last executing test programs: 1m26.295706919s ago: executing program 0 (id=130): r0 = socket(0x200000000000011, 0x2, 0xd) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001e80)=ANY=[], 0x0, 0x60}, 0x28) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610fac6f39d87f0000020800450000240000e0000011"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) 1m26.217601454s ago: executing program 0 (id=131): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7, 0x10, 0x5, 0xb, 0x7, 0x51d6, 0x3eb, {0x0, @in6={{0xa, 0x72, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x8, 0x7f, 0x101, 0x1, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3, 0x2}, &(0x7f0000000240)=0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x7) shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000440), 0x6) 1m25.041415634s ago: executing program 0 (id=135): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) dup(0xffffffffffffffff) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x401, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() 1m24.819154493s ago: executing program 0 (id=138): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 1m23.470089996s ago: executing program 0 (id=140): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0x0, &(0x7f0000001000), 0xc0200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m22.502540903s ago: executing program 0 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m6.848469794s ago: executing program 32 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.237711841s ago: executing program 2 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002440)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) 4.574612365s ago: executing program 3 (id=470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0xc7, 0x4, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x100800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.501320322s ago: executing program 4 (id=475): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3.501052603s ago: executing program 1 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101) sendfile(r2, r1, 0x0, 0xe3aa6ea) 3.500798646s ago: executing program 3 (id=477): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3b3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xae64, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000004c000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x38, 0x32}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.072185484s ago: executing program 4 (id=478): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r2, r0, 0x80000) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.969189467s ago: executing program 2 (id=479): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x8, 0x8001002, 0x3d7}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x40000, 0xa8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2.967770641s ago: executing program 1 (id=487): getpid() r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.175687988s ago: executing program 3 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2.045172554s ago: executing program 2 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r3, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 2.021173847s ago: executing program 3 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='module libceph +p\n\x00', 0x12) write(r0, &(0x7f0000000140)='file messenger.c +p\n\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='module libceph +p\n\x00', 0x12) write(r1, &(0x7f0000000280)='file messenger.c +p\n\x00', 0x14) r2 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.879389509s ago: executing program 1 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x32, 0x1000, @empty, @private=0xa010102}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'syz_tun\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30008000}, 0x0) 1.76388567s ago: executing program 4 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.3204317s ago: executing program 4 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56049, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 1.209705799s ago: executing program 1 (id=486): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 1.056796198s ago: executing program 4 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='dwc3\x00', 0x5) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/dwc3\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='pcspkr\x00', 0x7) close(r3) close(r2) 995.327181ms ago: executing program 2 (id=489): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init1(0x80800) io_setup(0x2, 0x0) io_setup(0x3cb, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 887.445281ms ago: executing program 2 (id=490): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_setup(0x1a1d, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 882.167329ms ago: executing program 4 (id=491): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) 788.836978ms ago: executing program 3 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000400)='\n\x00', 0x1) 698.513067ms ago: executing program 1 (id=493): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet(0xa, 0x801, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r0, r0, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, 0x0, 0x0) writev(r3, 0x0, 0x0) 302.956994ms ago: executing program 1 (id=494): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 17.90977ms ago: executing program 3 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000180)='driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:1f.3\n\x00', 0xd) close(r2) r3 = openat(r1, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) close(r1) write(r3, &(0x7f0000000280)='thunderbolt\n\x00', 0xc) close(r3) r4 = openat(r0, &(0x7f0000000300)='bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:1f.3\n\x00', 0xd) close(r4) 0s ago: executing program 2 (id=496): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="40100a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36514' (ED25519) to the list of known hosts. [ 32.950048][ T5649] cgroup: Unknown subsys name 'net' [ 33.080253][ T5649] cgroup: Unknown subsys name 'cpuset' [ 33.082657][ T5649] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.121556][ T5649] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.811799][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.814970][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.816042][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.816614][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.816968][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.817107][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.818182][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.818474][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.818731][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.819126][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.821844][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.822545][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.822783][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.823445][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.823957][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.824330][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.825447][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.825569][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.826124][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.828010][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.497918][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.497968][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.498382][ T5735] bridge_slave_0: entered allmulticast mode [ 38.499188][ T5735] bridge_slave_0: entered promiscuous mode [ 38.501864][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.502462][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.502532][ T5733] bridge_slave_0: entered allmulticast mode [ 38.503368][ T5733] bridge_slave_0: entered promiscuous mode [ 38.505432][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.505473][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.505532][ T5733] bridge_slave_1: entered allmulticast mode [ 38.506293][ T5733] bridge_slave_1: entered promiscuous mode [ 38.529980][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.530076][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.530164][ T5735] bridge_slave_1: entered allmulticast mode [ 38.531013][ T5735] bridge_slave_1: entered promiscuous mode [ 38.585310][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.585394][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.585487][ T5734] bridge_slave_0: entered allmulticast mode [ 38.586872][ T5734] bridge_slave_0: entered promiscuous mode [ 38.601236][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.603378][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.606040][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.622398][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.622523][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.622607][ T5734] bridge_slave_1: entered allmulticast mode [ 38.625443][ T5734] bridge_slave_1: entered promiscuous mode [ 38.636789][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.652531][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.652605][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.652692][ T5745] bridge_slave_0: entered allmulticast mode [ 38.653899][ T5745] bridge_slave_0: entered promiscuous mode [ 38.662504][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.662600][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.662700][ T5745] bridge_slave_1: entered allmulticast mode [ 38.664026][ T5745] bridge_slave_1: entered promiscuous mode [ 38.668169][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.670492][ T5735] team0: Port device team_slave_0 added [ 38.672734][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.695544][ T5733] team0: Port device team_slave_0 added [ 38.696964][ T5735] team0: Port device team_slave_1 added [ 38.718495][ T5733] team0: Port device team_slave_1 added [ 38.719561][ T5734] team0: Port device team_slave_0 added [ 38.729041][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.744701][ T5734] team0: Port device team_slave_1 added [ 38.755818][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.763290][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.763306][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.763326][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.764602][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.764613][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.764626][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.786710][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.786728][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.786748][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.788079][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.788092][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.788111][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.799585][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.799598][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.799611][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.801250][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.801259][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.801272][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.820155][ T5745] team0: Port device team_slave_0 added [ 38.839568][ T5745] team0: Port device team_slave_1 added [ 38.855805][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.855817][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.855829][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.879084][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.879097][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.879109][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.908194][ T5735] hsr_slave_0: entered promiscuous mode [ 38.908727][ T5735] hsr_slave_1: entered promiscuous mode [ 38.924027][ T5734] hsr_slave_0: entered promiscuous mode [ 38.924885][ T5734] hsr_slave_1: entered promiscuous mode [ 38.925529][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 38.925609][ T5734] Cannot create hsr debugfs directory [ 38.932270][ T5733] hsr_slave_0: entered promiscuous mode [ 38.932814][ T5733] hsr_slave_1: entered promiscuous mode [ 38.933136][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 38.933148][ T5733] Cannot create hsr debugfs directory [ 39.001425][ T5745] hsr_slave_0: entered promiscuous mode [ 39.001927][ T5745] hsr_slave_1: entered promiscuous mode [ 39.002211][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 39.002222][ T5745] Cannot create hsr debugfs directory [ 