last executing test programs: 2m29.120850867s ago: executing program 0 (id=542): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, 0x0, 0x2000000, 0x0, 0x1}}, [@mark={0xc, 0x15, {0x35075d, 0x42}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) 2m29.059052369s ago: executing program 0 (id=543): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='fsa4480 0x4', 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x789282, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth0_vlan\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x5, 0x81, 0x3, 0x80ff, 0x3, 0xd, 0x5, 0x8, 0x7373, 0xe, 0x2, 0x5, 0x6, 0xfffffffc, 0x3, 0x0, 0x10, 0x8001, 0x0, 0x800, 0x2200, 0x9}}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r7, 0x4}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 2m28.907435107s ago: executing program 0 (id=544): mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x800) open(0x0, 0x149040, 0x0) fsopen(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2m28.778804736s ago: executing program 0 (id=547): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) socket$inet(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = gettid() socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x94}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x92000000}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2m28.652526153s ago: executing program 0 (id=550): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x22800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000003300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 2m28.533453723s ago: executing program 0 (id=553): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101002) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f026, 0x2}) 2m13.546222798s ago: executing program 32 (id=553): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101002) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f026, 0x2}) 2.462960461s ago: executing program 4 (id=2156): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x20000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r0, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x2c}}, 0x0) 2.368137338s ago: executing program 3 (id=2158): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 2.367665358s ago: executing program 4 (id=2159): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vxcan1\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4007, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9a}, 0x1c) 1.522945855s ago: executing program 2 (id=2165): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e00140002800800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) 1.452724852s ago: executing program 2 (id=2167): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0200000000000000000000000000000080"], 0x108}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8008880) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) 1.452603602s ago: executing program 4 (id=2168): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000"], 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 1.402317343s ago: executing program 2 (id=2170): syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x150, 0x30, 0x1, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_bpf={0x138, 0x0, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x8, 0x20000000, 0x1, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x8a, 0xc, 0x100}, {0x6, 0x5, 0x6, 0x930}, {0xf689, 0x1, 0x81, 0x5}, {0x833, 0x1, 0xc, 0x7}, {0xf5a, 0x6, 0x80, 0x8f}, {0xfff9, 0x6, 0x7, 0xfffffffd}]}, @TCA_ACT_BPF_NAME={0xb, 0x6, './proc\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x1, 0x8, 0x7fffffff}, {0x3, 0xfc, 0x2e, 0x40000000}]}, @TCA_ACT_BPF_NAME={0x20, 0x6, './proc/thread-self/fail-nth\x00'}]}, {0x84, 0x6, "510a5093cd0cbba6165734bcd861a5cee3faa79f94ce389ccabfe6ab48c23cd29d71178386ba1d6257ccbab30189737cdc61de4e10f37da9c5829229b8d9cd1e010a97b19316fa8e96ff49e57d21fc10abee442b47b09f2e019e06405349c43e4619eadaa6807c640d49e70b9cde849bb4cbd3657449ad28318242bf556fcf64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x150}}, 0x0) socket(0x28, 0x8000c, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x18, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0xfe7, 0x409c1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) 1.311073703s ago: executing program 2 (id=2171): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x2a020480) tee(r0, 0xffffffffffffffff, 0xff, 0x8) 1.30997599s ago: executing program 1 (id=2172): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a601) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe5815efd4a730e04d52a1710000289737f0374c72a964a03147a75df8a69ea917deb7ba193b3e7755fd29f35239d2", "244333791f042fbfd9744b66cc530000000400000001000000002200", [0x354d39d0, 0x100000000000245]}}) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 1.242939204s ago: executing program 1 (id=2173): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.242716441s ago: executing program 2 (id=2174): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x521c, 0x1, 0x61, 0x0, 0x18) 1.242541932s ago: executing program 1 (id=2175): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x2) 1.172935002s ago: executing program 3 (id=2176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) close(0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33) 1.172759408s ago: executing program 1 (id=2177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 1.121075546s ago: executing program 3 (id=2178): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0200000000000000000000000000000080"], 0x108}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8008880) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) 1.056277462s ago: executing program 3 (id=2179): syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x150, 0x30, 0x1, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_bpf={0x138, 0x0, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x8, 0x20000000, 0x1, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x8a, 0xc, 0x100}, {0x6, 0x5, 0x6, 0x930}, {0xf689, 0x1, 0x81, 0x5}, {0x833, 0x1, 0xc, 0x7}, {0xf5a, 0x6, 0x80, 0x8f}, {0xfff9, 0x6, 0x7, 0xfffffffd}]}, @TCA_ACT_BPF_NAME={0xb, 0x6, './proc\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x1, 0x8, 0x7fffffff}, {0x3, 0xfc, 0x2e, 0x40000000}]}, @TCA_ACT_BPF_NAME={0x20, 0x6, './proc/thread-self/fail-nth\x00'}]}, {0x84, 0x6, "510a5093cd0cbba6165734bcd861a5cee3faa79f94ce389ccabfe6ab48c23cd29d71178386ba1d6257ccbab30189737cdc61de4e10f37da9c5829229b8d9cd1e010a97b19316fa8e96ff49e57d21fc10abee442b47b09f2e019e06405349c43e4619eadaa6807c640d49e70b9cde849bb4cbd3657449ad28318242bf556fcf64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x150}}, 0x0) socket(0x28, 0x8000c, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x18, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0xfe7, 0x409c1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) 991.922515ms ago: executing program 3 (id=2180): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 920.53827ms ago: executing program 1 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x20000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x2c}}, 0x0) 920.394683ms ago: executing program 3 (id=2182): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 839.417725ms ago: executing program 1 (id=2184): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 342.887306ms ago: executing program 2 (id=2185): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x7ff}, 0xfffffdad) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001900010a0000c3f00f00001d0040000a0000000400000008000a00ac"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) 251.659585ms ago: executing program 4 (id=2186): syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) read(r0, &(0x7f0000000340)=""/180, 0xb4) 160.133955ms ago: executing program 4 (id=2187): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0200000000000000000000000000000080"], 0x108}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8008880) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) 0s ago: executing program 4 (id=2188): syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x150, 0x30, 0x1, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_bpf={0x138, 0x0, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x8, 0x20000000, 0x1, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x8a, 0xc, 0x100}, {0x6, 0x5, 0x6, 0x930}, {0xf689, 0x1, 0x81, 0x5}, {0x833, 0x1, 0xc, 0x7}, {0xf5a, 0x6, 0x80, 0x8f}, {0xfff9, 0x6, 0x7, 0xfffffffd}]}, @TCA_ACT_BPF_NAME={0xb, 0x6, './proc\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x1, 0x8, 0x7fffffff}, {0x3, 0xfc, 0x2e, 0x40000000}]}, @TCA_ACT_BPF_NAME={0x20, 0x6, './proc/thread-self/fail-nth\x00'}]}, {0x84, 0x6, "510a5093cd0cbba6165734bcd861a5cee3faa79f94ce389ccabfe6ab48c23cd29d71178386ba1d6257ccbab30189737cdc61de4e10f37da9c5829229b8d9cd1e010a97b19316fa8e96ff49e57d21fc10abee442b47b09f2e019e06405349c43e4619eadaa6807c640d49e70b9cde849bb4cbd3657449ad28318242bf556fcf64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x150}}, 0x0) socket(0x28, 0x8000c, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x18, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0xfe7, 0x409c1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) kernel console output (not intermixed with test programs): ] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 222.381703][T12360] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 222.381710][T12360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.381717][T12360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.381731][T12360] [ 222.533524][T12374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.543075][T12374] bond1: (slave geneve2): making interface the new active one [ 222.546729][T12374] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 222.574613][ T50] usb 9-1: USB disconnect, device number 19 [ 222.704806][T12429] FAULT_INJECTION: forcing a failure. [ 222.704806][T12429] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.704837][T12429] CPU: 3 UID: 0 PID: 12429 Comm: syz.2.1545 Not tainted syzkaller #0 PREEMPT(full) [ 222.704857][T12429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.704868][T12429] Call Trace: [ 222.704875][T12429] [ 222.704883][T12429] dump_stack_lvl+0x100/0x190 [ 222.704912][T12429] should_fail_ex.cold+0x5/0xa [ 222.704936][T12429] get_futex_key+0x1d0/0x14f0 [ 222.704969][T12429] ? __pfx_get_futex_key+0x10/0x10 [ 222.704996][T12429] ? find_held_lock+0x2b/0x80 [ 222.705016][T12429] ? futex_wake+0x4ea/0x5e0 [ 222.705043][T12429] futex_wake+0xf4/0x5e0 [ 222.705063][T12429] ? futex_wait+0x11e/0x370 [ 222.705087][T12429] ? __pfx_futex_wake+0x10/0x10 [ 222.705109][T12429] ? lock_acquire+0x1d1/0x380 [ 222.705135][T12429] ? find_held_lock+0x2b/0x80 [ 222.705153][T12429] ? __fget_files+0x215/0x3d0 [ 222.705173][T12429] ? __fget_files+0x215/0x3d0 [ 222.705197][T12429] do_futex+0x2b2/0x440 [ 222.705216][T12429] ? __pfx_do_futex+0x10/0x10 [ 222.705236][T12429] ? fput+0x7c/0x100 [ 222.705261][T12429] __ia32_sys_futex_time32+0x2f4/0x470 [ 222.705285][T12429] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 222.705316][T12429] __do_fast_syscall_32+0x13a/0x8b0 [ 222.705351][T12429] do_fast_syscall_32+0x32/0x70 [ 222.705382][T12429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.705405][T12429] RIP: 0023:0xf7f75fec [ 222.705425][T12429] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 222.705433][T12429] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 222.705451][T12429] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 222.705463][T12429] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 222.705475][T12429] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 222.705485][T12429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.705496][T12429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.705520][T12429] [ 222.814743][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.074245][ T5824] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 223.193145][T12455] bond0: option mode: unable to set because the bond device is up [ 223.224755][ T5824] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.225570][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.225585][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 223.225597][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.227200][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.227213][ T5824] usb 7-1: SerialNumber: syz [ 223.233739][ T5824] hub 7-1:1.0: bad descriptor, ignoring hub [ 223.233753][ T5824] hub 7-1:1.0: probe with driver hub failed with error -5 [ 223.234499][ T5824] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.272693][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.272801][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.318029][T12468] FAULT_INJECTION: forcing a failure. [ 223.318029][T12468] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.318049][T12468] CPU: 2 UID: 0 PID: 12468 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT(full) [ 223.318062][T12468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.318070][T12468] Call Trace: [ 223.318074][T12468] [ 223.318078][T12468] dump_stack_lvl+0x100/0x190 [ 223.318097][T12468] should_fail_ex.cold+0x5/0xa [ 223.318113][T12468] get_futex_key+0x1d0/0x14f0 [ 223.318133][T12468] ? __pfx_get_futex_key+0x10/0x10 [ 223.318151][T12468] ? find_held_lock+0x2b/0x80 [ 223.318164][T12468] ? futex_wake+0x4ea/0x5e0 [ 223.318179][T12468] futex_wake+0xf4/0x5e0 [ 223.318192][T12468] ? futex_wait+0x11e/0x370 [ 223.318206][T12468] ? __pfx_futex_wake+0x10/0x10 [ 223.318218][T12468] ? lock_acquire+0x1d1/0x380 [ 223.318233][T12468] ? find_held_lock+0x2b/0x80 [ 223.318244][T12468] ? __fget_files+0x215/0x3d0 [ 223.318256][T12468] ? __fget_files+0x215/0x3d0 [ 223.318269][T12468] do_futex+0x2b2/0x440 [ 223.318280][T12468] ? __pfx_do_futex+0x10/0x10 [ 223.318291][T12468] ? fput+0x7c/0x100 [ 223.318306][T12468] __ia32_sys_futex_time32+0x2f4/0x470 [ 223.318320][T12468] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 223.318337][T12468] __do_fast_syscall_32+0x13a/0x8b0 [ 223.318356][T12468] do_fast_syscall_32+0x32/0x70 [ 223.318372][T12468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.318386][T12468] RIP: 0023:0xf708efec [ 223.318399][T12468] Code: Unable to access opcode bytes at 0xf708efc2. [ 223.318404][T12468] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 223.318415][T12468] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 223.318422][T12468] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 223.318429][T12468] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 223.318435][T12468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.318442][T12468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.318456][T12468] [ 223.418083][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'. [ 223.784561][ T5880] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 223.852248][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.935001][ T5880] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 223.935935][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.935954][ T5880] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.935982][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.938228][ T5880] usb 8-1: config 0 descriptor?? [ 224.006811][ T2193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.413438][T12508] FAULT_INJECTION: forcing a failure. [ 224.413438][T12508] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.413469][T12508] CPU: 3 UID: 0 PID: 12508 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT(full) [ 224.413490][T12508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.413500][T12508] Call Trace: [ 224.413506][T12508] [ 224.413512][T12508] dump_stack_lvl+0x100/0x190 [ 224.413541][T12508] should_fail_ex.cold+0x5/0xa [ 224.413566][T12508] get_futex_key+0x1d0/0x14f0 [ 224.413596][T12508] ? __pfx_get_futex_key+0x10/0x10 [ 224.413623][T12508] ? find_held_lock+0x2b/0x80 [ 224.413643][T12508] ? futex_wake+0x4ea/0x5e0 [ 224.413667][T12508] futex_wake+0xf4/0x5e0 [ 224.413686][T12508] ? futex_wait+0x11e/0x370 [ 