6485] i2c i2c-0: delete_device: Can't find device in list [ 93.831531][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 94.501590][ T64] IPVS: starting estimator thread 0... [ 94.521169][ T5791] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.521237][ T5791] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.521287][ T5791] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.521333][ T5791] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.600681][ T6507] IPVS: using max 31 ests per chain, 74400 per kthread [ 95.442071][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.740930][ T6520] loop5: detected capacity change from 0 to 7 [ 95.776081][ T6520] Dev loop5: unable to read RDB block 7 [ 95.776110][ T6520] loop5: AHDI p1 p3 p4 [ 95.776129][ T6520] loop5: partition table partially beyond EOD, truncated [ 95.776329][ T6520] loop5: p1 size 100663296 extends beyond EOD, truncated [ 95.777603][ T6520] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 95.816157][ T6520] netlink: 'syz.3.159': attribute type 88 has an invalid length. [ 95.970703][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 95.971547][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 97.445082][ T6537] i2c i2c-0: delete_device: Can't find device in list [ 97.502618][ T43] audit: type=1326 audit(1790099144.046:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.502714][ T43] audit: type=1326 audit(1790099144.046:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503153][ T43] audit: type=1326 audit(1790099144.046:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503295][ T43] audit: type=1326 audit(1790099144.046:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503316][ T43] audit: type=1326 audit(1790099144.046:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503561][ T43] audit: type=1326 audit(1790099144.046:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503845][ T43] audit: type=1326 audit(1790099144.046:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503866][ T43] audit: type=1326 audit(1790099144.046:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503886][ T43] audit: type=1326 audit(1790099144.046:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.503904][ T43] audit: type=1326 audit(1790099144.046:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 97.618666][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 97.780743][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 97.955858][ T5893] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 97.956921][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.956956][ T5893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.976844][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.976861][ T5893] usb 6-1: Product: syz [ 97.976869][ T5893] usb 6-1: Manufacturer: syz [ 97.976877][ T5893] usb 6-1: SerialNumber: syz [ 99.856459][ T5893] usb 6-1: USB disconnect, device number 3 [ 100.221485][ T6575] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 100.221503][ T6575] netlink: 240 bytes leftover after parsing attributes in process `syz.2.170'. [ 100.221512][ T6575] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 100.236084][ T6577] i2c i2c-0: delete_device: Can't find device in list [ 100.315696][ T6582] random: crng reseeded on system resumption [ 100.337767][ T6584] Bluetooth: MGMT ver 1.23 [ 100.586936][ T6592] i2c i2c-0: delete_device: Can't find device in list [ 100.690573][ T62] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 100.850525][ T62] usb 8-1: Using ep0 maxpacket: 32 [ 100.852203][ T62] usb 8-1: unable to get BOS descriptor or descriptor too short [ 100.852228][ T62] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 100.854027][ T62] usb 8-1: config 1 interface 2 has no altsetting 1 [ 100.857974][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.857991][ T62] usb 8-1: Product: syz [ 100.857999][ T62] usb 8-1: Manufacturer: syz [ 100.858007][ T62] usb 8-1: SerialNumber: syz [ 100.891439][ T6600] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 100.920665][ T6600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.952648][ T6600] bond1: (slave gretap1): making interface the new active one [ 100.956514][ T6600] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.078226][ T62] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.093764][ T62] usb 8-1: USB disconnect, device number 4 [ 101.975614][ T6626] i2c i2c-0: delete_device: Can't find device in list [ 102.192821][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 103.294163][ T6644] FAULT_INJECTION: forcing a failure. [ 103.294163][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 103.294186][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 103.294202][ T6644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.294210][ T6644] Call Trace: [ 103.294215][ T6644] [ 103.294221][ T6644] dump_stack_lvl+0x100/0x190 [ 103.294244][ T6644] should_fail_ex.cold+0x5/0xa [ 103.294262][ T6644] should_failslab+0xc2/0x120 [ 103.294282][ T6644] __kmalloc_cache_noprof+0x91/0x6d0 [ 103.294305][ T6644] ? tcf_block_get_ext+0x3c8/0x1950 [ 103.294324][ T6644] tcf_block_get_ext+0x3c8/0x1950 [ 103.294339][ T6644] ? netlink_rcv_skb+0x159/0x420 [ 103.294355][ T6644] ? netlink_unicast+0x585/0x850 [ 103.294372][ T6644] tcf_block_get+0xa8/0x100 [ 103.294395][ T6644] ? __pfx_tcf_block_get+0x10/0x10 [ 103.294410][ T6644] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 103.294435][ T6644] sfb_init+0x33/0xc0 [ 103.294453][ T6644] ? __pfx_sfb_init+0x10/0x10 [ 103.294472][ T6644] qdisc_create+0x47b/0x1060 [ 103.294490][ T6644] ? do_raw_read_unlock+0x3f/0x70 [ 103.294506][ T6644] tc_modify_qdisc+0xdcf/0x2120 [ 103.294529][ T6644] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 103.294562][ T6644] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 103.294580][ T6644] rtnetlink_rcv_msg+0x3c9/0xe90 [ 103.294605][ T6644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.294628][ T6644] ? ref_tracker_free+0x37e/0x6c0 [ 103.294651][ T6644] netlink_rcv_skb+0x159/0x420 [ 103.294667][ T6644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.294687][ T6644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.294709][ T6644] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.294727][ T6644] netlink_unicast+0x585/0x850 [ 103.294745][ T6644] ? __pfx_netlink_unicast+0x10/0x10 [ 103.294766][ T6644] netlink_sendmsg+0x8b0/0xda0 [ 103.294812][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.294831][ T6644] ? apparmor_socket_sendmsg+0x165/0x280 [ 103.294871][ T6644] ____sys_sendmsg+0xa4d/0xbe0 [ 103.294887][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.294906][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.294929][ T6644] ___sys_sendmsg+0x190/0x1e0 [ 103.294945][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.294960][ T6644] ? futex_wait+0x11e/0x370 [ 103.294985][ T6644] ? find_held_lock+0x2b/0x80 [ 103.295013][ T6644] __sys_sendmsg+0x160/0x210 [ 103.295033][ T6644] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.295062][ T6644] __do_fast_syscall_32+0x13a/0x8b0 [ 103.295086][ T6644] do_fast_syscall_32+0x32/0x70 [ 103.295106][ T6644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.295123][ T6644] RIP: 0023:0xf7f84fec [ 103.295139][ T6644] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 103.295145][ T6644] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 103.295159][ T6644] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 103.295167][ T6644] RDX: 000000002000400c RSI: 0000000000000000 RDI: 0000000000000000 [ 103.295175][ T6644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.295182][ T6644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.295190][ T6644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.295207][ T6644] [ 103.567400][ T6653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.884965][ T6656] loop5: detected capacity change from 0 to 7 [ 103.886891][ T6656] Dev loop5: unable to read RDB block 7 [ 103.886920][ T6656] loop5: AHDI p1 p3 p4 [ 103.886939][ T6656] loop5: partition table partially beyond EOD, truncated [ 103.887489][ T6656] loop5: p1 size 100663296 extends beyond EOD, truncated [ 103.889189][ T6656] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 103.926760][ T6656] netlink: 'syz.2.185': attribute type 88 has an invalid length. [ 103.958852][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 103.968719][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.090655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.183782][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.184'. [ 106.276627][ T6677] i2c i2c-0: delete_device: Can't find device in list [ 107.819000][ T43] kauditd_printk_skb: 576 callbacks suppressed [ 107.819062][ T43] audit: type=1326 audit(1790099154.356:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.820375][ T43] audit: type=1326 audit(1790099154.356:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.827591][ T43] audit: type=1326 audit(1790099154.366:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.830202][ T43] audit: type=1326 audit(1790099154.366:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.830425][ T43] audit: type=1326 audit(1790099154.366:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.831668][ T43] audit: type=1326 audit(1790099154.366:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.831921][ T43] audit: type=1326 audit(1790099154.366:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.832456][ T43] audit: type=1326 audit(1790099154.366:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.832635][ T43] audit: type=1326 audit(1790099154.366:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.832868][ T43] audit: type=1326 audit(1790099154.376:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.202" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 107.965049][ T6684] binder: BINDER_SET_CONTEXT_MGR already set [ 107.965064][ T6684] binder: 6683:6684 ioctl 4018620d 80004a80 returned -16 [ 109.737833][ T6700] i2c i2c-0: delete_device: Can't find device in list [ 110.411151][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 110.680656][ T62] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.834164][ T62] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 110.835013][ T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.835035][ T62] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.836693][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.836710][ T62] usb 6-1: Product: syz [ 110.836721][ T62] usb 6-1: Manufacturer: syz [ 110.836733][ T62] usb 6-1: SerialNumber: syz [ 111.611523][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 111.793477][ T6735] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 111.803294][ T6735] syz_tun: entered promiscuous mode [ 111.881130][ T6735] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.003461][ T13] bond0: (slave bond_slave_0): interface is now down [ 112.003478][ T13] bond0: (slave bond_slave_1): interface is now down [ 112.003486][ T13] bond0: (slave syz_tun): interface is now down [ 112.007980][ T13] bond0: now running without any active interface! [ 112.279341][ T62] usb 6-1: USB disconnect, device number 4 [ 113.601162][ T6767] i2c i2c-0: delete_device: Can't find device in list [ 114.487239][ T6782] Trying to write to read-only block-device nullb0 [ 115.470094][ T6800] i2c i2c-0: delete_device: Can't find device in list [ 116.308204][ T6791] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 117.101387][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 117.102131][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.216'. [ 117.261053][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 117.267866][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.296449][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.298028][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 117.298055][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.298077][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 117.357088][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.357544][ T9] usb 6-1: Product: syz [ 117.357639][ T9] usb 6-1: Manufacturer: syz [ 117.357898][ T9] usb 6-1: SerialNumber: syz [ 117.642807][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 117.726702][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input5 [ 117.732156][ T6808] netlink: 'syz.1.222': attribute type 12 has an invalid length. [ 117.832681][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 117.832701][ T9] (id 0x00) [ 117.970831][ T9] rc_core: IR keymap rc-imon-pad not found [ 117.970849][ T9] Registered IR keymap rc-empty [ 117.970908][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 117.970922][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.060759][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 118.064038][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input6 [ 118.071069][ T9] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 118.309393][ T6818] imon:vfd_write: invalid payload size [ 118.411267][ T854] usb 6-1: USB disconnect, device number 5 [ 119.846994][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 120.028830][ T6838] jffs2: notice: (6838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.083965][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 120.083989][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 120.321091][ T6847] ublk3: read batch cmd buffer failed [ 120.321691][ T6847] ublk3: read batch cmd buffer failed [ 120.406348][ T6847] ublk3: read batch cmd buffer failed [ 120.406921][ T6847] ublk3: read batch cmd buffer failed [ 120.527486][ T6838] Illegal XDP return value 68 on prog (id 21) dev N/A, expect packet loss! [ 121.670064][ T6854] i2c i2c-0: delete_device: Can't find device in list [ 121.834539][ T6862] i2c i2c-0: delete_device: Can't find device in list [ 122.711800][ T6879] mmap: syz.2.237 (6879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.300569][ T5827] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 123.462598][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 123.463391][ T5827] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.465558][ T5827] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.465580][ T5827] usb 8-1: config 0 has no interface number 0 [ 123.465611][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.465649][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.465668][ T5827] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 207, changing to 11 [ 123.465689][ T5827] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 10104, setting to 1024 [ 123.465709][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.465740][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.468696][ T5827] usb 8-1: config 0 descriptor?? [ 123.481544][ T6886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.488946][ T5827] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 123.973830][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.983017][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.401070][ T62] usb 8-1: USB disconnect, device number 5 [ 124.405403][ T62] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 124.579153][ T6897] syzkaller0: entered promiscuous mode [ 124.579191][ T6897] syzkaller0: entered allmulticast mode [ 124.741804][ T6899] i2c i2c-0: delete_device: Can't find device in list [ 124.982240][ T6902] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.403155][ T6914] warning: `syz.2.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.130611][ T6911] orangefs_mount: mount request failed with -4 [ 126.267565][ T43] kauditd_printk_skb: 506 callbacks suppressed [ 126.267586][ T43] audit: type=1800 audit(1790099172.806:1124): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="(" dev="sda1" ino=2038 res=0 errno=0 [ 126.305313][ T43] audit: type=1804 audit(1790099172.846:1125): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.252" name="/newroot/60/mnt/(" dev="sda1" ino=2038 res=1 errno=0 [ 126.437241][ T6930] i2c i2c-0: delete_device: Can't find device in list [ 126.795887][ T43] audit: type=1800 audit(1790099173.296:1126): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file0" dev="overlay" ino=426 res=0 errno=0 [ 129.019437][ T6963] i2c i2c-0: delete_device: Can't find device in list [ 129.092833][ T6965] syz.3.262 (6965): attempted to duplicate a private mapping with mremap. This is not supported. [ 129.136274][ T6968] i2c i2c-0: delete_device: Can't find device in list [ 129.197732][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.197756][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.209319][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.209342][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.681483][ T6995] i2c i2c-0: delete_device: Can't find device in list [ 131.728291][ T6999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.266'. [ 131.807241][ T43] audit: type=1326 audit(1790099178.346:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.807289][ T43] audit: type=1326 audit(1790099178.346:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.814625][ T43] audit: type=1326 audit(1790099178.356:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.814745][ T43] audit: type=1326 audit(1790099178.356:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.815617][ T43] audit: type=1326 audit(1790099178.356:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.815880][ T43] audit: type=1326 audit(1790099178.356:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.816000][ T43] audit: type=1326 audit(1790099178.356:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.819019][ T43] audit: type=1326 audit(1790099178.356:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.823021][ T7001] i2c i2c-0: delete_device: Can't find device in list [ 131.918112][ T7003] kvm [7002]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 131.923165][ T7003] kvm [7002]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 131.932401][ T43] audit: type=1326 audit(1790099178.476:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.934826][ T43] audit: type=1326 audit(1790099178.476:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 131.961351][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 132.174102][ T7015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.333887][ T7015] md: md0: raid5 would not accept array [ 132.566122][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.566207][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.850663][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 133.000725][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 133.001511][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.003391][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.003410][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.003428][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.003441][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.003453][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.003465][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.003477][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.003490][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 