39.272520][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.280614][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.282324][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.287479][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.288074][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.297474][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.298365][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.304698][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.386027][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.388714][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.389147][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.393236][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.394738][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.404216][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.412196][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.416556][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.465117][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.471809][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.476686][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.481208][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.481970][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.486569][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.487272][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.492863][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.569718][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.574019][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.575544][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.580125][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.594100][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.594559][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.602221][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.608662][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.612521][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.673081][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.683752][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.686825][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.686966][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.694610][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.694656][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.717121][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.721770][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.736165][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.736217][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.742808][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.750085][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.750180][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.774954][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.775001][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.788801][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.788874][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.808580][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.869333][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.870212][ T5744] Bluetooth: hci2: command tx timeout [ 39.871006][ T5744] Bluetooth: hci0: command tx timeout [ 39.871133][ T5744] Bluetooth: hci3: command tx timeout [ 39.871210][ T5744] Bluetooth: hci1: command tx timeout [ 39.892511][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.892558][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.903972][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.904024][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.199558][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.257221][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.266789][ T5735] veth0_vlan: entered promiscuous mode [ 40.283127][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.285692][ T5735] veth1_vlan: entered promiscuous mode [ 40.311150][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.343275][ T5735] veth0_macvtap: entered promiscuous mode [ 40.350594][ T5745] veth0_vlan: entered promiscuous mode [ 40.360501][ T5735] veth1_macvtap: entered promiscuous mode [ 40.376147][ T5745] veth1_vlan: entered promiscuous mode [ 40.410563][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.418120][ T5733] veth0_vlan: entered promiscuous mode [ 40.421278][ T5734] veth0_vlan: entered promiscuous mode [ 40.428895][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.446613][ T5734] veth1_vlan: entered promiscuous mode [ 40.452451][ T5745] veth0_macvtap: entered promiscuous mode [ 40.462531][ T5733] veth1_vlan: entered promiscuous mode [ 40.482549][ T5745] veth1_macvtap: entered promiscuous mode [ 40.515147][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.515167][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.516752][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.534803][ T5734] veth0_macvtap: entered promiscuous mode [ 40.537492][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.557919][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.557942][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.559408][ T5734] veth1_macvtap: entered promiscuous mode [ 40.565998][ T5733] veth0_macvtap: entered promiscuous mode [ 40.574236][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.584403][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.594852][ T5733] veth1_macvtap: entered promiscuous mode [ 40.647779][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.649331][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.651827][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.654878][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.658526][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.659385][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.692460][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.698968][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699142][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699175][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699204][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699231][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699258][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699285][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699314][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699343][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699374][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699402][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699443][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.718471][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.718515][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.739595][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.739635][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.784031][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.784045][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.818307][ T4894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.818321][ T4894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.850315][ T4894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.850335][ T4894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.906780][ T4894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.906796][ T4894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.914964][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.914978][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.000787][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.000812][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.256922][ T5893] syzkaller0: entered promiscuous mode [ 41.256954][ T5893] syzkaller0: entered allmulticast mode [ 41.568050][ T5904] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.580062][ T5832] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 41.727446][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 41.728408][ T5832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 41.744128][ T5832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 41.744156][ T5832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.744167][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 41.744178][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.744189][ T5832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.744208][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.948786][ T5096] Bluetooth: hci1: command tx timeout [ 41.948809][ T5096] Bluetooth: hci3: command tx timeout [ 41.948821][ T5096] Bluetooth: hci0: command tx timeout [ 41.948832][ T5096] Bluetooth: hci2: command tx timeout [ 41.987499][ T5832] usb 8-1: GET_CAPABILITIES returned 0 [ 41.987525][ T5832] usbtmc 8-1:16.0: can't read capabilities [ 42.306008][ T5921] syzkaller0: entered promiscuous mode [ 42.306022][ T5921] syzkaller0: entered allmulticast mode [ 42.395719][ T5833] usb 8-1: USB disconnect, device number 2 [ 42.976993][ T5927] syzkaller0: entered promiscuous mode [ 42.977018][ T5927] syzkaller0: entered allmulticast mode [ 43.006272][ T5927] tipc: Started in network mode [ 43.006299][ T5927] tipc: Node identity 867a9f7fa586, cluster identity 4711 [ 43.006534][ T5927] tipc: Enabled bearer , priority 0 [ 43.011848][ T5926] tipc: Resetting bearer [ 43.028035][ T5926] tipc: Disabling bearer [ 43.040588][ T5931] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 43.410761][ T5945] i8042 kbd 00:00: in use; can't configure [ 43.412588][ T5945] i8042 aux 00:01: in use; can't configure [ 43.418611][ T5945] c6xdigio 00:03: in use; can't configure [ 43.420801][ T5945] serial 00:04: in use; can't configure [ 44.027543][ T5744] Bluetooth: hci2: command tx timeout [ 44.027573][ T5744] Bluetooth: hci0: command tx timeout [ 44.027592][ T5744] Bluetooth: hci3: command tx timeout [ 44.027612][ T5744] Bluetooth: hci1: command tx timeout [ 44.111203][ T1756] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.133364][ T1756] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 44.151066][ T44] audit: type=1326 audit(1790183961.063:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.3.30" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 44.548386][ T5988] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 44.701216][ T5988] team0: Port device team_slave_0 removed [ 44.851121][ T5994] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 45.086598][ T6004] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 45.100053][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.247850][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 45.249274][ T43] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 45.249800][ T43] usb 5-1: config 0 has no interfaces? [ 45.251764][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.251786][ T43] usb 5-1: Product: syz [ 45.251798][ T43] usb 5-1: Manufacturer: syz [ 45.251808][ T43] usb 5-1: SerialNumber: syz [ 45.256984][ T43] usb 5-1: config 0 descriptor?? [ 45.283723][ T6008] netlink: 256 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.393629][ T6010] bridge_slave_0: left allmulticast mode [ 45.393647][ T6010] bridge_slave_0: left promiscuous mode [ 45.395185][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.400875][ T6010] bridge_slave_1: left allmulticast mode [ 45.400891][ T6010] bridge_slave_1: left promiscuous mode [ 45.401002][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.411664][ T6010] bond0: (slave bond_slave_0): Releasing backup interface [ 45.414654][ T6010] bond0: (slave bond_slave_1): Releasing backup interface [ 45.421224][ T6010] team0: Port device team_slave_0 removed [ 45.425290][ T6010] team0: Port device team_slave_1 removed [ 45.425750][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.425763][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.426879][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.426890][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.521953][ T909] usb 5-1: USB disconnect, device number 2 [ 45.521979][ T6010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.522042][ T6011] team0: Mode changed to "random" [ 45.616661][ T6010] vlan0: entered promiscuous mode [ 45.643521][ T6010] team0: Port device vlan0 added [ 45.716587][ T6010] tipc: Started in network mode [ 45.716613][ T6010] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 45.720573][ T6010] tipc: Enabled bearer , priority 0 [ 45.987432][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.108595][ T5738] Bluetooth: hci3: command tx timeout [ 46.108605][ T5744] Bluetooth: hci1: command tx timeout [ 46.108629][ T5738] Bluetooth: hci0: command tx timeout [ 46.108701][ T5738] Bluetooth: hci2: command tx timeout [ 46.139130][ T30] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 46.140930][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.140951][ T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.140969][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.142864][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 46.142884][ T30] usb 7-1: Product: syz [ 46.142897][ T30] usb 7-1: Manufacturer: syz [ 46.142909][ T30] usb 7-1: SerialNumber: syz [ 46.359170][ T30] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 46.829985][ T1756] tipc: Node number set to 11578026 [ 47.361611][ T6039] syzkaller0: entered promiscuous mode [ 47.361630][ T6039] syzkaller0: entered allmulticast mode [ 47.717439][ T5096] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 47.727443][ T1347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.877919][ T1347] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 47.879089][ T1347] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 47.879108][ T1347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.879120][ T1347] usb 6-1: config 0 has no interfaces? [ 47.879142][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.882495][ T1347] usb 6-1: config 0 descriptor?? [ 48.727728][ T5832] usb 7-1: USB disconnect, device number 2 [ 48.735321][ T5832] usblp0: removed [ 49.007437][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 49.112706][ T30] device-mapper: raid1: All sides of mirror have failed. [ 49.113727][ T6070] Buffer I/O error on dev dm-0, logical block 0, lost async page write [ 49.116167][ T1347] device-mapper: raid1: Mirror read failed. [ 49.116253][ T6070] Buffer I/O error on dev dm-0, logical block 1, async page read [ 49.168494][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 49.168539][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 49.169865][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.169910][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.169933][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.171115][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.171154][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.171176][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.172300][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.172327][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.172348][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.173183][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.173213][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.173232][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.174056][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.174085][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.174155][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.177200][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.177237][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.177257][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.178852][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.178889][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.178943][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.179946][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.179968][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 49.179980][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 49.181873][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 49.181895][ T9] usb 8-1: Product: syz [ 49.181903][ T9] usb 8-1: Manufacturer: syz [ 49.181910][ T9] usb 8-1: SerialNumber: syz [ 49.184855][ T9] usb 8-1: config 0 descriptor?? [ 49.207647][ T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 49.443348][ T6078] syzkaller0: entered promiscuous mode [ 49.443363][ T6078] syzkaller0: entered allmulticast mode [ 49.913203][ T6085] mmap: syz.3.59 (6085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.039768][ T1347] usb 8-1: USB disconnect, device number 3 [ 50.063139][ T1347] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 50.399843][ T35] usb 6-1: USB disconnect, device number 2 [ 51.018588][ T6104] binder: 6103:6104 ioctl c0306201 80000380 returned -14 [ 52.290101][ T6132] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 52.837401][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.988017][ T5832] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 52.996042][ T5832] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.997417][ T5832] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 53.005580][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.005601][ T5832] usb 5-1: Product: syz [ 53.005611][ T5832] usb 5-1: Manufacturer: syz [ 53.005621][ T5832] usb 5-1: SerialNumber: syz [ 53.016958][ T5832] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 53.041657][ T5832] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 53.044487][ T6143] team0: No ports can be present during mode change [ 53.048133][ T5832] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 53.309581][ T1347] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 53.468357][ T1347] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.469227][ T1347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.469245][ T1347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.469257][ T1347] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.469286][ T1347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.472735][ T1347] usb 8-1: config 0 descriptor?? [ 53.939329][ T1347] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 54.592315][ T6161] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 54.592335][ T6161] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 54.592351][ T6161] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 54.592362][ T6161] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 54.592369][ T6161] page dumped because: unmovable page [ 54.592375][ T6161] page_owner tracks the page as allocated [ 54.592379][ T6161] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8482985238 [ 54.592399][ T6161] post_alloc_hook+0xfd/0x120 [ 54.592421][ T6161] get_page_from_freelist+0x110d/0x35d0 [ 54.592481][ T6161] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 54.592496][ T6161] alloc_pages_mpol+0x201/0x550 [ 54.592512][ T6161] alloc_pages_noprof+0x1a/0x160 [ 54.592528][ T6161] __vmalloc_node_range_noprof+0x833/0x1420 [ 54.592544][ T6161] __vmalloc_node_noprof+0xad/0xf0 [ 54.592558][ T6161] tpg_alloc+0xbd/0x9b0 [ 54.592572][ T6161] vivid_probe.cold+0x2166/0x921e [ 54.592586][ T6161] platform_probe+0x106/0x1d0 [ 54.592718][ T6161] really_probe+0x241/0xa60 [ 54.592750][ T6161] __driver_probe_device+0x210/0x460 [ 54.592773][ T6161] driver_probe_device+0x4a/0x140 [ 54.592799][ T6161] __driver_attach+0x21f/0x5b0 [ 54.592887][ T6161] bus_for_each_dev+0x13e/0x1d0 [ 54.592907][ T6161] bus_add_driver+0x305/0x5b0 [ 54.592927][ T6161] page_owner free stack trace missing [ 54.866740][ T6143] Set syz0 is full, maxelem 65536 reached [ 55.337935][ T1039] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 55.467403][ T1039] usb 8-1: device descriptor read/64, error -32 [ 55.707653][ T1039] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 55.769186][ T6170] Bluetooth: ISO socket layer initialized [ 55.948225][ T6141] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 55.957457][ T5833] usb 5-1: USB disconnect, device number 3 [ 55.981594][ T5833] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 56.007649][ T5833] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 56.011457][ T5833] ti_usb_3410_5052 5-1:2.0: device disconnected [ 56.189945][ T44] audit: type=1326 audit(1790183973.103:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.190302][ T44] audit: type=1326 audit(1790183973.103:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.193769][ T44] audit: type=1326 audit(1790183973.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.193805][ T44] audit: type=1326 audit(1790183973.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.193826][ T44] audit: type=1326 audit(1790183973.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.194304][ T44] audit: type=1326 audit(1790183973.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.195157][ T44] audit: type=1326 audit(1790183973.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.195299][ T44] audit: type=1326 audit(1790183973.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.196026][ T44] audit: type=1326 audit(1790183973.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.196217][ T44] audit: type=1326 audit(1790183973.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 56.487038][ T5832] usb 8-1: USB disconnect, device number 4 [ 56.624316][ T6189] syzkaller0: entered promiscuous mode [ 56.624337][ T6189] syzkaller0: entered allmulticast mode [ 56.692782][ T6191] FAULT_INJECTION: forcing a failure. [ 56.692782][ T6191] name failslab, interval 1, probability 0, space 0, times 1 [ 56.692806][ T6191] CPU: 3 UID: 0 PID: 6191 Comm: syz.1.98 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.692821][ T6191] Tainted: [L]=SOFTLOCKUP [ 56.692825][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.692832][ T6191] Call Trace: [ 56.692837][ T6191] [ 56.692841][ T6191] dump_stack_lvl+0x100/0x190 [ 56.692917][ T6191] should_fail_ex.cold+0x5/0xa [ 56.692942][ T6191] should_failslab+0xc2/0x120 [ 56.692960][ T6191] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.692977][ T6191] ? vm_area_dup+0x27/0x9d0 [ 56.692998][ T6191] vm_area_dup+0x27/0x9d0 [ 56.693017][ T6191] __split_vma+0x19c/0x1de0 [ 56.693028][ T6191] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 56.693049][ T6191] ? rcu_is_watching+0x13/0xc0 [ 56.693062][ T6191] ? __pfx___split_vma+0x10/0x10 [ 56.693080][ T6191] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.693099][ T6191] ? trace_sched_exit_tp+0x120/0x160 [ 56.693114][ T6191] vms_gather_munmap_vmas+0x1d2/0x1720 [ 56.693128][ T6191] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 56.693140][ T6191] ? lock_acquire+0x1d1/0x380 [ 56.693155][ T6191] ? futex_unqueue+0x29/0x2c0 [ 56.693167][ T6191] ? find_held_lock+0x2b/0x80 [ 56.693179][ T6191] ? futex_unqueue+0x133/0x2c0 [ 56.693188][ T6191] ? futex_unqueue+0x133/0x2c0 [ 56.693201][ T6191] ? futex_unqueue+0x13d/0x2c0 [ 56.693214][ T6191] do_vmi_align_munmap+0x287/0x5f0 [ 56.693228][ T6191] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 56.693239][ T6191] ? __pfx_futex_wake_mark+0x10/0x10 [ 56.693257][ T6191] ? __lock_acquire+0x5c0/0x1f40 [ 56.693283][ T6191] ? mas_walk+0x260/0x310 [ 56.693297][ T6191] do_vmi_munmap+0x1f8/0x3e0 [ 56.693311][ T6191] __vm_munmap+0x196/0x390 [ 56.693324][ T6191] ? __pfx___vm_munmap+0x10/0x10 [ 56.693345][ T6191] __ia32_sys_munmap+0x57/0x80 [ 56.693362][ T6191] __do_fast_syscall_32+0x13a/0x8b0 [ 56.693377][ T6191] do_fast_syscall_32+0x32/0x70 [ 56.693397][ T6191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.693436][ T6191] RIP: 0023:0xf70aefec [ 56.693450][ T6191] Code: Unable to access opcode bytes at 0xf70aefc2. [ 56.693456][ T6191] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000005b [ 56.693468][ T6191] RAX: ffffffffffffffda RBX: 00000000803fe000 RCX: 0000000000c00000 [ 56.693475][ T6191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.693483][ T6191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.693490][ T6191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.693497][ T6191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.693512][ T6191] [ 56.804029][ T6195] syzkaller0: entered promiscuous mode [ 56.804043][ T6195] syzkaller0: entered allmulticast mode [ 56.909830][ T6197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 56.909854][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.911732][ T6197] vhci_hcd vhci_hcd.0: Device attached [ 56.916560][ T6198] vhci_hcd: connection closed [ 56.916893][ T5096] Bluetooth: hci1: Malformed LE Event: 0x0f [ 56.924699][ T5785] vhci_hcd vhci_hcd.3: stop threads [ 56.925062][ T5785] vhci_hcd vhci_hcd.3: release socket [ 56.925082][ T5785] vhci_hcd vhci_hcd.3: disconnect device [ 57.081477][ T6201] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 57.097670][ T6201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.119300][ T6201] bond1: (slave gretap1): making interface the new active one [ 57.120618][ T6201] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.474976][ T6172] Set syz1 is full, maxelem 65536 reached [ 57.920650][ T6224] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 58.620409][ T6227] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 59.342662][ T6227] bond2: entered promiscuous mode [ 59.343152][ T6227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.355835][ T6228] ipvlan2: entered allmulticast mode [ 59.355850][ T6228] bond2: entered allmulticast mode [ 59.367455][ T6229] bond2: (slave bridge1): making interface the new active one [ 59.367472][ T6229] bridge1: entered promiscuous mode [ 59.367569][ T6229] bridge1: entered allmulticast mode [ 59.369551][ T6229] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 59.613564][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 59.657413][ T6248] input: syz1 as /devices/virtual/input/input5 [ 59.929150][ T6250] kvm [6249]: vcpu2, guest rIP: 0x1a2 Unhandled WRMSR(0xc2) = 0xffffc6f000000006 [ 60.179710][ T6258] Console: switching to colour dummy device 80x25 [ 60.265410][ T6259] genirq: Flags mismatch irq 0. 00200080 (ath9k) vs. 00215a00 (timer) [ 60.265455][ T6259] ath9k 0000:00:01.0: request_irq failed [ 60.266312][ T6259] ath9k 0000:00:01.0: probe with driver ath9k failed with error -16 [ 60.574993][ T6262] kvm [6260]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 60.823344][ T6270] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 60.993530][ T6277] team0 (unregistering): Port device team_slave_1 removed [ 62.449930][ T6302] syzkaller0: entered promiscuous mode [ 62.449944][ T6302] syzkaller0: entered allmulticast mode [ 62.563725][ T1161] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.735461][ T6310] syzkaller0: entered promiscuous mode [ 62.735477][ T6310] syzkaller0: entered allmulticast mode [ 63.267382][ T909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.438285][ T909] usb 7-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 63.439462][ T909] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.439483][ T909] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.441656][ T909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.441674][ T909] usb 7-1: Product: syz [ 63.441683][ T909] usb 7-1: Manufacturer: syz [ 63.441692][ T909] usb 7-1: SerialNumber: syz [ 64.069846][ T6323] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 64.110110][ T5744] Bluetooth: hci5: CSR: Local version failed (-71) [ 64.112394][ T1039] usb 7-1: USB disconnect, device number 3 [ 64.588177][ T64] Bluetooth: hci4: command 0xfc11 tx timeout [ 64.589270][ T5096] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 64.666862][ T6330] bridge_slave_0: left allmulticast mode [ 64.666882][ T6330] bridge_slave_0: left promiscuous mode [ 64.667017][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.679248][ T6330] bridge_slave_1: left allmulticast mode [ 64.679268][ T6330] bridge_slave_1: left promiscuous mode [ 64.679389][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.076415][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 65.337207][ T6349] process 'syz.1.149' launched './file0' with NULL argv: empty string added [ 65.481485][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 65.545740][ T6353] device-mapper: table: 248:1: multipath: invalid number of paths (-EINVAL) [ 65.545761][ T6353] device-mapper: ioctl: error adding target to table [ 65.671312][ T6358] binder: 6357:6358 ioctl c0205826 80000080 returned -22 [ 67.175742][ T6372] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 67.201633][ T6376] pim6reg: entered allmulticast mode [ 67.223073][ T6376] pim6reg: left allmulticast mode [ 67.224095][ T6376] FAULT_INJECTION: forcing a failure. [ 67.224095][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 67.224155][ T6376] CPU: 3 UID: 0 PID: 6376 Comm: syz.2.