224.413708][T12508] ? __pfx_futex_wake+0x10/0x10 [ 224.413728][T12508] ? lock_acquire+0x1d1/0x380 [ 224.413752][T12508] ? find_held_lock+0x2b/0x80 [ 224.413769][T12508] ? __fget_files+0x215/0x3d0 [ 224.413789][T12508] ? __fget_files+0x215/0x3d0 [ 224.413809][T12508] do_futex+0x2b2/0x440 [ 224.413828][T12508] ? __pfx_do_futex+0x10/0x10 [ 224.413847][T12508] ? fput+0x7c/0x100 [ 224.413870][T12508] __ia32_sys_futex_time32+0x2f4/0x470 [ 224.413894][T12508] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 224.413923][T12508] __do_fast_syscall_32+0x13a/0x8b0 [ 224.413953][T12508] do_fast_syscall_32+0x32/0x70 [ 224.413977][T12508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.413999][T12508] RIP: 0023:0xf7fd4fec [ 224.414015][T12508] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 224.414020][T12508] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 224.414032][T12508] RAX: ffffffffffffffda RBX: 00000000f7494f8c RCX: 0000000000000081 [ 224.414039][T12508] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 224.414045][T12508] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 224.414052][T12508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.414058][T12508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.414071][T12508] [ 224.501773][T12512] bond1: option mode: unable to set because the bond device has slaves [ 224.539710][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 224.884475][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.728188][T12545] FAULT_INJECTION: forcing a failure. [ 225.728188][T12545] name fail_futex, interval 1, probability 0, space 0, times 0 [ 225.728210][T12545] CPU: 3 UID: 0 PID: 12545 Comm: syz.4.1574 Not tainted syzkaller #0 PREEMPT(full) [ 225.728224][T12545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.728230][T12545] Call Trace: [ 225.728234][T12545] [ 225.728239][T12545] dump_stack_lvl+0x100/0x190 [ 225.728257][T12545] should_fail_ex.cold+0x5/0xa [ 225.728271][T12545] get_futex_key+0x1d0/0x14f0 [ 225.728291][T12545] ? __pfx_get_futex_key+0x10/0x10 [ 225.728308][T12545] ? find_held_lock+0x2b/0x80 [ 225.728321][T12545] ? futex_wake+0x4ea/0x5e0 [ 225.728337][T12545] futex_wake+0xf4/0x5e0 [ 225.728348][T12545] ? futex_wait+0x11e/0x370 [ 225.728376][T12545] ? __pfx_futex_wake+0x10/0x10 [ 225.728389][T12545] ? lock_acquire+0x1d1/0x380 [ 225.728404][T12545] ? find_held_lock+0x2b/0x80 [ 225.728414][T12545] ? __fget_files+0x215/0x3d0 [ 225.728426][T12545] ? __fget_files+0x215/0x3d0 [ 225.728439][T12545] do_futex+0x2b2/0x440 [ 225.728450][T12545] ? __pfx_do_futex+0x10/0x10 [ 225.728462][T12545] ? fput+0x7c/0x100 [ 225.728476][T12545] __ia32_sys_futex_time32+0x2f4/0x470 [ 225.728490][T12545] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 225.728510][T12545] __do_fast_syscall_32+0x13a/0x8b0 [ 225.728528][T12545] do_fast_syscall_32+0x32/0x70 [ 225.728545][T12545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.728559][T12545] RIP: 0023:0xf7fd4fec [ 225.728572][T12545] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 225.728577][T12545] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 225.728588][T12545] RAX: ffffffffffffffda RBX: 00000000f7494f8c RCX: 0000000000000081 [ 225.728596][T12545] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 225.728602][T12545] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 225.728609][T12545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.728615][T12545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.728628][T12545] [ 225.888862][T12555] bond1: option mode: unable to set because the bond device has slaves [ 225.893098][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 225.924591][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.964357][ T5840] usb 7-1: USB disconnect, device number 45 [ 226.045510][T12574] FAULT_INJECTION: forcing a failure. [ 226.045510][T12574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.045542][T12574] CPU: 2 UID: 0 PID: 12574 Comm: syz.2.1583 Not tainted syzkaller #0 PREEMPT(full) [ 226.045564][T12574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.045576][T12574] Call Trace: [ 226.045582][T12574] [ 226.045590][T12574] dump_stack_lvl+0x100/0x190 [ 226.045620][T12574] should_fail_ex.cold+0x5/0xa [ 226.045647][T12574] get_futex_key+0x1d0/0x14f0 [ 226.045678][T12574] ? __pfx_get_futex_key+0x10/0x10 [ 226.045706][T12574] ? find_held_lock+0x2b/0x80 [ 226.045730][T12574] ? futex_wake+0x4ea/0x5e0 [ 226.045758][T12574] futex_wake+0xf4/0x5e0 [ 226.045780][T12574] ? futex_wait+0x11e/0x370 [ 226.045807][T12574] ? __pfx_futex_wake+0x10/0x10 [ 226.045829][T12574] ? lock_acquire+0x1d1/0x380 [ 226.045856][T12574] ? find_held_lock+0x2b/0x80 [ 226.045876][T12574] ? __fget_files+0x215/0x3d0 [ 226.045897][T12574] ? __fget_files+0x215/0x3d0 [ 226.045922][T12574] do_futex+0x2b2/0x440 [ 226.045942][T12574] ? __pfx_do_futex+0x10/0x10 [ 226.045962][T12574] ? fput+0x7c/0x100 [ 226.045988][T12574] __ia32_sys_futex_time32+0x2f4/0x470 [ 226.046014][T12574] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 226.046045][T12574] __do_fast_syscall_32+0x13a/0x8b0 [ 226.046079][T12574] do_fast_syscall_32+0x32/0x70 [ 226.046124][T12574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.046149][T12574] RIP: 0023:0xf7f75fec [ 226.046169][T12574] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 226.046178][T12574] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 226.046196][T12574] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 226.046208][T12574] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 226.046220][T12574] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 226.046231][T12574] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.046242][T12574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.046266][T12574] [ 226.228651][T12582] bond1: option mode: unable to set because the bond device has slaves [ 226.426370][T12598] FAULT_INJECTION: forcing a failure. [ 226.426370][T12598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.426401][T12598] CPU: 1 UID: 0 PID: 12598 Comm: syz.2.1592 Not tainted syzkaller #0 PREEMPT(full) [ 226.426423][T12598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.426434][T12598] Call Trace: [ 226.426440][T12598] [ 226.426448][T12598] dump_stack_lvl+0x100/0x190 [ 226.426478][T12598] should_fail_ex.cold+0x5/0xa [ 226.426504][T12598] get_futex_key+0x1d0/0x14f0 [ 226.426537][T12598] ? __pfx_get_futex_key+0x10/0x10 [ 226.426565][T12598] ? find_held_lock+0x2b/0x80 [ 226.426585][T12598] ? futex_wake+0x4ea/0x5e0 [ 226.426612][T12598] futex_wake+0xf4/0x5e0 [ 226.426632][T12598] ? futex_wait+0x11e/0x370 [ 226.426656][T12598] ? __pfx_futex_wake+0x10/0x10 [ 226.426677][T12598] ? lock_acquire+0x1d1/0x380 [ 226.426703][T12598] ? find_held_lock+0x2b/0x80 [ 226.426722][T12598] ? __fget_files+0x215/0x3d0 [ 226.426743][T12598] ? __fget_files+0x215/0x3d0 [ 226.426767][T12598] do_futex+0x2b2/0x440 [ 226.426786][T12598] ? __pfx_do_futex+0x10/0x10 [ 226.426806][T12598] ? fput+0x7c/0x100 [ 226.426830][T12598] __ia32_sys_futex_time32+0x2f4/0x470 [ 226.426855][T12598] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 226.426885][T12598] __do_fast_syscall_32+0x13a/0x8b0 [ 226.426918][T12598] do_fast_syscall_32+0x32/0x70 [ 226.426946][T12598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.426969][T12598] RIP: 0023:0xf7f75fec [ 226.426990][T12598] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 226.426998][T12598] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 226.427017][T12598] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 226.427054][T12598] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 226.427067][T12598] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 226.427079][T12598] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.427088][T12598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.427119][T12598] [ 226.562516][ T50] usb 8-1: USB disconnect, device number 30 [ 226.635253][T12625] bond1: option mode: unable to set because the bond device has slaves [ 226.635315][T12623] FAULT_INJECTION: forcing a failure. [ 226.635315][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 226.635334][T12623] CPU: 3 UID: 0 PID: 12623 Comm: syz.2.1598 Not tainted syzkaller #0 PREEMPT(full) [ 226.635346][T12623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.635353][T12623] Call Trace: [ 226.635357][T12623] [ 226.635361][T12623] dump_stack_lvl+0x100/0x190 [ 226.635380][T12623] should_fail_ex.cold+0x5/0xa [ 226.635395][T12623] should_failslab+0xc2/0x120 [ 226.635411][T12623] __kmalloc_cache_noprof+0x91/0x6d0 [ 226.635430][T12623] ? copy_mount_options+0x55/0x190 [ 226.635450][T12623] copy_mount_options+0x55/0x190 [ 226.635468][T12623] __ia32_sys_mount+0x1ab/0x310 [ 226.635483][T12623] ? __pfx___ia32_sys_mount+0x10/0x10 [ 226.635502][T12623] __do_fast_syscall_32+0x13a/0x8b0 [ 226.635521][T12623] do_fast_syscall_32+0x32/0x70 [ 226.635538][T12623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.635552][T12623] RIP: 0023:0xf7f75fec [ 226.635564][T12623] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 226.635569][T12623] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 226.635581][T12623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 226.635589][T12623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 226.635597][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.635603][T12623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.635609][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.635622][T12623] [ 226.709840][T12632] FAULT_INJECTION: forcing a failure. [ 226.709840][T12632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.709872][T12632] CPU: 1 UID: 0 PID: 12632 Comm: syz.2.1601 Not tainted syzkaller #0 PREEMPT(full) [ 226.709886][T12632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.709892][T12632] Call Trace: [ 226.709897][T12632] [ 226.709902][T12632] dump_stack_lvl+0x100/0x190 [ 226.709921][T12632] should_fail_ex.cold+0x5/0xa [ 226.709936][T12632] get_futex_key+0x1d0/0x14f0 [ 226.709956][T12632] ? __pfx_get_futex_key+0x10/0x10 [ 226.709972][T12632] ? find_held_lock+0x2b/0x80 [ 226.709984][T12632] ? futex_wake+0x4ea/0x5e0 [ 226.709999][T12632] futex_wake+0xf4/0x5e0 [ 226.710011][T12632] ? futex_wait+0x11e/0x370 [ 226.710031][T12632] ? __pfx_futex_wake+0x10/0x10 [ 226.710044][T12632] ? lock_acquire+0x1d1/0x380 [ 226.710060][T12632] ? find_held_lock+0x2b/0x80 [ 226.710071][T12632] ? __fget_files+0x215/0x3d0 [ 226.710083][T12632] ? __fget_files+0x215/0x3d0 [ 226.710096][T12632] do_futex+0x2b2/0x440 [ 226.710107][T12632] ? __pfx_do_futex+0x10/0x10 [ 226.710118][T12632] ? fput+0x7c/0x100 [ 226.710139][T12632] __ia32_sys_futex_time32+0x2f4/0x470 [ 226.710154][T12632] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 226.710173][T12632] __do_fast_syscall_32+0x13a/0x8b0 [ 226.710193][T12632] do_fast_syscall_32+0x32/0x70 [ 226.710210][T12632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.710224][T12632] RIP: 0023:0xf7f75fec [ 226.710237][T12632] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 226.710243][T12632] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 226.710254][T12632] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 226.710262][T12632] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 226.710270][T12632] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 226.710277][T12632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.710285][T12632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.710298][T12632] [ 226.742211][ T5900] wiimote 0005:057E:0330.0021: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 226.742346][ T5900] wiimote 0005:057E:0330.0021: New device registered [ 226.743428][T12634] wiimote 0005:057E:0330.0021: Device removed [ 226.783855][T12639] fido_id[12639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.901218][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.901296][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.901390][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.901887][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.901947][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.949381][T12666] FAULT_INJECTION: forcing a failure. [ 226.949381][T12666] name failslab, interval 1, probability 0, space 0, times 0 [ 226.949408][T12666] CPU: 3 UID: 0 PID: 12666 Comm: syz.3.1610 Not tainted syzkaller #0 PREEMPT(full) [ 226.949424][T12666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.949432][T12666] Call Trace: [ 226.949438][T12666] [ 226.949443][T12666] dump_stack_lvl+0x100/0x190 [ 226.949467][T12666] should_fail_ex.cold+0x5/0xa [ 226.949486][T12666] should_failslab+0xc2/0x120 [ 226.949508][T12666] __kmalloc_cache_noprof+0x91/0x6d0 [ 226.949530][T12666] ? copy_mount_options+0x55/0x190 [ 226.949553][T12666] copy_mount_options+0x55/0x190 [ 226.949575][T12666] __ia32_sys_mount+0x1ab/0x310 [ 226.949594][T12666] ? __pfx___ia32_sys_mount+0x10/0x10 [ 226.949618][T12666] __do_fast_syscall_32+0x13a/0x8b0 [ 226.949642][T12666] do_fast_syscall_32+0x32/0x70 [ 226.949667][T12666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.949685][T12666] RIP: 0023:0xf708efec [ 226.949700][T12666] Code: Unable to access opcode bytes at 0xf708efc2. [ 226.949707][T12666] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 226.949720][T12666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 226.949729][T12666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 226.949738][T12666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.949746][T12666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.949754][T12666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.949772][T12666] [ 226.974486][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.991082][T12669] bond0: option mode: unable to set because the bond device is up [ 227.047107][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.059119][T12675] FAULT_INJECTION: forcing a failure. [ 227.059119][T12675] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.059138][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.3.1613 Not tainted syzkaller #0 PREEMPT(full) [ 227.059151][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.059158][T12675] Call Trace: [ 227.059162][T12675] [ 227.059167][T12675] dump_stack_lvl+0x100/0x190 [ 227.059185][T12675] should_fail_ex.cold+0x5/0xa [ 227.059199][T12675] get_futex_key+0x1d0/0x14f0 [ 227.059220][T12675] ? __pfx_get_futex_key+0x10/0x10 [ 227.059236][T12675] ? find_held_lock+0x2b/0x80 [ 227.059247][T12675] ? futex_wake+0x4ea/0x5e0 [ 227.059263][T12675] futex_wake+0xf4/0x5e0 [ 227.059274][T12675] ? futex_wait+0x11e/0x370 [ 227.059288][T12675] ? __pfx_futex_wake+0x10/0x10 [ 227.059301][T12675] ? lock_acquire+0x1d1/0x380 [ 227.059316][T12675] ? find_held_lock+0x2b/0x80 [ 227.059328][T12675] ? __fget_files+0x215/0x3d0 [ 227.059339][T12675] ? __fget_files+0x215/0x3d0 [ 227.059352][T12675] do_futex+0x2b2/0x440 [ 227.059363][T12675] ? __pfx_do_futex+0x10/0x10 [ 227.059375][T12675] ? fput+0x7c/0x100 [ 227.059389][T12675] __ia32_sys_futex_time32+0x2f4/0x470 [ 227.059403][T12675] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 227.059420][T12675] __do_fast_syscall_32+0x13a/0x8b0 [ 227.059439][T12675] do_fast_syscall_32+0x32/0x70 [ 227.059455][T12675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.059469][T12675] RIP: 0023:0xf708efec [ 227.059482][T12675] Code: Unable to access opcode bytes at 0xf708efc2. [ 227.059487][T12675] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 227.059498][T12675] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 227.059506][T12675] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 227.059513][T12675] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 227.059519][T12675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.059526][T12675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.059540][T12675] [ 227.062192][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.084883][ T5840] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 227.244685][ T5840] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 227.245502][ T5840] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.245514][ T5840] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.245531][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.247620][ T5840] usb 9-1: config 0 descriptor?? [ 227.341493][T12697] FAULT_INJECTION: forcing a failure. [ 227.341493][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 227.341513][T12697] CPU: 1 UID: 0 PID: 12697 Comm: syz.3.1620 Not tainted syzkaller #0 PREEMPT(full) [ 227.341525][T12697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.341532][T12697] Call Trace: [ 227.341536][T12697] [ 227.341541][T12697] dump_stack_lvl+0x100/0x190 [ 227.341560][T12697] should_fail_ex.cold+0x5/0xa [ 227.341576][T12697] should_failslab+0xc2/0x120 [ 227.341592][T12697] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.341610][T12697] ? copy_mount_options+0x55/0x190 [ 227.341629][T12697] copy_mount_options+0x55/0x190 [ 227.341647][T12697] __ia32_sys_mount+0x1ab/0x310 [ 227.341663][T12697] ? __pfx___ia32_sys_mount+0x10/0x10 [ 227.341687][T12697] __do_fast_syscall_32+0x13a/0x8b0 [ 227.341706][T12697] do_fast_syscall_32+0x32/0x70 [ 227.341723][T12697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.341738][T12697] RIP: 0023:0xf708efec [ 227.341751][T12697] Code: Unable to access opcode bytes at 0xf708efc2. [ 227.341756][T12697] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 227.341768][T12697] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 227.341775][T12697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 227.341782][T12697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.341789][T12697] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.341795][T12697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.341808][T12697] [ 227.527131][T12710] FAULT_INJECTION: forcing a failure. [ 227.527131][T12710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.527159][T12710] CPU: 3 UID: 0 PID: 12710 Comm: syz.3.1623 Not tainted syzkaller #0 PREEMPT(full) [ 227.527171][T12710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.527178][T12710] Call Trace: [ 227.527183][T12710] [ 227.527187][T12710] dump_stack_lvl+0x100/0x190 [ 227.527205][T12710] should_fail_ex.cold+0x5/0xa [ 227.527220][T12710] get_futex_key+0x1d0/0x14f0 [ 227.527240][T12710] ? __pfx_get_futex_key+0x10/0x10 [ 227.527256][T12710] ? find_held_lock+0x2b/0x80 [ 227.527268][T12710] ? futex_wake+0x4ea/0x5e0 [ 227.527283][T12710] futex_wake+0xf4/0x5e0 [ 227.527294][T12710] ? futex_wait+0x11e/0x370 [ 227.527308][T12710] ? __pfx_futex_wake+0x10/0x10 [ 227.527321][T12710] ? lock_acquire+0x1d1/0x380 [ 227.527336][T12710] ? find_held_lock+0x2b/0x80 [ 227.527347][T12710] ? __fget_files+0x215/0x3d0 [ 227.527360][T12710] ? __fget_files+0x215/0x3d0 [ 227.527375][T12710] do_futex+0x2b2/0x440 [ 227.527392][T12710] ? __pfx_do_futex+0x10/0x10 [ 227.527410][T12710] ? fput+0x7c/0x100 [ 227.527434][T12710] __ia32_sys_futex_time32+0x2f4/0x470 [ 227.527458][T12710] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 227.527488][T12710] __do_fast_syscall_32+0x13a/0x8b0 [ 227.527521][T12710] do_fast_syscall_32+0x32/0x70 [ 227.527538][T12710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.527552][T12710] RIP: 0023:0xf708efec [ 227.527566][T12710] Code: Unable to access opcode bytes at 0xf708efc2. [ 227.527571][T12710] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 227.527582][T12710] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 227.527589][T12710] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 227.527596][T12710] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 227.527602][T12710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.527609][T12710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.527628][T12710] [ 227.694089][T12722] bond0: option mode: unable to set because the bond device is up [ 227.764283][ T5900] wiimote 0005:057E:0330.0021: detected device: Nintendo Wii Remote Plus (Gen 2) [ 227.779778][ T5900] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0021/input/input55 [ 227.788553][ T5900] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0021/input/input56 [ 227.806778][ T5900] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0021/input/input54 [ 227.823760][T12746] FAULT_INJECTION: forcing a failure. [ 227.823760][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 227.823780][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.3.1630 Not tainted syzkaller #0 PREEMPT(full) [ 227.823793][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.823799][T12746] Call Trace: [ 227.823803][T12746] [ 227.823808][T12746] dump_stack_lvl+0x100/0x190 [ 227.823827][T12746] should_fail_ex.cold+0x5/0xa [ 227.823842][T12746] should_failslab+0xc2/0x120 [ 227.823859][T12746] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.823878][T12746] ? copy_mount_options+0x55/0x190 [ 227.823898][T12746] copy_mount_options+0x55/0x190 [ 227.823916][T12746] __ia32_sys_mount+0x1ab/0x310 [ 227.823931][T12746] ? __pfx___ia32_sys_mount+0x10/0x10 [ 227.823951][T12746] __do_fast_syscall_32+0x13a/0x8b0 [ 227.823969][T12746] do_fast_syscall_32+0x32/0x70 [ 227.823986][T12746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.824001][T12746] RIP: 0023:0xf708efec [ 227.824018][T12746] Code: Unable to access opcode bytes at 0xf708efc2. [ 227.824023][T12746] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 227.824034][T12746] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 227.824040][T12746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 227.824046][T12746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.824052][T12746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.824058][T12746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.824071][T12746] [ 228.043937][T12768] bond1: option mode: unable to set because the bond device has slaves [ 228.082197][T12773] FAULT_INJECTION: forcing a failure. [ 228.082197][T12773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.082218][T12773] CPU: 3 UID: 0 PID: 12773 Comm: syz.2.1639 Not tainted syzkaller #0 PREEMPT(full) [ 228.082230][T12773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.082237][T12773] Call Trace: [ 228.082241][T12773] [ 228.082245][T12773] dump_stack_lvl+0x100/0x190 [ 228.082264][T12773] should_fail_ex.cold+0x5/0xa [ 228.082293][T12773] _copy_from_user+0x2e/0xd0 [ 228.082308][T12773] copy_mount_options+0x76/0x190 [ 228.082325][T12773] __ia32_sys_mount+0x1ab/0x310 [ 228.082341][T12773] ? __pfx___ia32_sys_mount+0x10/0x10 [ 228.082361][T12773] __do_fast_syscall_32+0x13a/0x8b0 [ 228.082380][T12773] do_fast_syscall_32+0x32/0x70 [ 228.082397][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.082411][T12773] RIP: 0023:0xf7f75fec [ 228.082423][T12773] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 228.082428][T12773] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 228.082439][T12773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 228.082446][T12773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 228.082453][T12773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.082460][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.082468][T12773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.082482][T12773] [ 228.470843][T12803] bond0: option mode: unable to set because the bond device is up [ 228.514996][T12806] FAULT_INJECTION: forcing a failure. [ 228.514996][T12806] name failslab, interval 1, probability 0, space 0, times 0 [ 228.515051][T12806] CPU: 2 UID: 0 PID: 12806 Comm: syz.3.1649 Not tainted syzkaller #0 PREEMPT(full) [ 228.515073][T12806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.515084][T12806] Call Trace: [ 228.515091][T12806] [ 228.515099][T12806] dump_stack_lvl+0x100/0x190 [ 228.515130][T12806] should_fail_ex.cold+0x5/0xa [ 228.515155][T12806] should_failslab+0xc2/0x120 [ 228.515183][T12806] __kmalloc_cache_noprof+0x91/0x6d0 [ 228.515219][T12806] ? copy_mount_options+0x55/0x190 [ 228.515254][T12806] copy_mount_options+0x55/0x190 [ 228.515284][T12806] __ia32_sys_mount+0x1ab/0x310 [ 228.515313][T12806] ? __pfx___ia32_sys_mount+0x10/0x10 [ 228.515348][T12806] __do_fast_syscall_32+0x13a/0x8b0 [ 228.515381][T12806] do_fast_syscall_32+0x32/0x70 [ 228.515410][T12806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.515434][T12806] RIP: 0023:0xf708efec [ 228.515455][T12806] Code: Unable to access opcode bytes at 0xf708efc2. [ 228.515463][T12806] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 228.515483][T12806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 228.515495][T12806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 228.515506][T12806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.515517][T12806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.515528][T12806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.515552][T12806] [ 228.561555][T12809] overlayfs: missing 'lowerdir' [ 229.046719][ T42] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 229.142501][T12834] FAULT_INJECTION: forcing a failure. [ 229.142501][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 229.142531][T12834] CPU: 2 UID: 0 PID: 12834 Comm: syz.2.1658 Not tainted syzkaller #0 PREEMPT(full) [ 229.142552][T12834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.142564][T12834] Call Trace: [ 229.142570][T12834] [ 229.142578][T12834] dump_stack_lvl+0x100/0x190 [ 229.142609][T12834] should_fail_ex.cold+0x5/0xa [ 229.142635][T12834] should_failslab+0xc2/0x120 [ 229.142661][T12834] __kmalloc_cache_noprof+0x91/0x6d0 [ 229.142693][T12834] ? copy_mount_options+0x55/0x190 [ 229.142725][T12834] copy_mount_options+0x55/0x190 [ 229.142754][T12834] __ia32_sys_mount+0x1ab/0x310 [ 229.142780][T12834] ? __pfx___ia32_sys_mount+0x10/0x10 [ 229.142813][T12834] __do_fast_syscall_32+0x13a/0x8b0 [ 229.142845][T12834] do_fast_syscall_32+0x32/0x70 [ 229.142873][T12834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.142896][T12834] RIP: 0023:0xf7f75fec [ 229.142916][T12834] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 229.142924][T12834] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 229.142942][T12834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 229.142954][T12834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 229.142965][T12834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.142976][T12834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.142988][T12834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.143035][T12834] [ 229.174352][ T42] usb 8-1: device descriptor read/64, error -71 [ 229.195793][T12836] overlayfs: missing 'lowerdir' [ 229.247563][T12838] bond1: option mode: unable to set because the bond device has slaves [ 229.434901][ T42] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 229.564312][ T42] usb 8-1: device descriptor read/64, error -71 [ 229.674567][ T42] usb usb8-port1: attempt power cycle [ 229.840434][ T5824] usb 9-1: USB disconnect, device number 20 [ 229.922332][T12866] FAULT_INJECTION: forcing a failure. [ 229.922332][T12866] name failslab, interval 1, probability 0, space 0, times 0 [ 229.922351][T12866] CPU: 2 UID: 0 PID: 12866 Comm: syz.4.1668 Not tainted syzkaller #0 PREEMPT(full) [ 229.922364][T12866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.922371][T12866] Call Trace: [ 229.922375][T12866] [ 229.922380][T12866] dump_stack_lvl+0x100/0x190 [ 229.922398][T12866] should_fail_ex.cold+0x5/0xa [ 229.922414][T12866] should_failslab+0xc2/0x120 [ 229.922430][T12866] __kmalloc_cache_noprof+0x91/0x6d0 [ 229.922448][T12866] ? copy_mount_options+0x55/0x190 [ 229.922467][T12866] copy_mount_options+0x55/0x190 [ 229.922483][T12866] __ia32_sys_mount+0x1ab/0x310 [ 229.922501][T12866] ? __pfx___ia32_sys_mount+0x10/0x10 [ 229.922521][T12866] __do_fast_syscall_32+0x13a/0x8b0 [ 229.922540][T12866] do_fast_syscall_32+0x32/0x70 [ 229.922557][T12866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.922571][T12866] RIP: 0023:0xf7fd4fec [ 229.922583][T12866] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 229.922588][T12866] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 229.922600][T12866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 229.922607][T12866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 229.922614][T12866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.922621][T12866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.922627][T12866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.922640][T12866] [ 229.956394][T12869] overlayfs: missing 'lowerdir' [ 229.986914][T12872] bond1: option mode: unable to set because the bond device has slaves [ 230.025363][ T42] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 230.049033][ T42] usb 8-1: device descriptor read/8, error -71 [ 230.086193][ T5733] net_ratelimit: 12 callbacks suppressed [ 230.086208][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.086274][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.294221][ T42] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 230.314948][ T42] usb 8-1: device descriptor read/8, error -71 [ 230.394692][ T5824] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 230.434586][ T42] usb usb8-port1: unable to enumerate USB device [ 230.483402][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 230.524351][ T5824] usb 9-1: device descriptor read/64, error -71 [ 230.595599][T12893] FAULT_INJECTION: forcing a failure. [ 230.595599][T12893] name failslab, interval 1, probability 0, space 0, times 0 [ 230.595621][T12893] CPU: 3 UID: 0 PID: 12893 Comm: syz.2.1678 Not tainted syzkaller #0 PREEMPT(full) [ 230.595633][T12893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.595642][T12893] Call Trace: [ 230.595647][T12893] [ 230.595651][T12893] dump_stack_lvl+0x100/0x190 [ 230.595670][T12893] should_fail_ex.cold+0x5/0xa [ 230.595686][T12893] should_failslab+0xc2/0x120 [ 230.595702][T12893] __kmalloc_cache_noprof+0x91/0x6d0 [ 230.595720][T12893] ? copy_mount_options+0x55/0x190 [ 230.595739][T12893] copy_mount_options+0x55/0x190 [ 230.595757][T12893] __ia32_sys_mount+0x1ab/0x310 [ 230.595772][T12893] ? __pfx___ia32_sys_mount+0x10/0x10 [ 230.595791][T12893] __do_fast_syscall_32+0x13a/0x8b0 [ 230.595811][T12893] do_fast_syscall_32+0x32/0x70 [ 230.595827][T12893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.595841][T12893] RIP: 0023:0xf7f75fec [ 230.595853][T12893] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 230.595858][T12893] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 230.595869][T12893] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 230.595876][T12893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 230.595882][T12893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.595889][T12893] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.595896][T12893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.595917][T12893] [ 230.636048][T12895] overlayfs: missing 'lowerdir' [ 230.794322][ T5824] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 230.924313][ T5824] usb 9-1: device descriptor read/64, error -71 [ 231.037458][ T5824] usb usb9-port1: attempt power cycle [ 231.124545][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.374284][ T5824] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 231.395115][ T5824] usb 9-1: device descriptor read/8, error -71 [ 231.644267][ T5824] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 231.664822][ T5824] usb 9-1: device descriptor read/8, error -71 [ 231.731257][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 231.776168][ T5824] usb usb9-port1: unable to enumerate USB device [ 231.845329][T12922] FAULT_INJECTION: forcing a failure. [ 231.845329][T12922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.845350][T12922] CPU: 1 UID: 0 PID: 12922 Comm: syz.2.1688 Not tainted syzkaller #0 PREEMPT(full) [ 231.845362][T12922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.845368][T12922] Call Trace: [ 231.845372][T12922] [ 231.845377][T12922] dump_stack_lvl+0x100/0x190 [ 231.845396][T12922] should_fail_ex.cold+0x5/0xa [ 231.845412][T12922] _copy_from_user+0x2e/0xd0 [ 231.845428][T12922] copy_mount_options+0x76/0x190 [ 231.845447][T12922] __ia32_sys_mount+0x1ab/0x310 [ 231.845464][T12922] ? __pfx___ia32_sys_mount+0x10/0x10 [ 231.845483][T12922] __do_fast_syscall_32+0x13a/0x8b0 [ 231.845503][T12922] do_fast_syscall_32+0x32/0x70 [ 