133.004329][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.004347][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.004364][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.004377][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.004389][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.004401][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.004413][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.004426][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 133.005164][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.005180][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.005196][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.005209][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.005221][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.005233][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.005246][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.005258][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 133.007771][ T9] usb 8-1: string descriptor 0 read error: -22 [ 133.007833][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.016779][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 133.035970][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 133.092597][ T7038] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 133.124654][ T7038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.139620][ T7038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.174508][ T7038] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 133.186527][ T7038] bond0 (unregistering): Released all slaves [ 133.382568][ T9] usb 8-1: USB disconnect, device number 6 [ 135.170606][ T7044] i2c i2c-0: delete_device: Can't find device in list [ 135.172839][ T7047] i2c i2c-0: delete_device: Can't find device in list [ 135.896453][ T7054] i2c i2c-0: delete_device: Can't find device in list [ 136.701201][ T7068] netlink: 'syz.1.287': attribute type 5 has an invalid length. [ 136.701217][ T7068] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.287'. [ 136.849849][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 136.962348][ T7067] kAFS: No cell specified [ 137.624743][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 137.625724][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 137.744507][ T7090] futex_wake_op: syz.1.293 tries to shift op by 144; fix this program [ 138.960725][ T5099] Bluetooth: hci0: command 0x0406 tx timeout [ 139.053305][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 139.053336][ T7107] FAULT_INJECTION: forcing a failure. [ 139.053336][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 139.053350][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.3.297 Not tainted syzkaller #0 PREEMPT(full) [ 139.053364][ T7107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.053370][ T7107] Call Trace: [ 139.053375][ T7107] [ 139.053380][ T7107] dump_stack_lvl+0x100/0x190 [ 139.053399][ T7107] should_fail_ex.cold+0x5/0xa [ 139.053413][ T7107] should_failslab+0xc2/0x120 [ 139.053430][ T7107] __kmalloc_noprof+0xfc/0x840 [ 139.053442][ T7107] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 139.053453][ T7107] ? nla_strdup+0x11/0x150 [ 139.053469][ T7107] ? nft_trans_alloc+0x1d/0x2d0 [ 139.053484][ T7107] nft_trans_alloc+0x1d/0x2d0 [ 139.053496][ T7107] nf_tables_addchain.constprop.0+0xafa/0x1ca0 [ 139.053513][ T7107] ? nft_chain_lookup+0x59c/0xa60 [ 139.053530][ T7107] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 139.053545][ T7107] ? __pfx_nft_chain_lookup+0x10/0x10 [ 139.053560][ T7107] ? __lock_acquire+0x5c0/0x1f40 [ 139.053588][ T7107] ? nla_strcmp+0xff/0x130 [ 139.053608][ T7107] ? nft_table_lookup.part.0+0x1e3/0x230 [ 139.053626][ T7107] nf_tables_newchain+0x17c3/0x2d30 [ 139.053641][ T7107] ? __pfx____ratelimit+0x10/0x10 [ 139.053658][ T7107] ? rcu_is_watching+0x13/0xc0 [ 139.053672][ T7107] ? __nla_validate_parse+0x1e7/0x28b0 [ 139.053686][ T7107] ? __pfx_nf_tables_newchain+0x10/0x10 [ 139.053699][ T7107] ? __pfx___nla_validate_parse+0x10/0x10 [ 139.053712][ T7107] ? lock_acquire+0x1d1/0x380 [ 139.053727][ T7107] ? net_generic+0x25/0x2a0 [ 139.053746][ T7107] ? __nla_parse+0x40/0x60 [ 139.053760][ T7107] nfnetlink_rcv_batch+0x1410/0x2880 [ 139.053786][ T7107] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 139.053805][ T7107] ? find_held_lock+0x2b/0x80 [ 139.053819][ T7107] ? __local_bh_enable_ip+0xa5/0x120 [ 139.053836][ T7107] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.053853][ T7107] ? __dev_queue_xmit+0xa12/0x4970 [ 139.053886][ T7107] ? __nla_parse+0x40/0x60 [ 139.053899][ T7107] nfnetlink_rcv+0x3bd/0x440 [ 139.053916][ T7107] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.053940][ T7107] netlink_unicast+0x585/0x850 [ 139.053956][ T7107] ? __pfx_netlink_unicast+0x10/0x10 [ 139.053973][ T7107] netlink_sendmsg+0x8b0/0xda0 [ 139.053989][ T7107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.054005][ T7107] ? apparmor_socket_sendmsg+0x165/0x280 [ 139.054023][ T7107] ____sys_sendmsg+0xa4d/0xbe0 [ 139.054033][ T7107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.054048][ T7107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.054088][ T7107] ___sys_sendmsg+0x190/0x1e0 [ 139.054106][ T7107] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.054124][ T7107] ? futex_wait+0x11e/0x370 [ 139.054145][ T7107] ? find_held_lock+0x2b/0x80 [ 139.054167][ T7107] __sys_sendmsg+0x160/0x210 [ 139.054184][ T7107] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.054210][ T7107] __do_fast_syscall_32+0x13a/0x8b0 [ 139.054231][ T7107] do_fast_syscall_32+0x32/0x70 [ 139.054250][ T7107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.054266][ T7107] RIP: 0023:0xf7f84fec [ 139.054280][ T7107] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 139.054285][ T7107] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 139.054298][ T7107] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 139.054305][ T7107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.054312][ T7107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.054318][ T7107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.054325][ T7107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.054339][ T7107] [ 139.362350][ T7114] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 140.021428][ T5893] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 140.193401][ T5893] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 140.197231][ T5893] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 140.197258][ T5893] usb 5-1: config 0 has no interface number 0 [ 140.197459][ T5893] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 21024, setting to 64 [ 140.228592][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.228616][ T5893] usb 5-1: Product: syz [ 140.228744][ T5893] usb 5-1: Manufacturer: syz [ 140.229056][ T5893] usb 5-1: SerialNumber: syz [ 140.251418][ T5893] usb 5-1: config 0 descriptor?? [ 140.264435][ T7116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.527693][ T7119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.564600][ T7119] md: couldn't update array info. -22 [ 140.622346][ T7119] md: could not open device unknown-block(1,0). [ 140.622496][ T7119] md: md_import_device returned -16 [ 140.799682][ T5893] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 140.806402][ T5893] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 140.806442][ T5893] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 140.806476][ T5893] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 140.807126][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 140.808024][ T7125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.302'. [ 140.808105][ T5893] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 140.849025][ T5893] usb 5-1: USB disconnect, device number 3 [ 140.865927][ T5893] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 140.868848][ T5893] keyspan 5-1:0.133: device disconnected [ 140.894328][ T7127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.909209][ T7127] syz.1.303 uses obsolete (PF_INET,SOCK_PACKET) [ 141.432562][ T7143] overlayfs: missing 'workdir' [ 141.441593][ T7143] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.441608][ T7143] overlayfs: failed to set xattr on upper [ 141.441612][ T7143] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.441616][ T7143] overlayfs: ...falling back to index=off. [ 141.441621][ T7143] overlayfs: ...falling back to uuid=null. [ 141.525008][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 141.525024][ T43] audit: type=1326 audit(1790099188.066:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.525194][ T43] audit: type=1326 audit(1790099188.066:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.566927][ T43] audit: type=1326 audit(1790099188.066:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.567597][ T43] audit: type=1326 audit(1790099188.106:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.567792][ T43] audit: type=1326 audit(1790099188.106:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.736321][ T43] audit: type=1326 audit(1790099188.276:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.736643][ T43] audit: type=1326 audit(1790099188.276:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.736753][ T43] audit: type=1326 audit(1790099188.276:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 141.898512][ T7156] tipc: Started in