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.224175][ T6376] Tainted: [L]=SOFTLOCKUP [ 67.224180][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.224188][ T6376] Call Trace: [ 67.224194][ T6376] [ 67.224200][ T6376] dump_stack_lvl+0x100/0x190 [ 67.224239][ T6376] should_fail_ex.cold+0x5/0xa [ 67.224259][ T6376] should_failslab+0xc2/0x120 [ 67.224283][ T6376] __kmalloc_noprof+0xfc/0x840 [ 67.224299][ T6376] ? _raw_spin_unlock+0x28/0x50 [ 67.224322][ T6376] ? unregister_netdevice_many_notify+0x903/0x2150 [ 67.224351][ T6376] unregister_netdevice_many_notify+0x903/0x2150 [ 67.224377][ T6376] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 67.224398][ T6376] ? __pfx_mroute_clean_tables+0x10/0x10 [ 67.224425][ T6376] ip6_mroute_setsockopt+0x1d7f/0x35b0 [ 67.224438][ T6376] ? find_held_lock+0x2b/0x80 [ 67.224452][ T6376] ? finish_task_switch.isra.0+0x241/0x10d0 [ 67.224473][ T6376] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 67.224484][ T6376] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 67.224505][ T6376] ? trace_sched_exit_tp+0x120/0x160 [ 67.224519][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 67.224539][ T6376] ? __might_fault+0xc5/0x140 [ 67.224557][ T6376] ? do_ipv6_setsockopt+0x543/0x43a0 [ 67.224574][ T6376] do_ipv6_setsockopt+0x543/0x43a0 [ 67.224593][ T6376] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 67.224610][ T6376] ? aa_inet_opt_perm+0x30d/0x970 [ 67.224625][ T6376] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.224641][ T6376] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 67.224655][ T6376] ? find_held_lock+0x2b/0x80 [ 67.224667][ T6376] ? futex_wake+0x4ea/0x5e0 [ 67.224683][ T6376] ? futex_wait+0x11e/0x370 [ 67.224698][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 67.224718][ T6376] ? ipv6_setsockopt+0xcb/0x170 [ 67.224734][ T6376] ipv6_setsockopt+0xcb/0x170 [ 67.224753][ T6376] rawv6_setsockopt+0xee/0x5a0 [ 67.224769][ T6376] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 67.224783][ T6376] ? aa_sock_opt_perm+0x114/0x1e0 [ 67.224798][ T6376] ? sock_common_setsockopt+0x2e/0xf0 [ 67.224811][ T6376] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.224825][ T6376] do_sock_setsockopt+0xf3/0x1d0 [ 67.224838][ T6376] __sys_setsockopt+0x119/0x190 [ 67.224858][ T6376] __ia32_sys_setsockopt+0xbc/0x160 [ 67.224874][ T6376] ? __do_fast_syscall_32+0xb3/0x8b0 [ 67.224887][ T6376] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.224898][ T6376] __do_fast_syscall_32+0x13a/0x8b0 [ 67.224913][ T6376] do_fast_syscall_32+0x32/0x70 [ 67.224926][ T6376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.224942][ T6376] RIP: 0023:0xf7fc4fec [ 67.224957][ T6376] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 67.224962][ T6376] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 67.224974][ T6376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 67.224981][ T6376] RDX: 00000000000000d4 RSI: 0000000080000080 RDI: 0000000000000004 [ 67.224987][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.224994][ T6376] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.225000][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.225014][ T6376] [ 67.362668][ T6380] futex_wake_op: syz.1.160 tries to shift op by 144; fix this program [ 67.497700][ T1039] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.529816][ T6380] futex_wake_op: syz.1.160 tries to shift op by 144; fix this program [ 67.660450][ T1039] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 67.662095][ T1039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 67.662128][ T1039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.662150][ T1039] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.666237][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.666260][ T1039] usb 8-1: Product: syz [ 67.666271][ T1039] usb 8-1: Manufacturer: syz [ 67.666282][ T1039] usb 8-1: SerialNumber: syz [ 67.681854][ T1039] kobil_sct 8-1:1.0: KOBIL USB smart card terminal converter detected [ 67.703763][ T1039] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 68.401772][ T25] usb 8-1: USB disconnect, device number 5 [ 68.417005][ T25] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 68.417450][ T25] kobil_sct 8-1:1.0: device disconnected [ 68.462999][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.463015][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.464161][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.464175][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.532756][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.697417][ T6149] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.848687][ T6149] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.849627][ T6149] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 68.849665][ T6149] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 68.849684][ T6149] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.851554][ T6149] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.851573][ T6149] usb 6-1: Product: syz [ 68.851586][ T6149] usb 6-1: Manufacturer: syz [ 68.851596][ T6149] usb 6-1: SerialNumber: syz [ 68.853955][ T6149] usb 6-1: config 0 descriptor?? [ 68.857233][ T6149] hub 6-1:0.0: bad descriptor, ignoring hub [ 68.857260][ T6149] hub 6-1:0.0: probe with driver hub failed with error -5 [ 68.867389][ T6149] usb 6-1: selecting invalid altsetting 0 [ 69.403464][ T6411] bridge0: port 3(macvlan2) entered blocking state [ 69.403542][ T6411] bridge0: port 3(macvlan2) entered disabled state [ 69.403609][ T6411] macvlan2: entered allmulticast mode [ 69.403618][ T6411] ip6gretap0: entered allmulticast mode [ 69.404585][ T6411] macvlan2: entered promiscuous mode [ 69.404956][ T6411] bridge0: port 3(macvlan2) entered blocking state [ 69.405002][ T6411] bridge0: port 3(macvlan2) entered forwarding state [ 69.406255][ T6411] Zero length message leads to an empty skb [ 69.520989][ T6393] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 70.141421][ T35] usb 6-1: USB disconnect, device number 3 [ 70.337191][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 71.238475][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238579][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.542819][ T42] cfg80211: failed to load regulatory.db [ 71.552313][ T6453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.629364][ T6457] syzkaller0: entered promiscuous mode [ 71.629380][ T6457] syzkaller0: entered allmulticast mode [ 71.987721][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.153217][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 72.156665][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.157899][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.160396][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.160416][ T42] usb 6-1: Product: syz [ 72.160430][ T42] usb 6-1: Manufacturer: syz [ 72.160441][ T42] usb 6-1: SerialNumber: syz [ 72.166078][ T42] usb 6-1: config 0 descriptor?? [ 72.171250][ T42] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 72.171281][ T42] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 72.384590][ T6477] FAULT_INJECTION: forcing a failure. [ 72.384590][ T6477] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.384620][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.3.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.384638][ T6477] Tainted: [L]=SOFTLOCKUP [ 72.384642][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.384649][ T6477] Call Trace: [ 72.384654][ T6477] [ 72.384659][ T6477] dump_stack_lvl+0x100/0x190 [ 72.384679][ T6477] should_fail_ex.cold+0x5/0xa [ 72.384693][ T6477] ? prepare_alloc_pages+0x16d/0x5b0 [ 72.384712][ T6477] should_fail_alloc_page+0xeb/0x140 [ 72.384730][ T6477] prepare_alloc_pages+0x1f0/0x5b0 [ 72.384749][ T6477] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 72.384766][ T6477] ? __lock_acquire+0x5c0/0x1f40 [ 72.384782][ T6477] ? __css_rstat_updated+0x1ce/0x590 [ 72.384800][ T6477] ? __pfx___css_rstat_updated+0x10/0x10 [ 72.384819][ T6477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 72.384833][ T6477] ? __lock_acquire+0x5c0/0x1f40 [ 72.384849][ T6477] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 72.384864][ T6477] ? find_held_lock+0x2b/0x80 [ 72.384876][ T6477] ? rcu_read_unlock+0x17/0x60 [ 72.384886][ T6477] ? rcu_read_unlock+0x17/0x60 [ 72.384898][ T6477] ? lock_acquire+0x1d1/0x380 [ 72.384918][ T6477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.384935][ T6477] ? policy_nodemask+0xed/0x4f0 [ 72.384952][ T6477] alloc_pages_mpol+0x201/0x550 [ 72.384969][ T6477] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 72.384985][ T6477] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 72.384998][ T6477] ? __pfx_widen_string+0x10/0x10 [ 72.385016][ T6477] alloc_pages_noprof+0x1a/0x160 [ 72.385035][ T6477] kvm_vm_ioctl+0x453/0x42d0 [ 72.385048][ T6477] ? tomoyo_path_number_perm+0x46d/0x580 [ 72.385067][ T6477] ? stack_trace_save+0x8e/0xc0 [ 72.385082][ T6477] ? __pfx_stack_trace_save+0x10/0x10 [ 72.385097][ T6477] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 72.385108][ T6477] ? __lock_acquire+0x5c0/0x1f40 [ 72.385127][ T6477] ? tomoyo_path_number_perm+0x46d/0x580 [ 72.385144][ T6477] ? kasan_save_stack+0x3f/0x50 [ 72.385157][ T6477] ? kasan_save_stack+0x30/0x50 [ 72.385179][ T6477] ? kasan_save_track+0x14/0x30 [ 72.385194][ T6477] ? kasan_save_free_info+0x3b/0x70 [ 72.385205][ T6477] ? __kasan_slab_free+0x5f/0x80 [ 72.385225][ T6477] ? kfree+0x22b/0x6d0 [ 72.385235][ T6477] ? tomoyo_path_number_perm+0x46d/0x580 [ 72.385254][ T6477] ? security_file_ioctl_compat+0xd3/0x230 [ 72.385273][ T6477] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 72.385284][ T6477] ? __do_fast_syscall_32+0x13a/0x8b0 [ 72.385296][ T6477] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 72.385315][ T6477] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 72.385348][ T6477] ? kasan_quarantine_put+0x104/0x240 [ 72.385362][ T6477] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.385374][ T6477] ? find_held_lock+0x2b/0x80 [ 72.385386][ T6477] ? tomoyo_path_number_perm+0x28f/0x580 [ 72.385403][ T6477] ? tomoyo_path_number_perm+0x28f/0x580 [ 72.385479][ T6477] ? tomoyo_path_number_perm+0x188/0x580 [ 72.385506][ T6477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.385526][ T6477] ? futex_wait+0x11e/0x370 [ 72.385548][ T6477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.385567][ T6477] ? do_vfs_ioctl+0x226/0x13e0 [ 72.385581][ T6477] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.385595][ T6477] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 72.385609][ T6477] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 72.385621][ T6477] ? __fget_files+0x34/0x3d0 [ 72.385636][ T6477] ? find_held_lock+0x2b/0x80 [ 72.385649][ T6477] ? __fget_files+0x215/0x3d0 [ 72.385662][ T6477] ? hook_file_ioctl_common+0x140/0x440 [ 72.385677][ T6477] ? __fget_files+0x21f/0x3d0 [ 72.385692][ T6477] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 72.385705][ T6477] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 72.385718][ T6477] __do_fast_syscall_32+0x13a/0x8b0 [ 72.385734][ T6477] do_fast_syscall_32+0x32/0x70 [ 72.385750][ T6477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.385768][ T6477] RIP: 0023:0xf709efec [ 72.385782][ T6477] Code: Unable to access opcode bytes at 0xf709efc2. [ 72.385787][ T6477] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.385799][ T6477] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 72.385807][ T6477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.385813][ T6477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.385820][ T6477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.385827][ T6477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.385840][ T6477] [ 72.757477][ T6149] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.778239][ T42] em28xx 6-1:0.0: chip ID is em2765 [ 72.907846][ T6149] usb 7-1: Using ep0 maxpacket: 16 [ 72.908502][ T6149] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.909363][ T6149] usb 7-1: config 1 interface 0 altsetting 44 bulk endpoint 0x82 has invalid maxpacket 1023 [ 72.909425][ T6149] usb 7-1: config 1 interface 0 altsetting 44 bulk endpoint 0x3 has invalid maxpacket 32 [ 72.909438][ T6149] usb 7-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.909451][ T6149] usb 7-1: config 1 interface 0 has no altsetting 0 [ 72.911778][ T6149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.911798][ T6149] usb 7-1: Product: syz [ 72.911811][ T6149] usb 7-1: Manufacturer: syz [ 72.911823][ T6149] usb 7-1: SerialNumber: syz [ 