last executing test programs: 6.427231999s ago: executing program 2 (id=605): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 4.886417245s ago: executing program 2 (id=612): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a310000000014"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xb0000004}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000004000000000038d4bb2068938740393c5a68a38ead9151b284f457eab33400a0e196e0c00eed026d6c22e4d8ecdda759905a769d10e994243b7729ceb599f3d19c713c751df641b88fb19c8e9b04ef2ca3662e0b2933ee7fd232532e1c27491b6ce6dbfd4ece567a6796c95ee4c0df45e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, &(0x7f0000000000)=""/219, 0xdb) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)) 4.702244091s ago: executing program 2 (id=615): modify_ldt$write2(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.195617621s ago: executing program 0 (id=617): modify_ldt$write2(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) 3.729151324s ago: executing program 2 (id=619): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x200}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.496469068s ago: executing program 1 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='i801_smbus', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='0000:00:05.0', 0xc) (fail_nth: 2) 3.3738961s ago: executing program 0 (id=624): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 3.358963598s ago: executing program 1 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='i801_smbus', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000080)='0000:00:05.0', 0xc) 3.269539896s ago: executing program 1 (id=626): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000040)={0x0, 0x5d, 0x9abc}) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000001540)={&(0x7f0000000080), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001440)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x10140) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x61}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x10000, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0x1, 0xdffffffe, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x4665, 0x1, 0xf250, 0x80, 0x4800, 0x300000, 0x9, 0xe, 0x5, 0x0, 0x10005, 0x6, 0x8000, 0x0, 0x3, 0x1, 0x3, 0xba55, 0x4fc5, 0x2, 0x8, 0x2, 0x100004, 0xd, 0x4, 0x5, 0x6f, 0x8, 0x9, 0x1, 0x19a4, 0x6, 0x100002, 0x7, 0xffffffff, 0x4, 0x6, 0x1, 0x5, 0x3c, 0x8, 0xa, 0x5], [0x7, 0x9, 0x400, 0x8000, 0xfffffffd, 0x7f, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x2287, 0x1c32, 0xbd7f, 0x5, 0xfff9, 0x3, 0x7ffd, 0x3, 0x8, 0x29b, 0xbb2f, 0x0, 0x981, 0x4, 0x9, 0x10000, 0x4, 0xa09, 0x8, 0x1000001, 0x2a9, 0xfffffff9, 0xfffffffe, 0xeb, 0x4, 0xffffffff, 0x6, 0x2000008, 0x1, 0xffff, 0x6, 0x92, 0xfffffff9, 0x2, 0x0, 0x9, 0x9, 0x0, 0x8, 0xfffffff0, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x400, 0x4, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf8000000, 0x7, 0x9, 0x402, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x200005, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x2, 0x5, 0x4, 0x5, 0x4, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10001, 0x80000000, 0x3, 0x400004, 0x1, 0x6d7e, 0x3, 0x8, 0x5, 0x100, 0x5, 0xa, 0x956, 0x0, 0x3ff, 0xe, 0x8, 0xffffffff, 0x2005, 0x9, 0x4, 0xea, 0xfff, 0x20000005, 0x3, 0xd9, 0x0, 0x5, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0xfffffc03, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x9, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x800000, 0xfffffffe, 0x5, 0x3, 0x4, 0x8, 0x4, 0x3, 0x7, 0xfffff801, 0x2851, 0x9, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x1, 0x885, 0x86, 0x20044, 0x409, 0x6, 0x0, 0x4, 0x11, 0x4, 0xffffffff, 0x7ffe, 0xfeff8a33, 0xfffffff8, 0x401, 0xfffffffd, 0xe, 0x7, 0x4, 0xfffffffd, 0xfffffffb, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000580)={0x2000}) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 3.269256571s ago: executing program 0 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x3, 0x6, @remote}, 0x14) (fail_nth: 2) 2.479067466s ago: executing program 2 (id=629): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x37, 0x1, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 2.427390622s ago: executing program 3 (id=630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 2.42658066s ago: executing program 1 (id=631): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x200}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.365970771s ago: executing program 3 (id=632): modify_ldt$write2(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) 1.418982055s ago: executing program 3 (id=633): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_emit_ethernet(0x3b6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.25025104s ago: executing program 3 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) (fail_nth: 2) 1.200490942s ago: executing program 3 (id=635): syz_emit_ethernet(0xfc6, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) 1.077943058s ago: executing program 2 (id=636): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1.077670148s ago: executing program 3 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x2}) io_setup(0x2, &(0x7f0000000000)) r3 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44004) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 928.301961ms ago: executing program 0 (id=638): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r0, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=t', 0x31) (fail_nth: 2) 491.184553ms ago: executing program 1 (id=639): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x3b) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) (fail_nth: 2) mkdir(&(0x7f0000000240)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1f7) openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) 404.853545ms ago: executing program 0 (id=640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff7f0000", @ANYBLOB="02002dbd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000"], 0xd4}}, 0x8010) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0xfb, @empty, 0x4ef}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="e8", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd5b}}], 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x808}, 0x1c) r3 = socket(0x9, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000000060003008100000006000e00020000004fcb6d48832c84f008b73e3f532d2a3932f892b08c0847638bf209692c104cabaf7bd6796a10c46aa64b26c516749a9803a9acc2072d8d75ba390e119432dbcfd613c2d980b948"], 0x4c}}, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000140)={{0x0, @name="7c229080d79c00966186edd35276dc149c550c6441e29b39dce4ee2eccfc0886"}, 0x8, 0x2, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x10000}, {0xa, 0x4e24, 0x5, @local, 0x6}, r4, 0x4b}}, 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f00000005c0)={r3, &(0x7f00000004c0)='\xd9\xa6!)$\x00', 0x8000, &(0x7f0000000500)={@align=0x5, {0x7, 0x9, 0x9, 0x29}}, 0x1, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000740)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0047a4f0f5b1e2439c00000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r5, 0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000000)={0x13, 0x10, 0x10f, {0xffffffffffffffff, r9, 0x1}}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) 349.611605ms ago: executing program 1 (id=641): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000440)="d485d3e29a407edbf68aa3d1f449638efff712e2d2", 0x15}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4, 0xfffffffb) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 0s ago: executing program 0 (id=642): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x3b) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000240)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1f7) openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) kernel console output (not intermixed with test programs): T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.446677][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.451078][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.453316][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.461803][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.545838][ T5740] hsr_slave_0: entered promiscuous mode [ 49.548714][ T5740] hsr_slave_1: entered promiscuous mode [ 49.551790][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.554194][ T5740] Cannot create hsr debugfs directory [ 49.601503][ T5741] hsr_slave_0: entered promiscuous mode [ 49.603757][ T5741] hsr_slave_1: entered promiscuous mode [ 49.605887][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 49.607948][ T5741] Cannot create hsr debugfs directory [ 49.816486][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.824580][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.827582][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.833280][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.845868][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.851735][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.854539][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.859602][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.894491][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.904880][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.909877][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.916725][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.922692][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.930117][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.936056][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.942444][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.000449][ T5753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.006025][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.010478][ T5753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.014766][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.023020][ T5753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.028912][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.031808][ T5753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.036983][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.121975][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.128614][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.132731][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.138479][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.140103][ T5746] Bluetooth: hci0: command tx timeout [ 50.142241][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.144228][ T5749] Bluetooth: hci1: command tx timeout [ 50.144506][ T5101] Bluetooth: hci3: command tx timeout [ 50.149057][ T5746] Bluetooth: hci2: command tx timeout [ 50.159073][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.163966][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.170552][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.239088][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.263983][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.294520][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.305872][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.312593][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.324033][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.327190][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.344652][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.347387][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.359685][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.362589][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.382616][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.385707][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.394887][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.410535][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.413622][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.437366][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.440407][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.506901][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.539238][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.548120][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.551147][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.565395][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.568334][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.794567][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.822079][ T5740] veth0_vlan: entered promiscuous mode [ 50.840327][ T5740] veth1_vlan: entered promiscuous mode [ 50.857727][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.873643][ T5740] veth0_macvtap: entered promiscuous mode [ 50.892363][ T5740] veth1_macvtap: entered promiscuous mode [ 50.914252][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.932175][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.936912][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.946233][ T5744] veth0_vlan: entered promiscuous mode [ 50.953401][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.963817][ T5744] veth1_vlan: entered promiscuous mode [ 51.009916][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.022744][ T5753] veth0_vlan: entered promiscuous mode [ 51.041716][ T5744] veth0_macvtap: entered promiscuous mode [ 51.056768][ T5741] veth0_vlan: entered promiscuous mode [ 51.065633][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.065868][ T5753] veth1_vlan: entered promiscuous mode [ 51.069790][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.073068][ T5744] veth1_macvtap: entered promiscuous mode [ 51.094439][ T5741] veth1_vlan: entered promiscuous mode [ 51.125046][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.128176][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.130016][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.152191][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.170579][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.175803][ T5753] veth0_macvtap: entered promiscuous mode [ 51.190307][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.202898][ T5741] veth0_macvtap: entered promiscuous mode [ 51.211128][ T5753] veth1_macvtap: entered promiscuous mode [ 51.221936][ T5741] veth1_macvtap: entered promiscuous mode [ 