network mode [ 141.898531][ T7156] tipc: Node identity c65dc68d1d4e, cluster identity 4711 [ 141.898657][ T7156] tipc: Enabled bearer , priority 0 [ 141.899590][ T7156] syzkaller0: entered promiscuous mode [ 141.899604][ T7156] syzkaller0: entered allmulticast mode [ 141.916370][ T7156] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 141.929306][ T7156] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 141.935182][ T7156] tipc: Resetting bearer [ 141.942826][ T7155] tipc: Resetting bearer [ 141.959311][ T7155] tipc: Disabling bearer [ 142.461841][ T7163] bond0: (slave bond_slave_0): Releasing backup interface [ 143.268519][ T7163] bond0: (slave bond_slave_1): Releasing backup interface [ 143.941290][ T7163] team0: Port device team_slave_0 removed [ 143.954844][ T7163] team0: Port device team_slave_1 removed [ 143.955921][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.955941][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.965659][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.965688][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.987260][ T7163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.008731][ T7157] netlink: 'syz.0.319': attribute type 2 has an invalid length. [ 144.008754][ T7157] netlink: 'syz.0.319': attribute type 7 has an invalid length. [ 144.009713][ T7164] team0: Port device xfrm0 added [ 144.009980][ T7165] tipc: Started in network mode [ 144.010007][ T7165] tipc: Node identity c240728fca93, cluster identity 4711 [ 144.022567][ T7165] tipc: Enabled bearer , priority 0 [ 144.044836][ T7157] Uż: entered promiscuous mode [ 144.063590][ T7169] i2c i2c-0: delete_device: Can't find device in list [ 144.392977][ T7179] syzkaller0: entered promiscuous mode [ 144.392993][ T7179] syzkaller0: entered allmulticast mode [ 144.698150][ T7183] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 145.128394][ T854] tipc: Node number set to 148075151 [ 145.775055][ T7193] i2c i2c-0: delete_device: Can't find device in list [ 146.076554][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 146.076586][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'. [ 146.158249][ T7202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.323'. [ 146.863631][ T7223] i2c i2c-0: delete_device: Can't find device in list [ 146.986952][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 149.578403][ T7267] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 149.578421][ T7267] device-mapper: ioctl: error adding target to table [ 150.541970][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 150.699588][ T7282] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.430612][ T988] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.581000][ T7326] jffs2: notice: (7326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.639778][ T988] usb 5-1: Using ep0 maxpacket: 32 [ 152.646524][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.646561][ T988] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 152.647763][ T988] usb 5-1: config 1 interface 2 has no altsetting 1 [ 152.649657][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.649682][ T988] usb 5-1: Product: syz [ 152.649693][ T988] usb 5-1: Manufacturer: syz [ 152.649706][ T988] usb 5-1: SerialNumber: syz [ 152.675643][ T7325] i2c i2c-0: delete_device: Can't find device in list [ 152.802851][ T7329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'. [ 152.916387][ T988] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.941917][ T988] usb 5-1: USB disconnect, device number 4 [ 153.270811][ T7337] syzkaller0: entered promiscuous mode [ 153.270833][ T7337] syzkaller0: entered allmulticast mode [ 153.977599][ T7344] i2c i2c-0: delete_device: Can't find device in list [ 153.990579][ T988] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 154.154685][ T988] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 154.155842][ T988] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 154.155865][ T988] usb 6-1: config 0 has no interface number 0 [ 154.155894][ T988] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 21024, setting to 64 [ 154.157931][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.157949][ T988] usb 6-1: Product: syz [ 154.157961][ T988] usb 6-1: Manufacturer: syz [ 154.157972][ T988] usb 6-1: SerialNumber: syz [ 154.160199][ T988] usb 6-1: config 0 descriptor?? [ 154.193063][ T7345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.456098][ T7351] i2c i2c-0: delete_device: Can't find device in list [ 155.125595][ T7357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.864370][ T988] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 156.867143][ T988] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 156.867196][ T988] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 156.867245][ T988] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 156.868360][ T988] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 156.899722][ T988] usb 6-1: USB disconnect, device number 6 [ 156.906586][ T988] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 156.906936][ T988] keyspan 6-1:0.133: device disconnected [ 157.022571][ T7371] i2c i2c-0: delete_device: Can't find device in list [ 157.130755][ T7374] i2c i2c-0: delete_device: Can't find device in list [ 157.260666][ T988] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 157.295556][ T7379] i2c i2c-0: delete_device: Can't find device in list [ 157.420604][ T988] usb 6-1: Using ep0 maxpacket: 8 [ 157.421826][ T988] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.425907][ T988] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 157.425950][ T988] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.425968][ T988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.425987][ T988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.426005][ T988] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.426035][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.775170][ T988] usb 6-1: GET_CAPABILITIES returned 0 [ 157.775210][ T988] usbtmc 6-1:16.0: can't read capabilities [ 157.981971][ T988] usb 6-1: USB disconnect, device number 7 [ 159.029410][ T7389] FAULT_INJECTION: forcing a failure. [ 159.029410][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 159.029447][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 159.029506][ T7389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.029520][ T7389] Call Trace: [ 159.029527][ T7389] [ 159.029536][ T7389] dump_stack_lvl+0x100/0x190 [ 159.029570][ T7389] should_fail_ex.cold+0x5/0xa [ 159.029600][ T7389] should_failslab+0xc2/0x120 [ 159.029636][ T7389] __kmalloc_noprof+0xfc/0x840 [ 159.029662][ T7389] ? get_current_details+0x171/0x670 [ 159.029692][ T7389] get_current_details+0x171/0x670 [ 159.029721][ T7389] landlock_merge_ruleset+0x7ea/0xd10 [ 159.029750][ T7389] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 159.029788][ T7389] __do_fast_syscall_32+0x13a/0x8b0 [ 159.029826][ T7389] do_fast_syscall_32+0x32/0x70 [ 159.029859][ T7389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.029886][ T7389] RIP: 0023:0xf6feefec [ 159.029908][ T7389] Code: Unable to access opcode bytes at 0xf6feefc2. [ 159.029918][ T7389] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 159.029939][ T7389] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000001a [ 159.029953][ T7389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.029965][ T7389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.029977][ T7389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.029990][ T7389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.030019][ T7389] [ 159.575113][ T7395] syzkaller0: entered promiscuous mode [ 159.575135][ T7395] syzkaller0: entered allmulticast mode [ 160.195232][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 160.543556][ T7406] i2c i2c-0: delete_device: Can't find device in list [ 162.039894][ T7375] syz.3.353 (7375) used greatest stack depth: 17800 bytes left [ 162.078838][ T7425] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 164.081383][ T7433] i2c i2c-0: delete_device: Can't find device in list [ 164.298574][ T7442] FAULT_INJECTION: forcing a failure. [ 164.298574][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 164.298608][ T7442] CPU: 2 UID: 0 PID: 7442 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 164.298632][ T7442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.298645][ T7442] Call Trace: [ 164.298652][ T7442] [ 164.298661][ T7442] dump_stack_lvl+0x100/0x190 [ 164.298692][ T7442] should_fail_ex.cold+0x5/0xa [ 164.298767][ T7442] should_failslab+0xc2/0x120 [ 164.298807][ T7442] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.298840][ T7442] ? landlock_restrict_sibling_threads+0x50d/0x14c0 [ 164.298866][ T7442] landlock_restrict_sibling_threads+0x50d/0x14c0 [ 164.298902][ T7442] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 164.298942][ T7442] ? lock_acquire+0x1d1/0x380 [ 164.298993][ T7442] ? __pfx___might_resched+0x10/0x10 [ 164.299020][ T7442] ? landlock_merge_ruleset+0x3c0/0xd10 [ 164.299043][ T7442] __do_sys_landlock_restrict_self+0x9bf/0x10a0 [ 164.299128][ T7442] __do_fast_syscall_32+0x13a/0x8b0 [ 164.299176][ T7442] do_fast_syscall_32+0x32/0x70 [ 164.299206][ T7442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.299231][ T7442] RIP: 0023:0xf7f84fec [ 164.299259][ T7442] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 164.299268][ T7442] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 164.299290][ T7442] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000001a [ 