72.917681][ T6482] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.917851][ T6482] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.127682][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 73.141086][ T6149] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 73.145473][ T6149] usb 7-1: USB disconnect, device number 4 [ 73.391086][ T42] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.391135][ T42] em28xx 6-1:0.0: board has no eeprom [ 73.707634][ T42] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 73.707653][ T42] em28xx 6-1:0.0: dvb set to bulk mode. [ 73.714016][ T42] em28xx 6-1:0.0: Binding DVB extension [ 74.920746][ T6149] usb 6-1: USB disconnect, device number 4 [ 74.921511][ T6149] em28xx 6-1:0.0: Disconnecting em28xx [ 74.940768][ T42] em28xx 6-1:0.0: Registering input extension [ 74.941020][ T6149] em28xx 6-1:0.0: Closing input extension [ 74.957056][ T6149] em28xx: Freeing device [ 76.060826][ T6518] netlink: 188 bytes leftover after parsing attributes in process `syz.2.207'. [ 76.159010][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 76.475035][ T6527] Bluetooth: MGMT ver 1.23 [ 77.495619][ T6547] jffs2: notice: (6547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.271903][ T6555] bridge_slave_0: left allmulticast mode [ 78.271921][ T6555] bridge_slave_0: left promiscuous mode [ 78.272051][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.283988][ T6555] macvlan2: left allmulticast mode [ 78.284006][ T6555] ip6gretap0: left allmulticast mode [ 78.285502][ T6555] macvlan2: left promiscuous mode [ 78.285745][ T6555] bridge0: port 3(macvlan2) entered disabled state [ 78.302723][ T6555] bridge_slave_1: left allmulticast mode [ 78.302749][ T6555] bridge_slave_1: left promiscuous mode [ 78.303152][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.438133][ T1163] IPVS: starting estimator thread 0... [ 78.537749][ T6564] IPVS: using max 43 ests per chain, 103200 per kthread [ 78.596365][ T6570] FAULT_INJECTION: forcing a failure. [ 78.596365][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 78.596390][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.596407][ T6570] Tainted: [L]=SOFTLOCKUP [ 78.596412][ T6570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.596419][ T6570] Call Trace: [ 78.596423][ T6570] [ 78.596429][ T6570] dump_stack_lvl+0x100/0x190 [ 78.596448][ T6570] should_fail_ex.cold+0x5/0xa [ 78.596465][ T6570] should_failslab+0xc2/0x120 [ 78.596484][ T6570] kmem_cache_alloc_noprof+0x92/0x6a0 [ 78.596499][ T6570] ? anon_vma_fork+0x8d/0x6a0 [ 78.596519][ T6570] anon_vma_fork+0x8d/0x6a0 [ 78.596536][ T6570] ? vm_area_dup+0x66a/0x9d0 [ 78.596554][ T6570] dup_mmap+0x10e6/0x2370 [ 78.596575][ T6570] ? __pfx_dup_mmap+0x10/0x10 [ 78.596591][ T6570] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.596610][ T6570] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.596629][ T6570] ? __lock_acquire+0x5c0/0x1f40 [ 78.596651][ T6570] ? lock_acquire+0x1d1/0x380 [ 78.596666][ T6570] ? copy_process+0x4806/0x8370 [ 78.596685][ T6570] copy_process+0x4811/0x8370 [ 78.596703][ T6570] ? __pfx_copy_process+0x10/0x10 [ 78.596714][ T6570] ? futex_wake+0x4ea/0x5e0 [ 78.596736][ T6570] kernel_clone+0x176/0x9d0 [ 78.596748][ T6570] ? __pfx_kernel_clone+0x10/0x10 [ 78.596762][ T6570] ? ksys_write+0x190/0x250 [ 78.596778][ T6570] __do_compat_sys_ia32_clone+0xd4/0x120 [ 78.596796][ T6570] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 78.596813][ T6570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.596838][ T6570] __do_fast_syscall_32+0x13a/0x8b0 [ 78.596852][ T6570] do_fast_syscall_32+0x32/0x70 [ 78.596865][ T6570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.596880][ T6570] RIP: 0023:0xf709efec [ 78.596894][ T6570] Code: Unable to access opcode bytes at 0xf709efc2. [ 78.596899][ T6570] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 78.596911][ T6570] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 0000000000000000 [ 78.596918][ T6570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.596924][ T6570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.596931][ T6570] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.596937][ T6570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.596951][ T6570] [ 78.698424][ T6573] syzkaller0: entered promiscuous mode [ 78.698447][ T6573] syzkaller0: entered allmulticast mode [ 78.813549][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.226'. [ 78.819125][ T6580] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.226'. [ 79.967923][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 80.118446][ T42] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 80.120070][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.120089][ T42] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.123399][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.123419][ T42] usb 6-1: Product: syz [ 80.123426][ T42] usb 6-1: Manufacturer: syz [ 80.123433][ T42] usb 6-1: SerialNumber: syz [ 80.126892][ T42] usb 6-1: config 0 descriptor?? [ 80.343387][ T855] usb 6-1: USB disconnect, device number 5 [ 80.910602][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.912623][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.913703][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.929995][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.932155][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.057408][ T1039] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 81.238080][ T1039] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 81.239013][ T1039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.239035][ T1039] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.239046][ T1039] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.240649][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 81.240663][ T1039] usb 8-1: Product: syz [ 81.240670][ T1039] usb 8-1: Manufacturer: syz [ 81.240677][ T1039] usb 8-1: SerialNumber: syz [ 81.365204][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.365285][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.365443][ T6613] bridge_slave_0: entered allmulticast mode [ 81.366238][ T6613] bridge_slave_0: entered promiscuous mode [ 81.370052][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.370149][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.370235][ T6613] bridge_slave_1: entered allmulticast mode [ 81.371261][ T6613] bridge_slave_1: entered promiscuous mode [ 81.394775][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.396624][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.410317][ T6613] team0: Port device team_slave_0 added [ 81.411852][ T6613] team0: Port device team_slave_1 added [ 81.424196][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.424208][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.424221][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.425014][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.425022][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.425034][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.445981][ T6613] hsr_slave_0: entered promiscuous mode [ 81.446418][ T6613] hsr_slave_1: entered promiscuous mode [ 81.446771][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 81.446783][ T6613] Cannot create hsr debugfs directory [ 81.468322][ T1039] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.598917][ T6613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.601105][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.601748][ T6613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.604729][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.605393][ T6613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.608103][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.608721][ T6613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.612428][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.661133][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.675356][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.683708][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.683799][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.694560][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.694652][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.008082][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.179461][ T6613] veth0_vlan: entered promiscuous mode [ 82.184376][ T6613] veth1_vlan: entered promiscuous mode [ 82.208905][ T6613] veth0_macvtap: entered promiscuous mode [ 82.211320][ T6613] veth1_macvtap: entered promiscuous mode [ 82.228643][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.234638][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.288410][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.288425][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.313000][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.313021][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.327491][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327521][ T5785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327539][ T5785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327557][ T5785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987569][ T64] Bluetooth: hci4: command tx timeout [ 83.230119][ T64] Bluetooth: hci2: command 0x1003 tx timeout [ 83.230158][ T5096] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 83.805182][ T5827] usb 8-1: USB disconnect, device number 6 [ 83.819951][ T5827] usblp0: removed [ 84.872611][ T6698] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 85.067799][ T5096] Bluetooth: hci4: command tx timeout [ 85.458819][ T6710] syzkaller0: entered promiscuous mode [ 85.458843][ T6710] syzkaller0: entered allmulticast mode [ 85.481173][ T6712] bond0: (slave bond_slave_0): Releasing backup interface [ 85.498919][ T6712] bond0: (slave bond_slave_1): Releasing backup interface [ 85.515547][ T6712] team0: Port device team_slave_0 removed [ 85.532204][ T6712] team0: Port device team_slave_1 removed [ 85.533013][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.533030][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.536204][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.536225][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.539414][ T6712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.591924][ T6713] team0: Mode changed to "random" [ 85.636252][ T6712] vlan0: entered promiscuous mode [ 85.642458][ T6712] team0: Port device vlan0 added [ 85.714828][ T6713] tipc: Enabled bearer , priority 0 [ 86.057446][ T855] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 86.232067][ T855] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 86.236695][ T855] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 86.236712][ T855] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.236721][ T855] usb 9-1: config 0 has no interfaces? [ 86.236735][ T855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.238125][ T855] usb 9-1: config 0 descriptor?? [ 86.827521][ T25] tipc: Node number set to 603758463 [ 87.158003][ T5096] Bluetooth: hci4: command tx timeout [ 87.363084][ T6731] syzkaller0: entered promiscuous mode [ 87.363100][ T6731] syzkaller0: entered allmulticast mode [ 87.667461][ T5833] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.848149][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.849181][ T5833] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.849203][ T5833] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.849227][ T5833] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.852166][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.852187][ T5833] usb 6-1: Product: syz [ 87.852199][ T5833] usb 6-1: Manufacturer: syz [ 87.852217][ T5833] usb 6-1: SerialNumber: syz [ 88.064116][ T5833] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 88.701690][ T5814] usb 9-1: USB disconnect, device number 2 [ 88.823887][ T6741] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 88.919641][ T6746] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 89.228363][ T5096] Bluetooth: hci4: command tx timeout [ 89.299789][ T6749] binder: 6748:6749 ioctl c0306201 80000380 returned -14 [ 90.424373][ T30] usb 6-1: USB disconnect, device number 6 [ 90.434246][ T30] usblp0: removed [ 90.545685][ T6756] bond0: (slave bond_slave_0): Releasing backup interface [ 90.552319][ T6756] bond0: (slave bond_slave_1): Releasing backup interface [ 90.563835][ T6756] team0: Port device team_slave_0 removed [ 90.574037][ T6756] team0: Port device team_slave_1 removed [ 90.575259][ T6756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.634245][ T6756] team0: Mode changed to "random" [ 90.636281][ T6756] vlan0: entered promiscuous mode [ 90.649479][ T6756] team0: Port device vlan0 added [ 90.696751][ T6766] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 90.758269][ T6756] tipc: Started in network mode [ 90.758297][ T6756] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 90.759099][ T6756] tipc: Enabled bearer , priority 0 [ 91.637149][ T6771] syz.1.271 (6771) used greatest stack depth: 19560 bytes left [ 91.721559][ T6784] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 91.877482][ T25] tipc: Node number set to 11578026 [ 92.577407][ T35] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.728272][ T35] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 92.732482][ T35] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.732500][ T35] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.732511][ T35] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.734871][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.734892][ T35] usb 9-1: Product: syz [ 92.734904][ T35] usb 9-1: Manufacturer: syz [ 92.734917][ T35] usb 9-1: SerialNumber: syz [ 92.978500][ T35] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 95.318679][ T35] usb 9-1: USB disconnect, device number 3 [ 95.323029][ T35] usblp0: removed [ 95.415125][ T6811] bridge_slave_0: left allmulticast mode [ 95.415151][ T6811] bridge_slave_0: left promiscuous mode [ 95.415324][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.429261][ T6811] bridge_slave_1: left allmulticast mode [ 95.429289][ T6811] bridge_slave_1: left promiscuous mode [ 95.429467][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.441974][ T6811] bond0: (slave bond_slave_0): Releasing backup interface [ 95.445723][ T6811] bond0: (slave bond_slave_1): Releasing backup interface [ 95.454974][ T6811] team0: Port device team_slave_0 removed [ 95.460077][ T6811] team0: Port device team_slave_1 removed [ 95.460455][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.460466][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.463556][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.463569][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.464717][ T6811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.467202][ T6817] team0: Mode changed to "random" [ 95.508104][ T6811] vlan0: entered promiscuous mode [ 95.514207][ T6811] team0: Port device vlan0 added [ 95.593031][ T6811] tipc: Started in network mode [ 95.593063][ T6811] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 95.593429][ T6811] tipc: Enabled bearer , priority 0 [ 95.767680][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.768601][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.768734][ T6823] bridge_slave_0: entered allmulticast mode [ 95.774444][ T6823] bridge_slave_0: entered promiscuous mode [ 95.774943][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.774996][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.786699][ T6823] bridge_slave_0: left allmulticast mode [ 95.786722][ T6823] bridge_slave_0: left promiscuous mode [ 95.786869][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.479615][ T6837] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 96.708483][ T5833] tipc: Node number set to 11578026 [ 97.167459][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.317404][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 97.317886][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.320505][ T5833] usb 6-1: config 1 interface 0 altsetting 44 bulk endpoint 0x82 has invalid maxpacket 1023 [ 97.320522][ T5833] usb 6-1: config 1 interface 0 altsetting 44 bulk endpoint 0x3 has invalid maxpacket 32 [ 97.320534][ T5833] usb 6-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.320546][ T5833] usb 6-1: config 1 interface 0 has no altsetting 0 [ 97.324687][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.324703][ T5833] usb 6-1: Product: syz [ 97.324710][ T5833] usb 6-1: Manufacturer: syz [ 97.324718][ T5833] usb 6-1: SerialNumber: syz [ 97.330240][ T6847] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.331267][ T6847] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.545306][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.578337][ T5833] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 97.586155][ T5833] usb 6-1: USB disconnect, device number 7 [ 97.633366][ T44] kauditd_printk_skb: 23 callbacks suppressed [ 97.633381][ T44] audit: type=1800 audit(1790184014.543:36): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.289" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 99.517995][ T6875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.620818][ T6875] team0: No ports can be present during mode change [ 99.634734][ T109] tipc: Resetting bearer [ 99.706561][ T6879] tipc: Enabling of bearer rejected, already enabled [ 102.015448][ T6896] futex_wake_op: syz.2.299 tries to shift op by 144; fix this program [ 102.058239][ T6896] futex_wake_op: syz.2.299 tries to shift op by 144; fix this program [ 102.111640][ T44] audit: type=1800 audit(1790184019.023:37): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 104.482116][ T6952] device-mapper: table: 248:1: multipath: invalid number of paths (-EINVAL) [ 104.482140][ T6952] device-mapper: ioctl: error adding target to table [ 104.563873][ T6955] FAULT_INJECTION: forcing a failure. [ 104.563873][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 104.563901][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.1.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.563919][ T6955] Tainted: [L]=SOFTLOCKUP [ 104.563924][ T6955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.563957][ T6955] Call Trace: [ 104.563962][ T6955] [ 104.563967][ T6955] dump_stack_lvl+0x100/0x190 [ 104.563989][ T6955] should_fail_ex.cold+0x5/0xa [ 104.564012][ T6955] should_failslab+0xc2/0x120 [ 104.564031][ T6955] kmem_cache_alloc_noprof+0x92/0x6a0 [ 104.564047][ T6955] ? anon_vma_fork+0x19a/0x6a0 [ 104.564069][ T6955] anon_vma_fork+0x19a/0x6a0 [ 104.564090][ T6955] dup_mmap+0x10e6/0x2370 [ 104.564113][ T6955] ? __pfx_dup_mmap+0x10/0x10 [ 104.564128][ T6955] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.564149][ T6955] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.564168][ T6955] ? __lock_acquire+0x5c0/0x1f40 [ 104.564190][ T6955] ? lock_acquire+0x1d1/0x380 [ 104.564205][ T6955] ? copy_process+0x4806/0x8370 [ 104.564222][ T6955] copy_process+0x4811/0x8370 [ 104.564240][ T6955] ? __pfx_copy_process+0x10/0x10 [ 104.564251][ T6955] ? futex_wake+0x4ea/0x5e0 [ 104.564273][ T6955] kernel_clone+0x176/0x9d0 [ 104.564290][ T6955] ? __pfx_kernel_clone+0x10/0x10 [ 104.564307][ T6955] ? ksys_write+0x190/0x250 [ 104.564324][ T6955] __do_compat_sys_ia32_clone+0xd4/0x120 [ 104.564342][ T6955] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 104.564372][ T6955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.564398][ T6955] __do_fast_syscall_32+0x13a/0x8b0 [ 104.564413][ T6955] do_fast_syscall_32+0x32/0x70 [ 104.564425][ T6955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.564440][ T6955] RIP: 0023:0xf70aefec [ 104.564454][ T6955] Code: Unable to access opcode bytes at 0xf70aefc2. [ 104.564459][ T6955] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 104.564471][ T6955] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 0000000000000000 [ 104.564478][ T6955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.564485][ T6955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.564492][ T6955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.564499][ T6955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.564577][ T6955] [ 104.927120][ T6957] binder: 6956:6957 ioctl c0205826 80000080 returned -22 [ 107.459709][ T6997] syzkaller0: entered promiscuous mode [ 107.459736][ T6997] syzkaller0: entered allmulticast mode [ 107.466337][ T7004] tipc: Resetting bearer [ 107.474667][ T7004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.543119][ T7004] team0: No ports can be present during mode change [ 108.554785][ T7019] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 109.369913][ T7011] tipc: Enabling of bearer rejected, already enabled [ 109.386986][ T7019] bond1: entered promiscuous mode [ 109.387900][ T7019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.404412][ T7020] ipvlan2: entered allmulticast mode [ 109.404426][ T7020] bond1: entered allmulticast mode [ 109.431885][ T7021] bond1: (slave bridge1): making interface the new active one [ 109.431903][ T7021] bridge1: entered promiscuous mode [ 109.432018][ T7021] bridge1: entered allmulticast mode [ 109.432914][ T7021] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 109.613662][ T44] audit: type=1800 audit(1790184026.523:38): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.336" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 111.028560][ T44] audit: type=1326 audit(1790184027.943:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.4.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 111.029782][ T44] audit: type=1326 audit(1790184027.943:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.4.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 111.029998][ T44] audit: type=1326 audit(1790184027.943:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.4.341" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efec code=0x7ffc0000 [ 111.048824][ T7059] kvm [7058]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 111.246939][ T44] audit: type=1326 audit(1790184028.153:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.4.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 111.247127][ T44] audit: type=1326 audit(1790184028.153:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.4.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 111.359966][ T7069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.442503][ T7069] team0: No ports can be present during mode change [ 111.448766][ T109] tipc: Resetting bearer [ 111.518672][ T7081] tipc: Enabling of bearer rejected, already enabled [ 112.213026][ T7083] syzkaller0: entered promiscuous mode [ 112.213051][ T7083] syzkaller0: entered allmulticast mode [ 113.819683][ T7104] smpboot: CPU 1 is now offline [ 115.345167][ T44] audit: type=1800 audit(1790184032.253:44): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.360" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 116.476266][ T7143] FAULT_INJECTION: forcing a failure. [ 116.476266][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 116.476302][ T7143] CPU: 3 UID: 0 PID: 7143 Comm: syz.2.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.476330][ T7143] Tainted: [L]=SOFTLOCKUP [ 116.476337][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.476352][ T7143] Call Trace: [ 116.476358][ T7143] [ 116.476365][ T7143] dump_stack_lvl+0x100/0x190 [ 116.476501][ T7143] should_fail_ex.cold+0x5/0xa [ 116.476529][ T7143] should_failslab+0xc2/0x120 [ 116.476553][ T7143] __kmalloc_cache_noprof+0x91/0x6d0 [ 116.476570][ T7143] ? string+0x201/0x4d0 [ 116.476595][ T7143] ? format_decode+0x1ad/0xdd0 [ 116.476617][ T7143] ? tomoyo_init_log+0x1a0/0x20c0 [ 116.476649][ T7143] tomoyo_init_log+0x1a0/0x20c0 [ 116.476669][ T7143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.476697][ T7143] ? vsnprintf+0x4c5/0x1300 [ 116.476719][ T7143] ? __pfx_tomoyo_init_log+0x10/0x10 [ 116.476738][ T7143] ? tomoyo_profile+0x47/0x60 [ 116.476761][ T7143] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 116.476791][ T7143] tomoyo_supervisor+0x506/0x1340 [ 116.476818][ T7143] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 116.476846][ T7143] ? rcu_is_watching+0x13/0xc0 [ 116.476870][ T7143] ? tomoyo_path_matches_pattern+0x112/0x280 [ 116.476899][ T7143] ? tomoyo_check_mount_acl+0x5c/0x1b0 [ 116.476923][ T7143] ? tomoyo_check_acl+0x1f7/0x410 [ 116.476960][ T7143] tomoyo_mount_acl+0x580/0x8b0 [ 116.477057][ T7143] ? is_bpf_text_address+0x8a/0x1a0 [ 116.477096][ T7143] ? is_bpf_text_address+0x8a/0x1a0 [ 116.477127][ T7143] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 116.477149][ T7143] ? kernel_text_address+0x8d/0x100 [ 116.477174][ T7143] ? unwind_get_return_address+0x59/0xa0 [ 116.477244][ T7143] ? arch_stack_walk+0xa6/0xf0 [ 116.477275][ T7143] ? __lock_acquire+0x5c0/0x1f40 [ 116.477315][ T7143] ? tomoyo_mount_permission+0x1f6/0x460 [ 116.477405][ T7143] ? tomoyo_domain+0xb2/0x150 [ 116.477428][ T7143] ? tomoyo_profile+0x47/0x60 [ 116.477450][ T7143] tomoyo_mount_permission+0x214/0x460 [ 116.477466][ T7143] ? tomoyo_mount_permission+0x1f6/0x460 [ 116.477483][ T7143] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 116.477515][ T7143] security_sb_mount+0xdd/0x270 [ 116.477540][ T7143] path_mount+0x158/0x24c0 [ 116.477566][ T7143] ? __pfx_path_mount+0x10/0x10 [ 116.477588][ T7143] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.477607][ T7143] ? putname+0xb1/0x110 [ 116.477627][ T7143] ? kmem_cache_free+0x127/0x6c0 [ 116.477654][ T7143] ? __ia32_sys_mount+0x292/0x310 [ 116.477683][ T7143] __ia32_sys_mount+0x292/0x310 [ 116.477710][ T7143] ? __pfx___ia32_sys_mount+0x10/0x10 [ 116.477744][ T7143] __do_fast_syscall_32+0x13a/0x8b0 [ 116.477767][ T7143] do_fast_syscall_32+0x32/0x70 [ 116.477786][ T7143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.477814][ T7143] RIP: 0023:0xf7fc4fec [ 116.477837][ T7143] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 116.477846][ T7143] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 116.477864][ T7143] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 116.477875][ T7143] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000080000200 [ 116.477885][ T7143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.477895][ T7143] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.477905][ T7143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.477928][ T7143] [ 116.482680][ T7143] proc: Unknown parameter 'coda' [ 116.755940][ T7147] binder: 7146:7147 ioctl c0205826 80000080 returned -22 [ 117.110502][ T6149] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 117.334208][ T6149] usb 9-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 117.367079][ T6149] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.367109][ T6149] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.393852][ T6149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.394777][ T6149] usb 9-1: Product: syz [ 117.394841][ T6149] usb 9-1: Manufacturer: syz [ 117.394872][ T6149] usb 9-1: SerialNumber: syz [ 118.098267][ T7150] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 118.098286][ T7150] CPU: 2 UID: 0 PID: 7150 Comm: syz.4.