51.258990][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.267448][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.274854][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.279885][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.288231][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.293167][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.302124][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.308557][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.312744][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.322659][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.332583][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.349165][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.378949][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.383694][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.386957][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.448521][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.449816][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.455129][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.462992][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.472018][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.508704][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.510285][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.518039][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.556818][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.563495][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.599528][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.599868][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.601906][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.607749][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.620809][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.628570][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.631861][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.634755][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.679738][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.151827][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.164173][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.173098][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.179926][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.187326][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.207183][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.213996][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.219212][ T5749] Bluetooth: hci2: command tx timeout [ 52.222274][ T5749] Bluetooth: hci0: command tx timeout [ 52.225210][ T5749] Bluetooth: hci3: command tx timeout [ 52.226557][ T5746] Bluetooth: hci1: command tx timeout [ 52.239805][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.245047][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.247630][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 52.256199][ T5897] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 52.461632][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.298850][ T5101] Bluetooth: hci1: command tx timeout [ 54.308982][ T5746] Bluetooth: hci0: command tx timeout [ 54.309323][ T5749] Bluetooth: hci2: command tx timeout [ 54.310836][ T5101] Bluetooth: hci3: command tx timeout [ 56.386421][ T5101] Bluetooth: hci2: command tx timeout [ 56.390567][ T5746] Bluetooth: hci0: command tx timeout [ 56.393094][ T5746] Bluetooth: hci1: command tx timeout [ 56.395628][ T5749] Bluetooth: hci3: command tx timeout [ 60.018208][ T6000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'. [ 60.025714][ T6000] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 60.370607][ T6035] usb 1-1: USB disconnect, device number 2 [ 65.245591][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 65.411230][ T6146] netlink: 108 bytes leftover after parsing attributes in process `syz.0.37'. [ 68.471084][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 69.389470][ T5831] e1000 0000:00:06.0 eth0: Reset adapter [ 70.054432][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 70.588857][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 70.753709][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.759378][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 70.765135][ T10] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 70.769820][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 70.775292][ T10] usb 5-1: string descriptor 0 read error: -22 [ 70.778147][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 70.782507][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.794135][ T6217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.952734][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.955654][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.011693][ T5749] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 71.015049][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 71.017400][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 71.027897][ T10] usb 5-1: USB disconnect, device number 2 [ 71.660074][ T5831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 81.193334][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.929428][ T845] cfg80211: failed to load regulatory.db [ 84.966978][ T5942] hid_parser_main: 22 callbacks suppressed [ 84.967031][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 84.977534][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 84.983786][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 84.988992][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 84.994149][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.000303][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.005292][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.012095][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.019229][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.023178][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 85.030947][ T5942] hid-generic 0004:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 85.320091][ T6348] udc usbip-vudc.0: soft-connect without a gadget driver [ 88.785307][ T5927] hid-generic 0004:FFFFFFFF:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 89.078859][ T5927] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.660933][ T5927] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 90.826876][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.832439][ T5927] usb 5-1: not running at top speed; connect to a high speed hub [ 90.844238][ T5927] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 90.849091][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 90.875357][ T5927] usb 5-1: string descriptor 0 read error: -22 [ 90.880395][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 90.887402][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.925437][ T6433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.817916][ T5749] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 92.224349][ T5927] usbhid 5-1:1.0: can't add hid device: -71 [ 92.912792][ T5927] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 93.062078][ T5927] usb 5-1: USB disconnect, device number 5 [ 94.749162][ T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 95.098027][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 95.104877][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 95.122964][ T29] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 95.134928][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 95.162538][ T29] usb 7-1: string descriptor 0 read error: -22 [ 95.169290][ T29] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 95.179294][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.205801][ T6528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.569716][ T5749] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 95.651178][ T29] usbhid 7-1:1.0: can't add hid device: -71 [ 95.653584][ T29] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 95.663347][ T29] usb 7-1: USB disconnect, device number 2 [ 95.765344][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 97.383372][ T5927] hid_parser_main: 54 callbacks suppressed [ 97.383387][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.394147][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.400011][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.406587][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.410126][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.416293][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.422266][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.428802][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.433589][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.438848][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 97.446949][ T5927] hid-generic 0004:FFFFFFFF:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.597324][ T50] hid-generic 0004:FFFFFFFF:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 100.778862][ T29] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 100.930949][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 101.163605][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 101.701077][ T29] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 102.100337][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 102.115863][ T29] usb 6-1: string descriptor 0 read error: -22 [ 102.118700][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 102.122421][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.129092][ T6625] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.182016][ T6645] Zero length message leads to an empty skb [ 102.337845][ T5749] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 102.342671][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 102.346313][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 102.362713][ T29] usb 6-1: USB disconnect, device number 3 [ 102.860764][ T5831] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 103.787292][ T5831] usb 8-1: unable to get BOS descriptor or descriptor too short [ 103.790456][ T5831] usb 8-1: not running at top speed; connect to a high speed hub [ 103.801168][ T5831] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 103.807740][ T5831] usb 8-1: config 1 interface 0 has no altsetting 0 [ 103.814489][ T5831] usb 8-1: string descriptor 0 read error: -22 [ 103.816484][ T5831] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 103.822001][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.836234][ T6654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.086856][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 104.097828][ T5749] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 104.108134][ T5831] usbhid 8-1:1.0: can't add hid device: -71 [ 104.118297][ T5831] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 104.122687][ T5831] usb 8-1: USB disconnect, device number 2 [ 105.272743][ T6708] netlink: 72 bytes leftover after parsing attributes in process `syz.2.138'. [ 105.278359][ T6708] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 105.342145][ T6708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.653251][ T6708] bond1: (slave geneve2): making interface the new active one [ 105.675537][ T6708] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.184606][ T6727] netlink: 72 bytes leftover after parsing attributes in process `syz.3.143'. [ 106.189936][ T6727] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 106.214984][ T6727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.407508][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 106.629475][ T6751] input: syz0 as /devices/virtual/input/input5 [ 106.648206][ T42] audit: type=1800 audit(1786075052.381:2): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="ep_name" dev="configfs" ino=12394 res=0 errno=0 [ 106.733850][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.150'. [ 106.741429][ T6753] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 106.765200][ T6753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.846211][ T6753] bond2: (slave geneve2): making interface the new active one [ 106.849871][ T6753] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 107.079914][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 116.168136][ T6921] udc usbip-vudc.0: soft-connect without a gadget driver [ 116.192001][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 117.520462][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.1.201'. [ 117.546190][ T6939] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 117.793974][ T6939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.026440][ T6990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 119.032385][ T6990] netlink: 'syz.3.215': attribute type 12 has an invalid length. [ 119.551609][ T6987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 119.554311][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.558598][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 119.778930][ T6991] vhci_hcd: connection closed [ 119.787953][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 119.803232][ T5823] vhci_hcd vhci_hcd.3: release socket [ 119.810416][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 119.947588][ T6996] netlink: 72 bytes leftover after parsing attributes in process `syz.1.218'. [ 119.959216][ T6996] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 120.114278][ T6996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.784817][ T7052] netlink: 'syz.2.228': attribute type 12 has an invalid length. [ 123.808487][ T7051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 123.811119][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.815778][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 123.947483][ T7053] vhci_hcd: connection closed [ 123.956304][ T12] vhci_hcd vhci_hcd.2: stop threads [ 123.982906][ T12] vhci_hcd vhci_hcd.2: release socket [ 124.016496][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 124.136934][ T7058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.230'. [ 124.142686][ T7058] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 124.249211][ T7065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.233'. [ 124.252429][ T7065] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 124.386023][ T7058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.414227][ T7065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.624026][ T7085] input: syz0 as /devices/virtual/input/input6 [ 124.657660][ T42] audit: type=1800 audit(1786075066.393:3): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.236" name="ep_name" dev="configfs" ino=10911 res=0 errno=0 [ 125.042473][ T7093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 125.045259][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 125.049310][ T7093] vhci_hcd vhci_hcd.0: Device attached [ 125.115252][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.239'. [ 125.122925][ T7093] netlink: 'syz.3.239': attribute type 12 has an invalid length. [ 125.175685][ T7098] input: syz0 as /devices/virtual/input/input7 [ 125.432697][ T5821] usb 44-1: SetAddress Request (2) to port 0 [ 125.442166][ T5821] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 125.835275][ T7094] vhci_hcd: connection reset by peer [ 125.851593][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 125.861417][ T5823] vhci_hcd vhci_hcd.3: release socket [ 125.889108][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 126.621337][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 126.646518][ T7115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 126.648832][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 126.656028][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 126.667998][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 126.928565][ T7118] netlink: 'syz.1.244': attribute type 12 has an invalid length. [ 126.977831][ T7116] vhci_hcd: connection closed [ 126.978656][ T5822] vhci_hcd vhci_hcd.1: stop threads [ 126.982071][ T5822] vhci_hcd vhci_hcd.1: release socket [ 126.984064][ T5822] vhci_hcd vhci_hcd.1: disconnect device [ 127.039165][ T29] usb 40-1: enqueue for inactive port 0 [ 127.638613][ T29] usb usb40-port1: attempt power cycle [ 128.160234][ T7141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 128.162336][ T7141] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 128.170867][ T7141] vhci_hcd vhci_hcd.0: Device attached [ 128.236066][ T7141] netlink: 'syz.1.251': attribute type 12 has an invalid length. [ 128.359110][ T29] usb 40-1: SetAddress Request (5) to