last executing test programs: 32.712651047s ago: executing program 1 (id=4324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x40000000}, 0x0) 32.479052877s ago: executing program 1 (id=4329): syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0xfffd, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, "180022ebffff0000"}}}}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', '', [{0x20, '\':,K'}]}, 0x9) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) flistxattr(r0, &(0x7f00000001c0)=""/168, 0xa8) 31.597209003s ago: executing program 1 (id=4335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 31.465226173s ago: executing program 1 (id=4338): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xd, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015003700142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fea8"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 31.396697787s ago: executing program 1 (id=4339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xa, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 31.267559647s ago: executing program 1 (id=4349): add_key(0x0, 0x0, &(0x7f00000001c0)="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", 0x42d, 0xfffffffffffffff9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff070000ffc10002d588380003c100000025bec229650e6f2c77f8b6d694e0645dd746991c2513a8f038503f4c4defb025dede50cfae08c9d5d891d1969e0d38a06c1e4fee0c56627d1ec24bad043a89fa25b3296643cd940f88"], 0xfd6c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000b16c6b5e9e401219dfea410000000000010000000020e12365360000000000004f"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffe91, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"}) 15.808294833s ago: executing program 32 (id=4349): add_key(0x0, 0x0, &(0x7f00000001c0)="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", 0x42d, 0xfffffffffffffff9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff070000ffc10002d588380003c100000025bec229650e6f2c77f8b6d694e0645dd746991c2513a8f038503f4c4defb025dede50cfae08c9d5d891d1969e0d38a06c1e4fee0c56627d1ec24bad043a89fa25b3296643cd940f88"], 0xfd6c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000b16c6b5e9e401219dfea410000000000010000000020e12365360000000000004f"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffe91, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"}) 6.9883087s ago: executing program 0 (id=4416): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 6.279570004s ago: executing program 3 (id=4419): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) symlink(0x0, 0x0) 5.794756044s ago: executing program 0 (id=4420): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 5.579821745s ago: executing program 2 (id=4421): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) (fail_nth: 2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 5.388125806s ago: executing program 0 (id=4422): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001900010028bd701effdbdf251c140005fe07fd0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x68}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r4 = eventfd2(0x1, 0x80001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a0001"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/187, 0x0, 0xe000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 5.295517198s ago: executing program 0 (id=4423): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0xd9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x200440, &(0x7f00000002c0)) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) 5.18965713s ago: executing program 0 (id=4424): socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(0xffffffffffffffff, 0x1591, 0xf288, 0x49, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) socket$netlink(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0xee}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg$sock(r1, 0x0, 0x0, 0xc044) 5.070029696s ago: executing program 0 (id=4425): socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(0xffffffffffffffff, 0x1591, 0xf288, 0x49, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) socket$netlink(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.897633077s ago: executing program 33 (id=4425): socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(0xffffffffffffffff, 0x1591, 0xf288, 0x49, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) socket$netlink(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.710609368s ago: executing program 4 (id=4427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='fd', 0x0, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='fd', 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x9, 0x5730, 0x401, 0x6b4}]}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x10, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x4, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x4, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xeeee8000}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x88800) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x88800) close(0x3) ioctl$KVM_RUN(r10, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.683659129s ago: executing program 2 (id=4428): socket(0x15, 0x8, 0x400) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4242, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x1, 0x0, 0x0, 0x8000, 0x3, 0x3e, 0xffffffea, 0x7c, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}], "1aa94d35fbe0a1be0f9f645fc024d58ed9594000f2c64e6b20412751cfb1fd77d30deefa08cfb4131606dd31b72075adb9410423126d8c8644482516b882da671a6dc51f1deeea896d295183f821ccd52e436ff6b0b6f52db44c68bab9b94a58bff38f3ba6d1cfd02a175a4598529911d9767a4470"}, 0xed) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000001140), &(0x7f0000001180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003007465616d30000000002c00000000000008000400d4"], 0x6c}}, 0x20000010) 4.558128011s ago: executing program 3 (id=4429): bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r0 = socket(0x840000000002, 0x1, 0x100) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x50) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced43dadc3f4b9f33c9e9b96f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) write$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') pread64(r6, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0400000004000000040000000500010018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000030000000044f6e4e833fb6c4204646a6f8281c3aec6d4262dfe3c4a8c811e93bd853356d2af5d6d1b8d30a1d2c55a2c3bae146f920c00af2d"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x10040) syz_emit_ethernet(0x7e, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x17, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x1, [{@remote, 0x3}, {@remote, 0x8000}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@multicast2, 0x6}, {@remote, 0x6}]}, @generic={0x44, 0x12, "000001000000000000368d12466b435f"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.552211462s ago: executing program 2 (id=4430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 4.332751978s ago: executing program 4 (id=4431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x3f, 0x0, 0xc00}, {0x888, 0x0, 0x1ff}]}) 4.198222779s ago: executing program 4 (id=4432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000012640)={0x2020}, 0x11) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) lseek(r0, 0x9, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325", 0x8}], 0x1, 0x0, 0x5e}, 0x800) timer_create(0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(0x0) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) dup3(r6, r7, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r7, 0x6, 0x2, r6}) 3.872796218s ago: executing program 4 (id=4433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0xfdef) r2 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x3) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0xfffffffffffffffd, 0x10, 0x0) 3.11559299s ago: executing program 3 (id=4434): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x1c) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x7, 0x8001, 0x8, 0x7fffffff, 0x4e38}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setrlimit(0x1, &(0x7f0000000000)={0x2, 0x3}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x42) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfa, 0x9, 0xc, "57ad8b", 0x1000, 0x7e}, {@none, 0xb, 0xb, 0x0, "3332e1", 0x6, 0x75}, {@any, 0x1, 0x1, 0x0, "0b6e99", 0x2, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0xa, 0x4, "c03fb0", 0x9, 0x52}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x4, 0x6, "8b77b4", 0x9, 0x5}, {@none, 0x7, 0x8, 0x4, "4c9ebc", 0xfc00, 0xfc}, {@none, 0x18, 0x27, 0x4, "23a411", 0x92, 0xb}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x0, 0x0, 0x465, {0x1000, 0xfec00000}, {"d07ee51100"}}) 2.147998084s ago: executing program 2 (id=4435): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = timerfd_create(0x1, 0x0) poll(&(0x7f0000000100)=[{r4, 0x2000}], 0x1, 0x5) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000012c0)={@null, 0xa, 'veth1_to_bridge\x00'}) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.147672699s ago: executing program 4 (id=4436): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_emit_ethernet(0x66, 0x0, 0x0) r1 = io_uring_setup(0x6816, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385a, 0x0, 0x2, 0x115a, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x4) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x3881, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0xff0f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 2.147301546s ago: executing program 3 (id=4437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) socket$kcm(0x29, 0x2, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x810018, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x202, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 2.079630875s ago: executing program 2 (id=4438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) socket$kcm(0x29, 0x2, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x810018, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x202, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 721.496813ms ago: executing program 2 (id=4439): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) syz_clone(0x24204400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x38c, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2c4, 0x2c4, 0x2c4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3d, {0x6}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) 638.43775ms ago: executing program 3 (id=4440): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r1 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x200f01) sendto$inet6(r1, &(0x7f0000000180)="dab8", 0x2, 0x1, &(0x7f0000000140)={0xa, 0x4004, 0xfffb, @loopback, 0xa0c}, 0x1c) 557.363064ms ago: executing program 3 (id=4441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000007c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000380)={0x81, 0x0, 0x4}) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x4040) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3a) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_queues(r6, r11, &(0x7f0000000540)={0x0, 0x1aa5, 0x20, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3103, 0x2000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x0, 0x1, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x4000, 0x2, 0x0, 0x0, r6}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffd, 0xdbd, 0x0, 0x0}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r12, 0x0, 0x22) 0s ago: executing program 4 (id=4442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): mode [ 490.773034][ T43] kauditd_printk_skb: 72 callbacks suppressed [ 490.773383][ T43] audit: type=1800 audit(1788042712.882:1497): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 490.841441][ T43] audit: type=1800 audit(1788042712.952:1498): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 490.891511][ T43] audit: type=1800 audit(1788042713.002:1499): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 490.902943][ T5758] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 490.909746][ T43] audit: type=1800 audit(1788042713.022:1500): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 490.941629][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3720'. [ 490.946561][ T43] audit: type=1800 audit(1788042713.062:1501): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 490.985760][ T43] audit: type=1800 audit(1788042713.102:1502): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 491.002489][ T43] audit: type=1800 audit(1788042713.112:1503): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 491.038622][ T43] audit: type=1800 audit(1788042713.152:1504): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 491.168619][T16324] syzkaller0: entered promiscuous mode [ 491.168692][T16324] syzkaller0: entered allmulticast mode [ 491.195718][ T43] audit: type=1800 audit(1788042713.312:1505): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 491.235843][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3728'. [ 491.301178][T16332] syzkaller0: entered promiscuous mode [ 491.301240][T16332] syzkaller0: entered allmulticast mode [ 491.350539][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 491.400470][ T5758] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 491.488709][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 491.866854][ T43] audit: type=1800 audit(1788042713.982:1506): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 492.339640][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3740'. [ 492.587449][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3746'. [ 492.802810][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 493.095960][T16382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3750'. [ 493.258455][T16394] syzkaller0: entered promiscuous mode [ 493.258541][T16394] syzkaller0: entered allmulticast mode [ 493.417978][T16402] udc dummy_udc.0: failed to start g1: -19 [ 493.418423][T16402] UDC core: g1: couldn't find an available UDC or it's busy [ 493.821831][T16420] syzkaller0: entered promiscuous mode [ 493.821909][T16420] syzkaller0: entered allmulticast mode [ 494.010830][T16434] udc dummy_udc.0: failed to start g1: -19 [ 494.015997][T16434] UDC core: g1: couldn't find an available UDC or it's busy [ 494.299794][ T6912] bond_slave_0: entered promiscuous mode [ 494.299917][ T6912] bond_slave_1: entered promiscuous mode [ 494.300378][ T6912] bond_slave_0: left promiscuous