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.098303][ T7150] Tainted: [L]=SOFTLOCKUP [ 118.098308][ T7150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.098316][ T7150] Call Trace: [ 118.098320][ T7150] [ 118.098325][ T7150] dump_stack_lvl+0x100/0x190 [ 118.098360][ T7150] sysfs_warn_dup.cold+0x1c/0x28 [ 118.098380][ T7150] sysfs_create_dir_ns+0x24b/0x2b0 [ 118.098397][ T7150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.098411][ T7150] ? find_held_lock+0x2b/0x80 [ 118.098431][ T7150] ? kobject_add_internal+0x25f/0x930 [ 118.098449][ T7150] ? kobject_add_internal+0x25f/0x930 [ 118.098468][ T7150] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.098482][ T7150] kobject_add_internal+0x2c8/0x930 [ 118.098502][ T7150] kobject_add+0x16a/0x1e0 [ 118.098520][ T7150] ? __pfx_kobject_add+0x10/0x10 [ 118.098538][ T7150] ? __kasan_kmalloc+0xaa/0xb0 [ 118.098555][ T7150] ? lockdep_init_map_type+0x5c/0x250 [ 118.098577][ T7150] ? class_to_subsys+0x114/0x150 [ 118.098594][ T7150] device_add+0x294/0x1970 [ 118.098606][ T7150] ? lockdep_init_map_type+0x5c/0x250 [ 118.098637][ T7150] ? __pfx_device_add+0x10/0x10 [ 118.098649][ T7150] ? lockdep_init_map_type+0x5c/0x250 [ 118.098667][ T7150] ? __init_waitqueue_head+0xca/0x150 [ 118.098690][ T7150] i2c_new_client_device+0x660/0xd30 [ 118.098710][ T7150] new_device_store+0x20f/0x420 [ 118.098727][ T7150] ? __pfx_new_device_store+0x10/0x10 [ 118.098747][ T7150] ? find_held_lock+0x2b/0x80 [ 118.098761][ T7150] ? sysfs_file_kobj+0xe4/0x290 [ 118.098775][ T7150] ? sysfs_file_kobj+0xe4/0x290 [ 118.098789][ T7150] ? __pfx_new_device_store+0x10/0x10 [ 118.098804][ T7150] dev_attr_store+0x58/0x80 [ 118.098815][ T7150] ? __pfx_dev_attr_store+0x10/0x10 [ 118.098826][ T7150] sysfs_kf_write+0xf2/0x150 [ 118.098841][ T7150] kernfs_fop_write_iter+0x3e0/0x5f0 [ 118.098859][ T7150] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.098874][ T7150] vfs_write+0x6af/0x1050 [ 118.098888][ T7150] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 118.098909][ T7150] ? __pfx_vfs_write+0x10/0x10 [ 118.098921][ T7150] ? find_held_lock+0x2b/0x80 [ 118.098947][ T7150] ksys_write+0x12a/0x250 [ 118.098960][ T7150] ? __pfx_ksys_write+0x10/0x10 [ 118.098977][ T7150] __do_fast_syscall_32+0x13a/0x8b0 [ 118.098991][ T7150] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.099004][ T7150] do_fast_syscall_32+0x32/0x70 [ 118.099018][ T7150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.099034][ T7150] RIP: 0023:0xf708efec [ 118.099049][ T7150] Code: Unable to access opcode bytes at 0xf708efc2. [ 118.099054][ T7150] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 118.099066][ T7150] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 118.099074][ T7150] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 118.099080][ T7150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.099087][ T7150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.099095][ T7150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.099111][ T7150] [ 118.099279][ T7150] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.099300][ T7150] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 118.160646][ T25] usb 9-1: USB disconnect, device number 4 [ 118.184223][ T5096] Bluetooth: hci2: CSR: Local version failed (-71) [ 119.533768][ T7165] syzkaller0: entered promiscuous mode [ 119.533793][ T7165] syzkaller0: entered allmulticast mode [ 119.854279][ T44] audit: type=1326 audit(1790184036.763:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 119.855563][ T44] audit: type=1326 audit(1790184036.763:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 119.855715][ T44] audit: type=1326 audit(1790184036.763:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.372" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 119.881969][ T7169] kvm [7168]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 120.015336][ T44] audit: type=1326 audit(1790184036.923:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 120.015372][ T44] audit: type=1326 audit(1790184036.923:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 123.294820][ T44] audit: type=1800 audit(1790184040.203:50): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.383" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 124.209751][ T7220] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 124.225728][ T7220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.320508][ T7220] bond1: (slave veth3): Enslaving as an active interface with a down link [ 124.336059][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.337770][ T7224] bond1: (slave batadv1): making interface the new active one [ 124.338408][ T7224] batadv1: entered promiscuous mode [ 124.340210][ T7224] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 124.457762][ T7220] bond1 (unregistering): (slave veth3): Releasing active interface [ 124.469052][ T7220] bond1 (unregistering): (slave batadv1): Releasing active interface [ 124.469071][ T7220] batadv1: left promiscuous mode [ 124.470536][ T7220] bond1 (unregistering): Released all slaves [ 124.484178][ T7226] team0: No ports can be present during mode change [ 125.119169][ T7239] syzkaller0: entered promiscuous mode [ 125.119183][ T7239] syzkaller0: entered allmulticast mode [ 125.306304][ T44] audit: type=1326 audit(1790184042.213:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.307204][ T44] audit: type=1326 audit(1790184042.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.307229][ T44] audit: type=1326 audit(1790184042.213:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.310879][ T44] audit: type=1326 audit(1790184042.223:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.324739][ T7241] kvm [7240]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 125.488163][ T44] audit: type=1326 audit(1790184042.403:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.488257][ T44] audit: type=1326 audit(1790184042.403:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 125.679902][ T5827] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 125.686340][ T7249] syzkaller0: entered promiscuous mode [ 125.686357][ T7249] syzkaller0: entered allmulticast mode [ 125.827402][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 125.828806][ T5827] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 125.829717][ T5827] usb 7-1: config 0 has no interfaces? [ 125.835862][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.835877][ T5827] usb 7-1: Product: syz [ 125.835885][ T5827] usb 7-1: Manufacturer: syz [ 125.835892][ T5827] usb 7-1: SerialNumber: syz [ 125.837212][ T5827] usb 7-1: config 0 descriptor?? [ 126.049459][ T5827] usb 7-1: USB disconnect, device number 5 [ 126.526069][ T7226] Set syz0 is full, maxelem 65536 reached [ 127.157864][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 130.809599][ T7307] syzkaller0: entered promiscuous mode [ 130.809671][ T7307] syzkaller0: entered allmulticast mode [ 131.038154][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.062639][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 131.191723][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 131.192708][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 131.192726][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 131.192743][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.198072][ T7309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.204412][ T25] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 131.206210][ T25] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 131.575885][ T7309] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 131.589481][ T7309] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 131.593988][ T7309] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 131.709680][ T7309] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 132.679648][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679736][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.805106][ T5832] usb 6-1: USB disconnect, device number 8 [ 132.816027][ T5832] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 132.816368][ T5832] spcp8x5 6-1:1.0: device disconnected [ 133.107414][ T44] audit: type=1800 audit(1790184050.013:57): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.422" name="file1" dev="sda1" ino=2041 res=0 errno=0 [ 133.938354][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 136.334922][ T7361] workqueue: Failed to create a rescuer kthread for wq "report_work": -EINTR [ 136.342011][ T7361] configfs-gadget.g1 gadget.0: hidg_bind FAILED [ 136.784291][ T7361] udc dummy_udc.0: failed to start g1: -12 [ 136.784314][ T7361] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 136.822752][ T7361] UDC core: g1: couldn't find an available UDC or it's busy [ 137.502001][ T7382] syzkaller0: entered promiscuous mode [ 137.502024][ T7382] syzkaller0: entered allmulticast mode [ 138.584213][ T7405] netlink: 'syz.1.444': attribute type 5 has an invalid length. [ 138.926671][ T44] audit: type=1326 audit(1790184055.833:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 138.926861][ T44] audit: type=1326 audit(1790184055.833:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 138.950789][ T44] audit: type=1326 audit(1790184055.863:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 138.951066][ T44] audit: type=1326 audit(1790184055.863:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 138.951374][ T44] audit: type=1326 audit(1790184055.863:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 138.981942][ T7409] syzkaller1: entered promiscuous mode [ 138.981964][ T7409] syzkaller1: entered allmulticast mode [ 138.989773][ T7412] kvm [7410]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 139.274082][ T44] audit: type=1326 audit(1790184056.183:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 139.274242][ T44] audit: type=1326 audit(1790184056.183:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 140.503392][ T7427] syzkaller0: entered promiscuous mode [ 140.503416][ T7427] syzkaller0: entered allmulticast mode [ 140.609959][ T7430] lo: entered promiscuous mode [ 140.654925][ T7430] tunl0: entered promiscuous mode [ 140.656946][ T7430] gre0: entered promiscuous mode [ 140.675036][ T7430] gretap0: entered promiscuous mode [ 140.682611][ T7430] erspan0: entered promiscuous mode [ 140.685927][ T7430] ip_vti0: entered promiscuous mode [ 140.694030][ T7430] ip6_vti0: entered promiscuous mode [ 140.702114][ T7430] sit0: entered promiscuous mode [ 140.707073][ T7430] ip6tnl0: entered promiscuous mode [ 140.714677][ T7430] ip6gre0: entered promiscuous mode [ 140.721620][ T7430] ip6gretap0: entered promiscuous mode [ 140.724415][ T7430] vcan0: entered promiscuous mode [ 140.738353][ T7430] bond0: entered promiscuous mode [ 140.751496][ T7430] tipc: Resetting bearer [ 140.751645][ T7430] team0: entered promiscuous mode [ 140.755576][ T7430] dummy0: entered promiscuous mode [ 140.771138][ T7430] nlmon0: entered promiscuous mode [ 140.773115][ T7430] veth0: entered promiscuous mode [ 140.774717][ T7430] veth1: entered promiscuous mode [ 140.790196][ T7430] wg0: entered promiscuous mode [ 140.793644][ T7430] wg1: entered promiscuous mode [ 140.801806][ T7430] wg2: entered promiscuous mode [ 140.803257][ T7430] veth0_to_bridge: entered promiscuous mode [ 140.806977][ T7430] bridge_slave_0: entered promiscuous mode [ 140.816102][ T7430] veth1_to_bridge: entered promiscuous mode [ 140.820366][ T7430] bridge_slave_1: entered promiscuous mode [ 140.822036][ T7430] veth0_to_bond: entered promiscuous mode [ 140.823617][ T7430] bond_slave_0: entered promiscuous mode [ 140.834420][ T7430] veth1_to_bond: entered promiscuous mode [ 140.836321][ T7430] bond_slave_1: entered promiscuous mode [ 140.847131][ T7430] veth0_to_team: entered promiscuous mode [ 140.852674][ T7430] team_slave_0: entered promiscuous mode [ 140.860131][ T7430] veth1_to_team: entered promiscuous mode [ 140.864000][ T7430] team_slave_1: entered promiscuous mode [ 140.864190][ T7430] veth0_to_batadv: entered promiscuous mode [ 140.873329][ T7430] batadv_slave_0: entered promiscuous mode [ 140.879110][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 140.906384][ T7430] veth1_to_batadv: entered promiscuous mode [ 140.931549][ T7430] batadv_slave_1: entered promiscuous mode [ 140.938696][ T7430] xfrm0: entered promiscuous mode [ 140.944760][ T7430] veth0_to_hsr: entered promiscuous mode [ 140.963130][ T7430] veth1_to_hsr: entered promiscuous mode [ 140.973584][ T7430] hsr0: entered promiscuous mode [ 140.976204][ T7430] veth1_virt_wifi: entered promiscuous mode [ 140.978903][ T7430] veth0_virt_wifi: entered promiscuous mode [ 140.980838][ T7430] virt_wifi0: entered promiscuous mode [ 140.989164][ T7430] vlan1: entered promiscuous mode [ 140.993377][ T7430] macvlan0: entered promiscuous mode [ 141.002457][ T7430] macvlan1: entered promiscuous mode [ 141.005200][ T7430] ipvlan0: entered promiscuous mode [ 141.005289][ T7430] ipvlan1: entered promiscuous mode [ 141.014790][ T7430] macvtap0: entered promiscuous mode [ 141.018715][ T7430] macsec0: entered promiscuous mode [ 141.023628][ T7430] geneve0: entered promiscuous mode [ 141.024956][ T7430] geneve1: entered promiscuous mode [ 141.029646][ T7430] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 141.036041][ T7430] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 141.044619][ T7430] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 141.058639][ T7430] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 141.083466][ T7430] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 141.095186][ T7430] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 141.107873][ T7430] syztnl0: entered promiscuous mode [ 141.108020][ T7430] batadv0: entered promiscuous mode [ 141.108741][ T7430] bond1: entered promiscuous mode [ 141.108804][ T7430] bridge0: entered promiscuous mode [ 141.112933][ T7431] FAULT_INJECTION: forcing a failure. [ 141.112933][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 141.112958][ T7431] CPU: 3 UID: 0 PID: 7431 Comm: syz.1.