port 0 [ 128.361337][ T29] usb 40-1: new SuperSpeed USB device number 5 using vhci_hcd [ 129.150112][ T7142] vhci_hcd: connection reset by peer [ 129.157880][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 129.163994][ T5823] vhci_hcd vhci_hcd.1: release socket [ 129.168581][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 129.842718][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 129.936978][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 130.415475][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 130.538833][ T5821] usb 44-1: device descriptor read/8, error -110 [ 130.940699][ T5821] usb usb44-port1: attempt power cycle [ 131.448528][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 131.453601][ T7219] netlink: 'syz.0.269': attribute type 12 has an invalid length. [ 131.623269][ T7216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 131.625395][ T7216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 131.629250][ T7216] vhci_hcd vhci_hcd.0: Device attached [ 131.656446][ T5821] usb usb44-port1: unable to enumerate USB device [ 131.939496][ T5831] usb 38-1: SetAddress Request (2) to port 0 [ 131.946357][ T5831] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 132.388200][ T7217] vhci_hcd: connection reset by peer [ 132.396390][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.401340][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.437432][ T12] vhci_hcd vhci_hcd.0: stop threads [ 132.443409][ T12] vhci_hcd vhci_hcd.0: release socket [ 132.451249][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 132.866451][ T7228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 132.869110][ T7228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 132.872672][ T7228] vhci_hcd vhci_hcd.0: Device attached [ 132.963026][ T7228] netlink: 'syz.1.273': attribute type 12 has an invalid length. [ 133.120902][ T7230] vhci_hcd: connection closed [ 133.123821][ T7231] vhci_hcd vhci_hcd.1: stop threads [ 133.140738][ T7231] vhci_hcd vhci_hcd.1: release socket [ 133.145965][ T7231] vhci_hcd vhci_hcd.1: disconnect device [ 133.418946][ T29] usb 40-1: device descriptor read/8, error -110 [ 133.461085][ T5891] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.488799][ T1348] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 133.539871][ T29] usb usb40-port1: unable to enumerate USB device [ 133.611170][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.615056][ T5891] usb 5-1: not running at top speed; connect to a high speed hub [ 133.635052][ T5891] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.641177][ T5891] usb 5-1: config 1 interface 0 has no altsetting 0 [ 133.647562][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 133.650402][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 133.654071][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.663664][ T7244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.664955][ T1348] usb 7-1: unable to get BOS descriptor or descriptor too short [ 133.670345][ T1348] usb 7-1: not running at top speed; connect to a high speed hub [ 133.675824][ T1348] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.680180][ T1348] usb 7-1: config 1 interface 0 has no altsetting 0 [ 133.752430][ T1348] usb 7-1: string descriptor 0 read error: -22 [ 133.755880][ T1348] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 133.758850][ T7250] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 133.761428][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 133.762281][ T1348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.766204][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 133.781015][ T7247] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 133.846391][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.279'. [ 134.070496][ T5850] usb 40-1: SetAddress Request (6) to port 0 [ 134.074335][ T5850] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 134.121174][ T5749] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 134.142873][ T5749] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 134.158421][ T1348] usbhid 7-1:1.0: can't add hid device: -71 [ 134.184246][ T1348] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 134.390406][ T1348] usb 7-1: USB disconnect, device number 3 [ 134.654721][ T5891] usbhid 5-1:1.0: can't add hid device: -71 [ 134.656729][ T5891] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 135.272446][ T7263] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 135.274858][ T7263] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.277614][ T7263] vhci_hcd vhci_hcd.0: Device attached [ 135.302707][ T7263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'. [ 135.306489][ T7263] netlink: 'syz.0.282': attribute type 12 has an invalid length. [ 135.342210][ T7251] vhci_hcd: connection reset by peer [ 135.346164][ T7149] vhci_hcd vhci_hcd.1: stop threads [ 135.353997][ T7149] vhci_hcd vhci_hcd.1: release socket [ 135.358504][ T7149] vhci_hcd vhci_hcd.1: disconnect device [ 135.664460][ T5891] usb 5-1: USB disconnect, device number 6 [ 136.021476][ T7270] input: syz0 as /devices/virtual/input/input8 [ 136.049373][ T7264] vhci_hcd: connection closed [ 136.049855][ T12] vhci_hcd vhci_hcd.0: stop threads [ 136.059341][ T12] vhci_hcd vhci_hcd.0: release socket [ 136.063604][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 136.065743][ T42] audit: type=1800 audit(1786075076.801:4): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.283" name="ep_name" dev="configfs" ino=10233 res=0 errno=0 [ 137.030630][ T5831] usb 38-1: device descriptor read/8, error -110 [ 137.522491][ T5831] usb usb38-port1: attempt power cycle [ 138.119784][ T5831] usb usb38-port1: unable to enumerate USB device [ 138.137819][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 138.410912][ T7307] netlink: 72 bytes leftover after parsing attributes in process `syz.0.293'. [ 138.434730][ T7307] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 138.452182][ T7307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.453285][ T7311] netlink: 72 bytes leftover after parsing attributes in process `syz.3.295'. [ 138.463356][ T7311] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 138.495134][ T7311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.670903][ T7311] bond4: (slave geneve3): making interface the new active one [ 138.680305][ T7311] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 139.167125][ T7331] input: syz0 as /devices/virtual/input/input9 [ 139.179083][ T5850] usb 40-1: device descriptor read/8, error -110 [ 139.188825][ T42] audit: type=1800 audit(1786075079.921:5): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="ep_name" dev="configfs" ino=12202 res=0 errno=0 [ 139.686920][ T5850] usb usb40-port1: attempt power cycle [ 140.349445][ T5850] usb usb40-port1: unable to enumerate USB device [ 140.974731][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'. [ 140.981893][ T7364] netlink: 'syz.3.305': attribute type 12 has an invalid length. [ 140.999261][ T7361] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 141.002095][ T7361] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.006088][ T7361] vhci_hcd vhci_hcd.0: Device attached [ 141.290412][ T5942] usb 44-1: SetAddress Request (6) to port 0 [ 141.302680][ T5942] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 141.996008][ T7372] input: syz0 as /devices/virtual/input/input10 [ 142.174790][ T7362] vhci_hcd: connection reset by peer [ 142.182602][ T5822] vhci_hcd vhci_hcd.3: stop threads [ 142.184877][ T5822] vhci_hcd vhci_hcd.3: release socket [ 142.187314][ T5822] vhci_hcd vhci_hcd.3: disconnect device [ 143.165845][ T7387] input: syz0 as /devices/virtual/input/input11 [ 143.180295][ T42] audit: type=1800 audit(1786075082.917:6): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.310" name="ep_name" dev="configfs" ino=12237 res=0 errno=0 [ 145.315638][ T7423] FAULT_INJECTION: forcing a failure. [ 145.315638][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.321628][ T7423] CPU: 2 UID: 0 PID: 7423 Comm: syz.1.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.321647][ T7423] Tainted: [L]=SOFTLOCKUP [ 145.321651][ T7423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.321658][ T7423] Call Trace: [ 145.321678][ T7423] [ 145.321683][ T7423] dump_stack_lvl+0x100/0x190 [ 145.321704][ T7423] should_fail_ex.cold+0x5/0xa [ 145.321718][ T7423] _copy_from_user+0x2e/0xd0 [ 145.321738][ T7423] kstrtouint_from_user+0xd6/0x1d0 [ 145.321752][ T7423] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 145.321765][ T7423] ? __lock_acquire+0x49f/0x1a40 [ 145.321805][ T7423] proc_fail_nth_write+0x83/0x220 [ 145.321823][ T7423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 145.321847][ T7423] vfs_write+0x2aa/0x1050 [ 145.321859][ T7423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 145.321876][ T7423] ? __pfx_vfs_write+0x10/0x10 [ 145.321885][ T7423] ? find_held_lock+0x2b/0x80 [ 145.321899][ T7423] ? __fget_files+0x215/0x3d0 [ 145.321913][ T7423] ? __fget_files+0x21f/0x3d0 [ 145.321927][ T7423] ksys_write+0x12a/0x250 [ 145.321937][ T7423] ? __pfx_ksys_write+0x10/0x10 [ 145.321952][ T7423] do_int80_emulation+0x14b/0x720 [ 145.321971][ T7423] asm_int80_emulation+0x1a/0x20 [ 145.321982][ T7423] RIP: 0023:0xf71a74eb [ 145.321992][ T7423] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 145.322002][ T7423] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 145.322015][ T7423] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 145.322022][ T7423] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.322028][ T7423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.322034][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.322040][ T7423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.322053][ T7423] [ 145.538894][ T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 145.695720][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 145.700918][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 145.705419][ T34] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.710440][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 145.715961][ T34] usb 7-1: string descriptor 0 read error: -22 [ 145.719115][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 145.723311][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.730754][ T7421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.947368][ T5749] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 145.949333][ T34] usbhid 7-1:1.0: can't add hid device: -71 [ 145.952632][ T34] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 145.957684][ T34] usb 7-1: USB disconnect, device number 4 [ 146.109389][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 146.127434][ T7433] Bluetooth: MGMT ver 1.23 [ 146.164249][ T7435] jffs2: notice: (7435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.174966][ T7435] FAULT_INJECTION: forcing a failure. [ 146.174966][ T7435] name failslab, interval 1, probability 0, space 0, times 1 [ 146.179927][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 146.181039][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.0.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.181065][ T7435] Tainted: [L]=SOFTLOCKUP [ 146.181071][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.181081][ T7435] Call Trace: [ 146.181087][ T7435] [ 146.181094][ T7435] dump_stack_lvl+0x100/0x190 [ 146.181121][ T7435] should_fail_ex.cold+0x5/0xa [ 146.181143][ T7435] should_failslab+0xc2/0x120 [ 146.181168][ T7435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 146.181192][ T7435] ? do_getname+0x35/0x390 [ 146.181219][ T7435] do_getname+0x35/0x390 [ 146.181243][ T7435] do_utimes_path+0xc9/0x1b0 [ 146.181267][ T7435] ? __pfx_do_utimes_path+0x10/0x10 [ 146.181290][ T7435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.181321][ T7435] __ia32_sys_utime32+0x183/0x200 [ 146.181345][ T7435] ? __pfx___ia32_sys_utime32+0x10/0x10 [ 146.181370][ T7435] ? ksys_write+0x1ac/0x250 [ 146.181393][ T7435] ? __pfx_ksys_write+0x10/0x10 [ 146.181415][ T7435] __do_fast_syscall_32+0xe7/0x970 [ 146.181439][ T7435] ? lockdep_hardirqs_on+0x78/0x100 [ 146.181465][ T7435] do_fast_syscall_32+0x32/0x70 [ 146.181490][ T7435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.181513][ T7435] RIP: 0023:0xf704efec [ 146.181533][ T7435] Code: Unable to access opcode bytes at 0xf704efc2. [ 146.181542][ T7435] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 000000000000001e [ 146.181559][ T7435] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 146.181570][ T7435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.181580][ T7435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.181590][ T7435] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.181600][ T7435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.181623][ T7435] [ 146.401649][ T5942] usb 44-1: device descriptor read/8, error -110 [ 146.805474][ T5942] usb usb44-port1: attempt power cycle [ 147.614010][ T5942] usb usb44-port1: unable to enumerate USB device [ 147.688798][ T7461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 147.690999][ T7461] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 147.694299][ T7461] vhci_hcd vhci_hcd.0: Device attached [ 147.730265][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.332'. [ 147.738499][ T7461] netlink: 'syz.0.332': attribute type 12 has an invalid length. [ 147.969571][ T34] usb 38-1: SetAddress Request (6) to port 0 [ 147.980691][ T34] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 148.015890][ T7468] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 148.018037][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.020676][ T7468] vhci_hcd vhci_hcd.0: Device attached [ 148.059111][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 148.067504][ T7468] netlink: 'syz.1.335': attribute type 12 has an invalid length. [ 148.309125][ T5942] usb 40-1: SetAddress Request (10) to port 0 [ 148.320194][ T5942] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 148.726313][ T7462] vhci_hcd: connection reset by peer [ 148.732911][ T5822] vhci_hcd vhci_hcd.0: stop threads [ 148.734846][ T5822] vhci_hcd vhci_hcd.0: release socket [ 148.760790][ T5822] vhci_hcd vhci_hcd.0: disconnect device [ 148.953052][ T7469] vhci_hcd: connection reset by peer [ 148.956053][ T7231] vhci_hcd vhci_hcd.1: stop threads [ 148.958366][ T7231] vhci_hcd vhci_hcd.1: release socket [ 148.961124][ T7231] vhci_hcd vhci_hcd.1: disconnect device [ 150.856962][ T7507] nvmet: adding nsid 1 to subsystem subsys1 [ 150.867347][ T7508] input: syz0 as /devices/virtual/input/input12 [ 150.913196][ T42] audit: type=1800 audit(1786075088.654:7): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="ep_name" dev="configfs" ino=12836 res=0 errno=0 [ 150.995894][ T7514] FAULT_INJECTION: forcing a failure. [ 150.995894][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 151.001493][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.1.