231.845519][T12922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.845534][T12922] RIP: 0023:0xf7f75fec [ 231.845547][T12922] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 231.845552][T12922] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 231.845563][T12922] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 231.845570][T12922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 231.845576][T12922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.845582][T12922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.845588][T12922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.845602][T12922] [ 231.849804][T12924] overlayfs: missing 'lowerdir' [ 232.164564][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.534282][ T5824] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 232.694893][ T5824] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 232.694918][ T5824] usb 7-1: no configurations [ 232.694924][ T5824] usb 7-1: can't read configurations, error -22 [ 232.777784][T12958] FAULT_INJECTION: forcing a failure. [ 232.777784][T12958] name failslab, interval 1, probability 0, space 0, times 0 [ 232.777806][T12958] CPU: 1 UID: 0 PID: 12958 Comm: syz.3.1699 Not tainted syzkaller #0 PREEMPT(full) [ 232.777818][T12958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.777825][T12958] Call Trace: [ 232.777829][T12958] [ 232.777834][T12958] dump_stack_lvl+0x100/0x190 [ 232.777853][T12958] should_fail_ex.cold+0x5/0xa [ 232.777868][T12958] should_failslab+0xc2/0x120 [ 232.777886][T12958] __kmalloc_cache_noprof+0x91/0x6d0 [ 232.777904][T12958] ? copy_mount_options+0x55/0x190 [ 232.777925][T12958] copy_mount_options+0x55/0x190 [ 232.777943][T12958] __ia32_sys_mount+0x1ab/0x310 [ 232.777958][T12958] ? __pfx___ia32_sys_mount+0x10/0x10 [ 232.777978][T12958] __do_fast_syscall_32+0x13a/0x8b0 [ 232.777997][T12958] do_fast_syscall_32+0x32/0x70 [ 232.778013][T12958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.778027][T12958] RIP: 0023:0xf708efec [ 232.778041][T12958] Code: Unable to access opcode bytes at 0xf708efc2. [ 232.778046][T12958] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 232.778057][T12958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 232.778064][T12958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 232.778071][T12958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.778079][T12958] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.778087][T12958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.778100][T12958] [ 232.816692][T12961] overlayfs: missing 'lowerdir' [ 232.841188][ T5824] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 232.995046][ T5824] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 232.995083][ T5824] usb 7-1: no configurations [ 232.995093][ T5824] usb 7-1: can't read configurations, error -22 [ 232.997316][ T5824] usb usb7-port1: attempt power cycle [ 233.134634][ T2193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.204504][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.210983][T12992] syzkaller0: entered promiscuous mode [ 233.211023][T12992] syzkaller0: entered allmulticast mode [ 233.364232][ T5824] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 233.380314][ T5824] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 233.380336][ T5824] usb 7-1: no configurations [ 233.380342][ T5824] usb 7-1: can't read configurations, error -22 [ 233.400793][T13008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.400820][T13008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.505632][ T5824] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 233.540481][ T5824] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 233.540505][ T5824] usb 7-1: no configurations [ 233.540511][ T5824] usb 7-1: can't read configurations, error -22 [ 233.540726][ T5824] usb usb7-port1: unable to enumerate USB device [ 234.244492][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.628931][T13070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'. [ 234.630356][ T5544] wiimote 0005:057E:0330.0022: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 234.630592][ T5544] wiimote 0005:057E:0330.0022: New device registered [ 234.632659][T13063] wiimote 0005:057E:0330.0022: Device removed [ 234.668803][T13078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.668834][T13078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.698228][T13074] fido_id[13074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.770095][T13087] syzkaller0: entered promiscuous mode [ 234.770111][T13087] syzkaller0: entered allmulticast mode [ 235.288041][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.687172][ T5544] wiimote 0005:057E:0330.0022: detected device: Nintendo Wii Remote Plus (Gen 2) [ 235.709231][ T5544] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0022/input/input58 [ 235.710463][ T5544] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0022/input/input59 [ 235.728473][ T5544] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0022/input/input57 [ 236.077027][T13141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1733'. [ 236.084289][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.107361][T13147] overlayfs: missing 'lowerdir' [ 236.166050][ T7836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.235662][T13159] syzkaller0: entered promiscuous mode [ 236.235683][T13159] syzkaller0: entered allmulticast mode [ 236.324349][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.645179][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.367139][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.503808][T13189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1744'. [ 237.555961][T13196] overlayfs: missing 'lowerdir' [ 237.821507][T13239] overlayfs: missing 'lowerdir' [ 238.065159][T13280] overlayfs: missing 'workdir' [ 238.125110][T13292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.301242][T13354] overlayfs: missing 'workdir' [ 238.369317][T13361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.404730][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.483617][T13423] overlayfs: missing 'workdir' [ 238.601695][T13443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.683924][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 238.977959][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 239.214476][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.294259][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.294377][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.283163][T13747] bond0: option mode: unable to set because the bond device is up [ 240.520798][ T5900] net_ratelimit: 1 callbacks suppressed [ 240.520813][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.053365][T13796] bond1: option mode: unable to set because the bond device has slaves [ 241.154757][ T35] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 241.294390][ T35] usb 8-1: device descriptor read/64, error -71 [ 241.337265][T13833] bond1: option mode: unable to set because the bond device has slaves [ 241.524491][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.544223][ T35] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 241.674281][ T35] usb 8-1: device descriptor read/64, error -71 [ 241.784427][ T35] usb usb8-port1: attempt power cycle [ 242.134244][ T35] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 242.155933][ T35] usb 8-1: device descriptor read/8, error -71 [ 242.244410][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.394359][ T35] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 242.415353][ T35] usb 8-1: device descriptor read/8, error -71 [ 242.525164][ T35] usb usb8-port1: unable to enumerate USB device [ 242.564494][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.099210][T13864] bond1: option mode: unable to set because the bond device has slaves [ 243.298056][T13889] bond1: option mode: unable to set because the bond device has slaves [ 243.326738][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 243.329889][T13892] FAULT_INJECTION: forcing a failure. [ 243.329889][T13892] name failslab, interval 1, probability 0, space 0, times 0 [ 243.329910][T13892] CPU: 3 UID: 0 PID: 13892 Comm: syz.2.1915 Not tainted syzkaller #0 PREEMPT(full) [ 243.329923][T13892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.329930][T13892] Call Trace: [ 243.329934][T13892] [ 243.329938][T13892] dump_stack_lvl+0x100/0x190 [ 243.329956][T13892] should_fail_ex.cold+0x5/0xa [ 243.329973][T13892] should_failslab+0xc2/0x120 [ 243.329989][T13892] kmem_cache_alloc_noprof+0x92/0x6a0 [ 243.330003][T13892] ? __kernfs_new_node+0xd2/0xa10 [ 243.330020][T13892] __kernfs_new_node+0xd2/0xa10 [ 243.330037][T13892] ? __pfx___kernfs_new_node+0x10/0x10 [ 243.330052][T13892] ? lock_acquire+0x1d1/0x380 [ 243.330068][T13892] ? kernfs_root+0x23/0x2a0 [ 243.330081][T13892] ? find_held_lock+0x2b/0x80 [ 243.330094][T13892] ? kernfs_root+0xee/0x2a0 [ 243.330106][T13892] ? kernfs_root+0xee/0x2a0 [ 243.330121][T13892] kernfs_create_dir_ns+0xa6/0x2b0 [ 243.330139][T13892] sysfs_create_dir_ns+0x13a/0x2b0 [ 243.330152][T13892] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 243.330163][T13892] ? find_held_lock+0x2b/0x80 [ 243.330174][T13892] ? kobject_add_internal+0x25f/0x930 [ 243.330195][T13892] ? kobject_add_internal+0x25f/0x930 [ 243.330209][T13892] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.330221][T13892] kobject_add_internal+0x2c8/0x930 [ 243.330237][T13892] kobject_add+0x16a/0x1e0 [ 243.330250][T13892] ? __pfx_kobject_add+0x10/0x10 [ 243.330265][T13892] ? __kasan_kmalloc+0xaa/0xb0 [ 243.330283][T13892] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 243.330307][T13892] ? get_device_parent+0x29a/0x4c0 [ 243.330331][T13892] get_device_parent+0x382/0x4c0 [ 243.330356][T13892] device_add+0xc3b/0x1970 [ 243.330372][T13892] ? __pfx_dev_set_name+0x10/0x10 [ 243.330382][T13892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.330397][T13892] ? __pfx_device_add+0x10/0x10 [ 243.330413][T13892] ? lockdep_init_map_type+0x5c/0x250 [ 243.330429][T13892] ? __init_waitqueue_head+0xca/0x150 [ 243.330448][T13892] wakeup_source_device_create+0x243/0x2e0 [ 243.330467][T13892] wakeup_source_sysfs_add+0x1c/0x90 [ 243.330483][T13892] wakeup_source_register+0x154/0x3e0 [ 243.330499][T13892] ep_create_wakeup_source+0x1df/0x2e0 [ 243.330513][T13892] ? __mutex_unlock_slowpath+0x35d/0x930 [ 243.330552][T13892] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 243.330569][T13892] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 243.330584][T13892] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 243.330604][T13892] do_epoll_ctl_file+0x1e26/0x36e0 [ 243.330626][T13892] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 243.330641][T13892] ? lock_acquire+0x1d1/0x380 [ 243.330656][T13892] ? __fget_files+0x34/0x3d0 [ 243.330670][T13892] ? find_held_lock+0x2b/0x80 [ 243.330682][T13892] ? __fget_files+0x215/0x3d0 [ 243.330698][T13892] ? __fget_files+0x21f/0x3d0 [ 243.330714][T13892] ? do_epoll_ctl+0xfd/0x1a0 [ 243.330729][T13892] do_epoll_ctl+0xfd/0x1a0 [ 243.330744][T13892] ? __pfx_do_epoll_ctl+0x10/0x10 [ 243.330763][T13892] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 243.330778][T13892] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 243.330798][T13892] __do_fast_syscall_32+0x13a/0x8b0 [ 243.330817][T13892] do_fast_syscall_32+0x32/0x70 [ 243.330834][T13892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.330848][T13892] RIP: 0023:0xf7f75fec [ 243.330861][T13892] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 243.330865][T13892] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 243.330876][T13892] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 243.330883][T13892] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 243.330890][T13892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.330896][T13892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.330902][T13892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.330915][T13892] [ 243.332197][T13892] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 243.479367][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 243.562593][T13919] bond1: option mode: unable to set because the bond device has slaves [ 243.605238][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.730386][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 243.858378][T13961] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 244.019329][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 244.278452][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0038 [ 244.284759][ T5900] wiimote 0005:057E:0330.0023: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 244.284912][ T5900] wiimote 0005:057E:0330.0023: New device registered [ 244.285448][T14040] wiimote 0005:057E:0330.0023: Device removed [ 244.340852][T14051] fido_id[14051]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.384227][ T5825] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 244.544836][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 244.544869][ T5825] usb 7-1: no configurations [ 244.544879][ T5825] usb 7-1: can't read configurations, error -22 [ 244.584253][ T5840] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 244.644955][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.684277][ T5825] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 244.744899][ T5840] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 244.746977][ T5840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.746997][ T5840] usb 8-1: config 0 has no interfaces? [ 244.748480][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 244.748498][ T5840] usb 8-1: Product: syz [ 244.748509][ T5840] usb 8-1: Manufacturer: syz [ 244.750533][ T5840] usb 8-1: config 0 descriptor?? [ 244.844820][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 244.844848][ T5825] usb 7-1: no configurations [ 244.844854][ T5825] usb 7-1: can't read configurations, error -22 [ 244.845073][ T5825] usb usb7-port1: attempt power cycle [ 244.956984][ T30] usb 8-1: USB disconnect, device number 39 [ 245.195128][ T5825] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 245.220287][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 245.220324][ T5825] usb 7-1: no configurations [ 245.220335][ T5825] usb 7-1: can't read configurations, error -22 [ 245.284470][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.344266][ T5825] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 245.365104][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 245.365127][ T5825] usb 7-1: no configurations [ 245.365134][ T5825] usb 7-1: can't read configurations, error -22 [ 245.365316][ T5825] usb usb7-port1: unable to enumerate USB device [ 245.498604][T14092] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 245.518349][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0038 [ 245.549623][T14100] nvmet: adding nsid 1 to subsystem testsubsys [ 245.585666][T14100] nvme_fabrics: missing parameter 'transport=%s' [ 245.585677][T14100] nvme_fabrics: missing parameter 'nqn=%s' [ 245.669729][ T5900] wiimote 0005:057E:0330.0024: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 245.669904][ T5900] wiimote 0005:057E:0330.0024: New device registered [ 245.670688][T14106] wiimote 0005:057E:0330.0024: Device removed [ 245.684528][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.700415][T14111] fido_id[14111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.845361][T14124] FAULT_INJECTION: forcing a failure. [ 245.845361][T14124] name failslab, interval 1, probability 0, space 0, times 0 [ 245.845381][T14124] CPU: 3 UID: 0 PID: 14124 Comm: syz.4.1970 Not tainted syzkaller #0 PREEMPT(full) [ 245.845394][T14124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.845400][T14124] Call Trace: [ 245.845404][T14124] [ 245.845408][T14124] dump_stack_lvl+0x100/0x190 [ 245.845427][T14124] should_fail_ex.cold+0x5/0xa [ 245.845443][T14124] should_failslab+0xc2/0x120 [ 245.845459][T14124] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 245.845473][T14124] ? kstrdup_const+0x63/0x80 [ 245.845486][T14124] kstrdup+0x51/0xe0 [ 245.845496][T14124] kstrdup_const+0x63/0x80 [ 245.845506][T14124] __kernfs_new_node+0x9b/0xa10 [ 245.845520][T14124] ? kernfs_add_one+0x611/0xaa0 [ 245.845535][T14124] ? kernfs_add_one+0x611/0xaa0 [ 245.845551][T14124] ? __pfx___kernfs_new_node+0x10/0x10 [ 245.845567][T14124] ? lock_acquire+0x1d1/0x380 [ 245.845581][T14124] ? kernfs_root+0x23/0x2a0 [ 245.845594][T14124] ? find_held_lock+0x2b/0x80 [ 245.845605][T14124] ? kernfs_root+0xee/0x2a0 [ 245.845616][T14124] ? kernfs_root+0xee/0x2a0 [ 245.845631][T14124] kernfs_create_dir_ns+0xa6/0x2b0 [ 245.845649][T14124] sysfs_create_dir_ns+0x13a/0x2b0 [ 245.845661][T14124] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 245.845673][T14124] ? find_held_lock+0x2b/0x80 [ 245.845684][T14124] ? kobject_add_internal+0x25f/0x930 [ 245.845696][T14124] ? kobject_add_internal+0x25f/0x930 [ 245.845709][T14124] ? class_dir_child_ns_type+0xd/0x60 [ 245.845726][T14124] kobject_add_internal+0x2c8/0x930 [ 245.845740][T14124] kobject_add+0x16a/0x1e0 [ 245.845752][T14124] ? __pfx_kobject_add+0x10/0x10 [ 245.845766][T14124] ? kobject_put+0xb9/0x640 [ 245.845782][T14124] device_add+0x294/0x1970 [ 245.845800][T14124] ? __pfx_dev_set_name+0x10/0x10 [ 245.845810][T14124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.845825][T14124] ? __pfx_device_add+0x10/0x10 [ 245.845842][T14124] ? lockdep_init_map_type+0x5c/0x250 [ 245.845858][T14124] ? __init_waitqueue_head+0xca/0x150 [ 245.845877][T14124] wakeup_source_device_create+0x243/0x2e0 [ 245.845895][T14124] wakeup_source_sysfs_add+0x1c/0x90 [ 245.845912][T14124] wakeup_source_register+0x154/0x3e0 [ 245.845928][T14124] ep_create_wakeup_source+0x1df/0x2e0 [ 245.845940][T14124] ? __mutex_unlock_slowpath+0x35d/0x930 [ 245.845957][T14124] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 245.845973][T14124] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 245.845988][T14124] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 245.846005][T14124] do_epoll_ctl_file+0x1e26/0x36e0 [ 245.846025][T14124] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 245.846039][T14124] ? lock_acquire+0x1d1/0x380 [ 245.846053][T14124] ? __fget_files+0x34/0x3d0 [ 245.846065][T14124] ? find_held_lock+0x2b/0x80 [ 245.846076][T14124] ? __fget_files+0x215/0x3d0 [ 245.846090][T14124] ? __fget_files+0x21f/0x3d0 [ 245.846105][T14124] ? do_epoll_ctl+0xfd/0x1a0 [ 245.846118][T14124] do_epoll_ctl+0xfd/0x1a0 [ 245.846139][T14124] ? __pfx_do_epoll_ctl+0x10/0x10 [ 245.846159][T14124] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 245.846195][T14124] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 245.846216][T14124] __do_fast_syscall_32+0x13a/0x8b0 [ 245.846235][T14124] do_fast_syscall_32+0x32/0x70 [ 245.846252][T14124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.846266][T14124] RIP: 0023:0xf7fd4fec [ 245.846278][T14124] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 245.846283][T14124] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 245.846294][T14124] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 245.846301][T14124] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 245.846307][T14124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.846313][T14124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.846319][T14124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.846333][T14124] [ 245.848232][T14124] kobject: kobject_add_internal failed for wakeup23 (error: -12 parent: wakeup) [ 245.890502][T14127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.060403][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0038 [ 246.091326][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.091553][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.091666][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.092955][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.093079][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.093120][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.093188][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.094620][T14146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.096085][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.174307][ T854] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 246.335002][ T854] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 246.335836][ T854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.335849][ T854] usb 9-1: config 0 has no interfaces? [ 246.338452][ T854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 246.338464][ T854] usb 9-1: Product: syz [ 246.338471][ T854] usb 9-1: Manufacturer: syz [ 246.340037][ T854] usb 9-1: config 0 descriptor?? [ 246.396640][T14167] FAULT_INJECTION: forcing a failure. [ 246.396640][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 246.396661][T14167] CPU: 2 UID: 0 PID: 14167 Comm: syz.3.1981 Not tainted syzkaller #0 PREEMPT(full) [ 246.396675][T14167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.396681][T14167] Call Trace: [ 246.396711][T14167] [ 246.396718][T14167] dump_stack_lvl+0x100/0x190 [ 246.396752][T14167] should_fail_ex.cold+0x5/0xa [ 246.396768][T14167] should_failslab+0xc2/0x120 [ 246.396784][T14167] kmem_cache_alloc_noprof+0x92/0x6a0 [ 246.396797][T14167] ? __asan_memcpy+0x3c/0x60 [ 246.396807][T14167] ? __kernfs_new_node+0xd2/0xa10 [ 246.396823][T14167] __kernfs_new_node+0xd2/0xa10 [ 246.396838][T14167] ? kernfs_add_one+0x611/0xaa0 [ 246.396852][T14167] ? kernfs_add_one+0x611/0xaa0 [ 246.396867][T14167] ? __pfx___kernfs_new_node+0x10/0x10 [ 246.396884][T14167] ? lock_acquire+0x1d1/0x380 [ 246.396898][T14167] ? kernfs_root+0x23/0x2a0 [ 246.396911][T14167] ? find_held_lock+0x2b/0x80 [ 246.396922][T14167] ? kernfs_root+0xee/0x2a0 [ 246.396933][T14167] ? kernfs_root+0xee/0x2a0 [ 246.396949][T14167] kernfs_create_dir_ns+0xa6/0x2b0 [ 246.396966][T14167] sysfs_create_dir_ns+0x13a/0x2b0 [ 246.396979][T14167] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 246.396990][T14167] ? find_held_lock+0x2b/0x80 [ 246.397001][T14167] ? kobject_add_internal+0x25f/0x930 [ 246.397013][T14167] ? kobject_add_internal+0x25f/0x930 [ 246.397026][T14167] ? class_dir_child_ns_type+0xd/0x60 [ 246.397044][T14167] kobject_add_internal+0x2c8/0x930 [ 246.397058][T14167] kobject_add+0x16a/0x1e0 [ 246.397071][T14167] ? __pfx_kobject_add+0x10/0x10 [ 246.397087][T14167] ? kobject_put+0xb9/0x640 [ 246.397102][T14167] device_add+0x294/0x1970 [ 246.397120][T14167] ? __pfx_dev_set_name+0x10/0x10 [ 246.397131][T14167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.397146][T14167] ? __pfx_device_add+0x10/0x10 [ 246.397162][T14167] ? lockdep_init_map_type+0x5c/0x250 [ 246.397179][T14167] ? __init_waitqueue_head+0xca/0x150 [ 246.397201][T14167] wakeup_source_device_create+0x243/0x2e0 [ 246.397220][T14167] wakeup_source_sysfs_add+0x1c/0x90 [ 246.397236][T14167] wakeup_source_register+0x154/0x3e0 [ 246.397251][T14167] ep_create_wakeup_source+0x1df/0x2e0 [ 246.397269][T14167] ? __mutex_unlock_slowpath+0x35d/0x930 [ 246.397293][T14167] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 246.397316][T14167] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 246.397341][T14167] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 246.397366][T14167] do_epoll_ctl_file+0x1e26/0x36e0 [ 246.397385][T14167] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 246.397400][T14167] ? lock_acquire+0x1d1/0x380 [ 246.397413][T14167] ? __fget_files+0x34/0x3d0 [ 246.397425][T14167] ? find_held_lock+0x2b/0x80 [ 246.397437][T14167] ? __fget_files+0x215/0x3d0 [ 246.397451][T14167] ? __fget_files+0x21f/0x3d0 [ 246.397466][T14167] ? do_epoll_ctl+0xfd/0x1a0 [ 246.397479][T14167] do_epoll_ctl+0xfd/0x1a0 [ 246.397493][T14167] ? __pfx_do_epoll_ctl+0x10/0x10 [ 246.397512][T14167] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 246.397528][T14167] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 246.397547][T14167] __do_fast_syscall_32+0x13a/0x8b0 [ 246.397566][T14167] do_fast_syscall_32+0x32/0x70 [ 246.397583][T14167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.397597][T14167] RIP: 0023:0xf708efec [ 246.397610][T14167] Code: Unable to access opcode bytes at 0xf708efc2. [ 246.397615][T14167] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 246.397626][T14167] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 246.397632][T14167] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 246.397639][T14167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.397645][T14167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.397651][T14167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.397665][T14167] [ 246.397681][T14167] kobject: kobject_add_internal failed for wakeup23 (error: -12 parent: wakeup) [ 246.542757][ T5824] usb 9-1: USB disconnect, device number 25 [ 246.657150][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 246.725036][ T5900] wiimote 0005:057E:0330.0024: detected device: Nintendo Wii Remote Plus (Gen 2) [ 246.732621][ T5900] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0024/input/input61 [ 246.748070][ T5900] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0024/input/input62 [ 246.754860][ T5900] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0024/input/input60 [ 247.350069][T14233] FAULT_INJECTION: forcing a failure. [ 247.350069][T14233] name failslab, interval 1, probability 0, space 0, times 0 [ 247.350090][T14233] CPU: 3 UID: 0 PID: 14233 Comm: syz.2.1991 Not tainted syzkaller #0 PREEMPT(full) [ 247.350103][T14233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.350109][T14233] Call Trace: [ 247.350113][T14233] [ 247.350117][T14233] dump_stack_lvl+0x100/0x190 [ 247.350136][T14233] should_fail_ex.cold+0x5/0xa [ 247.350152][T14233] should_failslab+0xc2/0x120 [ 247.350168][T14233] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 247.350190][T14233] ? kstrdup_const+0x63/0x80 [ 247.350204][T14233] kstrdup+0x51/0xe0 [ 247.350215][T14233] kstrdup_const+0x63/0x80 [ 247.350225][T14233] __kernfs_new_node+0x9b/0xa10 [ 247.350241][T14233] ? kernfs_add_one+0x611/0xaa0 [ 247.350256][T14233] ? kernfs_add_one+0x611/0xaa0 [ 247.350272][T14233] ? __pfx___kernfs_new_node+0x10/0x10 [ 247.350288][T14233] ? lock_acquire+0x1d1/0x380 [ 247.350304][T14233] ? kernfs_root+0x23/0x2a0 [ 247.350316][T14233] ? find_held_lock+0x2b/0x80 [ 247.350327][T14233] ? kernfs_root+0xee/0x2a0 [ 247.350339][T14233] ? kernfs_root+0xee/0x2a0 [ 247.350354][T14233] kernfs_create_dir_ns+0xa6/0x2b0 [ 247.350372][T14233] sysfs_create_dir_ns+0x13a/0x2b0 [ 247.350385][T14233] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 247.350396][T14233] ? find_held_lock+0x2b/0x80 [ 247.350407][T14233] ? kobject_add_internal+0x25f/0x930 [ 247.350419][T14233] ? kobject_add_internal+0x25f/0x930 [ 247.350432][T14233] ? class_dir_child_ns_type+0xd/0x60 [ 247.350451][T14233] kobject_add_internal+0x2c8/0x930 [ 247.350465][T14233] kobject_add+0x16a/0x1e0 [ 247.350477][T14233] ? __pfx_kobject_add+0x10/0x10 [ 247.350491][T14233] ? kobject_put+0xb9/0x640 [ 247.350506][T14233] device_add+0x294/0x1970 [ 247.350521][T14233] ? __pfx_dev_set_name+0x10/0x10 [ 247.350532][T14233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.350547][T14233] ? __pfx_device_add+0x10/0x10 [ 247.350564][T14233] ? lockdep_init_map_type+0x5c/0x250 [ 247.350581][T14233] ? __init_waitqueue_head+0xca/0x150 [ 247.350601][T14233] wakeup_source_device_create+0x243/0x2e0 [ 247.350620][T14233] wakeup_source_sysfs_add+0x1c/0x90 [ 247.350637][T14233] wakeup_source_register+0x154/0x3e0 [ 247.350653][T14233] ep_create_wakeup_source+0x1df/0x2e0 [ 247.350666][T14233] ? __mutex_unlock_slowpath+0x35d/0x930 [ 247.350683][T14233] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 247.350699][T14233] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 247.350714][T14233] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 247.350732][T14233] do_epoll_ctl_file+0x1e26/0x36e0 [ 247.350751][T14233] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 247.350766][T14233] ? lock_acquire+0x1d1/0x380 [ 247.350780][T14233] ? __fget_files+0x34/0x3d0 [ 247.350792][T14233] ? find_held_lock+0x2b/0x80 [ 247.350804][T14233] ? __fget_files+0x215/0x3d0 [ 247.350818][T14233] ? __fget_files+0x21f/0x3d0 [ 247.350833][T14233] ? do_epoll_ctl+0xfd/0x1a0 [ 247.350847][T14233] do_epoll_ctl+0xfd/0x1a0 [ 247.350863][T14233] ? __pfx_do_epoll_ctl+0x10/0x10 [ 247.350881][T14233] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 247.350897][T14233] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 247.350917][T14233] __do_fast_syscall_32+0x13a/0x8b0 [ 247.350966][T14233] do_fast_syscall_32+0x32/0x70 [ 247.350985][T14233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.351001][T14233] RIP: 0023:0xf7f75fec [ 247.351015][T14233] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 247.351020][T14233] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 247.351032][T14233] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 247.351041][T14233] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 247.351048][T14233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.351056][T14233] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 247.351063][T14233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.351076][T14233] [ 247.351083][T14233] kobject: kobject_add_internal failed for wakeup24 (error: -12 parent: wakeup) [ 247.435482][ T5825] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 247.525694][ T5746] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 247.525734][ T5746] Bluetooth: hci4: Injecting HCI hardware error event [ 247.526308][ T5746] Bluetooth: hci4: hardware error 0x00 [ 247.604697][ T5825] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 247.605919][ T5825] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.605932][ T5825] usb 9-1: config 0 has no interfaces? [ 247.607184][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 247.607197][ T5825] usb 9-1: Product: syz [ 247.607204][ T5825] usb 9-1: Manufacturer: syz [ 247.609085][ T5825] usb 9-1: config 0 descriptor?? [ 247.644237][ T42] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 247.797248][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 247.797274][ T42] usb 8-1: no configurations [ 247.797281][ T42] usb 8-1: can't read configurations, error -22 [ 247.813532][ T5825] usb 9-1: USB disconnect, device number 26 [ 247.874108][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.876980][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.885676][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.898127][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.898710][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.934275][ T42] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 248.084698][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 248.084723][ T42] usb 8-1: no configurations [ 248.084729][ T42] usb 8-1: can't read configurations, error -22 [ 248.084917][ T42] usb usb8-port1: attempt power cycle [ 248.233920][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.234021][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.234079][T14271] bridge_slave_0: entered allmulticast mode [ 248.235024][T14271] bridge_slave_0: entered promiscuous mode [ 248.236825][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.236886][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.237042][T14271] bridge_slave_1: entered allmulticast mode [ 248.237739][T14271] bridge_slave_1: entered promiscuous mode [ 248.256412][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.257896][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.270824][T14271] team0: Port device team_slave_0 added [ 248.272946][T14271] team0: Port device team_slave_1 added [ 248.285378][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.285390][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.285403][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.286422][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.286430][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.286443][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.306120][T14271] hsr_slave_0: entered promiscuous mode [ 248.306678][T14271] hsr_slave_1: entered promiscuous mode [ 248.306982][T14271] debugfs: 'hsr0' already exists in 'hsr' [ 248.306994][T14271] Cannot create hsr debugfs directory [ 248.424495][ T42] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 248.437349][T14271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.445177][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 248.445198][ T42] usb 8-1: no configurations [ 248.445205][ T42] usb 8-1: can't read configurations, error -22 [ 248.518016][T14271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.571252][T14271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.584266][ T42] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 248.596944][ T5825] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 248.605260][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 248.605284][ T42] usb 8-1: no configurations [ 248.605290][ T42] usb 8-1: can't read configurations, error -22 [ 248.605480][ T42] usb usb8-port1: unable to enumerate USB device [ 248.639062][T14271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.721326][T14271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.724031][T14271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.733618][T14271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.736283][T14271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.736627][ T5825] usb 9-1: device descriptor read/64, error -71 [ 248.740229][T14271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.743560][T14271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.744332][T14271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.747816][T14271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.758266][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.758313][T14271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.758416][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.758462][T14271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.793555][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.800140][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.801748][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.807070][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.812088][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.812162][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.816278][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.816321][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.835712][T14271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.984302][ T5825] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 249.040230][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.060374][T14271] veth0_vlan: entered promiscuous mode [ 249.063529][T14271] veth1_vlan: entered promiscuous mode [ 249.080051][T14271] veth0_macvtap: entered promiscuous mode [ 249.083526][T14271] veth1_macvtap: entered promiscuous mode [ 249.090446][T14271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.099589][T14271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.115859][ T5825] usb 9-1: device descriptor read/64, error -71 [ 249.138172][T12900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138214][T12900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138243][T12900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138271][T12900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.160966][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.160981][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.181026][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.181046][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.224596][ T5825] usb usb9-port1: attempt power cycle [ 249.574354][ T5825] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 249.595552][ T5825] usb 9-1: device descriptor read/8, error -71 [ 249.607584][ T5746] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 249.855143][ T5825] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 249.875079][ T5825] usb 9-1: device descriptor read/8, error -71 [ 249.894289][ T5824] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 249.925168][ T5746] Bluetooth: hci1: command tx timeout [ 249.984683][ T5825] usb usb9-port1: unable to enumerate USB device [ 250.055129][ T5824] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 250.056426][ T5824] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.056446][ T5824] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 250.059259][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 250.059279][ T5824] usb 7-1: Product: syz [ 250.059291][ T5824] usb 7-1: Manufacturer: syz [ 250.264605][ T5824] usb 7-1: USB disconnect, device number 54 [ 250.648789][T14652] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2015'. [ 250.884811][ T854] net_ratelimit: 11 callbacks suppressed [ 250.884824][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.944257][ T35] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 251.094880][ T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.094904][ T35] usb 8-1: no configurations [ 251.094934][ T35] usb 8-1: can't read configurations, error -22 [ 251.156385][T14685] vlan2: entered allmulticast mode [ 251.156399][T14685] bond0: entered allmulticast mode [ 251.156408][T14685] bond_slave_0: entered allmulticast mode [ 251.156418][T14685] bond_slave_1: entered allmulticast mode [ 251.158257][T14685] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2025'. [ 251.173144][T14685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.179187][T14685] bond_slave_0: left allmulticast mode [ 251.180690][T14685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.181080][T14685] bond_slave_1: left allmulticast mode [ 251.181745][T14685] bond0 (unregistering): Released all slaves [ 251.224749][ T35] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 251.364713][ T2193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.376285][ T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.376320][ T35] usb 8-1: no configurations [ 251.376330][ T35] usb 8-1: can't read configurations, error -22 [ 251.376529][ T35] usb usb8-port1: attempt power cycle [ 251.714248][ T35] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 251.735182][ T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.735206][ T35] usb 8-1: no configurations [ 251.735213][ T35] usb 8-1: can't read configurations, error -22 [ 251.764275][ T854] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 251.864298][ T35] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 251.885836][ T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.885876][ T35] usb 8-1: no configurations [ 251.885888][ T35] usb 8-1: can't read configurations, error -22 [ 251.886242][ T35] usb usb8-port1: unable to enumerate USB device [ 251.924520][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.926795][ T854] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 251.928377][ T854] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.928399][ T854] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 251.930193][ T854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 251.930215][ T854] usb 9-1: Product: syz [ 251.930230][ T854] usb 9-1: Manufacturer: syz [ 252.014327][ T5746] Bluetooth: hci1: command tx timeout [ 252.141881][ T30] usb 9-1: USB disconnect, device number 31 [ 252.924264][ T854] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 252.964544][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.074387][ T854] usb 9-1: Using ep0 maxpacket: 8 [ 253.076536][ T854] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 253.077529][ T854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.079403][ T854] usb 9-1: config 0 descriptor?? [ 253.086173][ T854] usb 9-1: probing VID:PID(0424:012C) [ 253.087366][ T854] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 253.094413][ T854] vub300 9-1:0.0: probe with driver vub300 failed with error -22 [ 253.285045][T14738] macvlan0: entered promiscuous mode [ 253.285062][T14738] dummy0: entered promiscuous mode [ 253.286677][T14738] macvlan0: entered allmulticast mode [ 253.286689][T14738] dummy0: entered allmulticast mode [ 253.291806][ T5824] usb 9-1: USB disconnect, device number 32 [ 253.584335][ T2238] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 253.745361][ T2238] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 253.746172][ T2238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.746185][ T2238] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 253.747720][ T2238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 253.747732][ T2238] usb 7-1: Product: syz [ 253.747740][ T2238] usb 7-1: Manufacturer: syz [ 253.955918][ T2238] usb 7-1: USB disconnect, device number 55 [ 254.005073][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.085204][ T5746] Bluetooth: hci1: command tx timeout [ 254.364410][ T50] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 254.374276][ T30] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 254.404669][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.501316][ T5746] Bluetooth: Wrong link type (-57) [ 254.525132][ T50] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 254.525526][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 254.526359][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.526380][ T50] usb 6-1: config 0 has no interfaces? [ 254.526954][ T30] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 254.528399][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.529744][ T50] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 254.529760][ T30] usb 8-1: config 0 descriptor?? [ 254.529765][ T50] usb 6-1: Product: syz [ 254.529778][ T50] usb 6-1: Manufacturer: syz [ 254.529791][ T50] usb 6-1: SerialNumber: syz [ 254.537963][ T30] usb 8-1: probing VID:PID(0424:012C) [ 254.538064][ T50] usb 6-1: config 0 descriptor?? [ 254.538606][ T30] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 254.545059][ T30] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 254.737809][ T50] usb 8-1: USB disconnect, device number 48 [ 254.753661][ T854] usb 6-1: USB disconnect, device number 34 [ 254.792662][ T30] wiimote 0005:057E:0330.0025: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 254.792809][ T30] wiimote 0005:057E:0330.0025: New device registered [ 254.793309][T14867] wiimote 0005:057E:0330.0025: Device removed [ 254.818042][T14873] fido_id[14873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.054480][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.074238][ T30] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 255.207164][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.229097][ T30] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 255.230266][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.230284][ T30] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 255.231851][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 255.231871][ T30] usb 7-1: Product: syz [ 255.231882][ T30] usb 7-1: Manufacturer: syz [ 255.342331][ T5825] wiimote 0005:057E:0330.0026: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 255.342670][ T5825] wiimote 0005:057E:0330.0026: New device registered [ 255.350605][T14914] wiimote 0005:057E:0330.0026: Device removed [ 255.387380][T14923] fido_id[14923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.421522][T14921] md: pers->run() failed ... [ 255.437966][ T42] usb 7-1: USB disconnect, device number 56 [ 255.454793][T14937] lo: entered allmulticast mode [ 255.455724][T14935] lo: left allmulticast mode [ 255.484456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.577354][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2070'. [ 255.764278][ T5824] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 255.774372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.854780][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.924342][ T5824] usb 8-1: Using ep0 maxpacket: 8 [ 255.924866][ T5824] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 255.925788][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.929538][ T5824] usb 8-1: config 0 descriptor?? [ 255.932988][ T5824] usb 8-1: probing VID:PID(0424:012C) [ 255.933652][ T5824] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 255.947915][ T5824] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 256.094599][ T854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.140923][ T42] usb 8-1: USB disconnect, device number 49 [ 256.164354][ T5746] Bluetooth: hci1: command tx timeout [ 256.254265][ T5824] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 256.404343][ T5825] wiimote 0005:057E:0330.0026: detected device: Nintendo Wii Remote Plus (Gen 2) [ 256.405057][ T5824] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 256.406010][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.406030][ T5824] usb 7-1: config 0 has no interfaces? [ 256.407861][ T5824] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 256.407881][ T5824] usb 7-1: Product: syz [ 256.407893][ T5824] usb 7-1: Manufacturer: syz [ 256.407906][ T5824] usb 7-1: SerialNumber: syz [ 256.413117][ T5824] usb 7-1: config 0 descriptor?? [ 256.432179][ T5825] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0026/input/input64 [ 256.442663][ T5825] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0026/input/input65 [ 256.475842][ T5825] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0026/input/input63 [ 256.507383][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 256.629231][ T50] usb 7-1: USB disconnect, device number 57 [ 256.795777][T15024] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 256.852853][T15024] bond3: (slave veth3): Enslaving as an active interface with a down link [ 256.891849][T15024] bond3: (slave veth5): Enslaving as an active interface with a down link [ 256.921157][T15024] FAULT_INJECTION: forcing a failure. [ 256.921157][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 256.921189][T15024] CPU: 3 UID: 0 PID: 15024 Comm: syz.3.2081 Not tainted syzkaller #0 PREEMPT(full) [ 256.921212][T15024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.921224][T15024] Call Trace: [ 256.921231][T15024] [ 256.921238][T15024] dump_stack_lvl+0x100/0x190 [ 256.921268][T15024] should_fail_ex.cold+0x5/0xa [ 256.921291][T15024] should_failslab+0xc2/0x120 [ 256.921315][T15024] __kmalloc_cache_node_noprof+0x94/0x720 [ 256.921339][T15024] ? lockdep_init_map_type+0x5c/0x250 [ 256.921365][T15024] ? __alloc_workqueue+0x1211/0x1950 [ 256.921388][T15024] __alloc_workqueue+0x1211/0x1950 [ 256.921414][T15024] alloc_workqueue_noprof+0xc7/0x130 [ 256.921432][T15024] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 256.921461][T15024] ? __pfx___debug_object_init+0x10/0x10 [ 256.921494][T15024] nci_register_device+0x394/0xb80 [ 256.921523][T15024] ? __pfx_nci_register_device+0x10/0x10 [ 256.921549][T15024] ? lockdep_init_map_type+0x5c/0x250 [ 256.921578][T15024] virtual_ncidev_open+0x141/0x220 [ 256.921605][T15024] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 256.921633][T15024] misc_open+0x26d/0x450 [ 256.921654][T15024] ? __pfx_misc_open+0x10/0x10 [ 256.921673][T15024] chrdev_open+0x234/0x6a0 [ 256.921699][T15024] ? __pfx_apparmor_file_open+0x10/0x10 [ 256.921729][T15024] ? __pfx_chrdev_open+0x10/0x10 [ 256.921751][T15024] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 256.921780][T15024] do_dentry_open+0x6ab/0x14d0 [ 256.921800][T15024] ? __pfx_chrdev_open+0x10/0x10 [ 256.921825][T15024] vfs_open+0x82/0x3f0 [ 256.921850][T15024] path_openat+0x19fa/0x2440 [ 256.921875][T15024] ? __pfx_path_openat+0x10/0x10 [ 256.921903][T15024] do_file_open+0x20e/0x430 [ 256.921925][T15024] ? __pfx_do_file_open+0x10/0x10 [ 256.921963][T15024] ? _raw_spin_unlock+0x28/0x50 [ 256.921985][T15024] ? alloc_fd+0x471/0x7a0 [ 256.922012][T15024] do_sys_openat2+0x10f/0x1e0 [ 256.922036][T15024] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.922065][T15024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.922102][T15024] __ia32_compat_sys_openat+0x12d/0x210 [ 256.922128][T15024] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 256.922164][T15024] __do_fast_syscall_32+0x13a/0x8b0 [ 256.922220][T15024] do_fast_syscall_32+0x32/0x70 [ 256.922251][T15024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.922273][T15024] RIP: 0023:0xf708efec [ 256.922295][T15024] Code: Unable to access opcode bytes at 0xf708efc2. [ 