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.112992][ T7431] Tainted: [L]=SOFTLOCKUP [ 141.112997][ T7431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.113004][ T7431] Call Trace: [ 141.113009][ T7431] [ 141.113014][ T7431] dump_stack_lvl+0x100/0x190 [ 141.113035][ T7431] should_fail_ex.cold+0x5/0xa [ 141.113053][ T7431] should_failslab+0xc2/0x120 [ 141.113071][ T7431] __kmalloc_cache_noprof+0x91/0x6d0 [ 141.113084][ T7431] ? register_netdevice+0x50c/0x25a0 [ 141.113098][ T7431] register_netdevice+0x50c/0x25a0 [ 141.113111][ T7431] ? find_held_lock+0x2b/0x80 [ 141.113125][ T7431] ? __pfx_register_netdevice+0x10/0x10 [ 141.113135][ T7431] ? net_generic+0xea/0x2a0 [ 141.113155][ T7431] vti6_tnl_create2+0x80/0x160 [ 141.113172][ T7431] vti6_locate+0x5cc/0x6d0 [ 141.113187][ T7431] ? __pfx_vti6_locate+0x10/0x10 [ 141.113206][ T7431] vti6_siocdevprivate+0x581/0x760 [ 141.113224][ T7431] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 141.113244][ T7431] ? find_held_lock+0x2b/0x80 [ 141.113261][ T7431] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.113279][ T7431] ? full_name_hash+0xbc/0x100 [ 141.113297][ T7431] dev_ifsioc+0xc2f/0x1f10 [ 141.113316][ T7431] ? __pfx_dev_ifsioc+0x10/0x10 [ 141.113332][ T7431] ? __pfx___mutex_lock+0x10/0x10 [ 141.113346][ T7431] ? lock_acquire+0x1d1/0x380 [ 141.113363][ T7431] ? dev_load+0x8e/0x240 [ 141.113378][ T7431] ? dev_load+0x8e/0x240 [ 141.113397][ T7431] dev_ioctl+0x70e/0x1070 [ 141.113415][ T7431] sock_ioctl+0x494/0x6b0 [ 141.113430][ T7431] ? __pfx_sock_ioctl+0x10/0x10 [ 141.113447][ T7431] ? do_vfs_ioctl+0x226/0x13e0 [ 141.113458][ T7431] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.113474][ T7431] compat_sock_ioctl+0x400/0x760 [ 141.113490][ T7431] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 141.113503][ T7431] ? hook_file_ioctl_common+0x140/0x440 [ 141.113518][ T7431] ? __fget_files+0x21f/0x3d0 [ 141.113534][ T7431] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 141.113549][ T7431] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 141.113563][ T7431] __do_fast_syscall_32+0x13a/0x8b0 [ 141.113577][ T7431] do_fast_syscall_32+0x32/0x70 [ 141.113591][ T7431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.113622][ T7431] RIP: 0023:0xf70aefec [ 141.113638][ T7431] Code: Unable to access opcode bytes at 0xf70aefc2. [ 141.113644][ T7431] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 141.113656][ T7431] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 141.113665][ T7431] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.113672][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.113679][ T7431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.113686][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.113705][ T7431] [ 141.119879][ T5813] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.119913][ T5813] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.119931][ T5813] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.119948][ T5813] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.294742][ T7445] syzkaller0: entered promiscuous mode [ 141.294756][ T7445] syzkaller0: entered allmulticast mode [ 141.597619][ T5814] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 141.747419][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 141.748170][ T5814] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.749059][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.750976][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.750992][ T5814] usb 9-1: Product: syz [ 141.751000][ T5814] usb 9-1: Manufacturer: syz [ 141.751007][ T5814] usb 9-1: SerialNumber: syz [ 141.752713][ T5814] usb 9-1: config 0 descriptor?? [ 141.766395][ T5814] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.766419][ T5814] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 141.802367][ T7457] syzkaller0: entered promiscuous mode [ 141.802389][ T7457] syzkaller0: entered allmulticast mode [ 142.368483][ T5814] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 142.573194][ T7447] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.831575][ T5814] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.831609][ T5814] em28xx 9-1:0.0: board has no eeprom [ 142.846486][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 142.889055][ T7474] pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 142.917413][ T5814] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.917441][ T5814] em28xx 9-1:0.0: dvb set to bulk mode. [ 142.927709][ T6660] em28xx 9-1:0.0: Binding DVB extension [ 142.961116][ T5814] usb 9-1: USB disconnect, device number 5 [ 142.971178][ T5814] em28xx 9-1:0.0: Disconnecting em28xx [ 143.066287][ T6660] em28xx 9-1:0.0: Registering input extension [ 143.066471][ T5814] em28xx 9-1:0.0: Closing input extension [ 143.176932][ T5814] em28xx: Freeing device [ 145.543587][ T7509] netlink: 14 bytes leftover after parsing attributes in process `syz.1.487'. [ 145.932927][ T7529] syzkaller0: entered promiscuous mode [ 145.932949][ T7529] syzkaller0: entered allmulticast mode [ 146.489246][ T7533] ceph: No mds server is up or the cluster is laggy [ 146.638838][ T7542] dwc3 pcspkr: missing memory resource [ 146.942250][ T7557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 147.667375][ T7575] ------------[ cut here ]------------ [ 147.667390][ T7575] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 147.667404][ T7575] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#0: syz.3.495/7575 [ 147.680682][ T7575] Modules linked in: [ 147.683723][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.3.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.689996][ T7575] Tainted: [L]=SOFTLOCKUP [ 147.692260][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.697132][ T7575] RIP: 0010:device_release+0x1dd/0x270 [ 147.699574][ T7575] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 2d d4 a2 fb 48 8d 3d f6 12 e9 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 14 d4 a2 fb 48 89 da 48 b8 00 00 [ 147.708054][ T7575] RSP: 0000:ffffc90002ea7a20 EFLAGS: 00010287 [ 147.711162][ T7575] RAX: 0000000000004074 RBX: ffff88802adde020 RCX: ffffc90007002000 [ 147.714999][ T7575] RDX: 0000000000080000 RSI: ffff8880145bd5c0 RDI: ffffffff9151bd80 [ 147.718232][ T7575] RBP: ffff8880145bd5c0 R08: 0000000000000001 R09: 0000000000000000 [ 147.721591][ T7575] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802af59400 [ 147.724848][ T7575] R13: dffffc0000000000 R14: ffff8880145bd5c0 R15: 0000000000000000 [ 147.727497][ T7575] FS: 0000000000000000(0000) GS:ffff888096959000(0063) knlGS:00000000f548db40 [ 147.730677][ T7575] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 147.733181][ T7575] CR2: 00000000f74553f4 CR3: 000000004fddb000 CR4: 0000000000352ef0 [ 147.736995][ T7575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.740980][ T7575] DR3: 0000000000000406 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 147.744743][ T7575] Call Trace: [ 147.746167][ T7575] [ 147.747551][ T7575] kobject_put+0x1f7/0x640 [ 147.749521][ T7575] device_unregister+0x2f/0xe0 [ 147.751648][ T7575] i2c_unregister_device+0xf5/0x270 [ 147.754408][ T7575] i2c_deregister_clients+0x255/0x460 [ 147.757000][ T7575] i2c_del_adapter+0x13a/0x2e0 [ 147.759488][ T7575] i801_remove+0xa4/0x3d0 [ 147.761513][ T7575] pci_device_remove+0xb2/0x1d0 [ 147.763911][ T7575] ? __pfx_pci_device_remove+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.766767][ T7575] device_remove+0xcb/0x180 [ 147.769494][ T7575] device_release_driver_internal+0x44e/0x620 [ 147.772425][ T7575] unbind_store+0xf8/0x110 [ 147.774690][ T7575] ? __pfx_unbind_store+0x10/0x10 [ 147.776851][ T7575] drv_attr_store+0x74/0xb0 [ 147.779058][ T7575] ? __pfx_drv_attr_store+0x10/0x10 [ 147.781289][ T7575] sysfs_kf_write+0xf2/0x150 [ 147.783315][ T7575] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.785573][ T7575] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.788447][ T7575] vfs_write+0x6af/0x1050 [ 147.790715][ T7575] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 147.793792][ T7575] ? __pfx_vfs_write+0x10/0x10 [ 147.795957][ T7575] ? find_held_lock+0x2b/0x80 [ 147.798335][ T7575] ksys_write+0x12a/0x250 [ 147.800316][ T7575] ? __pfx_ksys_write+0x10/0x10 [ 147.802599][ T7575] __do_fast_syscall_32+0x13a/0x8b0 [ 147.805008][ T7575] do_fast_syscall_32+0x32/0x70 [ 147.807250][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.811026][ T7575] RIP: 0023:0xf709efec [ 147.812943][ T7575] Code: Unable to access opcode bytes at 0xf709efc2. [ 147.816623][ T7575] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 147.821029][ T7575] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 147.824745][ T7575] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 147.827997][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.831778][ T7575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.834838][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.838588][ T7575] [ 147.840004][ T7575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.843169][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.3.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.847849][ T7575] Tainted: [L]=SOFTLOCKUP [ 147.849635][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.854379][ T7575] Call Trace: [ 147.856092][ T7575] [ 147.857523][ T7575] dump_stack_lvl+0x100/0x190 [ 147.859704][ T7575] vpanic+0x553/0x970 [ 147.861721][ T7575] ? __pfx_vpanic+0x10/0x10 [ 147.863840][ T7575] panic+0xd1/0xe0 [ 147.865375][ T7575] ? __pfx_panic+0x10/0x10 [ 147.867137][ T7575] check_panic_on_warn.cold+0x19/0x34 [ 147.869453][ T7575] ? device_release+0x1da/0x270 [ 147.871841][ T7575] __warn.cold+0x191/0x318 [ 147.873787][ T7575] __report_bug+0x30f/0x440 [ 147.875946][ T7575] ? device_release+0x1da/0x270 [ 147.878200][ T7575] ? __pfx___report_bug+0x10/0x10 [ 147.881420][ T7575] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.884167][ T7575] ? device_release+0x1dd/0x270 [ 147.886377][ T7575] report_bug_entry+0xe2/0x290 [ 147.888597][ T7575] ? device_release+0x1dd/0x270 [ 147.890555][ T7575] handle_bug+0x1cd/0x2a0 [ 147.892593][ T7575] exc_invalid_op+0x17/0x50 [ 147.894440][ T7575] asm_exc_invalid_op+0x1a/0x20 [ 147.896806][ T7575] RIP: 0010:device_release+0x1dd/0x270 [ 147.899687][ T7575] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 2d d4 a2 fb 48 8d 3d f6 12 e9 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 14 d4 a2 fb 48 89 da 48 b8 00 00 [ 147.909123][ T7575] RSP: 0000:ffffc90002ea7a20 EFLAGS: 00010287 [ 147.911875][ T7575] RAX: 0000000000004074 RBX: ffff88802adde020 RCX: ffffc90007002000 [ 147.915806][ T7575] RDX: 0000000000080000 RSI: ffff8880145bd5c0 RDI: ffffffff9151bd80 [ 147.919425][ T7575] RBP: ffff8880145bd5c0 R08: 0000000000000001 R09: 0000000000000000 [ 147.922894][ T7575] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802af59400 [ 147.927135][ T7575] R13: dffffc0000000000 R14: ffff8880145bd5c0 R15: 0000000000000000 [ 147.931953][ T7575] kobject_put+0x1f7/0x640 [ 147.934205][ T7575] device_unregister+0x2f/0xe0 [ 147.936619][ T7575] i2c_unregister_device+0xf5/0x270 [ 147.938877][ T7575] i2c_deregister_clients+0x255/0x460 [ 147.941277][ T7575] i2c_del_adapter+0x13a/0x2e0 [ 147.943336][ T7575] i801_remove+0xa4/0x3d0 [ 147.945365][ T7575] pci_device_remove+0xb2/0x1d0 [ 147.947513][ T7575] ? __pfx_pci_device_remove+0x10/0x10 [ 147.949824][ T7575] device_remove+0xcb/0x180 [ 147.952099][ T7575] device_release_driver_internal+0x44e/0x620 [ 147.954684][ T7575] unbind_store+0xf8/0x110 [ 147.956715][ T7575] ? __pfx_unbind_store+0x10/0x10 [ 147.959246][ T7575] drv_attr_store+0x74/0xb0 [ 147.961490][ T7575] ? __pfx_drv_attr_store+0x10/0x10 [ 147.963938][ T7575] sysfs_kf_write+0xf2/0x150 [ 147.965823][ T7575] kernfs_fop_write_iter+0x3e0/0x5f0 [ 147.968033][ T7575] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.970050][ T7575] vfs_write+0x6af/0x1050 [ 147.971686][ T7575] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 147.973547][ T7575] ? __pfx_vfs_write+0x10/0x10 [ 147.975384][ T7575] ? find_held_lock+0x2b/0x80 [ 147.977324][ T7575] ksys_write+0x12a/0x250 [ 147.979052][ T7575] ? __pfx_ksys_write+0x10/0x10 [ 147.981022][ T7575] __do_fast_syscall_32+0x13a/0x8b0 [ 147.983328][ T7575] do_fast_syscall_32+0x32/0x70 [ 147.985508][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.988369][ T7575] RIP: 0023:0xf709efec [ 147.989773][ T7575] Code: Unable to access opcode bytes at 0xf709efc2. [ 147.992168][ T7575] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 147.995676][ T7575] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 147.999123][ T7575] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 148.001979][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.005341][ T7575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.008856][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.013000][ T7575] [ 148.015059][ T7575] Kernel Offset: disabled [ 148.017028][ T7575] Rebooting in 86400 seconds..