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.001550][ T7514] Tainted: [L]=SOFTLOCKUP [ 151.001556][ T7514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.001565][ T7514] Call Trace: [ 151.001571][ T7514] [ 151.001577][ T7514] dump_stack_lvl+0x100/0x190 [ 151.001602][ T7514] should_fail_ex.cold+0x5/0xa [ 151.001621][ T7514] should_failslab+0xc2/0x120 [ 151.001643][ T7514] __kmalloc_noprof+0xfc/0x820 [ 151.001664][ T7514] ? iovec_from_user+0x8d/0x140 [ 151.001683][ T7514] iovec_from_user+0x8d/0x140 [ 151.001700][ T7514] __import_iovec+0x81/0x640 [ 151.001720][ T7514] import_iovec+0x82/0xb0 [ 151.001738][ T7514] get_compat_msghdr+0x2c3/0x480 [ 151.001756][ T7514] ? __pfx_get_compat_msghdr+0x10/0x10 [ 151.001774][ T7514] ? _kstrtoull+0x13c/0x1f0 [ 151.001793][ T7514] ? __pfx__kstrtoull+0x10/0x10 [ 151.001815][ T7514] ___sys_sendmsg+0x1b6/0x1e0 [ 151.001836][ T7514] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.001854][ T7514] ? __lock_acquire+0x49f/0x1a40 [ 151.001909][ T7514] __sys_sendmmsg+0x309/0x440 [ 151.001936][ T7514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.001959][ T7514] ? find_held_lock+0x2b/0x80 [ 151.001986][ T7514] ? __mutex_unlock_slowpath+0x35d/0x930 [ 151.002026][ T7514] ? fput+0x79/0x100 [ 151.002046][ T7514] ? ksys_write+0x1ac/0x250 [ 151.002066][ T7514] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 151.002083][ T7514] ? lockdep_hardirqs_on+0x78/0x100 [ 151.002107][ T7514] __do_fast_syscall_32+0xe7/0x970 [ 151.002130][ T7514] ? lockdep_hardirqs_on+0x78/0x100 [ 151.002155][ T7514] do_fast_syscall_32+0x32/0x70 [ 151.002179][ T7514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.002200][ T7514] RIP: 0023:0xf706efec [ 151.002229][ T7514] Code: Unable to access opcode bytes at 0xf706efc2. [ 151.002237][ T7514] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 151.002254][ T7514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080003cc0 [ 151.002264][ T7514] RDX: 0000000000000172 RSI: 0000000004000000 RDI: 0000000000000000 [ 151.002273][ T7514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.002282][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.002291][ T7514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.002313][ T7514] [ 152.132317][ T7531] program syz.3.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.136366][ T7531] ata1.00: non-matching transfer count (8388608/133) [ 152.808981][ T1348] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 152.961549][ T1348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.964594][ T1348] usb 5-1: not running at top speed; connect to a high speed hub [ 152.967941][ T1348] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.971761][ T1348] usb 5-1: config 1 interface 0 has no altsetting 0 [ 152.976239][ T1348] usb 5-1: string descriptor 0 read error: -22 [ 152.978448][ T1348] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 152.981548][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.987519][ T7543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.098877][ T34] usb 38-1: device descriptor read/8, error -110 [ 153.275022][ T7548] overlayfs: missing 'lowerdir' [ 153.471630][ T5942] usb 40-1: device descriptor read/8, error -110 [ 153.559467][ T34] usb usb38-port1: attempt power cycle [ 153.655152][ T5749] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 153.776288][ T1348] usbhid 5-1:1.0: can't add hid device: -71 [ 153.793221][ T1348] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 153.897299][ T1348] usb 5-1: USB disconnect, device number 7 [ 154.071666][ T5942] usb usb40-port1: attempt power cycle [ 154.207218][ T34] usb usb38-port1: unable to enumerate USB device [ 154.693206][ T7573] warning: `syz.0.363' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.260779][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.366'. [ 155.268104][ T7585] netlink: 'syz.0.366': attribute type 12 has an invalid length. [ 155.580558][ T5942] usb usb40-port1: unable to enumerate USB device [ 157.560190][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 157.663949][ T7623] lo: entered allmulticast mode [ 157.846198][ T7622] lo: left allmulticast mode [ 159.321679][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'. [ 159.794263][ T7645] netlink: 'syz.2.379': attribute type 12 has an invalid length. [ 160.044595][ T7649] ±ÿ…d7Š²‰Ûo: renamed from lo (while UP) [ 160.540410][ T7660] FAULT_INJECTION: forcing a failure. [ 160.540410][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 160.551295][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.0.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.551328][ T7660] Tainted: [L]=SOFTLOCKUP [ 160.551335][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.551346][ T7660] Call Trace: [ 160.551354][ T7660] [ 160.551361][ T7660] dump_stack_lvl+0x100/0x190 [ 160.551392][ T7660] should_fail_ex.cold+0x5/0xa [ 160.551415][ T7660] should_failslab+0xc2/0x120 [ 160.551442][ T7660] kmem_cache_alloc_noprof+0x91/0x6a0 [ 160.551468][ T7660] ? do_getname+0x35/0x390 [ 160.551496][ T7660] do_getname+0x35/0x390 [ 160.551523][ T7660] do_sys_openat2+0xc7/0x1e0 [ 160.551548][ T7660] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.551578][ T7660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.551610][ T7660] __ia32_compat_sys_openat+0x12d/0x210 [ 160.551638][ T7660] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 160.551664][ T7660] ? fput+0x79/0x100 [ 160.551685][ T7660] ? ksys_write+0x1ac/0x250 [ 160.551704][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 160.551727][ T7660] __do_fast_syscall_32+0xe7/0x970 [ 160.551754][ T7660] ? lockdep_hardirqs_on+0x78/0x100 [ 160.551781][ T7660] do_fast_syscall_32+0x32/0x70 [ 160.551815][ T7660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.551839][ T7660] RIP: 0023:0xf704efec [ 160.551875][ T7660] Code: Unable to access opcode bytes at 0xf704efc2. [ 160.551884][ T7660] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 160.551905][ T7660] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000900 [ 160.551917][ T7660] RDX: 0000000000103843 RSI: 0000000000000006 RDI: 0000000000000000 [ 160.551927][ T7660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.551938][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.551949][ T7660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.551974][ T7660] [ 160.744305][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 160.893379][ T7677] input: syz0 as /devices/virtual/input/input13 [ 160.987971][ T42] audit: type=1800 audit(1786075098.724:8): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.388" name="ep_name" dev="configfs" ino=15440 res=0 errno=0 [ 162.083590][ T7695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.391'. [ 162.091154][ T7695] netlink: 'syz.0.391': attribute type 12 has an invalid length. [ 162.322301][ T7698] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 162.325201][ T7698] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.509835][ T7698] vhci_hcd vhci_hcd.0: Device attached [ 162.665055][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 162.678190][ T7702] netlink: 'syz.1.392': attribute type 12 has an invalid length. [ 162.971083][ T7699] vhci_hcd: connection closed [ 162.973524][ T7149] vhci_hcd vhci_hcd.1: stop threads [ 162.977336][ T7149] vhci_hcd vhci_hcd.1: release socket [ 162.991522][ T7149] vhci_hcd vhci_hcd.1: disconnect device [ 163.145501][ T7720] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 163.214068][ T42] audit: type=1326 audit(1786075100.954:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.215888][ T7721] FAULT_INJECTION: forcing a failure. [ 163.215888][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 163.222208][ T42] audit: type=1326 audit(1786075100.954:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.222250][ T42] audit: type=1326 audit(1786075100.954:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.227161][ T7721] CPU: 3 UID: 0 PID: 7721 Comm: syz.0.393 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.227187][ T7721] Tainted: [L]=SOFTLOCKUP [ 163.227192][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.227202][ T7721] Call Trace: [ 163.227208][ T7721] [ 163.227215][ T7721] dump_stack_lvl+0x100/0x190 [ 163.227240][ T7721] should_fail_ex.cold+0x5/0xa [ 163.227257][ T7721] should_failslab+0xc2/0x120 [ 163.227275][ T7721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 163.227290][ T7721] ? audit_log_start+0x29d/0x930 [ 163.227307][ T7721] audit_log_start+0x29d/0x930 [ 163.227322][ T7721] ? __pfx_audit_log_start+0x10/0x10 [ 163.227338][ T7721] ? rcu_read_lock_any_held+0x6a/0xa0 [ 163.227355][ T7721] ? find_held_lock+0x2b/0x80 [ 163.227378][ T7721] audit_seccomp+0x60/0x190 [ 163.227399][ T7721] __seccomp_filter+0x896/0x1140 [ 163.227422][ T7721] ? __pfx___seccomp_filter+0x10/0x10 [ 163.227439][ T7721] ? fput+0x79/0x100 [ 163.227452][ T7721] ? ksys_write+0x1ac/0x250 [ 163.227464][ T7721] __secure_computing+0x204/0x2c0 [ 163.227478][ T7721] __do_fast_syscall_32+0x460/0x970 [ 163.227495][ T7721] ? lockdep_hardirqs_on+0x78/0x100 [ 163.227510][ T7721] do_fast_syscall_32+0x32/0x70 [ 163.227527][ T7721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.227542][ T7721] RIP: 0023:0xf704efec [ 163.227556][ T7721] Code: Unable to access opcode bytes at 0xf704efc2. [ 163.227561][ T7721] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 163.227573][ T7721] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 163.227583][ T7721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.227589][ T7721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.227595][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.227601][ T7721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.227617][ T7721] [ 163.227624][ T7721] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 163.237582][ T42] audit: type=1326 audit(1786075100.954:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.246682][ T7721] audit: out of memory in audit_log_start [ 163.248003][ T42] audit: type=1326 audit(1786075100.954:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.336116][ T42] audit: type=1326 audit(1786075100.954:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.345325][ T42] audit: type=1326 audit(1786075100.954:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 163.397524][ T7721] kvm: kvm [7719]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 164.554315][ T7739] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 164.974137][ T7739] kvm: kvm [7736]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 167.224680][ T7795] process 'syz.1.407' launched '/dev/fd/11' with NULL argv: empty string added [ 170.036614][ T7834] Invalid source name [ 170.038423][ T7834] UBIFS error (pid: 7834): cannot open "/dev/nullb0", error -22 [ 170.298723][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 170.298887][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 170.379297][ T5750] Bluetooth: hci2: command 0x0406 tx timeout [ 170.380401][ T5749] Bluetooth: hci3: command 0x0406 tx timeout [ 171.298874][ T5850] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 171.484987][ T5850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 171.491997][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.497289][ T5850] usb 6-1: not running at top speed; connect to a high speed hub [ 171.511324][ T5850] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 171.517502][ T5850] usb 6-1: config 1 interface 0 has no altsetting 0 [ 171.566056][ T5850] usb 6-1: string descriptor 0 read error: -22 [ 171.571812][ T5850] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 171.575988][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.576043][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 171.594014][ T7855] netlink: 'syz.0.422': attribute type 12 has an invalid length. [ 171.703838][ T7846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.941941][ T5850] usbhid 6-1:1.0: can't add hid device: -71 [ 171.944065][ T5850] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 171.958160][ T5850] usb 6-1: USB disconnect, device number 4 [ 172.590350][ T7872] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 172.613381][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 172.613400][ T42] audit: type=1326 audit(1786075109.347:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.627691][ T42] audit: type=1326 audit(1786075109.347:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.636158][ T42] audit: type=1326 audit(1786075109.347:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.645421][ T42] audit: type=1326 audit(1786075109.347:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.656321][ T42] audit: type=1326 audit(1786075109.347:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.666447][ T42] audit: type=1326 audit(1786075109.347:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.676680][ T42] audit: type=1326 audit(1786075109.347:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.686039][ T42] audit: type=1326 audit(1786075109.347:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.694465][ T42] audit: type=1326 audit(1786075109.347:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.704497][ T42] audit: type=1326 audit(1786075109.347:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 172.768872][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'. [ 172.821960][ T7872] kvm: kvm [7871]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0xffff000200000002 [ 172.902002][ T7880] fuse: Unknown parameter '0x00000000000000030x000000000000000a' [ 175.169836][ T7925] FAULT_INJECTION: forcing a failure. [ 175.169836][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 175.173798][ T7925] CPU: 3 UID: 0 PID: 7925 Comm: syz.2.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.173816][ T7925] Tainted: [L]=SOFTLOCKUP [ 175.173820][ T7925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.173826][ T7925] Call Trace: [ 175.173830][ T7925] [ 175.173835][ T7925] dump_stack_lvl+0x100/0x190 [ 175.173855][ T7925] should_fail_ex.cold+0x5/0xa [ 175.173869][ T7925] should_failslab+0xc2/0x120 [ 175.173887][ T7925] kmem_cache_alloc_noprof+0x91/0x6a0 [ 175.173902][ T7925] ? dst_alloc+0x99/0x1a0 [ 175.173921][ T7925] dst_alloc+0x99/0x1a0 [ 175.173937][ T7925] rt_dst_alloc+0x35/0x3a0 [ 175.173954][ T7925] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 175.173977][ T7925] ip_route_output_key_hash+0x118/0x2b0 [ 175.173996][ T7925] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 175.174018][ T7925] ? find_held_lock+0x2b/0x80 [ 175.174035][ T7925] ip_route_output_flow+0x27/0x150 [ 175.174046][ T7925] raw_sendmsg+0xb1c/0x3590 [ 175.174069][ T7925] ? __pfx_raw_sendmsg+0x10/0x10 [ 175.174087][ T7925] ? lock_acquire+0x1b9/0x370 [ 175.174105][ T7925] ? find_held_lock+0x2b/0x80 [ 175.174122][ T7925] ? __pfx___might_resched+0x10/0x10 [ 175.174143][ T7925] ? aa_sk_perm+0x309/0xaa0 [ 175.174161][ T7925] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.174180][ T7925] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 175.174194][ T7925] ? __pfx_raw_sendmsg+0x10/0x10 [ 175.174211][ T7925] inet_sendmsg+0x11c/0x140 [ 175.174229][ T7925] ____sys_sendmsg+0x9c9/0xbe0 [ 175.174242][ T7925] ? __pfx_inet_sendmsg+0x10/0x10 [ 175.174259][ T7925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.174274][ T7925] ? __pfx_do_swap_page+0x10/0x10 [ 175.174288][ T7925] ___sys_sendmsg+0x190/0x1e0 [ 175.174302][ T7925] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.174321][ T7925] ? find_held_lock+0x2b/0x80 [ 175.174343][ T7925] __sys_sendmsg+0x160/0x210 [ 175.174360][ T7925] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.174384][ T7925] __do_fast_syscall_32+0xe7/0x970 [ 175.174403][ T7925] do_fast_syscall_32+0x32/0x70 [ 175.174419][ T7925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.174433][ T7925] RIP: 0023:0xf709efec [ 175.174447][ T7925] Code: Unable to access opcode bytes at 0xf709efc2. [ 175.174452][ T7925] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.174464][ T7925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 175.174470][ T7925] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.174476][ T7925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.174482][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.174488][ T7925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.174501][ T7925] [ 175.176012][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.440'. [ 175.248531][ T7931] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 175.302647][ T7931] FAULT_INJECTION: forcing a failure. [ 175.302647][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 175.307923][ T7931] CPU: 3 UID: 0 PID: 7931 Comm: syz.2.