mode [ 494.300415][ T6912] bond_slave_1: left promiscuous mode [ 494.370563][T16445] syzkaller0: entered promiscuous mode [ 494.370643][T16445] syzkaller0: entered allmulticast mode [ 494.376506][T16447] syzkaller0: entered promiscuous mode [ 494.376569][T16447] syzkaller0: entered allmulticast mode [ 494.476087][T16453] __nla_validate_parse: 12 callbacks suppressed [ 494.476178][T16453] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3783'. [ 494.547419][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 494.690602][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'. [ 494.840699][T16467] syzkaller0: entered promiscuous mode [ 494.842864][T16467] syzkaller0: entered allmulticast mode [ 495.086639][ T5758] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 495.206491][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 495.562255][T16493] syzkaller0: entered promiscuous mode [ 495.562325][T16493] syzkaller0: entered allmulticast mode [ 495.934745][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.934821][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.112621][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 496.112715][ T43] audit: type=1800 audit(1788042718.222:1548): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 496.169112][ T43] audit: type=1800 audit(1788042718.282:1549): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 496.225206][ T43] audit: type=1800 audit(1788042718.342:1550): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 496.273696][ T43] audit: type=1800 audit(1788042718.392:1551): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 496.327800][ T43] audit: type=1800 audit(1788042718.442:1552): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 497.701192][T16512] syzkaller0: entered promiscuous mode [ 497.701265][T16512] syzkaller0: entered allmulticast mode [ 497.762066][ T43] audit: type=1800 audit(1788042719.872:1553): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 497.802161][ T43] audit: type=1800 audit(1788042719.912:1554): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 497.816404][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 497.834858][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 497.925042][ T43] audit: type=1800 audit(1788042720.042:1555): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 497.974511][ T43] audit: type=1800 audit(1788042720.092:1556): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 498.015552][ T43] audit: type=1800 audit(1788042720.132:1557): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 499.014421][T16571] Invalid ELF header magic: != ELF [ 499.676319][T16576] syzkaller0: entered promiscuous mode [ 499.679477][T16576] syzkaller0: entered allmulticast mode [ 499.782461][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 500.237826][T16592] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 500.249259][T15847] Bluetooth: hci3: Frame reassembly failed (-84) [ 500.254855][T15847] Bluetooth: hci3: Frame reassembly failed (-84) [ 500.257361][T15847] Bluetooth: hci3: Frame reassembly failed (-84) [ 500.988567][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'. [ 501.313859][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 501.313914][ T43] audit: type=1800 audit(1788042723.432:1573): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180577 res=0 errno=0 [ 501.330967][ T43] audit: type=1800 audit(1788042723.442:1574): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180588 res=0 errno=0 [ 501.359818][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 501.903256][ T43] audit: type=1800 audit(1788042724.012:1575): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 501.977467][ T43] audit: type=1800 audit(1788042724.092:1576): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 502.122961][ T43] audit: type=1800 audit(1788042724.232:1577): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 502.256533][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 502.256552][ T5758] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 502.286598][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 502.997614][ T43] audit: type=1800 audit(1788042725.072:1578): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 503.030610][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 503.279015][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 503.304730][ T43] audit: type=1800 audit(1788042725.422:1579): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 503.344756][T16634] syzkaller0: entered promiscuous mode [ 503.344835][T16634] syzkaller0: entered allmulticast mode [ 503.369259][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 503.383407][ T5758] Bluetooth: hci5: command 0x1003 tx timeout [ 503.386118][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 505.354372][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3842'. [ 505.455170][ T43] audit: type=1800 audit(1788042727.572:1580): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 505.495830][ T43] audit: type=1800 audit(1788042727.612:1581): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 505.529348][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 505.560203][ T43] audit: type=1800 audit(1788042727.672:1582): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 505.783976][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 505.875415][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3858'. [ 506.683832][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 506.685197][ T43] audit: type=1800 audit(1788042728.802:1587): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 506.753159][ T43] audit: type=1800 audit(1788042728.862:1588): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 506.784486][ T43] audit: type=1800 audit(1788042728.902:1589): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180992 res=0 errno=0 [ 506.788531][ T43] audit: type=1800 audit(1788042728.902:1590): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=180996 res=0 errno=0 [ 506.813168][ T43] audit: type=1800 audit(1788042728.922:1591): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=181024 res=0 errno=0 [ 506.861081][ T43] audit: type=1800 audit(1788042728.972:1592): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 506.901815][ T43] audit: type=1800 audit(1788042729.012:1593): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 506.962035][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3865'. [ 507.061499][ T43] audit: type=1800 audit(1788042729.172:1594): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 507.211931][ T43] audit: type=1800 audit(1788042729.322:1595): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 507.300889][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3867'. [ 507.859571][ T43] audit: type=1800 audit(1788042729.972:1596): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 507.921312][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 508.441006][ T5749] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 508.473747][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3875'. [ 508.570870][T16752] nbd: must specify at least one socket [ 508.572230][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 508.822529][T16762] Invalid ELF header magic: != ELF [ 509.041096][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3884'. [ 509.721931][T16783] nbd: must specify at least one socket [ 510.547967][T16811] nbd: must specify at least one socket [ 510.596045][T16812] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 510.615272][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 510.709889][T16816] __nla_validate_parse: 4 callbacks suppressed [ 510.713027][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3904'. [ 511.053183][T16829] syzkaller0: entered promiscuous mode [ 511.053232][T16829] syzkaller0: entered allmulticast mode [ 511.153918][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'. [ 511.716515][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 511.716593][ T43] audit: type=1800 audit(1788042733.832:1633): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 511.772567][ T43] audit: type=1800 audit(1788042733.882:1634): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 511.817094][ T43] audit: type=1800 audit(1788042733.932:1635): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 511.862300][ T43] audit: type=1800 audit(1788042733.972:1636): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 511.898441][ T43] audit: type=1800 audit(1788042734.012:1637): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 511.964302][ T43] audit: type=1800 audit(1788042734.082:1638): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 511.983305][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 512.016124][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3922'. [ 512.262531][ T43] audit: type=1800 audit(1788042734.372:1639): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 512.267462][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3927'. [ 512.308741][ T43] audit: type=1800 audit(1788042734.422:1640): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 512.641335][ T43] audit: type=1800 audit(1788042734.752:1641): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 512.653353][ T5758] Bluetooth: hci3: command 0x1003 tx timeout [ 512.655865][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 512.791387][ T43] audit: type=1800 audit(1788042734.902:1642): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 512.860072][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3936'. [ 513.034427][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3938'. [ 514.330340][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 514.334898][T16596] Bluetooth: hci3: Frame reassembly failed (-84) [ 515.800066][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'. [ 516.333675][ T5758] Bluetooth: hci3: command 0x1003 tx timeout [ 516.338070][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 516.604259][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'. [ 517.449279][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 517.449359][ T43] audit: type=1800 audit(1788042739.552:1659): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 517.487810][ T43] audit: type=1800 audit(1788042739.602:1660): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 517.624217][ T43] audit: type=1800 audit(1788042739.732:1661): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 517.709597][ T43] audit: type=1800 audit(1788042739.822:1662): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 517.781373][ T43] audit: type=1800 audit(1788042739.892:1663): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 517.799138][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 517.983351][ T43] audit: type=1800 audit(1788042740.092:1664): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 518.299132][T17050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3999'. [ 518.417412][T17055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4001'. [ 518.725597][ T43] audit: type=1800 audit(1788042740.842:1665): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 518.790868][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4004'. [ 518.844580][ T43] audit: type=1800 audit(1788042740.962:1666): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 518.906983][ T43] audit: type=1800 audit(1788042741.022:1667): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 518.948298][ T43] audit: type=1800 audit(1788042741.062:1668): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 520.346014][T17081] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 520.352358][T15847] Bluetooth: hci3: Frame reassembly failed (-84) [ 520.814002][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 521.318139][T17107] syzkaller0: entered promiscuous mode [ 521.320446][T17107] syzkaller0: entered allmulticast mode [ 522.333365][ T5758] Bluetooth: hci3: command 0x1003 tx timeout [ 522.333530][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 522.657127][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 522.657504][ T43] audit: type=1800 audit(1788042744.772:1680): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 522.695380][ T43] audit: type=1800 audit(1788042744.802:1681): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 522.872007][ T43] audit: type=1800 audit(1788042744.982:1682): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 523.244075][ T43] audit: type=1800 audit(1788042745.352:1683): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182547 res=0 errno=0 [ 523.658243][ T43] audit: type=1800 audit(1788042745.772:1684): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182566 res=0 errno=0 [ 523.671762][ T43] audit: type=1800 audit(1788042745.792:1685): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182577 res=0 errno=0 [ 523.901829][ T43] audit: type=1800 audit(1788042746.012:1686): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 524.031795][ T43] audit: type=1800 audit(1788042746.142:1687): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 524.159821][ T43] audit: type=1800 audit(1788042746.272:1688): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 524.217142][ T43] audit: type=1800 audit(1788042746.332:1689): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182596 res=0 errno=0 [ 525.783276][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 525.850103][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 526.316304][T17203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4053'. [ 527.084315][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 527.116815][T17209] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 527.341461][ T74] Bluetooth: hci6: Frame reassembly failed (-84) [ 528.005947][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 528.006100][ T43] audit: type=1800 audit(1788042750.122:1700): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182848 res=0 errno=0 [ 528.029037][ T43] audit: type=1800 audit(1788042750.142:1701): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182859 res=0 errno=0 [ 528.115751][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 528.126650][ T1158] Bluetooth: hci3: Frame reassembly failed (-84) [ 528.137379][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 528.142114][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 528.144884][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 528.498168][ T43] audit: type=1800 audit(1788042750.612:1702): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 529.143249][T16604] Bluetooth: hci5: command 