256.922303][T15024] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 256.922322][T15024] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 256.922336][T15024] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.922348][T15024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.922358][T15024] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.922368][T15024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.922391][T15024] [ 256.933573][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2081'. [ 256.935279][T15024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.005107][ T2238] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 257.125245][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.175071][ T2238] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 257.176046][ T2238] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.176066][ T2238] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 257.178962][ T2238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 257.178983][ T2238] usb 9-1: Product: syz [ 257.178995][ T2238] usb 9-1: Manufacturer: syz [ 257.260152][T15202] FAULT_INJECTION: forcing a failure. [ 257.260152][T15202] name failslab, interval 1, probability 0, space 0, times 0 [ 257.260173][T15202] CPU: 3 UID: 0 PID: 15202 Comm: syz.2.2088 Not tainted syzkaller #0 PREEMPT(full) [ 257.260186][T15202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.260193][T15202] Call Trace: [ 257.260197][T15202] [ 257.260203][T15202] dump_stack_lvl+0x100/0x190 [ 257.260223][T15202] should_fail_ex.cold+0x5/0xa [ 257.260239][T15202] should_failslab+0xc2/0x120 [ 257.260255][T15202] kmem_cache_alloc_noprof+0x92/0x6a0 [ 257.260269][T15202] ? kernfs_add_one+0x611/0xaa0 [ 257.260284][T15202] ? __kernfs_new_node+0xd2/0xa10 [ 257.260301][T15202] __kernfs_new_node+0xd2/0xa10 [ 257.260316][T15202] ? kernfs_add_one+0x214/0xaa0 [ 257.260330][T15202] ? __pfx___kernfs_new_node+0x10/0x10 [ 257.260346][T15202] ? lock_acquire+0x1d1/0x380 [ 257.260360][T15202] ? kernfs_root+0x23/0x2a0 [ 257.260373][T15202] ? find_held_lock+0x2b/0x80 [ 257.260384][T15202] ? kernfs_root+0xee/0x2a0 [ 257.260396][T15202] ? kernfs_root+0xee/0x2a0 [ 257.260411][T15202] kernfs_new_node+0x117/0x150 [ 257.260428][T15202] kernfs_create_link+0xcc/0x240 [ 257.260440][T15202] sysfs_do_create_link_sd+0x90/0x140 [ 257.260455][T15202] sysfs_create_link+0x61/0xc0 [ 257.260473][T15202] device_add+0x553/0x1970 [ 257.260499][T15202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.260526][T15202] ? __pfx_device_add+0x10/0x10 [ 257.260550][T15202] ? lockdep_init_map_type+0x5c/0x250 [ 257.260566][T15202] ? __init_waitqueue_head+0xca/0x150 [ 257.260586][T15202] wakeup_source_device_create+0x243/0x2e0 [ 257.260621][T15202] wakeup_source_sysfs_add+0x1c/0x90 [ 257.260641][T15202] wakeup_source_register+0x154/0x3e0 [ 257.260658][T15202] ep_create_wakeup_source+0x1df/0x2e0 [ 257.260674][T15202] ? __mutex_unlock_slowpath+0x35d/0x930 [ 257.260692][T15202] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 257.260709][T15202] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 257.260723][T15202] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 257.260742][T15202] do_epoll_ctl_file+0x1e26/0x36e0 [ 257.260762][T15202] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 257.260776][T15202] ? lock_acquire+0x1d1/0x380 [ 257.260792][T15202] ? __fget_files+0x34/0x3d0 [ 257.260805][T15202] ? find_held_lock+0x2b/0x80 [ 257.260819][T15202] ? __fget_files+0x215/0x3d0 [ 257.260834][T15202] ? __fget_files+0x21f/0x3d0 [ 257.260850][T15202] ? do_epoll_ctl+0xfd/0x1a0 [ 257.260863][T15202] do_epoll_ctl+0xfd/0x1a0 [ 257.260879][T15202] ? __pfx_do_epoll_ctl+0x10/0x10 [ 257.260898][T15202] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 257.260913][T15202] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 257.260933][T15202] __do_fast_syscall_32+0x13a/0x8b0 [ 257.260953][T15202] do_fast_syscall_32+0x32/0x70 [ 257.260969][T15202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.260983][T15202] RIP: 0023:0xf7f13fec [ 257.260995][T15202] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 257.261001][T15202] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 257.261013][T15202] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 257.261025][T15202] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 257.261032][T15202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.261038][T15202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.261045][T15202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.261060][T15202] [ 257.388724][ T2238] usb 9-1: USB disconnect, device number 33 [ 257.445276][ T2193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.484352][ T35] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 257.628890][ T5746] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 257.644229][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 257.644726][ T35] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 257.645643][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.647026][ T35] usb 8-1: config 0 descriptor?? [ 257.651617][ T35] usb 8-1: probing VID:PID(0424:012C) [ 257.656260][ T35] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 257.657497][ T35] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 257.858130][ T2238] usb 8-1: USB disconnect, device number 50 [ 257.994395][ T42] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 258.003065][T15250] FAULT_INJECTION: forcing a failure. [ 258.003065][T15250] name failslab, interval 1, probability 0, space 0, times 0 [ 258.003085][T15250] CPU: 2 UID: 0 PID: 15250 Comm: syz.4.2098 Not tainted syzkaller #0 PREEMPT(full) [ 258.003098][T15250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.003106][T15250] Call Trace: [ 258.003115][T15250] [ 258.003120][T15250] dump_stack_lvl+0x100/0x190 [ 258.003140][T15250] should_fail_ex.cold+0x5/0xa [ 258.003156][T15250] should_failslab+0xc2/0x120 [ 258.003172][T15250] kmem_cache_alloc_noprof+0x92/0x6a0 [ 258.003186][T15250] ? __asan_memcpy+0x3c/0x60 [ 258.003197][T15250] ? __kernfs_new_node+0xd2/0xa10 [ 258.003214][T15250] __kernfs_new_node+0xd2/0xa10 [ 258.003231][T15250] ? __pfx___kernfs_new_node+0x10/0x10 [ 258.003246][T15250] ? lock_acquire+0x1d1/0x380 [ 258.003261][T15250] ? kernfs_root+0x23/0x2a0 [ 258.003274][T15250] ? find_held_lock+0x2b/0x80 [ 258.003285][T15250] ? kernfs_root+0xee/0x2a0 [ 258.003297][T15250] ? kernfs_root+0xee/0x2a0 [ 258.003312][T15250] kernfs_new_node+0x117/0x150 [ 258.003329][T15250] kernfs_create_link+0xcc/0x240 [ 258.003342][T15250] sysfs_do_create_link_sd+0x90/0x140 [ 258.003355][T15250] sysfs_create_link+0x61/0xc0 [ 258.003368][T15250] device_add+0x675/0x1970 [ 258.003385][T15250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.003401][T15250] ? __pfx_device_add+0x10/0x10 [ 258.003417][T15250] ? lockdep_init_map_type+0x5c/0x250 [ 258.003433][T15250] ? __init_waitqueue_head+0xca/0x150 [ 258.003452][T15250] wakeup_source_device_create+0x243/0x2e0 [ 258.003470][T15250] wakeup_source_sysfs_add+0x1c/0x90 [ 258.003487][T15250] wakeup_source_register+0x154/0x3e0 [ 258.003504][T15250] ep_create_wakeup_source+0x1df/0x2e0 [ 258.003517][T15250] ? __mutex_unlock_slowpath+0x35d/0x930 [ 258.003535][T15250] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 258.003555][T15250] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 258.003570][T15250] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 258.003588][T15250] do_epoll_ctl_file+0x1e26/0x36e0 [ 258.003607][T15250] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 258.003621][T15250] ? lock_acquire+0x1d1/0x380 [ 258.003635][T15250] ? __fget_files+0x34/0x3d0 [ 258.003648][T15250] ? find_held_lock+0x2b/0x80 [ 258.003660][T15250] ? __fget_files+0x215/0x3d0 [ 258.003674][T15250] ? __fget_files+0x21f/0x3d0 [ 258.003690][T15250] ? do_epoll_ctl+0xfd/0x1a0 [ 258.003703][T15250] do_epoll_ctl+0xfd/0x1a0 [ 258.003719][T15250] ? __pfx_do_epoll_ctl+0x10/0x10 [ 258.003738][T15250] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 258.003753][T15250] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 258.003773][T15250] __do_fast_syscall_32+0x13a/0x8b0 [ 258.003792][T15250] do_fast_syscall_32+0x32/0x70 [ 258.003809][T15250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.003824][T15250] RIP: 0023:0xf7fd4fec [ 258.003836][T15250] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 258.003841][T15250] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 258.003852][T15250] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 258.003859][T15250] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 258.003866][T15250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.003872][T15250] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.003878][T15250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.003892][T15250] [ 258.144918][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 258.145800][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.145813][ T42] usb 7-1: config 0 has no interfaces? [ 258.148996][ T42] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 258.149017][ T42] usb 7-1: Product: syz [ 258.149029][ T42] usb 7-1: Manufacturer: syz [ 258.149040][ T42] usb 7-1: SerialNumber: syz [ 258.151016][ T42] usb 7-1: config 0 descriptor?? [ 258.170988][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.313193][T15271] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 258.313209][T15271] device-mapper: ioctl: error adding target to table [ 258.358248][ T35] usb 7-1: USB disconnect, device number 58 [ 258.614384][ T42] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 258.775463][ T42] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 258.776652][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.776670][ T42] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 258.778178][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 258.778195][ T42] usb 9-1: Product: syz [ 258.778207][ T42] usb 9-1: Manufacturer: syz [ 258.986917][ T35] usb 9-1: USB disconnect, device number 34 [ 259.006712][T15302] FAULT_INJECTION: forcing a failure. [ 259.006712][T15302] name failslab, interval 1, probability 0, space 0, times 0 [ 259.006733][T15302] CPU: 2 UID: 0 PID: 15302 Comm: syz.2.2107 Not tainted syzkaller #0 PREEMPT(full) [ 259.006746][T15302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.006754][T15302] Call Trace: [ 259.006758][T15302] [ 259.006764][T15302] dump_stack_lvl+0x100/0x190 [ 259.006784][T15302] should_fail_ex.cold+0x5/0xa [ 259.006799][T15302] should_failslab+0xc2/0x120 [ 259.006815][T15302] kmem_cache_alloc_noprof+0x92/0x6a0 [ 259.006828][T15302] ? __kernfs_new_node+0xd2/0xa10 [ 259.006846][T15302] __kernfs_new_node+0xd2/0xa10 [ 259.006860][T15302] ? __pfx_idr_alloc_u32+0x10/0x10 [ 259.006901][T15302] ? __pfx___kernfs_new_node+0x10/0x10 [ 259.006920][T15302] ? lock_acquire+0x1d1/0x380 [ 259.006936][T15302] ? kernfs_root+0x23/0x2a0 [ 259.006950][T15302] ? find_held_lock+0x2b/0x80 [ 259.006963][T15302] ? kernfs_root+0xee/0x2a0 [ 259.006975][T15302] ? kernfs_root+0xee/0x2a0 [ 259.006991][T15302] kernfs_new_node+0x117/0x150 [ 259.007010][T15302] __kernfs_create_file+0x53/0x350 [ 259.007030][T15302] sysfs_add_file_mode_ns+0x207/0x3c0 [ 259.007047][T15302] internal_create_group+0x593/0xfb0 [ 259.007066][T15302] ? __pfx_internal_create_group+0x10/0x10 [ 259.007081][T15302] ? kernfs_create_link+0x1bd/0x240 [ 259.007094][T15302] internal_create_groups+0x9d/0x150 [ 259.007109][T15302] device_add+0xf60/0x1970 [ 259.007127][T15302] ? __pfx_device_add+0x10/0x10 [ 259.007143][T15302] ? lockdep_init_map_type+0x5c/0x250 [ 259.007159][T15302] ? __init_waitqueue_head+0xca/0x150 [ 259.007179][T15302] wakeup_source_device_create+0x243/0x2e0 [ 259.007197][T15302] wakeup_source_sysfs_add+0x1c/0x90 [ 259.007214][T15302] wakeup_source_register+0x154/0x3e0 [ 259.007230][T15302] ep_create_wakeup_source+0x1df/0x2e0 [ 259.007244][T15302] ? __mutex_unlock_slowpath+0x35d/0x930 [ 259.007261][T15302] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 259.007278][T15302] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 259.007292][T15302] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 259.007310][T15302] do_epoll_ctl_file+0x1e26/0x36e0 [ 259.007330][T15302] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 259.007345][T15302] ? lock_acquire+0x1d1/0x380 [ 259.007358][T15302] ? __fget_files+0x34/0x3d0 [ 259.007371][T15302] ? find_held_lock+0x2b/0x80 [ 259.007383][T15302] ? __fget_files+0x215/0x3d0 [ 259.007397][T15302] ? __fget_files+0x21f/0x3d0 [ 259.007412][T15302] ? do_epoll_ctl+0xfd/0x1a0 [ 259.007426][T15302] do_epoll_ctl+0xfd/0x1a0 [ 259.007441][T15302] ? __pfx_do_epoll_ctl+0x10/0x10 [ 259.007459][T15302] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 259.007475][T15302] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 259.007495][T15302] __do_fast_syscall_32+0x13a/0x8b0 [ 259.007513][T15302] do_fast_syscall_32+0x32/0x70 [ 259.007530][T15302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.007544][T15302] RIP: 0023:0xf7f13fec [ 259.007559][T15302] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 259.007564][T15302] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 259.007582][T15302] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 259.007589][T15302] RDX: 000000000000000b RSI: 0000000080000100 RDI: 0000000000000000 [ 259.007597][T15302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.007605][T15302] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.007613][T15302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.007629][T15302] [ 259.204625][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.333167][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.333398][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.333653][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.333891][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.334756][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.594270][ T35] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 259.764392][ T42] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 259.776268][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 259.778594][ T35] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 259.779927][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.784025][ T35] usb 8-1: config 0 descriptor?? [ 259.797424][ T35] usb 8-1: probing VID:PID(0424:012C) [ 259.798541][ T35] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 259.805964][ T35] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 259.935562][ T42] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 259.936378][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.936391][ T42] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.937874][ T42] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 259.937886][ T42] usb 9-1: Product: syz [ 259.937894][ T42] usb 9-1: Manufacturer: syz [ 259.937901][ T42] usb 9-1: SerialNumber: syz [ 259.943969][ T42] usb 9-1: config 0 descriptor?? [ 259.998134][ T35] usb 8-1: USB disconnect, device number 51 [ 260.148858][ T42] usb 9-1: USB disconnect, device number 35 [ 261.074346][ T35] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 261.084264][ T5816] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 261.224899][ T35] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 261.225790][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.226951][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 261.226966][ T35] usb 8-1: Product: syz [ 261.226973][ T35] usb 8-1: Manufacturer: syz [ 261.229732][ T35] navman 8-1:1.0: navman converter detected [ 261.232617][ T35] usb 8-1: navman converter now attached to ttyUSB0 [ 261.234373][ T5816] usb 9-1: Using ep0 maxpacket: 8 [ 261.235068][ T5816] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 261.235889][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.239780][ T5816] usb 9-1: config 0 descriptor?? [ 261.243161][ T5816] usb 9-1: probing VID:PID(0424:012C) [ 261.247363][ T5816] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 261.249043][ T5816] vub300 9-1:0.0: probe with driver vub300 failed with error -22 [ 261.285327][ T50] net_ratelimit: 4 