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.307942][ T7931] Tainted: [L]=SOFTLOCKUP [ 175.307946][ T7931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.307953][ T7931] Call Trace: [ 175.307958][ T7931] [ 175.307962][ T7931] dump_stack_lvl+0x100/0x190 [ 175.307981][ T7931] should_fail_ex.cold+0x5/0xa [ 175.308000][ T7931] should_failslab+0xc2/0x120 [ 175.308023][ T7931] __kmalloc_noprof+0xfc/0x820 [ 175.308043][ T7931] ? tomoyo_encode2+0xfb/0x3c0 [ 175.308072][ T7931] tomoyo_encode2+0xfb/0x3c0 [ 175.308099][ T7931] tomoyo_encode+0x29/0x50 [ 175.308121][ T7931] tomoyo_realpath_from_path+0x18c/0x690 [ 175.308152][ T7931] tomoyo_path_number_perm+0x23c/0x580 [ 175.308175][ T7931] ? tomoyo_path_number_perm+0x22e/0x580 [ 175.308199][ T7931] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.308222][ T7931] ? get_pid_task+0x106/0x250 [ 175.308266][ T7931] ? find_held_lock+0x2b/0x80 [ 175.308288][ T7931] ? __fget_files+0x215/0x3d0 [ 175.308304][ T7931] ? hook_file_ioctl_common+0x140/0x440 [ 175.308327][ T7931] ? __fget_files+0x215/0x3d0 [ 175.308348][ T7931] ? __fget_files+0x21f/0x3d0 [ 175.308369][ T7931] security_file_ioctl_compat+0xd3/0x230 [ 175.308417][ T7931] __ia32_compat_sys_ioctl+0xc2/0x360 [ 175.308449][ T7931] __do_fast_syscall_32+0xe7/0x970 [ 175.308475][ T7931] ? lockdep_hardirqs_on+0x78/0x100 [ 175.308500][ T7931] do_fast_syscall_32+0x32/0x70 [ 175.308526][ T7931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.308547][ T7931] RIP: 0023:0xf709efec [ 175.308568][ T7931] Code: Unable to access opcode bytes at 0xf709efc2. [ 175.308575][ T7931] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 175.308593][ T7931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b2 [ 175.308605][ T7931] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.308615][ T7931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.308640][ T7931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.308649][ T7931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.308673][ T7931] [ 175.377105][ T7931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.421307][ T7935] block nbd0: shutting down sockets [ 176.419141][ T1348] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 176.640896][ T1348] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.643786][ T1348] usb 6-1: not running at top speed; connect to a high speed hub [ 176.647578][ T1348] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 176.651363][ T1348] usb 6-1: config 1 interface 0 has no altsetting 0 [ 176.655667][ T1348] usb 6-1: string descriptor 0 read error: -22 [ 176.657717][ T1348] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 176.660910][ T1348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.679828][ T7973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.054414][ T5101] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 177.059721][ T7988] FAULT_INJECTION: forcing a failure. [ 177.059721][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 177.066368][ T7988] CPU: 2 UID: 0 PID: 7988 Comm: syz.2.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.066390][ T7988] Tainted: [L]=SOFTLOCKUP [ 177.066394][ T7988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.066401][ T7988] Call Trace: [ 177.066405][ T7988] [ 177.066409][ T7988] dump_stack_lvl+0x100/0x190 [ 177.066440][ T7988] should_fail_ex.cold+0x5/0xa [ 177.066454][ T7988] should_failslab+0xc2/0x120 [ 177.066471][ T7988] kmem_cache_alloc_noprof+0x91/0x6a0 [ 177.066485][ T7988] ? __pfx_map_id_range_down+0x10/0x10 [ 177.066501][ T7988] ? security_inode_alloc+0x3b/0x2c0 [ 177.066518][ T7988] security_inode_alloc+0x3b/0x2c0 [ 177.066532][ T7988] inode_init_always_gfp+0xc77/0xfb0 [ 177.066545][ T7988] alloc_inode+0x8e/0x250 [ 177.066561][ T7988] sock_alloc+0x44/0x280 [ 177.066581][ T7988] do_accept+0xf9/0x530 [ 177.066595][ T7988] ? do_raw_spin_lock+0x128/0x260 [ 177.066608][ T7988] ? __pfx_do_accept+0x10/0x10 [ 177.066630][ T7988] __sys_accept4+0x108/0x200 [ 177.066645][ T7988] ? __pfx___sys_accept4+0x10/0x10 [ 177.066659][ T7988] ? ksys_write+0x1ac/0x250 [ 177.066672][ T7988] __ia32_sys_accept4+0x94/0x100 [ 177.066687][ T7988] ? lockdep_hardirqs_on+0x78/0x100 [ 177.066702][ T7988] __do_fast_syscall_32+0xe7/0x970 [ 177.066718][ T7988] ? lockdep_hardirqs_on+0x78/0x100 [ 177.066733][ T7988] do_fast_syscall_32+0x32/0x70 [ 177.066750][ T7988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.066764][ T7988] RIP: 0023:0xf709efec [ 177.066778][ T7988] Code: Unable to access opcode bytes at 0xf709efc2. [ 177.066783][ T7988] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 177.066795][ T7988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 177.066801][ T7988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.066807][ T7988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.066813][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.066819][ T7988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.066832][ T7988] [ 177.149613][ T1348] usbhid 6-1:1.0: can't add hid device: -71 [ 177.518755][ T1348] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 177.602055][ T1348] usb 6-1: USB disconnect, device number 5 [ 177.744083][ T7997] FAULT_INJECTION: forcing a failure. [ 177.744083][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.748994][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.3.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.749013][ T7997] Tainted: [L]=SOFTLOCKUP [ 177.749017][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.749024][ T7997] Call Trace: [ 177.749028][ T7997] [ 177.749034][ T7997] dump_stack_lvl+0x100/0x190 [ 177.749052][ T7997] should_fail_ex.cold+0x5/0xa [ 177.749065][ T7997] _copy_to_user+0x32/0xd0 [ 177.749085][ T7997] simple_read_from_buffer+0xcb/0x170 [ 177.749104][ T7997] proc_fail_nth_read+0x1af/0x230 [ 177.749120][ T7997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.749137][ T7997] ? rw_verify_area+0xce/0x6d0 [ 177.749153][ T7997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.749169][ T7997] vfs_read+0x1e4/0xb40 [ 177.749181][ T7997] ? __pfx_vfs_read+0x10/0x10 [ 177.749190][ T7997] ? find_held_lock+0x2b/0x80 [ 177.749204][ T7997] ? __fget_files+0x215/0x3d0 [ 177.749217][ T7997] ? __fget_files+0x21f/0x3d0 [ 177.749231][ T7997] ksys_read+0x12a/0x250 [ 177.749242][ T7997] ? __pfx_ksys_read+0x10/0x10 [ 177.749256][ T7997] do_int80_emulation+0x14b/0x720 [ 177.749275][ T7997] asm_int80_emulation+0x1a/0x20 [ 177.749286][ T7997] RIP: 0023:0xf71674eb [ 177.749295][ T7997] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 177.749306][ T7997] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 177.749317][ T7997] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 177.749324][ T7997] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 177.749330][ T7997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.749336][ T7997] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.749342][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.749356][ T7997] [ 177.996977][ T8011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 178.816578][ T8049] ======================================================= [ 178.816578][ T8049] WARNING: The mand mount option has been deprecated and [ 178.816578][ T8049] and is ignored by this kernel. Remove the mand [ 178.816578][ T8049] option from the mount to silence this warning. [ 178.816578][ T8049] ======================================================= [ 179.289582][ C1] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 179.292890][ C1] sr 2:0:0:0: [sr0] tag#7 CDB: Test Unit Ready [ 179.296315][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 179.398718][ T3263] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.570689][ T3263] usb 6-1: Using ep0 maxpacket: 32 [ 179.574618][ T3263] usb 6-1: config 0 has no interfaces? [ 179.580077][ T3263] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 179.583013][ T3263] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 179.585532][ T3263] usb 6-1: Product: syz [ 179.586905][ T3263] usb 6-1: Manufacturer: syz [ 179.588385][ T3263] usb 6-1: SerialNumber: syz [ 179.595487][ T3263] usb 6-1: config 0 descriptor?? [ 179.799763][ T8085] FAULT_INJECTION: forcing a failure. [ 179.799763][ T8085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.805712][ T8085] CPU: 2 UID: 0 PID: 8085 Comm: syz.2.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.805731][ T8085] Tainted: [L]=SOFTLOCKUP [ 179.805734][ T8085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.805741][ T8085] Call Trace: [ 179.805745][ T8085] [ 179.805750][ T8085] dump_stack_lvl+0x100/0x190 [ 179.805768][ T8085] should_fail_ex.cold+0x5/0xa [ 179.805782][ T8085] _copy_from_user+0x2e/0xd0 [ 179.805802][ T8085] kstrtouint_from_user+0xd6/0x1d0 [ 179.805816][ T8085] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 179.805830][ T8085] ? __lock_acquire+0x49f/0x1a40 [ 179.805854][ T8085] proc_fail_nth_write+0x83/0x220 [ 179.805871][ T8085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 179.805891][ T8085] vfs_write+0x2aa/0x1050 [ 179.805903][ T8085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 179.805919][ T8085] ? __pfx_vfs_write+0x10/0x10 [ 179.805929][ T8085] ? find_held_lock+0x2b/0x80 [ 179.805943][ T8085] ? __fget_files+0x215/0x3d0 [ 179.805956][ T8085] ? __fget_files+0x21f/0x3d0 [ 179.805970][ T8085] ksys_write+0x12a/0x250 [ 179.805980][ T8085] ? __pfx_ksys_write+0x10/0x10 [ 179.805994][ T8085] do_int80_emulation+0x14b/0x720 [ 179.806013][ T8085] asm_int80_emulation+0x1a/0x20 [ 179.806024][ T8085] RIP: 0023:0xf71d74eb [ 179.806034][ T8085] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 179.806044][ T8085] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 179.806056][ T8085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548d5d0 [ 179.806063][ T8085] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.806069][ T8085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.806075][ T8085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.806081][ T8085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.806113][ T8085] [ 179.881328][ T5850] usb 6-1: USB disconnect, device number 6 [ 180.285975][ T8093] bond5: entered promiscuous mode [ 180.291878][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 180.294870][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 180.306769][ T8096] FAULT_INJECTION: forcing a failure. [ 180.306769][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 180.314418][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.2.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.314451][ T8096] Tainted: [L]=SOFTLOCKUP [ 180.314458][ T8096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.314467][ T8096] Call Trace: [ 180.314493][ T8096] [ 180.314501][ T8096] dump_stack_lvl+0x100/0x190 [ 180.314645][ T8096] should_fail_ex.cold+0x5/0xa [ 180.314682][ T8096] should_failslab+0xc2/0x120 [ 180.314718][ T8096] __kmalloc_cache_noprof+0x91/0x6c0 [ 180.314739][ T8096] ? __queue_work+0x45e/0x12b0 [ 180.314775][ T8096] ? kobject_uevent_env+0x263/0x18b0 [ 180.314850][ T8096] kobject_uevent_env+0x263/0x18b0 [ 180.314875][ T8096] ? queue_work_on+0x11b/0x1e0 [ 180.314900][ T8096] ? lockdep_hardirqs_on+0x78/0x100 [ 180.314930][ T8096] rfkill_set_block+0x3b6/0x510 [ 180.314972][ T8096] rfkill_fop_write+0x2c0/0x580 [ 180.314997][ T8096] ? __pfx_rfkill_fop_write+0x10/0x10 [ 180.315021][ T8096] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 180.315042][ T8096] ? security_file_permission+0x76/0x210 [ 180.315103][ T8096] ? rw_verify_area+0xce/0x6d0 [ 180.315134][ T8096] vfs_write+0x2aa/0x1050 [ 180.315152][ T8096] ? __pfx_rfkill_fop_write+0x10/0x10 [ 180.315178][ T8096] ? __pfx_vfs_write+0x10/0x10 [ 180.315195][ T8096] ? find_held_lock+0x2b/0x80 [ 180.315218][ T8096] ? __fget_files+0x215/0x3d0 [ 180.315245][ T8096] ? __fget_files+0x215/0x3d0 [ 180.315267][ T8096] ? __fget_files+0x21f/0x3d0 [ 180.315291][ T8096] ksys_write+0x1f8/0x250 [ 180.315309][ T8096] ? __pfx_ksys_write+0x10/0x10 [ 180.315326][ T8096] ? ksys_write+0x1ac/0x250 [ 180.315344][ T8096] ? __pfx_ksys_write+0x10/0x10 [ 180.315368][ T8096] __do_fast_syscall_32+0xe7/0x970 [ 180.315396][ T8096] ? lockdep_hardirqs_on+0x78/0x100 [ 180.315422][ T8096] do_fast_syscall_32+0x32/0x70 [ 180.315449][ T8096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.315474][ T8096] RIP: 0023:0xf709efec [ 180.315505][ T8096] Code: Unable to access opcode bytes at 0xf709efc2. [ 180.315521][ T8096] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 180.315539][ T8096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 180.315549][ T8096] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.315560][ T8096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.315570][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.315581][ T8096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.315606][ T8096] [ 181.746142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 181.988991][ T8138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 181.991447][ T8138] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 181.994925][ T8138] vhci_hcd vhci_hcd.0: Device attached [ 182.026309][ T8138] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 182.268891][ T34] usb 38-1: SetAddress Request (10) to port 0 [ 182.271515][ T34] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 182.308852][ T5891] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 182.461039][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.464973][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.468408][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 182.476087][ T5891] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 182.479126][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.481669][ T5891] usb 6-1: Product: syz [ 182.483301][ T5891] usb 6-1: Manufacturer: syz [ 182.484827][ T5891] usb 6-1: SerialNumber: syz [ 182.490097][ T5891] usb 6-1: config 0 descriptor?? [ 182.491926][ T8139] vhci_hcd: connection reset by peer [ 182.494606][ T8142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.496151][ T7106] vhci_hcd vhci_hcd.0: stop threads [ 182.498552][ T7106] vhci_hcd vhci_hcd.0: release socket [ 182.500424][ T7106] vhci_hcd vhci_hcd.0: disconnect device [ 182.538826][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 182.538853][ T5891] rc_core: IR keymap rc-streamzap not found [ 182.541658][ T8096] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.544052][ T5891] Registered IR keymap rc-empty [ 182.551249][ T5891] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 182.556474][ T8096] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 182.558905][ T5891] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 182.761045][ T8145] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 182.776568][ T5891] usb 6-1: USB disconnect, device number 7 [ 183.271202][ T8096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.273190][ T8096] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 183.283342][ T8096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.285805][ T8096] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 183.294692][ T8096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.296921][ T8096] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 183.835696][ T8160] syz.1.477 uses obsolete (PF_INET,SOCK_PACKET) [ 183.851483][ T8160] FAULT_INJECTION: forcing a failure. [ 183.851483][ T8160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.862508][ T8160] CPU: 2 UID: 0 PID: 8160 Comm: syz.1.