0x1003 tx timeout [ 529.143281][ T5758] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 529.376204][ T5749] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 529.781546][ T43] audit: type=1800 audit(1788042751.892:1703): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182878 res=0 errno=0 [ 529.786117][ T43] audit: type=1800 audit(1788042751.892:1704): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182889 res=0 errno=0 [ 529.787408][ T1158] Bluetooth: hci5: Frame reassembly failed (-84) [ 529.874550][T17228] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 530.183412][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 530.183486][ T5749] Bluetooth: hci3: command 0x1003 tx timeout [ 531.630416][ T43] audit: type=1800 audit(1788042753.742:1705): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 531.680595][ T43] audit: type=1800 audit(1788042753.792:1706): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182908 res=0 errno=0 [ 531.853292][ T66] Bluetooth: hci5: command 0x1003 tx timeout [ 531.853980][ T5758] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 532.001411][ T43] audit: type=1800 audit(1788042754.112:1707): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 532.115194][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'. [ 532.389744][ T43] audit: type=1800 audit(1788042754.502:1708): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182927 res=0 errno=0 [ 532.401827][ T43] audit: type=1800 audit(1788042754.512:1709): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182938 res=0 errno=0 [ 532.415111][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 532.430562][T17257] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 532.670524][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'. [ 533.250824][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 533.250885][ T43] audit: type=1800 audit(1788042755.362:1715): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 533.367447][ T43] audit: type=1800 audit(1788042755.482:1716): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 533.411006][ T43] audit: type=1800 audit(1788042755.522:1717): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 533.448744][ T43] audit: type=1800 audit(1788042755.562:1718): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183284 res=0 errno=0 [ 533.450591][ T43] audit: type=1800 audit(1788042755.562:1719): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183295 res=0 errno=0 [ 533.469962][ T38] Bluetooth: hci5: Frame reassembly failed (-84) [ 533.481682][T17275] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 533.504923][ T43] audit: type=1800 audit(1788042755.622:1720): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 533.567236][ T43] audit: type=1800 audit(1788042755.682:1721): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 533.592709][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 533.612054][ T43] audit: type=1800 audit(1788042755.722:1722): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 533.938945][ T43] audit: type=1800 audit(1788042756.052:1723): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 534.233617][ T43] audit: type=1800 audit(1788042756.352:1724): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183314 res=0 errno=0 [ 534.318070][ T1158] Bluetooth: hci6: Frame reassembly failed (-84) [ 534.388545][ T1166] Bluetooth: hci7: Frame reassembly failed (-84) [ 534.393465][T17309] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 534.493298][ T5758] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 534.504931][T17222] Bluetooth: hci3: command 0x1003 tx timeout [ 534.740561][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'. [ 535.534382][ T5758] Bluetooth: hci5: command 0x1003 tx timeout [ 535.552553][ T66] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 536.260190][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4089'. [ 536.333502][ T66] Bluetooth: hci6: command 0x1003 tx timeout [ 536.334686][ T5749] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 536.413283][ T5749] Bluetooth: hci7: command 0x1003 tx timeout [ 536.425407][T16604] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 536.541728][T16604] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 536.602221][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4093'. [ 536.886649][T17336] syzkaller0: entered promiscuous mode [ 536.886774][T17336] syzkaller0: entered allmulticast mode [ 537.146450][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 537.306839][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4098'. [ 538.425890][T16604] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 539.105772][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 539.106056][ T43] audit: type=1800 audit(1788042761.222:1734): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 539.228325][ T43] audit: type=1800 audit(1788042761.342:1735): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 539.307097][ T43] audit: type=1800 audit(1788042761.422:1736): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 539.438111][T17375] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 539.438183][T17375] UDF-fs: Scanning with blocksize 512 failed [ 539.439338][T17375] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 539.439894][T17375] UDF-fs: Scanning with blocksize 1024 failed [ 539.440861][T17375] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 539.444470][T17375] UDF-fs: Scanning with blocksize 2048 failed [ 539.444624][T17375] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 539.445387][T17375] UDF-fs: Scanning with blocksize 4096 failed [ 539.502230][ T43] audit: type=1800 audit(1788042761.612:1737): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 539.641508][ T43] audit: type=1800 audit(1788042761.752:1738): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 539.778933][ T43] audit: type=1800 audit(1788042761.892:1739): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 539.922149][ T43] audit: type=1800 audit(1788042762.032:1740): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 540.651442][ T43] audit: type=1800 audit(1788042762.732:1741): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 540.798698][ T43] audit: type=1800 audit(1788042762.912:1742): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 540.879790][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 541.066113][ T43] audit: type=1800 audit(1788042763.182:1743): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 541.131517][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4120'. [ 541.379579][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 541.586172][T17412] syzkaller0: entered promiscuous mode [ 541.586266][T17412] syzkaller0: entered allmulticast mode [ 541.669125][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4125'. [ 542.092468][T17427] syzkaller0: entered promiscuous mode [ 542.095408][T17427] syzkaller0: entered allmulticast mode [ 542.781818][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 542.957041][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 542.976695][T17440] syzkaller0: entered promiscuous mode [ 542.976748][T17440] syzkaller0: entered allmulticast mode [ 543.106435][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 543.342249][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 543.462123][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4137'. [ 543.471067][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 543.689255][T17463] syzkaller0: entered promiscuous mode [ 543.689316][T17463] syzkaller0: entered allmulticast mode [ 543.865783][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 544.179577][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 544.812626][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 544.812707][ T43] audit: type=1800 audit(1788042766.922:1759): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 544.993979][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 545.076481][ T43] audit: type=1800 audit(1788042767.192:1760): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 545.127087][ T43] audit: type=1800 audit(1788042767.242:1761): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 545.136390][ T43] audit: type=1800 audit(1788042767.252:1762): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184163 res=0 errno=0 [ 545.138228][ T43] audit: type=1800 audit(1788042767.252:1763): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184174 res=0 errno=0 [ 545.143360][T17483] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 545.169986][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 545.216938][ T43] audit: type=1800 audit(1788042767.332:1764): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 545.305827][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'. [ 545.614489][ T43] audit: type=1800 audit(1788042767.732:1765): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 545.966600][ T43] audit: type=1800 audit(1788042768.082:1766): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184193 res=0 errno=0 [ 545.969150][ T43] audit: type=1800 audit(1788042768.082:1767): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184204 res=0 errno=0 [ 545.978091][T17495] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 545.995775][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 546.288346][T17514] syzkaller0: entered promiscuous mode [ 546.290463][T17514] syzkaller0: entered allmulticast mode [ 546.574292][ T43] audit: type=1800 audit(1788042768.692:1768): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 546.832647][T17526] syzkaller0: entered promiscuous mode [ 546.832712][T17526] syzkaller0: entered allmulticast mode [ 547.213298][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 547.220938][T16604] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 547.984854][T17553] __nla_validate_parse: 7 callbacks suppressed [ 547.984928][T17553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4176'. [ 548.013346][T16604] Bluetooth: hci5: command 0x1003 tx timeout [ 548.016861][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 548.256053][T17549] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 548.265668][ T1162] Bluetooth: hci3: Frame reassembly failed (-84) [ 548.857710][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4181'. [ 548.986601][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'. [ 549.248940][T17574] syzkaller0: entered promiscuous mode [ 549.249099][T17574] syzkaller0: entered allmulticast mode [ 549.286411][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'. [ 549.921070][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 549.921188][ T43] audit: type=1800 audit(1788042772.032:1783): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184792 res=0 errno=0 [ 549.924347][ T43] audit: type=1800 audit(1788042772.042:1784): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184803 res=0 errno=0 [ 549.932251][T17582] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 549.945607][ T38] Bluetooth: hci5: Frame reassembly failed (-84) [ 549.956843][T17587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4188'. [ 550.333422][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 550.335244][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 550.642119][ T43] audit: type=1800 audit(1788042772.752:1785): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 550.993423][ T43] audit: type=1800 audit(1788042773.112:1786): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 551.082924][ T43] audit: type=1800 audit(1788042773.192:1787): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 551.141597][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4195'. [ 551.223876][ T43] audit: type=1800 audit(1788042773.332:1788): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 551.236542][ T43] audit: type=1800 audit(1788042773.352:1789): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 551.313327][ T43] audit: type=1800 audit(1788042773.432:1790): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 551.406674][ T43] audit: type=1800 audit(1788042773.522:1791): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 551.501573][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 551.628306][ T43] audit: type=1800 audit(1788042773.742:1792): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184976 res=0 errno=0 [ 551.643699][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 551.648639][T17615] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 551.936952][T16604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 552.577125][T17625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4202'. [ 553.314175][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4203'. [ 553.485681][T17618] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 553.693267][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 553.693395][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 553.912388][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4211'. [ 554.422648][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 554.426102][T17633] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 554.431317][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4206'. [ 554.737062][T16604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 555.236911][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4210'. [ 555.538205][T17646] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 555.549532][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 555.557414][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 555.565568][ T43] audit: type=1800 audit(1788042777.662:1803): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185066 res=0 errno=0 [ 555.574803][ T43] audit: type=1800 audit(1788042777.672:1804): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185077 res=0 errno=0 [ 555.912308][ T43] audit: type=1800 audit(1788042778.022:1805): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 555.980672][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4212'. [ 556.234235][ T43] audit: type=1800 audit(1788042778.352:1806): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 556.382094][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4215'. [ 556.413264][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 556.417096][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 556.543434][ T43] audit: type=1800 audit(1788042778.652:1807): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185173 res=0 errno=0 [ 556.551500][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 556.553020][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 