164.299302][ T7442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.299312][ T7442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.299322][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.299332][ T7442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.299439][ T7442] [ 164.511239][ T7444] i2c i2c-0: delete_device: Can't find device in list [ 164.550777][ T5894] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 164.710737][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 164.713613][ T5894] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 164.714914][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.716943][ T5894] usb 7-1: config 0 descriptor?? [ 164.816819][ T7449] syzkaller0: entered promiscuous mode [ 164.816889][ T7449] syzkaller0: entered allmulticast mode [ 164.920674][ T988] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.946405][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 165.009449][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.016812][ T5894] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 165.016843][ T5894] usb 7-1: media controller created [ 165.064037][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.073011][ T988] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 165.074004][ T988] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.074823][ T988] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.076839][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.076857][ T988] usb 5-1: Product: syz [ 165.076868][ T988] usb 5-1: Manufacturer: syz [ 165.076878][ T988] usb 5-1: SerialNumber: syz [ 165.089971][ T988] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 165.152085][ T988] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 165.171097][ T988] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 165.287462][ T7451] i2c i2c-0: delete_device: Can't find device in list [ 165.307382][ T5894] az6027: usb out operation failed. (-71) [ 165.307736][ T5894] az6027: usb out operation failed. (-71) [ 165.307748][ T5894] stb0899_attach: Driver disabled by Kconfig [ 165.307756][ T5894] az6027: no front-end attached [ 165.307756][ T5894] [ 165.308118][ T5894] az6027: usb out operation failed. (-71) [ 165.308129][ T5894] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 165.323837][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input7 [ 165.359168][ T5894] dvb-usb: schedule remote query interval to 400 msecs. [ 165.359190][ T5894] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 165.375958][ T5894] usb 7-1: USB disconnect, device number 6 [ 165.793666][ T5894] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 165.873892][ T7466] FAULT_INJECTION: forcing a failure. [ 165.873892][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 165.873927][ T7466] CPU: 2 UID: 0 PID: 7466 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 165.873949][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.873961][ T7466] Call Trace: [ 165.873970][ T7466] [ 165.873979][ T7466] dump_stack_lvl+0x100/0x190 [ 165.874007][ T7466] should_fail_ex.cold+0x5/0xa [ 165.874036][ T7466] should_failslab+0xc2/0x120 [ 165.874061][ T7466] __kmalloc_node_noprof+0xff/0x880 [ 165.874085][ T7466] ? __pfx___up_read+0x10/0x10 [ 165.874205][ T7466] ? crypto_create_tfm_node+0x8d/0x3b0 [ 165.874249][ T7466] crypto_create_tfm_node+0x8d/0x3b0 [ 165.874277][ T7466] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 165.874305][ T7466] crypto_spawn_tfm2+0x62/0xc0 [ 165.874328][ T7466] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 165.874354][ T7466] crypto_sig_init_tfm+0xba/0xf0 [ 165.874377][ T7466] crypto_create_tfm_node+0x171/0x3b0 [ 165.874420][ T7466] crypto_alloc_tfm_node+0x102/0x260 [ 165.874457][ T7466] public_key_verify_signature+0x21b/0x910 [ 165.874484][ T7466] ? __pfx_public_key_verify_signature+0x10/0x10 [ 165.874519][ T7466] ? asymmetric_key_generate_id+0x7e/0x180 [ 165.874556][ T7466] x509_check_for_self_signed+0x325/0x510 [ 165.874581][ T7466] x509_cert_parse+0x60c/0x910 [ 165.874605][ T7466] x509_key_preparse+0x65/0x9c0 [ 165.874640][ T7466] asymmetric_key_preparse+0xce/0x1d0 [ 165.874661][ T7466] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 165.874676][ T7466] __key_create_or_update+0x463/0xe30 [ 165.874714][ T7466] ? __pfx___key_create_or_update+0x10/0x10 [ 165.874742][ T7466] ? lookup_user_key+0x3f3/0x1300 [ 165.874784][ T7466] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 165.874817][ T7466] key_create_or_update+0x42/0x60 [ 165.874849][ T7466] __do_sys_add_key+0x2e8/0x460 [ 165.874874][ T7466] ? __pfx___do_sys_add_key+0x10/0x10 [ 165.874904][ T7466] __do_fast_syscall_32+0x13a/0x8b0 [ 165.874939][ T7466] do_fast_syscall_32+0x32/0x70 [ 165.874970][ T7466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.874997][ T7466] RIP: 0023:0xf6feefec [ 165.875022][ T7466] Code: Unable to access opcode bytes at 0xf6feefc2. [ 165.875032][ T7466] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 165.875078][ T7466] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 165.875091][ T7466] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 165.875104][ T7466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.875118][ T7466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 165.875130][ T7466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.875156][ T7466] [ 166.116165][ T7470] i2c i2c-0: delete_device: Can't find device in list [ 166.498823][ T7476] i2c i2c-0: delete_device: Can't find device in list [ 168.565534][ T7447] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 168.605840][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 168.673058][ T7447] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 168.711624][ T5827] usb 5-1: USB disconnect, device number 5 [ 168.814269][ T7482] FAULT_INJECTION: forcing a failure. [ 168.814269][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 168.814374][ T7482] CPU: 2 UID: 0 PID: 7482 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT(full) [ 168.814413][ T7482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.814428][ T7482] Call Trace: [ 168.814436][ T7482] [ 168.814444][ T7482] dump_stack_lvl+0x100/0x190 [ 168.814477][ T7482] should_fail_ex.cold+0x5/0xa [ 168.814503][ T7482] should_failslab+0xc2/0x120 [ 168.814535][ T7482] __kmalloc_cache_noprof+0x91/0x6d0 [ 168.814565][ T7482] ? landlock_merge_ruleset+0x237/0xd10 [ 168.814593][ T7482] landlock_merge_ruleset+0x237/0xd10 [ 168.814617][ T7482] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 168.814650][ T7482] __do_fast_syscall_32+0x13a/0x8b0 [ 168.814684][ T7482] do_fast_syscall_32+0x32/0x70 [ 168.814715][ T7482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.814738][ T7482] RIP: 0023:0xf7fc6fec [ 168.814758][ T7482] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 168.814766][ T7482] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 168.814783][ T7482] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000001a [ 168.814795][ T7482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.814805][ T7482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.814815][ T7482] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.814826][ T7482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.814851][ T7482] [ 169.036591][ T5827] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 169.121538][ T5827] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 169.150261][ T5827] ti_usb_3410_5052 5-1:2.0: device disconnected [ 170.727732][ T7494] i2c i2c-0: delete_device: Can't find device in list [ 170.842425][ T7508] syzkaller0: entered promiscuous mode [ 170.842446][ T7508] syzkaller0: entered allmulticast mode [ 172.258485][ T7518] i2c i2c-0: delete_device: Can't find device in list [ 172.283606][ T7520] i2c i2c-0: delete_device: Can't find device in list [ 172.516656][ T43] audit: type=1326 audit(1790099219.056:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.518210][ T43] audit: type=1326 audit(1790099219.056:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.523452][ T43] audit: type=1326 audit(1790099219.066:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.523608][ T43] audit: type=1326 audit(1790099219.066:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.524030][ T43] audit: type=1326 audit(1790099219.066:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.524504][ T43] audit: type=1326 audit(1790099219.066:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.616125][ T7531] kvm [7529]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 172.623004][ T7531] kvm [7529]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 172.642734][ T43] audit: type=1326 audit(1790099219.176:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.642874][ T43] audit: type=1326 audit(1790099219.186:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.0.