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.862527][ T8160] Tainted: [L]=SOFTLOCKUP [ 183.862531][ T8160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.862537][ T8160] Call Trace: [ 183.862541][ T8160] [ 183.862546][ T8160] dump_stack_lvl+0x100/0x190 [ 183.862563][ T8160] should_fail_ex.cold+0x5/0xa [ 183.862576][ T8160] _copy_from_iter+0x1f4/0x1690 [ 183.862599][ T8160] ? __lock_acquire+0x49f/0x1a40 [ 183.862618][ T8160] ? __pfx__copy_from_iter+0x10/0x10 [ 183.862629][ T8160] ? _parse_integer_limit+0x1ac/0x220 [ 183.862648][ T8160] tun_get_user+0x3ba/0x3c20 [ 183.862680][ T8160] ? __pfx_tun_get_user+0x10/0x10 [ 183.862695][ T8160] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.862716][ T8160] ? find_held_lock+0x2b/0x80 [ 183.862730][ T8160] ? tun_get+0x191/0x370 [ 183.862742][ T8160] ? tun_get+0x191/0x370 [ 183.862757][ T8160] tun_chr_write_iter+0xdc/0x200 [ 183.862773][ T8160] vfs_write+0x6ac/0x1050 [ 183.862784][ T8160] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 183.862799][ T8160] ? __pfx_vfs_write+0x10/0x10 [ 183.862808][ T8160] ? find_held_lock+0x2b/0x80 [ 183.862830][ T8160] ksys_write+0x12a/0x250 [ 183.862840][ T8160] ? __pfx_ksys_write+0x10/0x10 [ 183.862849][ T8160] ? ksys_write+0x1ac/0x250 [ 183.862859][ T8160] ? __pfx_ksys_write+0x10/0x10 [ 183.862872][ T8160] __do_fast_syscall_32+0xe7/0x970 [ 183.862901][ T8160] ? lockdep_hardirqs_on+0x78/0x100 [ 183.862919][ T8160] do_fast_syscall_32+0x32/0x70 [ 183.862936][ T8160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.862951][ T8160] RIP: 0023:0xf706efec [ 183.862966][ T8160] Code: Unable to access opcode bytes at 0xf706efc2. [ 183.862971][ T8160] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 183.862983][ T8160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 183.862990][ T8160] RDX: 000000000000004a RSI: 0000000000000000 RDI: 0000000000000000 [ 183.862996][ T8160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.863002][ T8160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.863008][ T8160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.863022][ T8160] [ 184.155545][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 184.159548][ T8168] netlink: 80 bytes leftover after parsing attributes in process `syz.3.480'. [ 184.169841][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 184.174103][ T8168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.480'. [ 184.502741][ T8181] TC_ACT_REPEAT abuse ? [ 184.903932][ T8213] cgroup: subsys name conflicts with all [ 185.510894][ T8245] FAULT_INJECTION: forcing a failure. [ 185.510894][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.516631][ T8245] CPU: 1 UID: 0 PID: 8245 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.516661][ T8245] Tainted: [L]=SOFTLOCKUP [ 185.516667][ T8245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.516677][ T8245] Call Trace: [ 185.516685][ T8245] [ 185.516692][ T8245] dump_stack_lvl+0x100/0x190 [ 185.516721][ T8245] should_fail_ex.cold+0x5/0xa [ 185.516743][ T8245] _copy_from_user+0x2e/0xd0 [ 185.516772][ T8245] move_addr_to_kernel+0x65/0x170 [ 185.516827][ T8245] get_compat_msghdr+0x3c7/0x480 [ 185.516847][ T8245] ? __pfx_get_compat_msghdr+0x10/0x10 [ 185.516875][ T8245] ___sys_sendmsg+0x1b6/0x1e0 [ 185.516897][ T8245] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.516930][ T8245] ? find_held_lock+0x2b/0x80 [ 185.516964][ T8245] __sys_sendmsg+0x160/0x210 [ 185.517005][ T8245] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.517038][ T8245] ? __pfx_ksys_write+0x10/0x10 [ 185.517060][ T8245] __do_fast_syscall_32+0xe7/0x970 [ 185.517084][ T8245] ? lockdep_hardirqs_on+0x78/0x100 [ 185.517110][ T8245] do_fast_syscall_32+0x32/0x70 [ 185.517135][ T8245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.517158][ T8245] RIP: 0023:0xf709efec [ 185.517179][ T8245] Code: Unable to access opcode bytes at 0xf709efc2. [ 185.517187][ T8245] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 185.517213][ T8245] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001c00 [ 185.517225][ T8245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.517235][ T8245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.517245][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.517257][ T8245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.517281][ T8245] [ 185.699337][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 185.787972][ T8258] Driver unsupported XDP return value 0 on prog (id 148) dev N/A, expect packet loss! [ 185.804733][ T8258] tmpfs: Bad value for 'mpol' [ 185.943289][ T8265] jffs2: notice: (8265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.099336][ T8283] FAULT_INJECTION: forcing a failure. [ 186.099336][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.103561][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.3.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.103580][ T8283] Tainted: [L]=SOFTLOCKUP [ 186.103584][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.103590][ T8283] Call Trace: [ 186.103595][ T8283] [ 186.103600][ T8283] dump_stack_lvl+0x100/0x190 [ 186.103618][ T8283] should_fail_ex.cold+0x5/0xa [ 186.103631][ T8283] strncpy_from_user+0x3b/0x2d0 [ 186.103662][ T8283] do_getname+0x78/0x390 [ 186.103681][ T8283] do_sys_openat2+0xc7/0x1e0 [ 186.103701][ T8283] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.103720][ T8283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.103740][ T8283] __ia32_compat_sys_openat+0x12d/0x210 [ 186.103757][ T8283] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 186.103773][ T8283] ? fput+0x79/0x100 [ 186.103785][ T8283] ? ksys_write+0x1ac/0x250 [ 186.103796][ T8283] ? __pfx_ksys_write+0x10/0x10 [ 186.103811][ T8283] __do_fast_syscall_32+0xe7/0x970 [ 186.103827][ T8283] ? lockdep_hardirqs_on+0x78/0x100 [ 186.103842][ T8283] do_fast_syscall_32+0x32/0x70 [ 186.103859][ T8283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.103873][ T8283] RIP: 0023:0xf702efec [ 186.103889][ T8283] Code: Unable to access opcode bytes at 0xf702efc2. [ 186.103894][ T8283] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 186.103906][ T8283] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001500 [ 186.103912][ T8283] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.103918][ T8283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.103924][ T8283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.103930][ T8283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.103944][ T8283] [ 186.106111][ T8281] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 186.315861][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.324842][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.385406][ T8296] netlink: 136 bytes leftover after parsing attributes in process `syz.0.508'. [ 186.393091][ T8296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.715011][ T8305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.721051][ T8301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.351362][ T34] usb 38-1: device descriptor read/8, error -110 [ 187.759279][ T34] usb usb38-port1: attempt power cycle [ 188.350872][ T34] usb usb38-port1: unable to enumerate USB device [ 188.995147][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 189.033947][ T8351] FAULT_INJECTION: forcing a failure. [ 189.033947][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 189.038155][ T8351] CPU: 1 UID: 0 PID: 8351 Comm: syz.2.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.038182][ T8351] Tainted: [L]=SOFTLOCKUP [ 189.038187][ T8351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.038196][ T8351] Call Trace: [ 189.038204][ T8351] [ 189.038211][ T8351] dump_stack_lvl+0x100/0x190 [ 189.038238][ T8351] should_fail_ex.cold+0x5/0xa [ 189.038258][ T8351] should_failslab+0xc2/0x120 [ 189.038283][ T8351] __kmalloc_noprof+0xfc/0x820 [ 189.038305][ T8351] ? __pfx_dynamic_dname+0x10/0x10 [ 189.038329][ T8351] ? tomoyo_encode2+0xfb/0x3c0 [ 189.038359][ T8351] tomoyo_encode2+0xfb/0x3c0 [ 189.038388][ T8351] tomoyo_encode+0x29/0x50 [ 189.038413][ T8351] tomoyo_realpath_from_path+0x18c/0x690 [ 189.038444][ T8351] tomoyo_path_number_perm+0x23c/0x580 [ 189.038465][ T8351] ? tomoyo_path_number_perm+0x22e/0x580 [ 189.038490][ T8351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.038514][ T8351] ? get_pid_task+0x106/0x250 [ 189.038559][ T8351] ? find_held_lock+0x2b/0x80 [ 189.038579][ T8351] ? __fget_files+0x215/0x3d0 [ 189.038595][ T8351] ? hook_file_ioctl_common+0x140/0x440 [ 189.038632][ T8351] ? __fget_files+0x215/0x3d0 [ 189.038654][ T8351] ? __fget_files+0x21f/0x3d0 [ 189.038673][ T8351] security_file_ioctl_compat+0xd3/0x230 [ 189.038704][ T8351] __ia32_compat_sys_ioctl+0xc2/0x360 [ 189.038734][ T8351] __do_fast_syscall_32+0xe7/0x970 [ 189.038757][ T8351] ? lockdep_hardirqs_on+0x78/0x100 [ 189.038782][ T8351] do_fast_syscall_32+0x32/0x70 [ 189.038807][ T8351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.038829][ T8351] RIP: 0023:0xf709efec [ 189.038849][ T8351] Code: Unable to access opcode bytes at 0xf709efc2. [ 189.038856][ T8351] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 189.038873][ T8351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae76 [ 189.038885][ T8351] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.038894][ T8351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.038902][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.038913][ T8351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.038936][ T8351] [ 189.044513][ T8351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.563478][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 190.566866][ T8404] FAULT_INJECTION: forcing a failure. [ 190.566866][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.584584][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.1.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.584604][ T8404] Tainted: [L]=SOFTLOCKUP [ 190.584608][ T8404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.584615][ T8404] Call Trace: [ 190.584619][ T8404] [ 190.584623][ T8404] dump_stack_lvl+0x100/0x190 [ 190.584642][ T8404] should_fail_ex.cold+0x5/0xa [ 190.584655][ T8404] _copy_from_iter+0x1f4/0x1690 [ 190.584670][ T8404] ? __pfx__copy_from_iter+0x10/0x10 [ 190.584680][ T8404] ? trace_kmalloc+0xeb/0x110 [ 190.584695][ T8404] ? __kasan_kmalloc+0xaa/0xb0 [ 190.584710][ T8404] ? __kmalloc_noprof+0x343/0x820 [ 190.584725][ T8404] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 190.584742][ T8404] kernfs_fop_write_iter+0x186/0x5f0 [ 190.584758][ T8404] vfs_write+0x6ac/0x1050 [ 190.584769][ T8404] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 190.584784][ T8404] ? __pfx_vfs_write+0x10/0x10 [ 190.584793][ T8404] ? find_held_lock+0x2b/0x80 [ 190.584816][ T8404] ksys_write+0x12a/0x250 [ 190.584826][ T8404] ? __pfx_ksys_write+0x10/0x10 [ 190.584836][ T8404] ? ksys_write+0x1ac/0x250 [ 190.584846][ T8404] ? __pfx_ksys_write+0x10/0x10 [ 190.584859][ T8404] __do_fast_syscall_32+0xe7/0x970 [ 190.584875][ T8404] ? lockdep_hardirqs_on+0x78/0x100 [ 190.584891][ T8404] do_fast_syscall_32+0x32/0x70 [ 190.584908][ T8404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.584922][ T8404] RIP: 0023:0xf706efec [ 190.584935][ T8404] Code: Unable to access opcode bytes at 0xf706efc2. [ 190.584940][ T8404] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 190.584952][ T8404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 190.584959][ T8404] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.584965][ T8404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.584971][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.584977][ T8404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.584990][ T8404] [ 190.701361][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 190.931757][ T42] audit: type=1800 audit(1786075126.665:39): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.539" name="process_ump" dev="configfs" ino=14309 res=0 errno=0 [ 191.099861][ T8443] comedi comedi3: pcl818: I/O base address or length out of range [ 191.346951][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 191.362848][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 191.367381][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 191.371152][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 191.374078][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 191.388547][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 191.446618][ T8471] netlink: 216 bytes leftover after parsing attributes in process `syz.2.548'. [ 191.557366][ T8473] jffs2: notice: (8473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.628167][ T8475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.549'. [ 192.158714][ T5850] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 192.310102][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.313940][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 192.340693][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 192.371380][ T5850] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 192.378512][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.385961][ T5850] usb 5-1: Product: syz [ 192.387302][ T5850] usb 5-1: Manufacturer: syz [ 192.398595][ T5850] usb 5-1: SerialNumber: syz [ 192.406224][ T5850] usb 5-1: config 0 descriptor?? [ 192.418143][ T8477] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.469202][ T5830] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 192.479767][ T5850] rc_core: IR keymap rc-streamzap not found [ 192.482570][ T5850] Registered IR keymap rc-empty [ 192.485477][ T5850] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 192.490445][ T5850] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 192.620616][ T5830] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.624605][ T5830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 192.629566][ T5830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 192.633990][ T8477] FAULT_INJECTION: forcing a failure. [ 192.633990][ T8477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.635410][ T5830] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 192.638190][ T8477] CPU: 2 UID: 0 PID: 8477 Comm: syz.0.