556.553560][T17665] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 556.553639][ T1166] Bluetooth: hci3: Frame reassembly failed (-84) [ 556.557731][ T43] audit: type=1800 audit(1788042778.672:1808): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185184 res=0 errno=0 [ 556.964157][ T43] audit: type=1800 audit(1788042779.072:1809): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 557.061035][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'. [ 557.087249][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4225'. [ 557.218729][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4217'. [ 557.375260][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.377764][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.389052][ T43] audit: type=1800 audit(1788042779.502:1810): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 557.615788][ T66] Bluetooth: hci5: command 0x1003 tx timeout [ 557.616659][T16604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 558.083219][ T43] audit: type=1800 audit(1788042780.192:1811): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 558.123552][ T43] audit: type=1800 audit(1788042780.242:1812): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185357 res=0 errno=0 [ 558.132449][T17680] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 558.140201][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.145692][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.145814][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.145906][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.145971][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.576042][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 558.576250][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 559.050028][ T1162] Bluetooth: hci3: Frame reassembly failed (-84) [ 559.056290][ T1162] Bluetooth: hci3: Frame reassembly failed (-84) [ 559.056421][ T1158] Bluetooth: hci3: Frame reassembly failed (-84) [ 559.064736][T17686] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 559.413637][T17688] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 559.426482][ T1166] Bluetooth: hci6: Frame reassembly failed (-84) [ 559.602712][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'. [ 560.173164][ T66] Bluetooth: hci5: command 0x1003 tx timeout [ 560.185386][T16604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 560.442928][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'. [ 560.598201][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 560.598364][ T43] audit: type=1800 audit(1788042782.712:1819): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 560.732778][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4227'. [ 560.885058][ T43] audit: type=1800 audit(1788042783.002:1820): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185524 res=0 errno=0 [ 560.893238][ T43] audit: type=1800 audit(1788042783.002:1821): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185535 res=0 errno=0 [ 560.913252][T17706] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 560.931929][ T1166] Bluetooth: hci7: Frame reassembly failed (-84) [ 561.053265][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 561.054951][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 561.402423][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4229'. [ 561.402494][T17709] nbd: must specify at least one socket [ 561.455703][ T5758] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 561.490275][T17711] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4230'. [ 562.319082][ T43] audit: type=1800 audit(1788042784.432:1822): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185554 res=0 errno=0 [ 562.339272][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 562.342749][ T43] audit: type=1800 audit(1788042784.452:1823): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185565 res=0 errno=0 [ 562.451936][T17716] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 562.953606][ T43] audit: type=1800 audit(1788042785.062:1824): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 562.976824][T16604] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 563.127853][ T43] audit: type=1800 audit(1788042785.242:1825): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185584 res=0 errno=0 [ 563.131443][ T43] audit: type=1800 audit(1788042785.242:1826): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185595 res=0 errno=0 [ 563.154797][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 563.169990][T17720] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 564.175853][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4236'. [ 564.251449][ T43] audit: type=1800 audit(1788042786.362:1827): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 564.415429][T16604] Bluetooth: hci5: command 0x1003 tx timeout [ 564.415568][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 564.430247][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'. [ 564.662334][ T43] audit: type=1800 audit(1788042786.772:1828): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 564.753411][ T38] Bluetooth: hci5: Frame reassembly failed (-84) [ 564.764472][T17727] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 565.223333][T16604] Bluetooth: hci3: command 0x1003 tx timeout [ 565.226180][ T5758] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 565.261533][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4241'. [ 565.730024][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 565.730167][ T43] audit: type=1800 audit(1788042787.842:1831): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 566.191605][ T43] audit: type=1800 audit(1788042788.302:1832): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 566.279672][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4245'. [ 566.450030][ T43] audit: type=1800 audit(1788042788.562:1833): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185721 res=0 errno=0 [ 566.450213][ T43] audit: type=1800 audit(1788042788.562:1834): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185732 res=0 errno=0 [ 566.456821][T17747] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 566.475001][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 566.813427][T16604] Bluetooth: hci5: command 0x1003 tx timeout [ 566.814361][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 567.501138][ T43] audit: type=1800 audit(1788042789.612:1835): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185751 res=0 errno=0 [ 567.503337][ T43] audit: type=1800 audit(1788042789.612:1836): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185762 res=0 errno=0 [ 567.515893][ T1158] Bluetooth: hci5: Frame reassembly failed (-84) [ 567.526865][T17759] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 567.592612][ T43] audit: type=1800 audit(1788042789.702:1837): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185781 res=0 errno=0 [ 567.612804][ T43] audit: type=1800 audit(1788042789.722:1838): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185792 res=0 errno=0 [ 567.640478][ T1166] Bluetooth: hci6: Frame reassembly failed (-84) [ 567.661781][T17757] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 568.493363][ T5758] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 568.785578][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4248'. [ 569.130718][ T43] audit: type=1800 audit(1788042791.242:1839): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 569.300338][ T1162] Bluetooth: hci3: Frame reassembly failed (-84) [ 569.389411][ T43] audit: type=1800 audit(1788042791.502:1840): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185811 res=0 errno=0 [ 569.534366][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 569.678255][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4250'. [ 569.697324][T16604] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 569.704949][ T5758] Bluetooth: hci6: command 0x1003 tx timeout [ 569.708150][T17775] nbd: must specify at least one socket [ 570.159603][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'. [ 570.351250][T17767] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 570.974803][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 570.974998][ T43] audit: type=1800 audit(1788042793.092:1845): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 571.375599][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 571.598843][ T43] audit: type=1800 audit(1788042793.712:1846): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 571.806726][ T43] audit: type=1800 audit(1788042793.922:1847): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185918 res=0 errno=0 [ 571.814641][ T43] audit: type=1800 audit(1788042793.932:1848): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185929 res=0 errno=0 [ 571.824051][ T1158] Bluetooth: hci3: Frame reassembly failed (-84) [ 571.828694][T17798] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 571.864838][ T43] audit: type=1800 audit(1788042793.972:1849): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 572.497489][ T43] audit: type=1800 audit(1788042794.612:1850): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185948 res=0 errno=0 [ 572.500642][ T43] audit: type=1800 audit(1788042794.612:1851): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185959 res=0 errno=0 [ 572.513963][ T1158] Bluetooth: hci5: Frame reassembly failed (-84) [ 572.518982][T17804] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 573.123655][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'. [ 573.155985][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 573.391773][T17811] syzkaller0: entered promiscuous mode [ 573.393782][T17811] syzkaller0: entered allmulticast mode [ 573.424860][ T43] audit: type=1800 audit(1788042795.542:1852): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 573.854668][T16604] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 574.239101][ T43] audit: type=1800 audit(1788042796.352:1853): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 574.285529][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4266'. [ 574.414218][ T43] audit: type=1800 audit(1788042796.522:1854): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 574.443846][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 574.450843][T17822] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 574.573595][ T5749] Bluetooth: hci5: command 0x1003 tx timeout [ 574.576077][ T66] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 574.790670][T17833] bond1: Removing last arp target with arp_interval on [ 574.815504][T17833] netlink: 'syz.0.4269': attribute type 27 has an invalid length. [ 575.002913][T17833] bridge0: left allmulticast mode [ 575.018716][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4270'. [ 575.297245][T17833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.313729][T17833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.485325][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 575.487691][T17836] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 576.193251][ T5823] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.193353][ T5823] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.193664][ T5823] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.195527][ T5823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.270257][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 576.270363][ T43] audit: type=1800 audit(1788042798.382:1860): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 576.296349][ T43] audit: type=1800 audit(1788042798.412:1861): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186440 res=0 errno=0 [ 576.303893][ T43] audit: type=1800 audit(1788042798.422:1862): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=186444 res=0 errno=0 [ 576.338027][T17835] can0: slcan on ptm3. [ 576.493248][ T5749] Bluetooth: hci3: command 0x1003 tx timeout [ 576.501379][T16604] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 576.548070][ T43] audit: type=1800 audit(1788042798.662:1863): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 576.676810][T17835] can0 (unregistered): slcan off ptm3. [ 576.972857][T17849] syzkaller0: entered promiscuous mode [ 576.975828][T17849] syzkaller0: entered allmulticast mode [ 577.539535][ T66] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 577.552103][T16604] Bluetooth: hci5: command 0x1003 tx timeout [ 577.691021][ T43] audit: type=1800 audit(1788042799.802:1864): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187057 res=0 errno=0 [ 577.694627][ T43] audit: type=1800 audit(1788042799.812:1865): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187068 res=0 errno=0 [ 577.708942][ T1158] Bluetooth: hci3: Frame reassembly failed (-84) [ 577.742423][T17853] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 578.245985][ T43] audit: type=1800 audit(1788042800.362:1866): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 578.327842][ T43] audit: type=1800 audit(1788042800.442:1867): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 579.779710][T16604] Bluetooth: hci3: command 0x1003 tx timeout [ 579.779777][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 579.996159][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 580.026425][T17872] syzkaller0: entered promiscuous mode [ 580.026488][T17872] syzkaller0: entered allmulticast mode [ 580.030102][ T43] audit: type=1800 audit(1788042802.142:1868): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 580.100219][ T43] audit: type=1800 audit(1788042802.212:1869): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 580.443272][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 580.593284][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 580.594279][ T25] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 580.595445][ T25] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 580.597370][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.597387][ T25] usb 8-1: Product: syz [ 580.597394][ T25] usb 8-1: Manufacturer: syz [ 580.597401][ T25] usb 8-1: SerialNumber: syz [ 580.602044][ T25] usb 8-1: config 0 descriptor?? [ 580.605593][ T25] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 580.605640][ T25] usb 8-1: setting power ON [ 580.614995][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 580.640295][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 580.641038][ T25] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 580.641086][ T25] usb 8-1: media controller created [ 580.650355][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.688327][ T25] usb 8-1: selecting invalid altsetting 6 [ 580.688398][ T25] usb 8-1: digital interface selection failed (-22) [ 580.688452][ T25] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 580.694778][ T25] usb 8-1: setting power OFF [ 580.694818][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 580.694826][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 580.694833][ T25] (NULL device *): no alternate interface [ 580.745030][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 580.829762][ T25] usb 8-1: USB disconnect, device number 14 [ 581.634427][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 581.634495][ T43] audit: type=1800 audit(1788042803.752:1881): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 582.474240][ T43] audit: type=1800 audit(1788042804.592:1882): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187387 res=0 errno=0 [ 582.496046][ T43] audit: type=1800 audit(1788042804.612:1883): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187398 res=0 errno=0 [ 582.514285][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 582.514421][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 582.517549][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 582.538743][T16596] Bluetooth: hci3: Frame reassembly failed (-84) [ 582.736202][ T43] audit: type=1800 audit(1788042804.852:1884): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 582.855936][T17906] netlink: 'syz.1.4283': attribute type 12 has an invalid length. [ 583.125426][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4285'. [ 583.448797][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 583.695835][T17912] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 583.702939][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 583.712697][ T43] audit: type=1800 audit(1788042805.812:1885): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 583.728971][ T43] audit: type=1800 audit(1788042805.842:1886): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187725 res=0 errno=0 [ 583.788574][ T43] audit: type=1800 audit(1788042805.902:1887): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 583.788640][ T43] audit: type=1800 audit(1788042805.902:1888): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187736 res=0 errno=0 [ 583.802564][T17920] syzkaller0: entered promiscuous mode [ 583.802584][T17920] syzkaller0: entered allmulticast mode [ 584.078517][ T43] audit: type=1800 audit(1788042806.192:1889): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 584.103554][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 584.239092][ T43] audit: type=1800 audit(1788042806.352:1890): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 584.281884][T17928] random: crng reseeded on system resumption [ 584.510211][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 584.573260][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 585.295905][T17949] syzkaller0: entered promiscuous mode [ 585.295981][T17949] syzkaller0: entered allmulticast mode [ 585.442477][ T74] Bluetooth: hci3: Frame reassembly failed (-84) [ 585.450414][T17943] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 585.640368][T17954] syzkaller0: entered promiscuous mode [ 585.640499][T17954] syzkaller0: entered allmulticast mode [ 585.703333][ T66] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 585.923144][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4300'. [ 587.003876][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4312'. [ 587.099317][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 587.099391][ T43] audit: type=1800 audit(1788042809.212:1906): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.136975][ T43] audit: type=1800 audit(1788042809.252:1907): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 587.151934][T17984] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 587.190816][ T43] audit: type=1800 audit(1788042809.302:1908): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.228930][T17988] syzkaller0: entered promiscuous mode [ 587.229003][T17988] syzkaller0: entered allmulticast mode [ 587.329889][ T43] audit: type=1800 audit(1788042809.442:1909): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.386480][T17994] syzkaller0: entered promiscuous mode [ 587.386560][T17994] syzkaller0: entered allmulticast mode [ 587.453379][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 587.453417][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 587.583602][ T43] audit: type=1800 audit(1788042809.692:1910): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.695458][ T43] audit: type=1800 audit(1788042809.802:1911): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.771696][T17989] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 587.778055][ T43] audit: type=1800 audit(1788042809.892:1912): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189154 res=0 errno=0 [ 587.781307][ T43] audit: type=1800 audit(1788042809.892:1913): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189165 res=0 errno=0 [ 587.784710][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 587.858882][ T43] audit: type=1800 audit(1788042809.972:1914): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 587.962394][ T43] audit: type=1800 audit(1788042810.072:1915): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 589.197460][T18030] FAULT_INJECTION: forcing a failure. [ 589.197460][T18030] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 589.197536][T18030] CPU: 0 UID: 0 PID: 18030 Comm: syz.1.4318 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.197573][T18030] Tainted: [L]=SOFTLOCKUP [ 589.197581][T18030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 589.197590][T18030] Call Trace: [ 589.197597][T18030] [ 589.197604][T18030] dump_stack_lvl+0x100/0x190 [ 589.197644][T18030] should_fail_ex.cold+0x5/0xa [ 589.197666][T18030] _copy_to_user+0x32/0xd0 [ 589.197693][T18030] simple_read_from_buffer+0xcb/0x170 [ 589.197713][T18030] proc_fail_nth_read+0x1af/0x230 [ 589.197740][T18030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.197768][T18030] ? rw_verify_area+0xce/0x6d0 [ 589.197791][T18030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.197816][T18030] vfs_read+0x1e4/0xb40 [ 589.197832][T18030] ? lock_acquire+0x1d1/0x380 [ 589.197854][T18030] ? __fget_files+0x34/0x3d0 [ 589.197870][T18030] ? __pfx_vfs_read+0x10/0x10 [ 589.197884][T18030] ? find_held_lock+0x2b/0x80 [ 589.197902][T18030] ? __fget_files+0x215/0x3d0 [ 589.197923][T18030] ? __fget_files+0x21f/0x3d0 [ 589.197947][T18030] ksys_read+0x12a/0x250 [ 589.197962][T18030] ? __pfx_ksys_read+0x10/0x10 [ 589.197985][T18030] do_int80_emulation+0x166/0x650 [ 589.198016][T18030] asm_int80_emulation+0x1a/0x20 [ 589.198033][T18030] RIP: 0023:0xf71575ab [ 589.198048][T18030] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 589.198064][T18030] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 589.198080][T18030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 589.198091][T18030] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 589.198101][T18030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.198110][T18030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 589.198120][T18030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.198143][T18030] [ 589.409067][T18026] syzkaller0: entered promiscuous mode [ 589.409170][T18026] syzkaller0: entered allmulticast mode [ 589.629333][T18046] random: crng reseeded on system resumption [ 589.783991][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 591.187483][T17986] Set syz1 is full, maxelem 65536 reached [ 592.835520][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 592.835616][ T43] audit: type=1800 audit(1788042814.952:1925): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 592.853506][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4323'. [ 592.902311][ T43] audit: type=1800 audit(1788042815.012:1926): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 593.034798][ T43] audit: type=1800 audit(1788042815.152:1927): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 593.063886][ T43] audit: type=1800 audit(1788042815.182:1928): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 593.147578][ T43] audit: type=1800 audit(1788042815.262:1929): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4329" name="block2mtd" dev="sysfs" ino=61709 res=0 errno=0 [ 593.151264][T18081] block2mtd: illegal erase size [ 593.173032][ T43] audit: type=1800 audit(1788042815.282:1930): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 593.218122][T18085] syzkaller0: entered promiscuous mode [ 593.218192][T18085] syzkaller0: entered allmulticast mode [ 593.337502][ T43] audit: type=1800 audit(1788042815.452:1931): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 593.548078][ T43] audit: type=1800 audit(1788042815.662:1932): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 593.571447][ T43] audit: type=1800 audit(1788042815.682:1933): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190168 res=0 errno=0 [ 593.675951][ T43] audit: type=1800 audit(1788042815.792:1934): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190298 res=0 errno=0 [ 593.724768][T18099] block device autoloading is deprecated and will be removed. [ 593.962712][T18107] syzkaller0: entered promiscuous mode [ 593.962766][T18107] syzkaller0: entered allmulticast mode [ 594.101147][T18110] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 594.109888][T18113] netlink: 'syz.1.4338': attribute type 21 has an invalid length. [ 594.205875][T18121] syzkaller0: entered promiscuous mode [ 594.205946][T18121] syzkaller0: entered allmulticast mode [ 596.196635][T18126] Set syz1 is full, maxelem 65536 reached [ 597.660951][T18169] Illegal XDP return value 4294967262 on prog (id 318) dev N/A, expect packet loss! [ 597.815843][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'. [ 598.306136][T18186] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 598.412244][T18191] syzkaller0: entered promiscuous mode [ 598.412290][T18191] syzkaller0: entered allmulticast mode [ 598.413287][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 598.413401][ T43] audit: type=1800 audit(1788042820.312:1949): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 598.413459][ T43] audit: type=1800 audit(1788042820.472:1950): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 598.493182][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 598.577268][ T43] audit: type=1800 audit(1788042820.692:1951): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 598.646129][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 598.646928][ T5845] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 598.646960][ T5845] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 598.647974][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.649141][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.656447][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.657702][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.659288][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.662025][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.666303][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.668263][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.669190][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 598.669205][ T5845] usb 5-1: SerialNumber: syz [ 598.670677][ T5845] usb 5-1: config 0 descriptor?? [ 598.676669][ T43] audit: type=1800 audit(1788042820.792:1952): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194407 res=0 errno=0 [ 598.676699][ T43] audit: type=1800 audit(1788042820.792:1953): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=194437 res=0 errno=0 [ 598.681243][ T5845] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input65 [ 598.682782][ T43] audit: type=1800 audit(1788042820.792:1954): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=194414 res=0 errno=0 [ 598.683823][ T43] audit: type=1800 audit(1788042820.802:1955): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=194415 res=0 errno=0 [ 598.687564][ T43] audit: type=1800 audit(1788042820.802:1956): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=194416 res=0 errno=0 [ 598.843238][ T5094] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 598.961804][T18188] input: syz0 as /devices/virtual/input/input66 [ 598.963516][ T43] audit: type=1800 audit(1788042821.072:1957): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194521 res=0 errno=0 [ 599.014174][ T5094] usb 8-1: Using ep0 maxpacket: 16 [ 599.014970][ T5094] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 599.015012][ T5094] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 599.016379][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.020124][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.021586][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.022952][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.026829][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.030167][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.031543][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.037439][ T5094] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.038450][ T5094] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 599.038494][ T5094] usb 8-1: SerialNumber: syz [ 599.042963][ T5094] usb 8-1: config 0 descriptor?? [ 599.058193][ T5094] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input67 [ 599.081398][ T5138] bcm5974 5-1:0.0: could not read from device [ 599.095319][ T5138] bcm5974 5-1:0.0: could not read from device [ 599.104642][ T5845] usb 5-1: USB disconnect, device number 20 [ 599.116214][ T43] audit: type=1800 audit(1788042821.222:1958): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194552 res=0 errno=0 [ 599.248787][T18193] FAULT_INJECTION: forcing a failure. [ 599.248787][T18193] name failslab, interval 1, probability 0, space 0, times 0 [ 599.248850][T18193] CPU: 2 UID: 0 PID: 18193 Comm: syz.3.4358 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.248878][T18193] Tainted: [L]=SOFTLOCKUP [ 599.248883][T18193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.248890][T18193] Call Trace: [ 599.248895][T18193] [ 599.248900][T18193] dump_stack_lvl+0x100/0x190 [ 599.248919][T18193] should_fail_ex.cold+0x5/0xa [ 599.248935][T18193] should_failslab+0xc2/0x120 [ 599.248951][T18193] __kmalloc_noprof+0xfc/0x840 [ 599.248963][T18193] ? tomoyo_encode2+0xfb/0x3c0 [ 599.248983][T18193] tomoyo_encode2+0xfb/0x3c0 [ 599.249008][T18193] tomoyo_encode+0x29/0x50 [ 599.249024][T18193] tomoyo_realpath_from_path+0x18c/0x690 [ 599.249045][T18193] tomoyo_path_number_perm+0x23c/0x580 [ 599.249059][T18193] ? tomoyo_path_number_perm+0x22e/0x580 [ 599.249075][T18193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 599.249090][T18193] ? get_pid_task+0x106/0x250 [ 599.249106][T18193] ? __lock_acquire+0x4c5/0x1ec0 [ 599.249128][T18193] ? __fget_files+0x34/0x3d0 [ 599.249140][T18193] ? find_held_lock+0x2b/0x80 [ 599.249151][T18193] ? __fget_files+0x215/0x3d0 [ 599.249161][T18193] ? hook_file_ioctl_common+0x140/0x440 [ 599.249176][T18193] ? __fget_files+0x215/0x3d0 [ 599.249190][T18193] ? __fget_files+0x21f/0x3d0 [ 599.249203][T18193] security_file_ioctl_compat+0xd3/0x230 [ 599.249219][T18193] __ia32_compat_sys_ioctl+0xc2/0x360 [ 599.249238][T18193] __do_fast_syscall_32+0x13a/0x8b0 [ 599.249254][T18193] ? lockdep_hardirqs_on+0x7d/0x110 [ 599.249269][T18193] do_fast_syscall_32+0x32/0x70 [ 599.249284][T18193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.249298][T18193] RIP: 0023:0xf707efec [ 599.249311][T18193] Code: Unable to access opcode bytes at 0xf707efc2. [ 599.249316][T18193] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 599.249328][T18193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 599.249335][T18193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.249342][T18193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.249348][T18193] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.249355][T18193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.249369][T18193] [ 599.251327][T18193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 599.269153][T18193] input: syz0 as /devices/virtual/input/input68 [ 599.306111][ T5138] bcm5974 8-1:0.0: could not read from device [ 599.306272][ T25] usb 8-1: USB disconnect, device number 15 [ 599.311085][ T6008] bcm5974 8-1:0.0: could not read from device [ 599.315517][ T5138] bcm5974 8-1:0.0: could not read from device [ 600.365591][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 601.309939][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4368'. [ 602.397942][ T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 602.595739][ T10] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 602.599206][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.606721][ T10] usb 8-1: config 0 has no interfaces? [ 602.629013][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.634670][ T10] usb 8-1: Product: syz [ 602.643726][ T10] usb 8-1: Manufacturer: syz [ 602.650283][ T10] usb 8-1: SerialNumber: syz [ 603.068752][ T10] usb 8-1: config 0 descriptor?? [ 603.455825][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 603.455930][ T43] audit: type=1800 audit(1788042825.552:2005): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=195795 res=0 errno=0 [ 603.491704][T18242] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 605.074134][ T10] usb 8-1: USB disconnect, device number 16 [ 605.190264][ T43] audit: type=1800 audit(1788042827.302:2006): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 605.245388][T18251] FAULT_INJECTION: forcing a failure. [ 605.245388][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 605.245472][T18251] CPU: 3 UID: 0 PID: 18251 Comm: syz.3.4376 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.245517][T18251] Tainted: [L]=SOFTLOCKUP [ 605.245526][T18251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 605.245537][T18251] Call Trace: [ 605.245544][T18251] [ 605.245551][T18251] dump_stack_lvl+0x100/0x190 [ 605.245582][T18251] should_fail_ex.cold+0x5/0xa [ 605.245606][T18251] should_failslab+0xc2/0x120 [ 605.245630][T18251] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 605.245651][T18251] ? __alloc_skb+0x140/0x710 [ 605.245688][T18251] __alloc_skb+0x140/0x710 [ 605.245705][T18251] ? __alloc_skb+0x5b7/0x710 [ 605.245724][T18251] ? __pfx___alloc_skb+0x10/0x10 [ 605.245742][T18251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.245773][T18251] nl80211_get_key+0x3e4/0xe10 [ 605.245799][T18251] ? __pfx_nl80211_get_key+0x10/0x10 [ 605.245820][T18251] ? __nla_parse+0x40/0x60 [ 605.245852][T18251] ? nl80211_pre_doit+0x19a/0xae0 [ 605.245878][T18251] genl_family_rcv_msg_doit+0x214/0x300 [ 605.245903][T18251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.245924][T18251] ? genl_get_cmd+0x3e7/0x760 [ 605.245949][T18251] ? bpf_lsm_capable+0x9/0x10 [ 605.245975][T18251] ? security_capable+0x80/0x260 [ 605.245995][T18251] ? ns_capable+0xd2/0xf0 [ 605.246023][T18251] genl_rcv_msg+0x560/0x800 [ 605.246047][T18251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.246067][T18251] ? __lock_acquire+0x4c5/0x1ec0 [ 605.246091][T18251] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 605.246113][T18251] ? __pfx_nl80211_get_key+0x10/0x10 [ 605.246133][T18251] ? __pfx_nl80211_post_doit+0x10/0x10 [ 605.246167][T18251] netlink_rcv_skb+0x159/0x420 [ 605.246185][T18251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.246207][T18251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.246236][T18251] ? netlink_deliver_tap+0x1ae/0xcc0 [ 605.246268][T18251] genl_rcv+0x28/0x40 [ 605.246286][T18251] netlink_unicast+0x585/0x850 [ 605.246308][T18251] ? __pfx_netlink_unicast+0x10/0x10 [ 605.246333][T18251] netlink_sendmsg+0x8b0/0xda0 [ 605.246355][T18251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.246375][T18251] ? apparmor_socket_sendmsg+0x165/0x280 [ 605.246401][T18251] ____sys_sendmsg+0xa4d/0xbe0 [ 605.246448][T18251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.246470][T18251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.246512][T18251] ___sys_sendmsg+0x190/0x1e0 [ 605.246662][T18251] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.246703][T18251] ? find_held_lock+0x2b/0x80 [ 605.246739][T18251] __sys_sendmsg+0x160/0x210 [ 605.246774][T18251] ? __pfx___sys_sendmsg+0x10/0x10 [ 605.246806][T18251] ? __pfx_ksys_write+0x10/0x10 [ 605.246830][T18251] __do_fast_syscall_32+0x13a/0x8b0 [ 605.246854][T18251] ? lockdep_hardirqs_on+0x7d/0x110 [ 605.246879][T18251] do_fast_syscall_32+0x32/0x70 [ 605.246903][T18251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 605.246925][T18251] RIP: 0023:0xf707efec [ 605.246945][T18251] Code: Unable to access opcode bytes at 0xf707efc2. [ 605.246953][T18251] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 605.246971][T18251] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001800 [ 605.246983][T18251] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 605.246994][T18251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.247004][T18251] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 605.247015][T18251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.247040][T18251] [ 605.311066][ T43] audit: type=1800 audit(1788042827.422:2007): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 605.392077][ T43] audit: type=1800 audit(1788042827.502:2008): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 605.653242][ T5845] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 605.715284][ T43] audit: type=1800 audit(1788042827.832:2009): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195842 res=0 errno=0 [ 605.721637][ T43] audit: type=1800 audit(1788042827.832:2010): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195853 res=0 errno=0 [ 605.741470][T18248] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 605.751929][ T1067] Bluetooth: hci3: Frame reassembly failed (-84) [ 605.783175][ T5845] usb 8-1: device descriptor read/64, error -71 [ 606.023270][ T5845] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 606.154546][ T5845] usb 8-1: device descriptor read/64, error -71 [ 606.225034][ T43] audit: type=1800 audit(1788042828.342:2011): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4380" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 606.236263][ T43] audit: type=1800 audit(1788042828.352:2012): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195872 res=0 errno=0 [ 606.237322][ T43] audit: type=1800 audit(1788042828.352:2013): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195884 res=0 errno=0 [ 606.242293][ T43] audit: type=1800 audit(1788042828.352:2014): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195896 res=0 errno=0 [ 606.263539][ T5845] usb usb8-port1: attempt power cycle [ 606.476448][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4380'. [ 606.476507][ T1067] IPVS: starting estimator thread 0... [ 606.481402][T18263] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4380'. [ 606.481612][T18263] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4380'. [ 606.563611][T18264] IPVS: using max 43 ests per chain, 103200 per kthread [ 606.604524][ T5845] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 606.623614][ T5845] usb 8-1: device descriptor read/8, error -71 [ 606.886280][ T5845] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 606.909974][ T5845] usb 8-1: device descriptor read/8, error -71 [ 607.013501][ T5845] usb usb8-port1: unable to enumerate USB device [ 607.773456][ T5749] Bluetooth: hci3: command 0x1003 tx timeout [ 607.774941][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 608.091612][T18275] syzkaller1: entered promiscuous mode [ 608.091734][T18275] syzkaller1: entered allmulticast mode [ 608.490543][T18277] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.547367][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 608.547442][ T43] audit: type=1800 audit(1788042830.662:2016): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 608.635914][ T43] audit: type=1800 audit(1788042830.752:2017): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 608.651551][ T43] audit: type=1800 audit(1788042830.762:2018): pid=18282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4385" name="run" dev="sysfs" ino=1000 res=0 errno=0 [ 608.893196][ T25] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 608.913329][ T853] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 609.043180][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 609.045341][ T25] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 609.046625][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.046643][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 609.046678][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 609.046700][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 609.046733][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.055608][ T43] audit: type=1800 audit(1788042831.162:2019): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196001 res=0 errno=0 [ 609.057529][ T25] hub 8-1:1.0: bad descriptor, ignoring hub [ 609.057549][ T25] hub 8-1:1.0: probe with driver hub failed with error -5 [ 609.064273][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 609.064289][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 609.065677][ T43] audit: type=1800 audit(1788042831.182:2020): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=196030 res=0 errno=0 [ 609.068241][ T43] audit: type=1800 audit(1788042831.182:2021): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=196008 res=0 errno=0 [ 609.069526][ T43] audit: type=1800 audit(1788042831.182:2022): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=196009 res=0 errno=0 [ 609.069633][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 609.069642][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 609.070894][ T43] audit: type=1800 audit(1788042831.182:2023): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=196010 res=0 errno=0 [ 609.080549][ T853] usb 7-1: Using ep0 maxpacket: 8 [ 609.081155][ T43] audit: type=1800 audit(1788042831.192:2024): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196058 res=0 errno=0 [ 609.084000][ T853] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.084726][ T43] audit: type=1800 audit(1788042831.202:2025): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196077 res=0 errno=0 [ 609.101203][ T853] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 609.101273][ T853] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.101292][ T853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.101309][ T853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.101326][ T853] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.101359][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.444701][ T853] usb 7-1: usb_control_msg returned -32 [ 609.447467][ T853] usbtmc 7-1:16.0: can't read capabilities [ 609.626960][ T5856] usb 8-1: USB disconnect, device number 21 [ 609.707289][T18292] FAULT_INJECTION: forcing a failure. [ 609.707289][T18292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.707367][T18292] CPU: 2 UID: 0 PID: 18292 Comm: syz.0.4389 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.707407][T18292] Tainted: [L]=SOFTLOCKUP [ 609.707415][T18292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.707426][T18292] Call Trace: [ 609.707433][T18292] [ 609.707440][T18292] dump_stack_lvl+0x100/0x190 [ 609.707469][T18292] should_fail_ex.cold+0x5/0xa [ 609.707500][T18292] _copy_from_user+0x2e/0xd0 [ 609.707521][T18292] kstrtouint_from_user+0xd6/0x1d0 [ 609.707546][T18292] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 609.707574][T18292] ? lock_acquire+0x1d1/0x380 [ 609.707604][T18292] proc_fail_nth_write+0x83/0x220 [ 609.707624][T18292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.707649][T18292] vfs_write+0x2aa/0x1050 [ 609.707667][T18292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.707685][T18292] ? lock_acquire+0x1d1/0x380 [ 609.707708][T18292] ? __fget_files+0x34/0x3d0 [ 609.707727][T18292] ? __pfx_vfs_write+0x10/0x10 [ 609.707743][T18292] ? find_held_lock+0x2b/0x80 [ 609.707762][T18292] ? __fget_files+0x215/0x3d0 [ 609.707785][T18292] ? __fget_files+0x21f/0x3d0 [ 609.707812][T18292] ksys_write+0x12a/0x250 [ 609.707829][T18292] ? __pfx_ksys_write+0x10/0x10 [ 609.707854][T18292] do_int80_emulation+0x166/0x650 [ 609.707882][T18292] asm_int80_emulation+0x1a/0x20 [ 609.707900][T18292] RIP: 0023:0xf71575ab [ 609.707914][T18292] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 609.707930][T18292] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 609.707948][T18292] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54165d0 [ 609.707960][T18292] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.707970][T18292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.707980][T18292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 609.707990][T18292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.708014][T18292] [ 609.899189][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.917595][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.919127][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.923844][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.927729][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 