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 172.680717][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 172.851745][ T62] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 172.853026][ T62] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.854289][ T62] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.858140][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.858153][ T62] usb 8-1: Product: syz [ 172.858160][ T62] usb 8-1: Manufacturer: syz [ 172.858168][ T62] usb 8-1: SerialNumber: syz [ 172.894709][ T62] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 172.906813][ T62] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 172.924308][ T62] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 173.226023][ T7536] FAULT_INJECTION: forcing a failure. [ 173.226023][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 173.226045][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT(full) [ 173.226058][ T7536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.226064][ T7536] Call Trace: [ 173.226067][ T7536] [ 173.226084][ T7536] dump_stack_lvl+0x100/0x190 [ 173.226104][ T7536] should_fail_ex.cold+0x5/0xa [ 173.226120][ T7536] should_failslab+0xc2/0x120 [ 173.226136][ T7536] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.226153][ T7536] ? get_mm_exe_file+0x8a/0x1a0 [ 173.226169][ T7536] ? get_current_details+0xa0/0x670 [ 173.226185][ T7536] get_current_details+0xa0/0x670 [ 173.226201][ T7536] landlock_merge_ruleset+0x7ea/0xd10 [ 173.226215][ T7536] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 173.226233][ T7536] __do_fast_syscall_32+0x13a/0x8b0 [ 173.226253][ T7536] do_fast_syscall_32+0x32/0x70 [ 173.226269][ T7536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.226283][ T7536] RIP: 0023:0xf7fc6fec [ 173.226296][ T7536] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 173.226300][ T7536] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 173.226311][ T7536] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000001a [ 173.226318][ T7536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.226325][ T7536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.226332][ T7536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.226338][ T7536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.226352][ T7536] [ 173.364044][ T7538] i2c i2c-0: delete_device: Can't find device in list [ 173.656119][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 175.016000][ T7556] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 175.200080][ T7560] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 175.393086][ T43] audit: type=1326 audit(1790099221.936:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 175.393199][ T43] audit: type=1326 audit(1790099221.936:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.400" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 175.600613][ T5754] Bluetooth: hci2: command 0x0406 tx timeout [ 175.600705][ T5754] Bluetooth: hci1: command 0x0406 tx timeout [ 175.607501][ T5754] Bluetooth: hci0: command 0x0406 tx timeout [ 175.877545][ T7574] i2c i2c-0: delete_device: Can't find device in list [ 176.475360][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 176.481243][ T7532] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 176.595484][ T7532] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 176.599287][ T854] usb 8-1: USB disconnect, device number 7 [ 176.606509][ T854] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 176.631104][ T854] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 176.631799][ T854] ti_usb_3410_5052 8-1:2.0: device disconnected [ 176.729069][ T7586] i2c i2c-0: delete_device: Can't find device in list [ 178.481458][ T7596] syzkaller0: entered promiscuous mode [ 178.481478][ T7596] syzkaller0: entered allmulticast mode [ 178.700544][ T62] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.875450][ T62] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 178.894093][ T62] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.908418][ T62] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.942336][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.942356][ T62] usb 5-1: Product: syz [ 178.942364][ T62] usb 5-1: Manufacturer: syz [ 178.942372][ T62] usb 5-1: SerialNumber: syz [ 179.067045][ T62] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 179.130720][ T62] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 179.169749][ T62] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 181.748009][ T7618] i2c i2c-0: delete_device: Can't find device in list [ 182.058498][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 182.058527][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 182.158860][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'. [ 182.561097][ T7598] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 182.672400][ T7598] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 182.674353][ T62] usb 5-1: USB disconnect, device number 6 [ 182.679957][ T62] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 182.701054][ T62] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 182.701680][ T62] ti_usb_3410_5052 5-1:2.0: device disconnected [ 184.600825][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 184.630723][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.761172][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 184.762003][ T9] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 184.762017][ T9] usb 7-1: config 0 has no interface number 0 [ 184.762035][ T9] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 21024, setting to 64 [ 184.763811][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.763830][ T9] usb 7-1: Product: syz [ 184.763841][ T9] usb 7-1: Manufacturer: syz [ 184.763854][ T9] usb 7-1: SerialNumber: syz [ 184.765793][ T9] usb 7-1: config 0 descriptor?? [ 184.766502][ T7632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.791412][ T5834] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 184.792879][ T5834] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.794565][ T5834] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.798072][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.798107][ T5834] usb 5-1: Product: syz [ 184.798174][ T5834] usb 5-1: Manufacturer: syz [ 184.798188][ T5834] usb 5-1: SerialNumber: syz [ 184.807192][ T5834] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 184.812159][ T5834] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 184.818297][ T5834] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 185.114559][ T9] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 185.116923][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 185.116991][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 185.117049][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 185.118303][ T9] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 185.124000][ T9] usb 7-1: USB disconnect, device number 7 [ 185.130315][ T9] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 185.134954][ T9] keyspan 7-1:0.133: device disconnected [ 185.446009][ T7642] i2c i2c-0: delete_device: Can't find device in list [ 185.686768][ T7649] i2c i2c-0: delete_device: Can't find device in list [ 187.406211][ T5827] usb 5-1: USB disconnect, device number 7 [ 187.417429][ T5827] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 187.424563][ T5827] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 187.425287][ T5827] ti_usb_3410_5052 5-1:2.0: device disconnected [ 187.971447][ T1035] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.169706][ T1035] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 188.193516][ T1035] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.199911][ T1035] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.243494][ T1035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.243519][ T1035] usb 5-1: Product: syz [ 188.243530][ T1035] usb 5-1: Manufacturer: syz [ 188.245680][ T1035] usb 5-1: SerialNumber: syz [ 188.387638][ T1035] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 188.430616][ T1035] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 188.463467][ T1035] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 189.365782][ T7679] i2c i2c-0: delete_device: Can't find device in list [ 189.864644][ T7693] i2c i2c-0: delete_device: Can't find device in list [ 190.962029][ T7703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.004728][ T1035] usb 5-1: USB disconnect, device number 8 [ 191.025321][ T1035] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 191.032261][ T1035] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 191.033034][ T1035] ti_usb_3410_5052 5-1:2.0: device disconnected [ 191.385011][ T7703] md: md0: raid5 would not accept array [ 192.796598][ T7719] i2c i2c-0: delete_device: Can't find device in list [ 193.115771][ T7724] lo: entered allmulticast mode [ 193.592031][ T7722] lo: left allmulticast mode [ 193.788436][ T7729] i2c i2c-0: delete_device: Can't find device in list [ 194.002786][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.002837][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279779][ T7740] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 194.317213][ T7745] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.381669][ T7741] i2c i2c-0: delete_device: Can't find device in list [ 194.457868][ T7745] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 194.458076][ T7745] overlayfs: failed to look up (tracing) for ino (-66) [ 194.860710][ T5834] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 195.230041][ T5834] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 195.258296][ T5834] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 195.258313][ T5834] usb 8-1: config 0 has no interface number 0 [ 195.258331][ T5834] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 21024, setting to 64 [ 195.259853][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.259867][ T5834] usb 8-1: Product: syz [ 195.259875][ T5834] usb 8-1: Manufacturer: syz [ 195.259882][ T5834] usb 8-1: SerialNumber: syz [ 195.281835][ T5834] usb 8-1: config 0 descriptor?? [ 195.282405][ T7735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.691739][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 