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.638207][ T8477] Tainted: [L]=SOFTLOCKUP [ 192.638211][ T8477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.638217][ T8477] Call Trace: [ 192.638221][ T8477] [ 192.638226][ T8477] dump_stack_lvl+0x100/0x190 [ 192.638256][ T8477] should_fail_ex.cold+0x5/0xa [ 192.638271][ T8477] _copy_from_user+0x2e/0xd0 [ 192.638290][ T8477] kstrtouint_from_user+0xd6/0x1d0 [ 192.638304][ T8477] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 192.638317][ T8477] ? __lock_acquire+0x49f/0x1a40 [ 192.638341][ T8477] proc_fail_nth_write+0x83/0x220 [ 192.638357][ T8477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.638377][ T8477] vfs_write+0x2aa/0x1050 [ 192.638388][ T8477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.638405][ T8477] ? __pfx_vfs_write+0x10/0x10 [ 192.638414][ T8477] ? find_held_lock+0x2b/0x80 [ 192.638428][ T8477] ? __fget_files+0x215/0x3d0 [ 192.638441][ T8477] ? __fget_files+0x21f/0x3d0 [ 192.638455][ T8477] ksys_write+0x12a/0x250 [ 192.638465][ T8477] ? __pfx_ksys_write+0x10/0x10 [ 192.638479][ T8477] do_int80_emulation+0x14b/0x720 [ 192.638498][ T8477] asm_int80_emulation+0x1a/0x20 [ 192.638509][ T8477] RIP: 0023:0xf71874eb [ 192.638519][ T8477] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 192.638530][ T8477] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 192.638542][ T8477] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d5d0 [ 192.638549][ T8477] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.638559][ T8477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.638565][ T8477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.638572][ T8477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.638586][ T8477] [ 192.725639][ T34] usb 5-1: USB disconnect, device number 8 [ 192.728373][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.731906][ T5830] usb 8-1: Product: syz [ 192.733620][ T5830] usb 8-1: Manufacturer: syz [ 192.735281][ T5830] usb 8-1: SerialNumber: syz [ 192.746059][ T5830] usb 8-1: config 0 descriptor?? [ 192.815765][ T42] audit: type=1326 audit(1786075128.545:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 192.824221][ T8494] FAULT_INJECTION: forcing a failure. [ 192.824221][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 192.829465][ T8494] CPU: 2 UID: 0 PID: 8494 Comm: syz.0.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.829484][ T8494] Tainted: [L]=SOFTLOCKUP [ 192.829488][ T8494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.829494][ T8494] Call Trace: [ 192.829498][ T8494] [ 192.829503][ T8494] dump_stack_lvl+0x100/0x190 [ 192.829521][ T8494] should_fail_ex.cold+0x5/0xa [ 192.829534][ T8494] should_failslab+0xc2/0x120 [ 192.829550][ T8494] kmem_cache_alloc_noprof+0x91/0x6a0 [ 192.829565][ T8494] ? audit_log_start+0x29d/0x930 [ 192.829581][ T8494] audit_log_start+0x29d/0x930 [ 192.829596][ T8494] ? __pfx_audit_log_start+0x10/0x10 [ 192.829613][ T8494] ? rcu_read_lock_any_held+0x6a/0xa0 [ 192.829628][ T8494] ? find_held_lock+0x2b/0x80 [ 192.829644][ T8494] audit_seccomp+0x60/0x190 [ 192.829657][ T8494] __seccomp_filter+0x896/0x1140 [ 192.829672][ T8494] ? __pfx___seccomp_filter+0x10/0x10 [ 192.829687][ T8494] ? fput+0x79/0x100 [ 192.829700][ T8494] ? ksys_write+0x1ac/0x250 [ 192.829711][ T8494] __secure_computing+0x204/0x2c0 [ 192.829725][ T8494] __do_fast_syscall_32+0x460/0x970 [ 192.829741][ T8494] ? lockdep_hardirqs_on+0x78/0x100 [ 192.829758][ T8494] do_fast_syscall_32+0x32/0x70 [ 192.829774][ T8494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.829788][ T8494] RIP: 0023:0xf704efec [ 192.829803][ T8494] Code: Unable to access opcode bytes at 0xf704efc2. [ 192.829808][ T8494] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 192.829819][ T8494] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 192.829826][ T8494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.829832][ T8494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.829838][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.829844][ T8494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.829867][ T8494] [ 192.829872][ T8494] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 192.895846][ T8481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.899757][ T42] audit: type=1326 audit(1786075128.565:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 192.909155][ T42] audit: type=1326 audit(1786075128.565:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 192.915976][ T42] audit: type=1326 audit(1786075128.565:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704efec code=0x7ffc0000 [ 192.922876][ T42] audit: type=1326 audit(1786075128.565:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 192.928967][ T8494] audit: out of memory in audit_log_start [ 192.930074][ T42] audit: type=1326 audit(1786075128.565:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71874eb code=0x7ffc0000 [ 192.949268][ T42] audit: type=1326 audit(1786075128.565:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.0.555" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71874eb code=0x7ffc0000 [ 192.998889][ T5830] rc_core: IR keymap rc-streamzap not found [ 193.001498][ T5830] Registered IR keymap rc-empty [ 193.005956][ T5830] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 193.016301][ T5830] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input16 [ 193.687224][ T8512] can: request_module (can-proto-3) failed. [ 193.732146][ T5942] usb 8-1: USB disconnect, device number 3 [ 193.820875][ T8524] input: syz0 as /devices/virtual/input/input17 [ 193.831841][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.834578][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.558441][ T8552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.795109][ T8554] __nla_validate_parse: 4 callbacks suppressed [ 195.795131][ T8554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.569'. [ 195.795666][ T8554] netlink: 'syz.0.569': attribute type 12 has an invalid length. [ 195.975367][ T8570] input: syz0 as /devices/virtual/input/input18 [ 195.998382][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 195.998399][ T42] audit: type=1800 audit(1786075130.730:48): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.574" name="ep_name" dev="configfs" ino=16862 res=0 errno=0 [ 196.437357][ T8578] FAULT_INJECTION: forcing a failure. [ 196.437357][ T8578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.441875][ T8578] CPU: 2 UID: 0 PID: 8578 Comm: syz.1.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.441895][ T8578] Tainted: [L]=SOFTLOCKUP [ 196.441899][ T8578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.441906][ T8578] Call Trace: [ 196.441910][ T8578] [ 196.441915][ T8578] dump_stack_lvl+0x100/0x190 [ 196.441934][ T8578] should_fail_ex.cold+0x5/0xa [ 196.441952][ T8578] _copy_from_iter+0x1f4/0x1690 [ 196.441968][ T8578] ? __pfx__copy_from_iter+0x10/0x10 [ 196.441978][ T8578] ? kasan_save_track+0x14/0x30 [ 196.441993][ T8578] ? __kasan_kmalloc+0xaa/0xb0 [ 196.442007][ T8578] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 196.442020][ T8578] ? configfs_write_iter+0x388/0x4e0 [ 196.442034][ T8578] configfs_write_iter+0xb3/0x4e0 [ 196.442048][ T8578] vfs_write+0x6ac/0x1050 [ 196.442059][ T8578] ? __pfx_configfs_write_iter+0x10/0x10 [ 196.442072][ T8578] ? __pfx_vfs_write+0x10/0x10 [ 196.442082][ T8578] ? find_held_lock+0x2b/0x80 [ 196.442105][ T8578] ksys_write+0x12a/0x250 [ 196.442129][ T8578] ? __pfx_ksys_write+0x10/0x10 [ 196.442140][ T8578] ? ksys_write+0x1ac/0x250 [ 196.442150][ T8578] ? __pfx_ksys_write+0x10/0x10 [ 196.442163][ T8578] __do_fast_syscall_32+0xe7/0x970 [ 196.442181][ T8578] ? lockdep_hardirqs_on+0x78/0x100 [ 196.442210][ T8578] do_fast_syscall_32+0x32/0x70 [ 196.442227][ T8578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.442243][ T8578] RIP: 0023:0xf706efec [ 196.442258][ T8578] Code: Unable to access opcode bytes at 0xf706efc2. [ 196.442263][ T8578] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 196.442275][ T8578] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 196.442282][ T8578] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 196.442288][ T8578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.442294][ T8578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.442301][ T8578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.442315][ T8578] [ 196.735714][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 196.962707][ T8593] netlink: 136 bytes leftover after parsing attributes in process `syz.3.580'. [ 196.966532][ T8593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.022493][ T42] audit: type=1800 audit(1786075131.760:49): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="memory_backed" dev="configfs" ino=16340 res=0 errno=0 [ 197.030297][ T42] audit: type=1800 audit(1786075131.770:50): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="zone_nr_conv" dev="configfs" ino=16341 res=0 errno=0 [ 197.037410][ T42] audit: type=1800 audit(1786075131.770:51): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="power" dev="configfs" ino=16342 res=0 errno=0 [ 197.050465][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 197.059835][ T8598] netlink: 'syz.2.581': attribute type 12 has an invalid length. [ 197.135382][ T8597] null_blk: disk nullb1 created [ 197.843866][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 197.846606][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 197.869974][ T5822] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.875514][ T5822] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.878295][ T5822] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.887032][ T5822] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.947663][ T5850] IPVS: starting estimator thread 0... [ 197.950020][ T8614] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 198.060256][ T8616] IPVS: using max 43 ests per chain, 103200 per kthread [ 198.149076][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 198.246962][ T42] audit: type=1800 audit(1786075131.980:52): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.590" name="memory_backed" dev="configfs" ino=16927 res=0 errno=0 [ 198.267203][ T42] audit: type=1800 audit(1786075131.990:53): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.590" name="zone_nr_conv" dev="configfs" ino=16928 res=0 errno=0 [ 198.278772][ T42] audit: type=1800 audit(1786075131.990:54): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.590" name="power" dev="configfs" ino=16929 res=0 errno=0 [ 198.430141][ T8633] input: syz0 as /devices/virtual/input/input19 [ 198.474383][ T42] audit: type=1800 audit(1786075132.210:55): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.591" name="ep_name" dev="configfs" ino=16938 res=0 errno=0 [ 199.616120][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 200.345657][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 200.356816][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 200.360139][ T8692] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 201.918774][ T8720] input: syz0 as /devices/virtual/input/input20 [ 201.933509][ T42] audit: type=1800 audit(1786075134.673:56): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.609" name="ep_name" dev="configfs" ino=17695 res=0 errno=0 [ 202.125960][ T8723] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 202.136442][ T8723] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 202.139765][ T8723] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 202.142618][ T8723] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 202.168478][ T8723] pci 0000:00:05.0: Adding to iommu group 5 [ 202.200567][ T8722] ubi0: attaching mtd0 [ 202.211160][ T8722] ubi0: scanning is finished [ 202.213650][ T8722] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 202.225537][ T8723] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 202.232672][ T8723] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 202.236428][ T8723] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 202.244748][ T8728] __nla_validate_parse: 1 callbacks suppressed [ 202.244759][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 202.473241][ T8722] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 203.408360][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 203.680111][ T8761] FAULT_INJECTION: forcing a failure. [ 203.680111][ T8761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.685785][ T8761] CPU: 0 UID: 0 PID: 8761 Comm: syz.1.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.685805][ T8761] Tainted: [L]=SOFTLOCKUP [ 203.685809][ T8761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.685816][ T8761] Call Trace: [ 203.685821][ T8761] [ 203.685826][ T8761] dump_stack_lvl+0x100/0x190 [ 203.685845][ T8761] should_fail_ex.cold+0x5/0xa [ 203.685858][ T8761] _copy_from_iter+0x1f4/0x1690 [ 203.685872][ T8761] ? __pfx__copy_from_iter+0x10/0x10 [ 203.685882][ T8761] ? trace_kmalloc+0xeb/0x110 [ 203.685898][ T8761] ? __kasan_kmalloc+0xaa/0xb0 [ 203.685912][ T8761] ? __kmalloc_noprof+0x343/0x820 [ 203.685926][ T8761] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 203.685943][ T8761] kernfs_fop_write_iter+0x186/0x5f0 [ 203.685958][ T8761] vfs_write+0x6ac/0x1050 [ 203.685970][ T8761] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 203.685984][ T8761] ? __pfx_vfs_write+0x10/0x10 [ 203.685994][ T8761] ? find_held_lock+0x2b/0x80 [ 203.686017][ T8761] ksys_write+0x12a/0x250 [ 203.686027][ T8761] ? __pfx_ksys_write+0x10/0x10 [ 203.686036][ T8761] ? ksys_write+0x1ac/0x250 [ 203.686046][ T8761] ? __pfx_ksys_write+0x10/0x10 [ 203.686059][ T8761] __do_fast_syscall_32+0xe7/0x970 [ 203.686076][ T8761] ? lockdep_hardirqs_on+0x78/0x100 [ 203.686093][ T8761] do_fast_syscall_32+0x32/0x70 [ 203.686109][ T8761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.686123][ T8761] RIP: 0023:0xf706efec [ 203.686137][ T8761] Code: Unable to access opcode bytes at 0xf706efc2. [ 203.686142][ T8761] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 203.686154][ T8761] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000640 [ 203.686161][ T8761] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 203.686167][ T8761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.686174][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.686181][ T8761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.686195][ T8761] [ 203.832532][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 203.835994][ T8768] bridge_slave_1: left allmulticast mode [ 203.838494][ T8768] bridge_slave_1: left promiscuous mode [ 203.842797][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.862461][ T8768] bridge_slave_0: left allmulticast mode [ 203.864457][ T8768] bridge_slave_0: left promiscuous mode [ 203.866895][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.943672][ T8775] input: syz0 as /devices/virtual/input/input21 [ 203.960721][ T42] audit: type=1800 audit(1786075136.703:57): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.626" name="ep_name" dev="configfs" ino=18622 res=0 errno=0 [ 203.983510][ T8772] syzkaller0: entered promiscuous mode [ 203.985759][ T8772] syzkaller0: entered allmulticast mode [ 203.991960][ T8772] FAULT_INJECTION: forcing a failure. [ 203.991960][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 203.996889][ T8772] CPU: 1 UID: 0 PID: 8772 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.996912][ T8772] Tainted: [L]=SOFTLOCKUP [ 203.996917][ T8772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.996924][ T8772] Call Trace: [ 203.996929][ T8772] [ 203.996934][ T8772] dump_stack_lvl+0x100/0x190 [ 203.996952][ T8772] should_fail_ex.cold+0x5/0xa [ 203.996965][ T8772] should_failslab+0xc2/0x120 [ 203.996982][ T8772] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 203.996997][ T8772] ? __alloc_skb+0x5b7/0x710 [ 203.997012][ T8772] ? __alloc_skb+0x140/0x710 [ 203.997029][ T8772] __alloc_skb+0x140/0x710 [ 203.997044][ T8772] ? __alloc_skb+0x5b7/0x710 [ 203.997059][ T8772] ? __pfx___alloc_skb+0x10/0x10 [ 203.997076][ T8772] ? find_held_lock+0x2b/0x80 [ 203.997092][ T8772] alloc_skb_with_frags+0xdd/0x760 [ 203.997112][ T8772] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.997132][ T8772] sock_alloc_send_pskb+0x801/0x980 [ 203.997148][ T8772] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 203.997164][ T8772] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 203.997179][ T8772] ? find_held_lock+0x2b/0x80 [ 203.997193][ T8772] ? dev_get_by_index+0x180/0x380 [ 203.997208][ T8772] ? dev_get_by_index+0x180/0x380 [ 203.997227][ T8772] packet_sendmsg+0x1eda/0x5100 [ 203.997259][ T8772] ? __pfx___might_resched+0x10/0x10 [ 203.997279][ T8772] ? aa_sk_perm+0x309/0xaa0 [ 203.997297][ T8772] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.997312][ T8772] ? __pfx_packet_sendmsg+0x10/0x10 [ 203.997327][ T8772] ? __might_fault+0xc5/0x140 [ 203.997343][ T8772] ? apparmor_socket_sendmsg+0x15b/0x270 [ 203.997358][ T8772] __sys_sendto+0x48b/0x4e0 [ 203.997374][ T8772] ? __pfx_packet_sendmsg+0x10/0x10 [ 203.997389][ T8772] ? __pfx___sys_sendto+0x10/0x10 [ 203.997414][ T8772] ? fput+0x79/0x100 [ 203.997427][ T8772] ? ksys_write+0x1ac/0x250 [ 203.997439][ T8772] __ia32_sys_sendto+0xdd/0x1b0 [ 203.997454][ T8772] ? __do_fast_syscall_32+0x98/0x970 [ 203.997471][ T8772] ? lockdep_hardirqs_on+0x78/0x100 [ 203.997486][ T8772] __do_fast_syscall_32+0xe7/0x970 [ 203.997502][ T8772] ? lockdep_hardirqs_on+0x78/0x100 [ 203.997517][ T8772] do_fast_syscall_32+0x32/0x70 [ 203.997534][ T8772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.997548][ T8772] RIP: 0023:0xf704efec [ 203.997563][ T8772] Code: Unable to access opcode bytes at 0xf704efc2. [ 203.997568][ T8772] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 203.997580][ T8772] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 203.997587][ T8772] RDX: 00000000000005dc RSI: 0000000000004009 RDI: 0000000080000140 [ 203.997594][ T8772] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 203.997600][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.997611][ T8772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.997624][ T8772] [ 204.809540][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 204.832093][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 205.792318][ T8797] FAULT_INJECTION: forcing a failure. [ 205.792318][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 205.797768][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.3.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.797799][ T8797] Tainted: [L]=SOFTLOCKUP [ 205.797806][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.797816][ T8797] Call Trace: [ 205.797823][ T8797] [ 205.797831][ T8797] dump_stack_lvl+0x100/0x190 [ 205.797858][ T8797] should_fail_ex.cold+0x5/0xa [ 205.797878][ T8797] should_failslab+0xc2/0x120 [ 205.797903][ T8797] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 205.797925][ T8797] ? __alloc_skb+0x5b7/0x710 [ 205.797948][ T8797] ? __alloc_skb+0x140/0x710 [ 205.797974][ T8797] __alloc_skb+0x140/0x710 [ 205.797997][ T8797] ? __alloc_skb+0x5b7/0x710 [ 205.798019][ T8797] ? __pfx___alloc_skb+0x10/0x10 [ 205.798049][ T8797] netlink_alloc_large_skb+0x69/0x150 [ 205.798079][ T8797] netlink_sendmsg+0x680/0xda0 [ 205.798104][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.798128][ T8797] ? apparmor_socket_sendmsg+0x15b/0x270 [ 205.798155][ T8797] ____sys_sendmsg+0xa4d/0xbe0 [ 205.798173][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.798195][ T8797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.798225][ T8797] ___sys_sendmsg+0x190/0x1e0 [ 205.798248][ T8797] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.798279][ T8797] ? find_held_lock+0x2b/0x80 [ 205.798317][ T8797] __sys_sendmsg+0x160/0x210 [ 205.798343][ T8797] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.798376][ T8797] ? __pfx_ksys_write+0x10/0x10 [ 205.798398][ T8797] __do_fast_syscall_32+0xe7/0x970 [ 205.798424][ T8797] ? lockdep_hardirqs_on+0x78/0x100 [ 205.798448][ T8797] do_fast_syscall_32+0x32/0x70 [ 205.798474][ T8797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.798496][ T8797] RIP: 0023:0xf702efec [ 205.798518][ T8797] Code: Unable to access opcode bytes at 0xf702efc2. [ 205.798524][ T8797] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 205.798541][ T8797] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 205.798550][ T8797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.798558][ T8797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.798567][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.798577][ T8797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.798613][ T8797] [ 206.044941][ T8790] bridge_slave_1: left allmulticast mode [ 206.046916][ T8790] bridge_slave_1: left promiscuous mode [ 206.051586][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.057578][ T8790] bridge_slave_0: left allmulticast mode [ 206.060214][ T8790] bridge_slave_0: left promiscuous mode [ 206.062854][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.593207][ T8811] FAULT_INJECTION: forcing a failure. [ 206.593207][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.598990][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.0.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.599028][ T8811] Tainted: [L]=SOFTLOCKUP [ 206.599034][ T8811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.599046][ T8811] Call Trace: [ 206.599053][ T8811] [ 206.599061][ T8811] dump_stack_lvl+0x100/0x190 [ 206.599092][ T8811] should_fail_ex.cold+0x5/0xa [ 206.599116][ T8811] _copy_from_user+0x2e/0xd0 [ 206.599147][ T8811] memdup_user_nul+0x6c/0x120 [ 206.599173][ T8811] nvmf_dev_write+0x6d/0xb60 [ 206.599204][ T8811] ? rw_verify_area+0xce/0x6d0 [ 206.599233][ T8811] vfs_write+0x2aa/0x1050 [ 206.599252][ T8811] ? __pfx_nvmf_dev_write+0x10/0x10 [ 206.599283][ T8811] ? __pfx_vfs_write+0x10/0x10 [ 206.599300][ T8811] ? find_held_lock+0x2b/0x80 [ 206.599322][ T8811] ? __fget_files+0x215/0x3d0 [ 206.599351][ T8811] ? __fget_files+0x215/0x3d0 [ 206.599374][ T8811] ? __fget_files+0x21f/0x3d0 [ 206.599399][ T8811] ksys_write+0x12a/0x250 [ 206.599416][ T8811] ? __pfx_ksys_write+0x10/0x10 [ 206.599432][ T8811] ? ksys_write+0x1ac/0x250 [ 206.599449][ T8811] ? __pfx_ksys_write+0x10/0x10 [ 206.599473][ T8811] __do_fast_syscall_32+0xe7/0x970 [ 206.599501][ T8811] ? lockdep_hardirqs_on+0x78/0x100 [ 206.599528][ T8811] do_fast_syscall_32+0x32/0x70 [ 206.599556][ T8811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.599578][ T8811] RIP: 0023:0xf704efec [ 206.599600][ T8811] Code: Unable to access opcode bytes at 0xf704efc2. [ 206.599608][ T8811] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 206.599629][ T8811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 206.599641][ T8811] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.599651][ T8811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.599661][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.599671][ T8811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.599697][ T8811] [ 206.678003][ T8813] FAULT_INJECTION: forcing a failure. [ 206.678003][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.681878][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.681896][ T8813] Tainted: [L]=SOFTLOCKUP [ 206.681899][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.681907][ T8813] Call Trace: [ 206.681911][ T8813] [ 206.681916][ T8813] dump_stack_lvl+0x100/0x190 [ 206.681934][ T8813] should_fail_ex.cold+0x5/0xa [ 206.681948][ T8813] strncpy_from_user+0x3b/0x2d0 [ 206.681967][ T8813] do_getname+0x78/0x390 [ 206.681984][ T8813] __ia32_sys_mkdir+0x56/0x90 [ 206.681997][ T8813] __do_fast_syscall_32+0xe7/0x970 [ 206.682014][ T8813] ? lockdep_hardirqs_on+0x78/0x100 [ 206.682030][ T8813] do_fast_syscall_32+0x32/0x70 [ 206.682047][ T8813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.682062][ T8813] RIP: 0023:0xf706efec [ 206.682077][ T8813] Code: Unable to access opcode bytes at 0xf706efc2. [ 206.682082][ T8813] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 206.682094][ T8813] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 00000000000001ff [ 206.682100][ T8813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.682107][ T8813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.682114][ T8813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.682125][ T8813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.682139][ T8813] [ 207.137828][ T8821] [ 207.138863][ T8821] ====================================================== [ 207.142157][ T8821] WARNING: possible circular locking dependency detected [ 207.144787][ T8821] syzkaller #0 Tainted: G L [ 207.147870][ T8821] ------------------------------------------------------ [ 207.150786][ T8821] syz.0.642/8821 is trying to acquire lock: [ 207.153237][ T8821] ffff88801e490ac0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 207.157921][ T8821] [ 207.157921][ T8821] but task is already holding lock: [ 207.160969][ T8821] ffff888029396518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 207.164713][ T8821] [ 207.164713][ T8821] which lock already depends on the new lock. [ 207.164713][ T8821] [ 207.168901][ T8821] [ 207.168901][ T8821] the existing dependency chain (in reverse order) is: [ 207.171683][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 207.172610][ T8821] [ 207.172610][ T8821] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 207.172648][ T8821] lock_acquire+0x1b9/0x370 [ 207.181715][ T8821] __mutex_lock+0x1a4/0x1bd0 [ 207.183862][ T8821] tcm_set_name+0x29/0xb0 [ 207.185913][ T8821] function_make+0x21c/0x3f0 [ 207.187918][ T8821] configfs_mkdir+0x51e/0xb70 [ 207.190187][ T8821] vfs_mkdir+0x361/0x850 [ 207.192202][ T8821] filename_mkdirat+0x48b/0x5e0 [ 207.194410][ T8821] __ia32_sys_mkdir+0x6a/0x90 [ 207.196528][ T8821] __do_fast_syscall_32+0xe7/0x970 [ 207.198698][ T8821] do_fast_syscall_32+0x32/0x70 [ 207.200880][ T8821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.203636][ T8821] [ 207.203636][ T8821] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 207.206809][ T8821] lock_acquire+0x1b9/0x370 [ 207.208432][ T8821] __mutex_lock+0x1a4/0x1bd0 [ 207.210167][ T8821] configfs_rmdir+0x5ae/0x950 [ 207.212243][ T8821] vfs_rmdir+0x328/0x8a0 [ 207.214149][ T8821] filename_rmdir+0x31a/0x5c0 [ 207.216161][ T8821] __ia32_sys_rmdir+0x45/0x60 [ 207.218057][ T8821] __do_fast_syscall_32+0xe7/0x970 [ 207.220123][ T8821] do_fast_syscall_32+0x32/0x70 [ 207.222249][ T8821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.224917][ T8821] [ 207.224917][ T8821] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 207.228264][ T8821] check_prev_add+0xeb/0xe60 [ 207.230207][ T8821] __lock_acquire+0x136c/0x1a40 [ 207.232231][ T8821] lock_acquire+0x1b9/0x370 [ 207.233872][ T8821] down_write+0x8b/0x1f0 [ 207.235298][ T8821] configfs_depend_item_unlocked+0xf3/0x6a0 [ 207.237254][ T8821] usbg_make_tpg+0x261/0x620 [ 207.238940][ T8821] target_fabric_make_tpg+0xab/0x8c0 [ 207.241129][ T8821] configfs_mkdir+0x51e/0xb70 [ 207.243037][ T8821] vfs_mkdir+0x361/0x850 [ 207.244872][ T8821] filename_mkdirat+0x48b/0x5e0 [ 207.246724][ T8821] __ia32_sys_mkdir+0x6a/0x90 [ 207.248403][ T8821] __do_fast_syscall_32+0xe7/0x970 [ 207.250258][ T8821] do_fast_syscall_32+0x32/0x70 [ 207.251974][ T8821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.254158][ T8821] [ 207.254158][ T8821] other info that might help us debug this: [ 207.254158][ T8821] [ 207.257415][ T8821] Chain exists of: [ 207.257415][ T8821] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 207.257415][ T8821] [ 207.262061][ T8821] Possible unsafe locking scenario: [ 207.262061][ T8821] [ 207.264618][ T8821] CPU0 CPU1 [ 207.266453][ T8821] ---- ---- [ 207.268152][ T8821] lock(&opts->dep_lock); [ 207.269668][ T8821] lock(gadget_subsys.su_mutex); [ 207.272056][ T8821] lock(&opts->dep_lock); [ 207.274571][ T8821] lock(&sb->s_type->i_mutex_key#25); [ 207.276760][ T8821] [ 207.276760][ T8821] *** DEADLOCK *** [ 207.276760][ T8821] [ 207.279597][ T8821] 5 locks held by syz.0.642/8821: [ 207.281364][ T8821] #0: ffff88802240e450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 207.284606][ T8821] #1: ffff888014252280 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 207.288674][ T8821] #2: ffffffff8fd8ad28 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 207.292531][ T8821] #3: ffffffff90256040 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 207.296421][ T8821] #4: ffff888029396518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 207.299818][ T8821] [ 207.299818][ T8821] stack backtrace: [ 207.301673][ T8821] CPU: 0 UID: 0 PID: 8821 Comm: syz.0.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.301692][ T8821] Tainted: [L]=SOFTLOCKUP [ 207.301697][ T8821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.301704][ T8821] Call Trace: [ 207.301710][ T8821] [ 207.301715][ T8821] dump_stack_lvl+0x100/0x190 [ 207.301730][ T8821] print_circular_bug.cold+0x178/0x1c7 [ 207.301749][ T8821] check_noncircular+0x146/0x160 [ 207.301767][ T8821] check_prev_add+0xeb/0xe60 [ 207.301786][ T8821] __lock_acquire+0x136c/0x1a40 [ 207.301805][ T8821] ? rcu_is_watching+0x12/0xc0 [ 207.301819][ T8821] lock_acquire+0x1b9/0x370 [ 207.301837][ T8821] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 207.301851][ T8821] ? __pfx___might_resched+0x10/0x10 [ 207.301869][ T8821] down_write+0x8b/0x1f0 [ 207.301886][ T8821] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 207.301900][ T8821] ? __pfx_down_write+0x10/0x10 [ 207.301917][ T8821] configfs_depend_item_unlocked+0xf3/0x6a0 [ 207.301930][ T8821] ? __lock_acquire+0x49f/0x1a40 [ 207.301949][ T8821] usbg_make_tpg+0x261/0x620 [ 207.301964][ T8821] ? __pfx_usbg_make_tpg+0x10/0x10 [ 207.301980][ T8821] ? find_held_lock+0x2b/0x80 [ 207.301993][ T8821] ? __pfx_usbg_make_tpg+0x10/0x10 [ 207.302009][ T8821] target_fabric_make_tpg+0xab/0x8c0 [ 207.302029][ T8821] configfs_mkdir+0x51e/0xb70 [ 207.302043][ T8821] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 207.302062][ T8821] ? __pfx_configfs_mkdir+0x10/0x10 [ 207.302078][ T8821] vfs_mkdir+0x361/0x850 [ 207.302095][ T8821] filename_mkdirat+0x48b/0x5e0 [ 207.302107][ T8821] ? __pfx_filename_mkdirat+0x10/0x10 [ 207.302119][ T8821] ? strncpy_from_user+0x19d/0x2d0 [ 207.302138][ T8821] ? do_getname+0x191/0x390 [ 207.302166][ T8821] __ia32_sys_mkdir+0x6a/0x90 [ 207.302179][ T8821] __do_fast_syscall_32+0xe7/0x970 [ 207.302197][ T8821] do_fast_syscall_32+0x32/0x70 [ 207.302213][ T8821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.302228][ T8821] RIP: 0023:0xf704efec [ 207.302243][ T8821] Code: Unable to access opcode bytes at 0xf704efc2. [ 207.302248][ T8821] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 207.302260][ T8821] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 00000000000001ff [ 207.302267][ T8821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.302274][ T8821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.302281][ T8821] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.302287][ T8821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.302297][ T8821] [ 207.408737][ T42] audit: type=1800 audit(1786075139.136:58): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.642" name="alua_tg_pt_offline" dev="configfs" ino=17100 res=0 errno=0