610.511936][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4393'. [ 610.839923][T18295] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.840020][T18295] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.840105][T18295] bridge_slave_0: entered allmulticast mode [ 610.841859][T18295] bridge_slave_0: entered promiscuous mode [ 610.844132][T18295] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.844254][T18295] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.844495][T18295] bridge_slave_1: entered allmulticast mode [ 610.845677][T18295] bridge_slave_1: entered promiscuous mode [ 610.876458][T18295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.883475][T18295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.889476][T18326] syzkaller1: entered promiscuous mode [ 610.891563][T18326] syzkaller1: entered allmulticast mode [ 610.901499][T18295] team0: Port device team_slave_0 added [ 610.903332][T18295] team0: Port device team_slave_1 added [ 610.916026][T18295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.916086][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.916127][T18295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.917130][T18295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.917138][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.917150][T18295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.050474][T18295] hsr_slave_0: entered promiscuous mode [ 611.051068][T18295] hsr_slave_1: entered promiscuous mode [ 611.051422][T18295] debugfs: 'hsr0' already exists in 'hsr' [ 611.051434][T18295] Cannot create hsr debugfs directory [ 611.184202][T18295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 611.190389][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.197668][T18295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 611.201818][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.202283][T18295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 611.208761][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.209704][T18295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 611.242106][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.249277][T18328] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.320866][T18295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.373197][T18295] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.379782][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.379909][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.389500][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.389646][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.596897][ T25] usb 7-1: USB disconnect, device number 10 [ 611.665904][T18295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.687628][T18355] program syz.2.4398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.021772][ T66] Bluetooth: hci3: command tx timeout [ 612.336145][T18295] veth0_vlan: entered promiscuous mode [ 612.549030][T18295] veth1_vlan: entered promiscuous mode [ 612.622435][T18295] veth0_macvtap: entered promiscuous mode [ 612.630643][T18295] veth1_macvtap: entered promiscuous mode [ 612.656875][T18295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.682797][T18295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.729726][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.729820][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.729871][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.729913][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.927371][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.927401][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.951827][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.951865][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.977918][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 613.977988][ T43] audit: type=1800 audit(1788042836.092:2049): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 614.010198][ T43] audit: type=1800 audit(1788042836.122:2050): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 614.026309][ T43] audit: type=1800 audit(1788042836.142:2051): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 614.113407][ T66] Bluetooth: hci3: command tx timeout [ 614.394968][ T43] audit: type=1800 audit(1788042836.512:2052): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 614.430031][ T43] audit: type=1800 audit(1788042836.542:2053): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4402" name="pm_wakeup_irq" dev="sysfs" ino=585 res=0 errno=0 [ 614.528235][ T43] audit: type=1800 audit(1788042836.642:2054): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 614.838962][T18397] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 615.191641][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4404'. [ 615.593327][ T42] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 615.746082][ T42] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 615.752801][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.756618][ T42] usb 7-1: config 0 has no interfaces? [ 615.780535][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.780610][ T42] usb 7-1: Product: syz [ 615.780671][ T42] usb 7-1: Manufacturer: syz [ 615.781039][ T42] usb 7-1: SerialNumber: syz [ 615.987501][ T42] usb 7-1: config 0 descriptor?? [ 615.999779][ T43] audit: type=1800 audit(1788042838.112:2055): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202759 res=0 errno=0 [ 616.035025][ T43] audit: type=1800 audit(1788042838.152:2056): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=202791 res=0 errno=0 [ 616.053865][ T43] audit: type=1800 audit(1788042838.162:2057): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=202766 res=0 errno=0 [ 616.071903][ T43] audit: type=1800 audit(1788042838.182:2058): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=202767 res=0 errno=0 [ 616.173223][ T66] Bluetooth: hci3: command tx timeout [ 616.257021][T18405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 616.776778][ T42] usb 7-1: USB disconnect, device number 11 [ 617.033561][T18413] syzkaller1: entered promiscuous mode [ 617.033632][T18413] syzkaller1: entered allmulticast mode [ 617.082498][T18416] jffs2: notice: (18416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 617.856083][T18432] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4411'. [ 618.163440][ T1348] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 618.253284][ T66] Bluetooth: hci3: command tx timeout [ 618.313207][ T1348] usb 8-1: Using ep0 maxpacket: 16 [ 618.313775][ T1348] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.316737][ T1348] usb 8-1: config index 0 descriptor too short (expected 50423, got 68) [ 618.316758][ T1348] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.316786][ T1348] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 618.320271][ T1348] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=1 [ 618.320290][ T1348] usb 8-1: Manufacturer: syz [ 618.320299][ T1348] usb 8-1: SerialNumber: syz [ 618.323164][ T1348] hub 8-1:1.0: bad descriptor, ignoring hub [ 618.323179][ T1348] hub 8-1:1.0: probe with driver hub failed with error -5 [ 618.327835][ T1348] cdc_ether 8-1:1.0: skipping garbage [ 618.327847][ T1348] cdc_ether 8-1:1.0: missing cdc header ether descriptor [ 618.360744][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'. [ 618.738720][T18448] busy [ 618.825099][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.825154][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.143788][ T6249] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 619.177729][ T43] kauditd_printk_skb: 94 callbacks suppressed [ 619.177836][ T43] audit: type=1326 audit(1788042841.292:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.3.4412" exe="/syz-executor" sig=0 arch=40000003 syscall=0 compat=1 ip=0xf71b75ab code=0x7ffc0000 [ 619.177900][ T43] audit: type=1326 audit(1788042841.292:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.3.4412" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.305203][ T6249] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 619.305364][ T43] audit: type=1800 audit(1788042841.412:2155): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 619.313426][ T6249] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.313491][ T6249] usb 9-1: config 0 has no interfaces? [ 619.355111][ T6249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.355677][ T6249] usb 9-1: Product: syz [ 619.355713][ T6249] usb 9-1: Manufacturer: syz [ 619.355788][ T6249] usb 9-1: SerialNumber: syz [ 619.408219][ T43] audit: type=1800 audit(1788042841.522:2156): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203118 res=0 errno=0 [ 619.416745][ T6249] usb 9-1: config 0 descriptor?? [ 619.416871][ T43] audit: type=1800 audit(1788042841.532:2157): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203150 res=0 errno=0 [ 619.416915][ T43] audit: type=1800 audit(1788042841.532:2158): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=203125 res=0 errno=0 [ 619.417393][ T43] audit: type=1800 audit(1788042841.532:2159): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=203126 res=0 errno=0 [ 619.478021][ T43] audit: type=1800 audit(1788042841.592:2160): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=203147 res=0 errno=0 [ 619.488008][ T43] audit: type=1800 audit(1788042841.602:2161): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=203148 res=0 errno=0 [ 619.503911][ T43] audit: type=1800 audit(1788042841.622:2162): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=203127 res=0 errno=0 [ 619.787271][T18453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 620.107537][T18460] FAULT_INJECTION: forcing a failure. [ 620.107537][T18460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.107604][T18460] CPU: 0 UID: 0 PID: 18460 Comm: syz.2.4421 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.107634][T18460] Tainted: [L]=SOFTLOCKUP [ 620.107640][T18460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.107647][T18460] Call Trace: [ 620.107651][T18460] [ 620.107656][T18460] dump_stack_lvl+0x100/0x190 [ 620.107675][T18460] should_fail_ex.cold+0x5/0xa [ 620.107691][T18460] _copy_to_iter+0x1f3/0x1720 [ 620.107704][T18460] ? __mutex_unlock_slowpath+0x35d/0x930 [ 620.107719][T18460] ? __pfx__copy_to_iter+0x10/0x10 [ 620.107731][T18460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.107748][T18460] ? kernfs_put_active+0x93/0xe0 [ 620.107763][T18460] seq_read_iter+0xdab/0x1270 [ 620.107780][T18460] kernfs_fop_read_iter+0x46c/0x610 [ 620.107797][T18460] ? rw_verify_area+0xce/0x6d0 [ 620.107813][T18460] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 620.107830][T18460] vfs_read+0x82e/0xb40 [ 620.107842][T18460] ? __pfx_vfs_read+0x10/0x10 [ 620.107850][T18460] ? find_held_lock+0x2b/0x80 [ 620.107871][T18460] ksys_read+0x12a/0x250 [ 620.107881][T18460] ? __pfx_ksys_read+0x10/0x10 [ 620.107890][T18460] ? ksys_write+0x1ac/0x250 [ 620.107900][T18460] ? __pfx_ksys_write+0x10/0x10 [ 620.107912][T18460] __do_fast_syscall_32+0x13a/0x8b0 [ 620.107927][T18460] ? lockdep_hardirqs_on+0x7d/0x110 [ 620.107942][T18460] do_fast_syscall_32+0x32/0x70 [ 620.107957][T18460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.107971][T18460] RIP: 0023:0xf7f54fec [ 620.107984][T18460] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 620.107989][T18460] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 620.108000][T18460] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 620.108012][T18460] RDX: 00000000000000aa RSI: 0000000000000000 RDI: 0000000000000000 [ 620.108018][T18460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.108024][T18460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 620.108031][T18460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.108044][T18460] [ 620.145343][ T6249] usb 8-1: USB disconnect, device number 22 [ 620.249153][ T30] usb 9-1: USB disconnect, device number 2 [ 620.275964][T18467] overlayfs: missing 'lowerdir' [ 620.745215][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.752075][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.764707][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.798893][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.827524][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.921628][T18473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4428'. [ 621.057986][T18487] syzkaller0: entered promiscuous mode [ 621.060436][T18487] syzkaller0: entered allmulticast mode [ 621.241142][ T30] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 621.403164][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 621.405473][ T30] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.406740][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.406777][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.406801][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.406821][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 621.406840][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.408084][ T30] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.408108][ T30] usb 8-1: Manufacturer: syz [ 621.411462][ T30] usb 8-1: config 0 descriptor?? [ 621.673842][ T30] rc_core: IR keymap rc-hauppauge not found [ 621.673926][ T30] Registered IR keymap rc-empty [ 621.674088][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.698126][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.724868][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 621.727703][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input69 [ 621.731897][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.753232][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.779706][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.798999][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.814750][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.846057][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.873423][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.893515][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.933269][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.970915][ T30] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 621.994263][ T30] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.997550][ T30] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 622.007396][ T30] usb 8-1: USB disconnect, device number 23 [ 622.898999][ T66] Bluetooth: hci1: command tx timeout [ 623.381878][T18509] tipc: Enabling of bearer