195.850833][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 195.856153][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 195.898400][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.042411][ T10] usb 6-1: config 0 descriptor?? [ 196.550640][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 196.558143][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.561089][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 196.561150][ T10] usb 6-1: media controller created [ 196.579920][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.656696][ T5834] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 196.660433][ T5834] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 196.661464][ T5834] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 196.661554][ T5834] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 196.662834][ T5834] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 196.667824][ T5834] usb 8-1: USB disconnect, device number 8 [ 196.673816][ T5834] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 196.674262][ T5834] keyspan 8-1:0.133: device disconnected [ 196.802876][ T10] az6027: usb out operation failed. (-71) [ 196.803192][ T10] az6027: usb out operation failed. (-71) [ 196.803221][ T10] stb0899_attach: Driver disabled by Kconfig [ 196.803228][ T10] az6027: no front-end attached [ 196.803228][ T10] [ 196.803470][ T10] az6027: usb out operation failed. (-71) [ 196.803477][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 196.804431][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input8 [ 196.821213][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 196.821233][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 196.854177][ T10] usb 6-1: USB disconnect, device number 8 [ 196.933785][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 197.399874][ T7762] i2c i2c-0: delete_device: Can't find device in list [ 197.430695][ T7767] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 197.467493][ T7765] i2c i2c-0: delete_device: Can't find device in list [ 197.538589][ T7770] i2c i2c-0: delete_device: Can't find device in list [ 201.014035][ T7791] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 201.107945][ T7793] i2c i2c-0: delete_device: Can't find device in list [ 201.120292][ T7789] overlayfs: missing 'workdir' [ 201.199781][ T7788] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 201.199810][ T7788] overlayfs: failed to set xattr on upper [ 201.199819][ T7788] overlayfs: ...falling back to redirect_dir=nofollow. [ 201.199827][ T7788] overlayfs: ...falling back to index=off. [ 201.199834][ T7788] overlayfs: ...falling back to uuid=null. [ 201.490583][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 201.836408][ T7802] i2c i2c-0: delete_device: Can't find device in list [ 201.941085][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 201.941944][ T10] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.942798][ T10] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.948600][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.948627][ T10] usb 7-1: Product: syz [ 201.948640][ T10] usb 7-1: Manufacturer: syz [ 201.948653][ T10] usb 7-1: SerialNumber: syz [ 201.955211][ T10] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 201.956825][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 201.961359][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 202.188145][ T7807] i2c i2c-0: delete_device: Can't find device in list [ 204.795653][ T5834] usb 7-1: USB disconnect, device number 8 [ 204.825195][ T5834] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 204.840022][ T5834] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 204.848688][ T5834] ti_usb_3410_5052 7-1:2.0: device disconnected [ 204.967351][ T7827] i2c i2c-0: delete_device: Can't find device in list [ 205.350169][ T7830] i2c i2c-0: delete_device: Can't find device in list [ 205.540821][ T5827] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 205.691649][ T5827] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.692622][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 205.692644][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 205.692661][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.692686][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.695714][ T5827] usb 7-1: config 0 descriptor?? [ 205.750755][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 205.913521][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 205.918451][ T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 205.918479][ T10] usb 5-1: config 0 has no interface number 0 [ 205.918507][ T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 21024, setting to 64 [ 205.947647][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.947666][ T10] usb 5-1: Product: syz [ 205.947673][ T10] usb 5-1: Manufacturer: syz [ 205.947680][ T10] usb 5-1: SerialNumber: syz [ 205.975988][ T10] usb 5-1: config 0 descriptor?? [ 205.978579][ T7838] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.503099][ T5827] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 206.519503][ T5827] usb 7-1: USB disconnect, device number 9 [ 206.554912][ T10] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 206.555704][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 206.555776][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 206.555815][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 207.049003][ T7845] overlayfs: missing 'workdir' [ 207.171081][ T7843] fido_id[7843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 207.172646][ T7847] FAULT_INJECTION: forcing a failure. [ 207.172646][ T7847] name failslab, interval 1, probability 0, space 0, times 0 [ 207.172678][ T7847] CPU: 3 UID: 0 PID: 7847 Comm: syz.1.489 Not tainted syzkaller #0 PREEMPT(full) [ 207.172702][ T7847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.172713][ T7847] Call Trace: [ 207.172720][ T7847] [ 207.172728][ T7847] dump_stack_lvl+0x100/0x190 [ 207.172759][ T7847] should_fail_ex.cold+0x5/0xa [ 207.172783][ T7847] should_failslab+0xc2/0x120 [ 207.172809][ T7847] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.172830][ T7847] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 207.172860][ T7847] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 207.172887][ T7847] idr_get_free+0x52e/0xa00 [ 207.172927][ T7847] idr_alloc_u32+0x1ac/0x320 [ 207.172955][ T7847] ? __pfx_idr_alloc_u32+0x10/0x10 [ 207.172982][ T7847] ? __pfx___debug_object_init+0x10/0x10 [ 207.173015][ T7847] idr_alloc+0xc0/0x130 [ 207.173043][ T7847] ? __pfx_idr_alloc+0x10/0x10 [ 207.173069][ T7847] ? lockdep_init_map_type+0x5c/0x250 [ 207.173100][ T7847] loop_add+0x1fe/0xb60 [ 207.173122][ T7847] ? __pfx_loop_add+0x10/0x10 [ 207.173158][ T7847] ? __fget_files+0x34/0x3d0 [ 207.173179][ T7847] ? find_held_lock+0x2b/0x80 [ 207.173197][ T7847] ? __fget_files+0x215/0x3d0 [ 207.173219][ T7847] loop_control_ioctl+0xae/0x620 [ 207.173241][ T7847] ? __pfx_loop_control_ioctl+0x10/0x10 [ 207.173267][ T7847] ? __pfx_loop_control_ioctl+0x10/0x10 [ 207.173309][ T7847] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 207.173344][ T7847] __do_fast_syscall_32+0x13a/0x8b0 [ 207.173378][ T7847] do_fast_syscall_32+0x32/0x70 [ 207.173408][ T7847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.173429][ T7847] RIP: 0023:0xf6feefec [ 207.173450][ T7847] Code: Unable to access opcode bytes at 0xf6feefc2. [ 207.173458][ T7847] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 207.173476][ T7847] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 207.173487][ T7847] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.173498][ T7847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.173508][ T7847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.173519][ T7847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.173543][ T7847] [ 207.177672][ T7845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 207.177690][ T7845] overlayfs: failed to set xattr on upper [ 207.177695][ T7845] overlayfs: ...falling back to redirect_dir=nofollow. [ 207.177699][ T7845] overlayfs: ...falling back to index=off. [ 207.177704][ T7845] overlayfs: ...falling back to uuid=null. [ 207.378947][ T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 207.543647][ T10] usb 5-1: USB disconnect, device number 9 [ 207.551729][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 207.552030][ T10] keyspan 5-1:0.133: device disconnected [ 207.780373][ T7855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.963237][ T7860] i2c i2c-0: delete_device: Can't find device in list [ 208.804137][ T7852] syz_tun: entered allmulticast mode [ 208.973764][ T7848] syz_tun: left allmulticast mode [ 210.086424][ T7879] i2c i2c-0: delete_device: Can't find device in list [ 210.890835][ T7875] i2c i2c-0: delete_device: Can't find device in list [ 210.950871][ T7890] i2c i2c-0: delete_device: Can't find device in list [ 210.987509][ T7889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.156259][ T7889] md/raid:md0: device ram0 operational as raid disk 0 [ 212.667973][ T7889] md/raid:md0: couldn't allocate thread. [ 212.885985][ T7889] ============================================================================= [ 212.886004][ T7889] BUG raid5-md0 (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 212.886018][ T7889] ----------------------------------------------------------------------------- [ 212.886018][ T7889] [ 212.886935][ T7889] Object 0xffff88805d130000 @offset=0 [ 212.886947][ T7889] Object 0xffff88805d1304d8 @offset=1240 [ 212.886954][ T7889] Object 0xffff88805d1309b0 @offset=2480 [ 212.886959][ T7889] Object 0xffff88805d130e88 @offset=3720 [ 212.886964][ T7889] Object 0xffff88805d131360 @offset=4960 [ 212.886969][ T7889] Object 0xffff88805d131838 @offset=6200 [ 212.886975][ T7889] Object 0xffff88805d131d10 @offset=7440 [ 212.886980][ T7889] Object 0xffff88805d1321e8 @offset=8680 [ 212.886985][ T7889] Object 0xffff88805d1326c0 @offset=9920 [ 212.886990][ T7889] Object 0xffff88805d132b98 @offset=11160 [ 212.886995][ T7889] Object 0xffff88805d133070 @offset=12400 [ 212.887001][ T7889] Object 0xffff88805d133548 @offset=13640 [ 212.887006][ T7889] Slab 0xffffea0001744c00 objects=26 used=12 fp=0xffff88805d133a20 flags=0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 212.887022][ T7889] Disabling lock debugging due to kernel taint [ 212.887187][ T7889] ------------[ cut here ]------------ [ 212.887192][ T7889] 1 [ 212.887196][ T7889] WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20, CPU#0: syz.3.493/7889 [ 212.897287][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 212.897300][ T43] audit: type=1804 audit(1790099259.436:1173): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.496" name="/newroot/137/mnt/(" dev="sda1" ino=2038 res=1 errno=0 [ 212.953178][ T7889] Modules linked in: [ 212.954536][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.493 Tainted: G B syzkaller #0 PREEMPT(full) [ 212.959339][ T7889] Tainted: [B]=BAD_PAGE [ 212.961404][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.965427][ T7889] RIP: 0010:__slab_err+0x15/0x20 [ 212.967365][ T7889] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 6c 9c a3 00 90 <0f> 0b 90 e9 13 5a ad 0a 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 212.974511][ T7889] RSP: 0000:ffffc90007ec7828 EFLAGS: 00010046 [ 212.977052][ T7889] RAX: 0000000000080000 RBX: ffffc90007ec7878 RCX: ffffc9000c4d2000 [ 212.980870][ T7889] RDX: 0000000000080000 RSI: ffffffff81c7e99d RDI: ffff888044d38000 [ 212.984046][ T7889] RBP: ffff88804be7d9d8 R08: 0000000000000007 R09: 0000000000000000 [ 212.989099][ T7889] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000007918 [ 212.991785][ T7889] R13: ffff88805d137df0 R14: ffff88804be7d9c0 R15: ffffea0001744c00 [ 212.994473][ T7889] FS: 0000000000000000(0000) GS:ffff888096960000(0063) knlGS:00000000f5446b40 [ 212.998212][ T7889] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 213.001726][ T7889] CR2: 000055ef01ec6770 CR3: 000000004d117000 CR4: 0000000000352ef0 [ 213.005276][ T7889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.009011][ T7889] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 213.012517][ T7889] Call Trace: [ 213.014259][ T7889] [ 213.016165][ T7889] __kmem_cache_shutdown.cold+0x16e/0x177 [ 213.019705][ T7889] kmem_cache_destroy+0x7d/0x1a0 [ 213.022687][ T7889] free_conf+0x1cb/0x710 [ 213.024885][ T7889] setup_conf+0xd80/0x2a20 [ 213.027017][ T7889] ? __pfx_setup_conf+0x10/0x10 [ 213.029146][ T7889] ? _raw_spin_unlock+0x28/0x50 [ 213.031098][ T7889] ? get_pers+0x227/0x2e0 [ 213.032934][ T7889] ? __pfx_get_pers+0x10/0x10 [ 213.035022][ T7889] ? __pfx_kstrtoll+0x10/0x10 [ 213.037168][ T7889] raid5_takeover+0x2b3/0x590 [ 213.039426][ T7889] ? __pfx_raid5_takeover+0x10/0x10 [ 213.041582][ T7889] level_store+0x890/0x1f60 [ 213.043120][ T7889] ? __lock_acquire+0x5c0/0x1f40 [ 213.044771][ T7889] ? __pfx_level_store+0x10/0x10 [ 213.046401][ T7889] ? lock_acquire+0x1d1/0x380 [ 213.047915][ T7889] ? do_raw_spin_lock+0x128/0x260 [ 213.049641][ T7889] ? find_held_lock+0x2b/0x80 [ 213.051262][ T7889] ? md_attr_store+0x195/0x330 [ 213.053261][ T7889] ? md_attr_store+0x195/0x330 [ 213.055628][ T7889] md_attr_store+0x1c5/0x330 [ 213.057897][ T7889] ? __pfx_md_attr_store+0x10/0x10 [ 213.060033][ T7889] sysfs_kf_write+0xf2/0x150 [ 213.062433][ T7889] kernfs_fop_write_iter+0x3e0/0x5f0 [ 213.064646][ T7889] ? __pfx_sysfs_kf_write+0x10/0x10 [ 213.066385][ T7889] vfs_write+0x6af/0x1050 [ 213.067958][ T7889] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 213.070210][ T7889] ? __pfx_vfs_write+0x10/0x10 [ 213.071957][ T7889] ? find_held_lock+0x2b/0x80 [ 213.073674][ T7889] ksys_write+0x12a/0x250 [ 213.075592][ T7889] ? __pfx_ksys_write+0x10/0x10 [ 213.078195][ T7889] __do_fast_syscall_32+0x13a/0x8b0 [ 213.081561][ T7889] do_fast_syscall_32+0x32/0x70 [ 213.084057][ T7889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.088293][ T7889] RIP: 0023:0xf7f84fec [ 213.089934][ T7889] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 213.092571][ T7889] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 213.096144][ T7889] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 213.100285][ T7889] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.105340][ T7889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.108870][ T7889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.111897][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.114739][ T7889] [ 213.116095][ T7889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.120361][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.493 Tainted: G B syzkaller #0 PREEMPT(full) [ 213.126540][ T7889] Tainted: [B]=BAD_PAGE [ 213.128675][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.132954][ T7889] Call Trace: [ 213.134429][ T7889] [ 213.136450][ T7889] dump_stack_lvl+0x100/0x190 [ 213.139978][ T7889] vpanic+0x553/0x970 [ 213.142576][ T7889] ? __pfx_vpanic+0x10/0x10 [ 213.144723][ T7889] ? lock_release+0x24d/0x310 [ 213.146865][ T7889] panic+0xd1/0xe0 [ 213.148957][ T7889] ? __pfx_panic+0x10/0x10 [ 213.150700][ T7889] check_panic_on_warn.cold+0x19/0x34 [ 213.152988][ T7889] ? __slab_err+0x15/0x20 [ 213.154941][ T7889] __warn.cold+0x191/0x318 [ 213.156945][ T7889] __report_bug+0x30f/0x440 [ 213.159191][ T7889] ? __slab_err+0x15/0x20 [ 213.161553][ T7889] ? __pfx___report_bug+0x10/0x10 [ 213.164008][ T7889] ? irq_work_queue+0xd1/0x100 [ 213.166168][ T7889] ? __wake_up_klogd+0xe5/0x140 [ 213.168344][ T7889] ? vprintk_emit+0x1c9/0x6b0 [ 213.170464][ T7889] ? __pfx_vprintk_emit+0x10/0x10 [ 213.172682][ T7889] ? __pfx_vprintk_emit+0x10/0x10 [ 213.174925][ T7889] ? __slab_err+0x15/0x20 [ 213.176987][ T7889] report_bug+0xb3/0x220 [ 213.179192][ T7889] ? __slab_err+0x15/0x20 [ 213.181971][ T7889] handle_bug+0x16a/0x2a0 [ 213.184068][ T7889] exc_invalid_op+0x17/0x50 [ 213.186227][ T7889] asm_exc_invalid_op+0x1a/0x20 [ 213.188578][ T7889] RIP: 0010:__slab_err+0x15/0x20 [ 213.190804][ T7889] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 6c 9c a3 00 90 <0f> 0b 90 e9 13 5a ad 0a 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 213.200889][ T7889] RSP: 0000:ffffc90007ec7828 EFLAGS: 00010046 [ 213.203569][ T7889] RAX: 0000000000080000 RBX: ffffc90007ec7878 RCX: ffffc9000c4d2000 [ 213.206800][ T7889] RDX: 0000000000080000 RSI: ffffffff81c7e99d RDI: ffff888044d38000 [ 213.210193][ T7889] RBP: ffff88804be7d9d8 R08: 0000000000000007 R09: 0000000000000000 [ 213.213559][ T7889] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000007918 [ 213.217627][ T7889] R13: ffff88805d137df0 R14: ffff88804be7d9c0 R15: ffffea0001744c00 [ 213.221972][ T7889] ? add_taint+0x6d/0xb0 [ 213.223929][ T7889] ? __slab_err+0x14/0x20 [ 213.225851][ T7889] __kmem_cache_shutdown.cold+0x16e/0x177 [ 213.228336][ T7889] kmem_cache_destroy+0x7d/0x1a0 [ 213.230462][ T7889] free_conf+0x1cb/0x710 [ 213.232322][ T7889] setup_conf+0xd80/0x2a20 [ 213.234284][ T7889] ? __pfx_setup_conf+0x10/0x10 [ 213.236964][ T7889] ? _raw_spin_unlock+0x28/0x50 [ 213.239643][ T7889] ? get_pers+0x227/0x2e0 [ 213.242000][ T7889] ? __pfx_get_pers+0x10/0x10 [ 213.244290][ T7889] ? __pfx_kstrtoll+0x10/0x10 [ 213.246426][ T7889] raid5_takeover+0x2b3/0x590 [ 213.248591][ T7889] ? __pfx_raid5_takeover+0x10/0x10 [ 213.250820][ T7889] level_store+0x890/0x1f60 [ 213.252801][ T7889] ? __lock_acquire+0x5c0/0x1f40 [ 213.255104][ T7889] ? __pfx_level_store+0x10/0x10 [ 213.257951][ T7889] ? lock_acquire+0x1d1/0x380 [ 213.260784][ T7889] ? do_raw_spin_lock+0x128/0x260 [ 213.263496][ T7889] ? find_held_lock+0x2b/0x80 [ 213.265616][ T7889] ? md_attr_store+0x195/0x330 [ 213.267770][ T7889] ? md_attr_store+0x195/0x330 [ 213.269844][ T7889] md_attr_store+0x1c5/0x330 [ 213.271836][ T7889] ? __pfx_md_attr_store+0x10/0x10 [ 213.273841][ T7889] sysfs_kf_write+0xf2/0x150 [ 213.275942][ T7889] kernfs_fop_write_iter+0x3e0/0x5f0 [ 213.278892][ T7889] ? __pfx_sysfs_kf_write+0x10/0x10 [ 213.281885][ T7889] vfs_write+0x6af/0x1050 [ 213.283837][ T7889] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 213.286301][ T7889] ? __pfx_vfs_write+0x10/0x10 [ 213.288322][ T7889] ? find_held_lock+0x2b/0x80 [ 213.290327][ T7889] ksys_write+0x12a/0x250 [ 213.292186][ T7889] ? __pfx_ksys_write+0x10/0x10 [ 213.294205][ T7889] __do_fast_syscall_32+0x13a/0x8b0 [ 213.296248][ T7889] do_fast_syscall_32+0x32/0x70 [ 213.298389][ T7889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.302093][ T7889] RIP: 0023:0xf7f84fec [ 213.304594][ T7889] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 213.307531][ T7889] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 213.310968][ T7889] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 213.314415][ T7889] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.317767][ T7889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.321602][ T7889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.325714][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.329318][ T7889] [ 213.331514][ T7889] Kernel Offset: disabled [ 213.333366][ T7889] Rebooting in 86400 seconds..