callbacks suppressed [ 261.285341][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.430997][ T35] usb 8-1: USB disconnect, device number 52 [ 261.438087][ T35] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 261.438496][ T35] navman 8-1:1.0: device disconnected [ 261.452988][ T5816] usb 9-1: USB disconnect, device number 36 [ 262.129341][T15444] capability: warning: `syz.4.2127' uses 32-bit capabilities (legacy support in use) [ 262.336003][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.454762][ T5880] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 262.554273][ T42] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 262.614961][ T5880] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 262.615741][ T5880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.615754][ T5880] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.617243][ T5880] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 262.617256][ T5880] usb 9-1: Product: syz [ 262.617264][ T5880] usb 9-1: Manufacturer: syz [ 262.617271][ T5880] usb 9-1: SerialNumber: syz [ 262.618559][ T5880] usb 9-1: config 0 descriptor?? [ 262.644393][ T35] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 262.704792][ T42] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 262.705674][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.706816][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 262.706838][ T42] usb 7-1: Product: syz [ 262.706848][ T42] usb 7-1: Manufacturer: syz [ 262.709612][ T42] navman 7-1:1.0: navman converter detected [ 262.711694][ T42] usb 7-1: navman converter now attached to ttyUSB0 [ 262.816639][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 262.817388][ T35] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 262.818425][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.823060][ T35] usb 8-1: config 0 descriptor?? [ 262.843938][ T42] usb 9-1: USB disconnect, device number 37 [ 262.845063][ T35] usb 8-1: probing VID:PID(0424:012C) [ 262.850163][ T35] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 262.866698][ T35] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 262.911184][ T5880] usb 7-1: USB disconnect, device number 59 [ 262.913082][ T5880] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 262.913359][ T5880] navman 7-1:1.0: device disconnected [ 262.955671][T15532] FAULT_INJECTION: forcing a failure. [ 262.955671][T15532] name failslab, interval 1, probability 0, space 0, times 0 [ 262.955693][T15532] CPU: 3 UID: 0 PID: 15532 Comm: syz.1.2137 Not tainted syzkaller #0 PREEMPT(full) [ 262.955708][T15532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.955715][T15532] Call Trace: [ 262.955720][T15532] [ 262.955725][T15532] dump_stack_lvl+0x100/0x190 [ 262.955744][T15532] should_fail_ex.cold+0x5/0xa [ 262.955760][T15532] should_failslab+0xc2/0x120 [ 262.955776][T15532] kmem_cache_alloc_noprof+0x92/0x6a0 [ 262.955789][T15532] ? __asan_memcpy+0x3c/0x60 [ 262.955801][T15532] ? __kernfs_new_node+0xd2/0xa10 [ 262.955818][T15532] __kernfs_new_node+0xd2/0xa10 [ 262.955834][T15532] ? __pfx___kernfs_new_node+0x10/0x10 [ 262.955850][T15532] ? lock_acquire+0x1d1/0x380 [ 262.955866][T15532] ? kernfs_root+0x23/0x2a0 [ 262.955880][T15532] ? find_held_lock+0x2b/0x80 [ 262.955892][T15532] ? kernfs_root+0xee/0x2a0 [ 262.955904][T15532] ? kernfs_root+0xee/0x2a0 [ 262.955919][T15532] kernfs_new_node+0x117/0x150 [ 262.955936][T15532] __kernfs_create_file+0x53/0x350 [ 262.955955][T15532] cgroup_addrm_files+0x4ef/0xdb0 [ 262.955986][T15532] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 262.956009][T15532] ? idr_replace+0xfa/0x170 [ 262.956030][T15532] css_populate_dir+0x161/0x590 [ 262.956050][T15532] cgroup_apply_control_enable+0x441/0xdd0 [ 262.956070][T15532] cgroup_mkdir+0x57f/0x1330 [ 262.956089][T15532] ? __pfx_cgroup_mkdir+0x10/0x10 [ 262.956104][T15532] kernfs_iop_mkdir+0x111/0x190 [ 262.956117][T15532] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 262.956132][T15532] vfs_mkdir+0x364/0x850 [ 262.956152][T15532] filename_mkdirat+0x48b/0x5e0 [ 262.956169][T15532] ? __pfx_filename_mkdirat+0x10/0x10 [ 262.956182][T15532] ? strncpy_from_user+0x19d/0x2d0 [ 262.956199][T15532] ? do_getname+0x191/0x390 [ 262.956215][T15532] __ia32_sys_mkdirat+0x88/0xc0 [ 262.956229][T15532] __do_fast_syscall_32+0x13a/0x8b0 [ 262.956248][T15532] do_fast_syscall_32+0x32/0x70 [ 262.956265][T15532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.956279][T15532] RIP: 0023:0xf70aefec [ 262.956293][T15532] Code: Unable to access opcode bytes at 0xf70aefc2. [ 262.956299][T15532] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 262.956310][T15532] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 262.956317][T15532] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 262.956323][T15532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.956329][T15532] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.956336][T15532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.956350][T15532] [ 262.956362][T15532] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 263.028322][ T35] usb 8-1: USB disconnect, device number 53 [ 263.094554][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 263.153672][T15552] syzkaller1: entered allmulticast mode [ 263.155891][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 263.364360][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.524940][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.627363][T15589] can0: slcan on ttyS3. [ 264.068438][T15588] can0 (unregistered): slcan off ttyS3. [ 264.354277][ T5880] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 264.404458][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.506700][ T5880] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 264.507565][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.507578][ T5880] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.509147][ T5880] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 264.509159][ T5880] usb 7-1: Product: syz [ 264.509167][ T5880] usb 7-1: Manufacturer: syz [ 264.509174][ T5880] usb 7-1: SerialNumber: syz [ 264.510596][ T5880] usb 7-1: config 0 descriptor?? [ 264.526523][ T42] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 264.674981][ T42] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 264.675918][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.677289][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 264.677309][ T42] usb 6-1: Product: syz [ 264.677322][ T42] usb 6-1: Manufacturer: syz [ 264.689745][ T42] navman 6-1:1.0: navman converter detected [ 264.692381][ T42] usb 6-1: navman converter now attached to ttyUSB0 [ 264.725383][ T42] usb 7-1: USB disconnect, device number 60 [ 264.885166][ T50] usb 6-1: USB disconnect, device number 35 [ 264.887272][ T50] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 264.887521][ T50] navman 6-1:1.0: device disconnected [ 264.901188][ T5825] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 265.044197][ T5825] usb 8-1: Using ep0 maxpacket: 8 [ 265.044649][ T5825] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 265.045427][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.046720][ T5825] usb 8-1: config 0 descriptor?? [ 265.048798][ T5825] usb 8-1: probing VID:PID(0424:012C) [ 265.049952][ T5825] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 265.058511][ T5825] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 265.250681][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 265.251988][ T42] usb 8-1: USB disconnect, device number 54 [ 265.457795][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.457966][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.814452][ T50] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 265.830175][T15744] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.2176'. [ 265.974653][ T50] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 265.977617][ T50] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.977631][ T50] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.979308][ T50] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 265.979321][ T50] usb 9-1: Product: syz [ 265.979329][ T50] usb 9-1: Manufacturer: syz [ 265.979336][ T50] usb 9-1: SerialNumber: syz [ 265.981149][ T50] usb 9-1: config 0 descriptor?? [ 266.201140][ T50] usb 9-1: USB disconnect, device number 38 [ 266.291447][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.293467][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.301911][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.302868][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.303538][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.485111][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.505297][ T42] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 266.537949][ T5606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.564398][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.664435][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 266.667708][ T5606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.667838][ T42] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 266.669490][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.675853][ T42] usb 6-1: config 0 descriptor?? [ 266.679908][ T42] usb 6-1: probing VID:PID(0424:012C) [ 266.680554][ T42] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 266.687075][ T42] vub300 6-1:0.0: probe with driver vub300 failed with error -22 [ 266.851073][ T5606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.034079][ T5606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.099674][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 267.100471][ T42] usb 6-1: USB disconnect, device number 36 [ 267.383351][T15876] ------------[ cut here ]------------ [ 267.383362][T15876] !list_empty(&local->chanctx_list) [ 267.383368][T15876] WARNING: net/mac80211/pm.c:171 at __ieee80211_suspend+0x105f/0x12c0, CPU#3: syz.2.2185/15876 [ 267.391868][T15876] Modules linked in: [ 267.393862][T15876] CPU: 3 UID: 0 PID: 15876 Comm: syz.2.2185 Not tainted syzkaller #0 PREEMPT(full) [ 267.397898][T15876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.401797][T15876] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 267.403893][T15876] Code: 0f 0b 90 e9 8f f8 ff ff e8 be 69 a4 f6 90 0f 0b 90 e9 64 f7 ff ff e8 b0 69 a4 f6 90 0f 0b 90 e9 be f6 ff ff e8 a2 69 a4 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 94 69 a4 f6 48 8b 54 24 10 48 b8 00 00 [ 267.410217][T15876] RSP: 0000:ffffc90002ee7c20 EFLAGS: 00010246 [ 267.412430][T15876] RAX: 0000000000080000 RBX: ffff888029502c18 RCX: ffffc9002a565000 [ 267.415240][T15876] RDX: 0000000000080000 RSI: ffffffff8b66f82e RDI: ffff888055a24b00 [ 267.417791][T15876] RBP: ffff888029500f40 R08: 0000000000000001 R09: 0000000000000000 [ 267.420445][T15876] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 267.422985][T15876] R13: ffffed10052a01f2 R14: ffff888029502a18 R15: 0000000000000001 [ 267.425970][T15876] FS: 0000000000000000(0000) GS:ffff888096c60000(0063) knlGS:00000000f5394b40 [ 267.429021][T15876] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 267.431193][T15876] CR2: 0000557c153ef168 CR3: 000000006df4d000 CR4: 0000000000352ef0 [ 267.433826][T15876] Call Trace: [ 267.435828][T15876] [ 267.436793][T15876] reset_write+0x7a/0x290 [ 267.438300][T15876] short_proxy_write+0x133/0x1a0 [ 267.440045][T15876] vfs_write+0x2aa/0x1050 [ 267.441491][T15876] ? __pfx_short_proxy_write+0x10/0x10 [ 267.443250][T15876] ? lock_acquire+0x1d1/0x380 [ 267.444718][T15876] ? __fget_files+0x34/0x3d0 [ 267.446094][T15876] ? __pfx_vfs_write+0x10/0x10 [ 267.447650][T15876] ? find_held_lock+0x2b/0x80 [ 267.449192][T15876] ? __fget_files+0x215/0x3d0 [ 267.450741][T15876] ? __fget_files+0x21f/0x3d0 [ 267.452352][T15876] ksys_write+0x12a/0x250 [ 267.453793][T15876] ? __pfx_ksys_write+0x10/0x10 [ 267.455561][T15876] __do_fast_syscall_32+0x13a/0x8b0 [ 267.457299][T15876] do_fast_syscall_32+0x32/0x70 [ 267.459141][T15876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.461309][T15876] RIP: 0023:0xf7f13fec [ 267.462699][T15876] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 267.464990][T15876] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 267.467742][T15876] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 267.470417][T15876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.472879][T15876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.475434][T15876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 267.478107][T15876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.480764][T15876] [ 267.481832][T15876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.484246][T15876] CPU: 3 UID: 0 PID: 15876 Comm: syz.2.2185 Not tainted syzkaller #0 PREEMPT(full) [ 267.487179][T15876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.490394][T15876] Call Trace: [ 267.491506][T15876] [ 267.492444][T15876] dump_stack_lvl+0x100/0x190 [ 267.494087][T15876] vpanic+0x553/0x970 [ 267.495446][T15876] ? __pfx_vpanic+0x10/0x10 [ 267.496942][T15876] panic+0xd1/0xe0 [ 267.498210][T15876] ? __pfx_panic+0x10/0x10 [ 267.499718][T15876] check_panic_on_warn.cold+0x19/0x34 [ 267.501457][T15876] ? __ieee80211_suspend+0x105f/0x12c0 [ 267.503238][T15876] __warn.cold+0x191/0x318 [ 267.504712][T15876] __report_bug+0x30f/0x440 [ 267.506195][T15876] ? __ieee80211_suspend+0x105f/0x12c0 [ 267.508030][T15876] ? __pfx___report_bug+0x10/0x10 [ 267.509784][T15876] ? dput+0x24/0x30 [ 267.511104][T15876] ? end_dirop+0x82/0xa0 [ 267.512500][T15876] ? __debugfs_create_file+0x3cf/0x4d0 [ 267.514524][T15876] ? debugfs_create_file_short+0x41/0x60 [ 267.516452][T15876] ? __ieee80211_suspend+0x105f/0x12c0 [ 267.518246][T15876] report_bug+0xb3/0x220 [ 267.519741][T15876] ? __ieee80211_suspend+0x105f/0x12c0 [ 267.521499][T15876] handle_bug+0x16a/0x2a0 [ 267.522935][T15876] exc_invalid_op+0x17/0x50 [ 267.524433][T15876] asm_exc_invalid_op+0x1a/0x20 [ 267.526074][T15876] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 267.527982][T15876] Code: 0f 0b 90 e9 8f f8 ff ff e8 be 69 a4 f6 90 0f 0b 90 e9 64 f7 ff ff e8 b0 69 a4 f6 90 0f 0b 90 e9 be f6 ff ff e8 a2 69 a4 f6 90 <0f> 0b 90 e9 50 fc ff ff e8 94 69 a4 f6 48 8b 54 24 10 48 b8 00 00 [ 267.534065][T15876] RSP: 0000:ffffc90002ee7c20 EFLAGS: 00010246 [ 267.536217][T15876] RAX: 0000000000080000 RBX: ffff888029502c18 RCX: ffffc9002a565000 [ 267.538909][T15876] RDX: 0000000000080000 RSI: ffffffff8b66f82e RDI: ffff888055a24b00 [ 267.541390][T15876] RBP: ffff888029500f40 R08: 0000000000000001 R09: 0000000000000000 [ 267.543849][T15876] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 267.546407][T15876] R13: ffffed10052a01f2 R14: ffff888029502a18 R15: 0000000000000001 [ 267.549028][T15876] ? __ieee80211_suspend+0x105e/0x12c0 [ 267.550930][T15876] reset_write+0x7a/0x290 [ 267.552356][T15876] short_proxy_write+0x133/0x1a0 [ 267.553973][T15876] vfs_write+0x2aa/0x1050 [ 267.555453][T15876] ? __pfx_short_proxy_write+0x10/0x10 [ 267.557209][T15876] ? lock_acquire+0x1d1/0x380 [ 267.558779][T15876] ? __fget_files+0x34/0x3d0 [ 267.560297][T15876] ? __pfx_vfs_write+0x10/0x10 [ 267.561858][T15876] ? find_held_lock+0x2b/0x80 [ 267.563472][T15876] ? __fget_files+0x215/0x3d0 [ 267.565014][T15876] ? __fget_files+0x21f/0x3d0 [ 267.566567][T15876] ksys_write+0x12a/0x250 [ 267.567995][T15876] ? __pfx_ksys_write+0x10/0x10 [ 267.569603][T15876] __do_fast_syscall_32+0x13a/0x8b0 [ 267.571306][T15876] do_fast_syscall_32+0x32/0x70 [ 267.572903][T15876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.575031][T15876] RIP: 0023:0xf7f13fec [ 267.576384][T15876] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 267.578501][T15876] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 267.581131][T15876] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 267.583698][T15876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.586211][T15876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.588780][T15876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 267.591329][T15876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.593851][T15876] [ 267.595621][T15876] Kernel Offset: disabled [ 267.597046][T15876] Rebooting in 86400 seconds..