rejected, failed to enable media [ 623.507435][T18469] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.507582][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.507721][T18469] bridge_slave_0: entered allmulticast mode [ 623.508461][T18469] bridge_slave_0: entered promiscuous mode [ 623.509897][T18469] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.510017][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.510181][T18469] bridge_slave_1: entered allmulticast mode [ 623.511175][T18469] bridge_slave_1: entered promiscuous mode [ 623.528218][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.531346][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.548824][T18469] team0: Port device team_slave_0 added [ 623.550107][T18469] team0: Port device team_slave_1 added [ 623.568639][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.568698][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.568732][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.569631][T18469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.569639][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.569652][T18469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.570019][T18526] syzkaller1: entered promiscuous mode [ 623.570031][T18526] syzkaller1: entered allmulticast mode [ 623.595045][T18469] hsr_slave_0: entered promiscuous mode [ 623.595576][T18469] hsr_slave_1: entered promiscuous mode [ 623.596530][T18469] debugfs: 'hsr0' already exists in 'hsr' [ 623.596550][T18469] Cannot create hsr debugfs directory [ 623.788759][T18529] syzkaller1: entered promiscuous mode [ 623.788811][T18529] syzkaller1: entered allmulticast mode [ 623.802488][T18469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 624.507773][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.508357][T18469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 624.537817][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.590574][T18469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 624.594185][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.594883][T18469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 624.601093][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.700287][T18469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.720598][T18469] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.727440][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.727552][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.734615][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.734764][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.839267][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 624.839326][ T43] audit: type=1800 audit(1788042846.952:2197): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4439" name="freeze_filesystems" dev="sysfs" ino=588 res=0 errno=0 [ 624.861087][ T43] audit: type=1800 audit(1788042846.972:2198): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 624.934924][ T43] audit: type=1800 audit(1788042847.052:2199): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 624.982712][ T66] Bluetooth: hci1: command tx timeout [ 624.984483][ T1348] kernel read not supported for file /adsp1 (pid: 1348 comm: kworker/3:2) [ 624.998243][ T43] audit: type=1800 audit(1788042847.112:2200): pid=18543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4439" name="remove" dev="sysfs" ino=2257 res=0 errno=0 [ 625.158945][T18550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 625.284036][ T43] audit: type=1800 audit(1788042847.372:2201): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4439" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 625.449502][T18550] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 625.454189][T18550] overlayfs: failed to look up (tracing) for ino (-66) [ 625.548335][ T43] audit: type=1800 audit(1788042847.662:2202): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 625.615802][T18557] syzkaller0: entered promiscuous mode [ 625.615865][T18557] syzkaller0: entered allmulticast mode [ 625.632662][T18469] 8021q: adding VLAN 0 to HW filter on device batadv0 qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 625.836268][T18543] ------------[ cut here ]------------ [ 625.836337][T18543] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'pc212e' [ 625.836398][T18543] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#1: syz.2.4439/18543 [ 625.849355][T18543] Modules linked in: [ 625.851281][T18543] CPU: 1 UID: 0 PID: 18543 Comm: syz.2.4439 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.856114][T18543] Tainted: [L]=SOFTLOCKUP [ 625.857844][T18543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.862945][T18543] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 625.866008][T18543] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 99 4f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 dc 21 4b ff 48 8d 7d 18 48 b8 00 [ 625.873999][T18543] RSP: 0018:ffffc90002fb76a0 EFLAGS: 00010246 [ 625.876467][T18543] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888028ef5edc [ 625.879737][T18543] RDX: ffff88801d3c85dc RSI: ffffffff8c0b6540 RDI: ffffffff914b60d0 [ 625.883206][T18543] RBP: ffff888028ef5eb8 R08: ffff88802ad4561c R09: ffffed10051debc3 [ 625.886742][T18543] R10: ffff888028ef5e1b R11: 0000000000000000 R12: ffff888028ef5e00 [ 625.890777][T18543] R13: ffff88801d3c8500 R14: ffff88802ad455f8 R15: dffffc0000000000 [ 625.894434][T18543] FS: 0000000000000000(0000) GS:ffff888096a67000(0063) knlGS:00000000f53f5b40 [ 625.898022][T18543] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 625.900826][T18543] CR2: 00007f167a176e9c CR3: 000000007902b000 CR4: 0000000000352ef0 [ 625.904601][T18543] Call Trace: [ 625.906090][T18543] [ 625.907359][T18543] ? __pfx_remove_proc_entry+0x10/0x10 [ 625.909574][T18543] ? mtree_load+0x3a4/0xb50 [ 625.911490][T18543] ? __pfx_mtree_load+0x10/0x10 [ 625.913537][T18543] ? rcu_is_watching+0x13/0xc0 [ 625.915577][T18543] unregister_irq_proc+0x206/0x2a0 [ 625.917720][T18543] ? __pfx_unregister_irq_proc+0x10/0x10 [ 625.920131][T18543] free_desc+0x89/0x330 [ 625.922017][T18543] ? __pfx_free_desc+0x10/0x10 [ 625.924268][T18543] ? kasan_quarantine_put+0x104/0x240 [ 625.926436][T18543] ? lockdep_hardirqs_on+0x7d/0x110 [ 625.928540][T18543] ? irq_domain_free_irqs+0x370/0x5c0 [ 625.930761][T18543] irq_free_descs+0x84/0xc0 [ 625.932603][T18543] irq_domain_free_irqs+0x46a/0x5c0 [ 625.934792][T18543] mp_unmap_irq+0xf8/0x130 [ 625.936790][T18543] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 625.939647][T18543] acpi_unregister_gsi_ioapic+0x40/0x60 [ 625.942222][T18543] acpi_unregister_gsi+0x25/0x40 [ 625.944371][T18543] acpi_pci_irq_disable+0x275/0x360 [ 625.946474][T18543] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 625.948787][T18543] pcibios_disable_device+0x89/0xb0 [ 625.950934][T18543] do_pci_disable_device+0x9f/0x100 [ 625.953138][T18543] ? __pfx_do_pci_disable_device+0x10/0x10 [ 625.955512][T18543] pci_disable_device+0x130/0x270 [ 625.957543][T18543] pci_device_remove+0xb2/0x1d0 [ 625.959581][T18543] ? __pfx_pci_device_remove+0x10/0x10 [ 625.961633][T18543] device_remove+0xcb/0x180 [ 625.963877][T18543] device_release_driver_internal+0x44e/0x620 [ 625.966603][T18543] pci_stop_bus_device+0x120/0x160 [ 625.968781][T18543] pci_stop_and_remove_bus_device+0x58/0xa0 [ 625.971140][T18543] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 625.973828][T18543] remove_store+0x123/0x140 [ 625.975711][T18543] ? __pfx_remove_store+0x10/0x10 [ 625.977709][T18543] ? find_held_lock+0x2b/0x80 [ 625.979632][T18543] ? sysfs_file_kobj+0xe4/0x290 [ 625.981641][T18543] ? sysfs_file_kobj+0xe4/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 625.983796][T18543] ? __pfx_remove_store+0x10/0x10 [ 625.986088][T18543] dev_attr_store+0x58/0x80 [ 625.988034][T18543] ? __pfx_dev_attr_store+0x10/0x10 [ 625.990154][T18543] sysfs_kf_write+0xf2/0x150 [ 625.992780][T18543] kernfs_fop_write_iter+0x3e0/0x5f0 [ 625.995565][T18543] ? __pfx_sysfs_kf_write+0x10/0x10 [ 625.998045][T18543] vfs_write+0x6af/0x1050 [ 626.000037][T18543] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 626.002501][T18543] ? __pfx_vfs_write+0x10/0x10 [ 626.004562][T18543] ? find_held_lock+0x2b/0x80 [ 626.006502][T18543] ksys_write+0x12a/0x250 [ 626.008245][T18543] ? __pfx_ksys_write+0x10/0x10 [ 626.010232][T18543] __do_fast_syscall_32+0x13a/0x8b0 [ 626.012629][T18543] do_fast_syscall_32+0x32/0x70 [ 626.015210][T18543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.017759][T18543] RIP: 0023:0xf7f54fec [ 626.019416][T18543] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 626.022187][T18543] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 626.026043][T18543] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000400 [ 626.029692][T18543] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.033282][T18543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.036809][T18543] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 626.040215][T18543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.043757][T18543] [ 626.045137][T18543] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 626.048119][T18543] CPU: 1 UID: 0 PID: 18543 Comm: syz.2.4439 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.052579][T18543] Tainted: [L]=SOFTLOCKUP [ 626.054355][T18543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.058535][T18543] Call Trace: [ 626.060040][T18543] [ 626.061331][T18543] dump_stack_lvl+0x100/0x190 [ 626.063421][T18543] vpanic+0x553/0x970 [ 626.065218][T18543] ? __pfx_vpanic+0x10/0x10 [ 626.067106][T18543] panic+0xd1/0xe0 [ 626.068619][T18543] ? __pfx_panic+0x10/0x10 [ 626.070446][T18543] check_panic_on_warn.cold+0x19/0x34 [ 626.072773][T18543] ? remove_proc_entry+0x4e7/0x610 [ 626.075489][T18543] __warn.cold+0x191/0x318 [ 626.077470][T18543] __report_bug+0x30f/0x440 [ 626.079497][T18543] ? remove_proc_entry+0x4e7/0x610 [ 626.081675][T18543] ? __pfx___report_bug+0x10/0x10 [ 626.083714][T18543] ? __do_fast_syscall_32+0x13a/0x8b0 [ 626.085885][T18543] ? do_raw_spin_lock+0x128/0x260 [ 626.088005][T18543] ? find_held_lock+0x2b/0x80 [ 626.089986][T18543] ? proc_entry_rundown+0x158/0x1e0 [ 626.092403][T18543] ? proc_entry_rundown+0x158/0x1e0 [ 626.094656][T18543] report_bug_entry+0xe2/0x290 [ 626.096608][T18543] ? remove_proc_entry+0x4f5/0x610 [ 626.098789][T18543] handle_bug+0x1cd/0x2a0 [ 626.100663][T18543] exc_invalid_op+0x17/0x50 [ 626.102787][T18543] asm_exc_invalid_op+0x1a/0x20 [ 626.105046][T18543] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 626.107645][T18543] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 99 4f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 dc 21 4b ff 48 8d 7d 18 48 b8 00 [ 626.115261][T18543] RSP: 0018:ffffc90002fb76a0 EFLAGS: 00010246 [ 626.118016][T18543] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888028ef5edc [ 626.121370][T18543] RDX: ffff88801d3c85dc RSI: ffffffff8c0b6540 RDI: ffffffff914b60d0 [ 626.123968][T18543] RBP: ffff888028ef5eb8 R08: ffff88802ad4561c R09: ffffed10051debc3 [ 626.126615][T18543] R10: ffff888028ef5e1b R11: 0000000000000000 R12: ffff888028ef5e00 [ 626.129060][T18543] R13: ffff88801d3c8500 R14: ffff88802ad455f8 R15: dffffc0000000000 [ 626.131904][T18543] ? __pfx_remove_proc_entry+0x10/0x10 [ 626.133705][T18543] ? mtree_load+0x3a4/0xb50 [ 626.135251][T18543] ? __pfx_mtree_load+0x10/0x10 [ 626.136841][T18543] ? rcu_is_watching+0x13/0xc0 [ 626.138369][T18543] unregister_irq_proc+0x206/0x2a0 [ 626.140318][T18543] ? __pfx_unregister_irq_proc+0x10/0x10 [ 626.142226][T18543] free_desc+0x89/0x330 [ 626.143713][T18543] ? __pfx_free_desc+0x10/0x10 [ 626.145352][T18543] ? kasan_quarantine_put+0x104/0x240 [ 626.147344][T18543] ? lockdep_hardirqs_on+0x7d/0x110 [ 626.149394][T18543] ? irq_domain_free_irqs+0x370/0x5c0 [ 626.151671][T18543] irq_free_descs+0x84/0xc0 [ 626.153704][T18543] irq_domain_free_irqs+0x46a/0x5c0 [ 626.156204][T18543] mp_unmap_irq+0xf8/0x130 [ 626.158370][T18543] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 626.161188][T18543] acpi_unregister_gsi_ioapic+0x40/0x60 [ 626.163519][T18543] acpi_unregister_gsi+0x25/0x40 [ 626.165573][T18543] acpi_pci_irq_disable+0x275/0x360 [ 626.167693][T18543] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 626.169907][T18543] pcibios_disable_device+0x89/0xb0 [ 626.171977][T18543] do_pci_disable_device+0x9f/0x100 [ 626.174245][T18543] ? __pfx_do_pci_disable_device+0x10/0x10 [ 626.177081][T18543] pci_disable_device+0x130/0x270 [ 626.179690][T18543] pci_device_remove+0xb2/0x1d0 [ 626.181791][T18543] ? __pfx_pci_device_remove+0x10/0x10 [ 626.184104][T18543] device_remove+0xcb/0x180 [ 626.186012][T18543] device_release_driver_internal+0x44e/0x620 [ 626.188536][T18543] pci_stop_bus_device+0x120/0x160 [ 626.190692][T18543] pci_stop_and_remove_bus_device+0x58/0xa0 [ 626.193136][T18543] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 626.195827][T18543] remove_store+0x123/0x140 [ 626.198088][T18543] ? __pfx_remove_store+0x10/0x10 [ 626.200578][T18543] ? find_held_lock+0x2b/0x80 [ 626.203095][T18543] ? sysfs_file_kobj+0xe4/0x290 [ 626.205233][T18543] ? sysfs_file_kobj+0xe4/0x290 [ 626.207268][T18543] ? __pfx_remove_store+0x10/0x10 [ 626.209345][T18543] dev_attr_store+0x58/0x80 [ 626.211298][T18543] ? __pfx_dev_attr_store+0x10/0x10 [ 626.213490][T18543] sysfs_kf_write+0xf2/0x150 [ 626.215507][T18543] kernfs_fop_write_iter+0x3e0/0x5f0 [ 626.217718][T18543] ? __pfx_sysfs_kf_write+0x10/0x10 [ 626.219905][T18543] vfs_write+0x6af/0x1050 [ 626.221841][T18543] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 626.224548][T18543] ? __pfx_vfs_write+0x10/0x10 [ 626.226897][T18543] ? find_held_lock+0x2b/0x80 [ 626.228998][T18543] ksys_write+0x12a/0x250 [ 626.230820][T18543] ? __pfx_ksys_write+0x10/0x10 [ 626.232849][T18543] __do_fast_syscall_32+0x13a/0x8b0 [ 626.235075][T18543] do_fast_syscall_32+0x32/0x70 [ 626.237149][T18543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.239901][T18543] RIP: 0023:0xf7f54fec [ 626.241820][T18543] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 626.244993][T18543] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 626.248773][T18543] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000400 [ 626.251988][T18543] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.255373][T18543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.258605][T18543] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 626.261950][T18543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.265545][T18543] [ 626.267846][T18543] Kernel Offset: disabled [ 626.269800][T18543] Rebooting in 86400 seconds..