last executing test programs: 9.422669709s ago: executing program 1 (id=2225): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(r2, &(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', 0x414a81, 0xa0) 9.353862872s ago: executing program 1 (id=2226): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r9) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 8.553631289s ago: executing program 0 (id=2232): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x4208, r0) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff1}, {0x4, 0x9}, {0x2, 0x4}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xc12}, {0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004024}, 0x24004004) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 8.423974838s ago: executing program 2 (id=2233): pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r5, r5, 0x2f, 0x2024, 0x4}, 0x20) write(r4, &(0x7f00000002c0)='123456789', 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000), 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000480)='dummy_udc.0', 0xb) 8.264292407s ago: executing program 0 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0x9e0000, 0x3f74, 0xf, r1, 0x0, &(0x7f0000000080)={0x9e0901, 0x5, '\x00', @ptr=0x269a83fd}}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x7, 0x1, 0x0, 0x2, 0x0}) 8.183281878s ago: executing program 1 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/56, 0x328000, 0x800, 0x9, 0x1}, 0x20) r4 = syz_open_dev$loop(&(0x7f0000001900), 0xfc, 0xca000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003c40)={0x2020}, 0x67ec255e) 8.104213147s ago: executing program 0 (id=2236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf0a, 0x6, 0xb4, 0x2000000, 0x5}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x36, 0xffffffb9, 0x1a}, 0x9c) 7.593284637s ago: executing program 3 (id=2237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_DATA={0x3e}]}, 0x48}, 0x1, 0x0, 0x0, 0xc140}, 0x0) 7.592774908s ago: executing program 3 (id=2238): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) (fail_nth: 1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.592175697s ago: executing program 2 (id=2239): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.226391582s ago: executing program 1 (id=2240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa830f20ac1414aa7f000001000000004e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r7, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r5, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 7.162989011s ago: executing program 0 (id=2241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.408406119s ago: executing program 2 (id=2242): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000200)="e7f62ba0ac565b0b3ea26f264302960d9cfcdf8c62a6cb9341012eacac603cd8019c4d9dbcd6029f5e0abad1cf6e66e547c641dfa9e8ed99fabc6c3733af32a1ab4b259962acbbf165ddd2cfc49890b22f94908e74828b103fc112c8179213e26ce8cd0b84bf14f2ee44985de7058dcbfd36876d32a7d45982643c7418e1619ab709acd8686f469e61774357a919b808dd3872318c37e90031906bc96ef82831683e9031720da0f151a43e5fdc085496b7a8", 0xb2}, {&(0x7f00000002c0)="81760442a4188bba59a5", 0xa}, {&(0x7f0000000340)="969cca114fc3b4c073e5e3e60434bb917c205dbcc529c11542079f964a9aaf070d72cf88aa19ad46e74894c79eef66bf8d537b1e1184fe383e4b942b07dd6b2fe6843c11a1514e606a6632a4724156ad8bb8aff52715be454064262d10bea712d1388c1d9f19d9f35937d0bc834964122e5ef98a488bc7ed1c9dc92fb464c8f4f8da86aa59025af01642e108e0aa757a47b80064a992a9570f6a8ebd092a2afb8ec1aaa4fbc489a526a70357b55625424f8590b4386bb5f9fa6ca5f826389cf955e5955723ef1b8e37d11b7cc226075a2720fba08868a5960baf8acedd3a559b69a0d4c009dc074271206284df0df6abf81e7b360228fe76b75b011ee3", 0xfd}, {&(0x7f0000000440)="462035a9083c9e7da9504499ec3dda214a84989bddddf134f24804dc0e95dccc62ccd08b9afa5f55670ebe3d7c9b30329c3d47203019fa06b2efc30dc4d8533d7ea633e56a9cdd8e5c3ac8de6b5d5fb32873f87d9e4177bcdf5a8e0df236b7cd82ed97a4f25857f70e4a2237de88c59c86e184fd9d212f16a6", 0x79}, {&(0x7f00000004c0)}], 0x5, 0x0, 0x0, 0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.190960558s ago: executing program 1 (id=2243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys/devices/system/cpu/cpu1/online\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0xa2) write(r0, &(0x7f0000000200)='of', 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800a21e04000000020000000000000c02000000000000000200000d000000000b00000000000020000000000200000000002e00"], 0x0, 0x44}, 0x20) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) lsm_list_modules(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) 5.536627852s ago: executing program 0 (id=2244): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r9) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 5.536415138s ago: executing program 3 (id=2245): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) 5.111621714s ago: executing program 2 (id=2246): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.774313878s ago: executing program 1 (id=2247): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) close(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x968ba000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.314053094s ago: executing program 3 (id=2248): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3.251281166s ago: executing program 3 (id=2249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf0a, 0x6, 0xb4, 0x2000000, 0x5}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x36, 0xffffffb9, 0x1a}, 0x9c) 2.874193433s ago: executing program 2 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000015c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r5, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) close(r5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000040)={'\x00', {0x2, 0x0, @dev}}) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000140)="3fc333bef327f26d4f8cd5774ae94b9cd38c28560d044f7a5e165d825ed79a666d1af106de7e302b513d12f61f66f64cd989c686ebf41995b1f0d12e9b9b0e3c688c8c2a3908") ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) 1.943430238s ago: executing program 3 (id=2251): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 442.881784ms ago: executing program 0 (id=2252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) recvfrom(r0, &(0x7f0000000380)=""/201, 0xc9, 0x40000030, &(0x7f00000004c0)=@xdp={0x2c, 0x2, r3, 0x38}, 0x80) r4 = syz_clone(0x5120c280, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r7, 0x8108551b, &(0x7f0000002a40)) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r8, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 2 (id=2253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='4\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='64\n', 0x3) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\n', 0x2) close(r7) kernel console output (not intermixed with test programs): Product: syz [ 131.294837][ T35] usb 7-1: Manufacturer: syz [ 131.294848][ T35] usb 7-1: SerialNumber: syz [ 131.298789][ T35] usb 7-1: selecting invalid altsetting 1 [ 131.299127][ T35] usb 7-1: unit 6 not found! [ 132.115924][ T35] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 132.179060][ T35] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 132.182019][ T35] usb 7-1: USB disconnect, device number 9 [ 132.200160][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.350809][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.350857][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.360866][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.509507][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 132.510334][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 132.510351][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.510366][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.515020][ T9] usb 5-1: config 0 descriptor?? [ 132.780779][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 132.780887][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.785875][ T9] usb 5-1: USB disconnect, device number 9 [ 132.918984][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 132.998743][ T7575] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.140908][ T35] usb 8-1: USB disconnect, device number 7 [ 133.153030][ T7575] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 133.154026][ T7575] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.154056][ T7575] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.154095][ T7575] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.198884][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 133.351033][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 133.353726][ T9] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 133.353750][ T9] usb 6-1: Product: syz [ 133.356813][ T9] usb 6-1: config 0 descriptor?? [ 133.361238][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 133.362151][ T9] usb 6-1: Detected FT232H [ 133.382541][ T7575] usb 7-1: failed waiting for Axe-Fx III to boot: -71 [ 133.382574][ T7575] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 133.391914][ T7575] usb 7-1: USB disconnect, device number 10 [ 133.524636][ T8369] process 'syz.3.870' launched './file0' with NULL argv: empty string added [ 133.562444][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 133.993461][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.170660][ T35] usb 6-1: USB disconnect, device number 10 [ 134.188076][ T35] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.188337][ T35] ftdi_sio 6-1:0.0: device disconnected [ 134.515390][ T2321] kernel write not supported for file [eventfd] (pid: 2321 comm: kworker/2:2) [ 134.811369][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 134.884606][ T8442] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 134.980002][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.130982][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 135.132862][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.358812][ T35] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 135.376938][ T8459] FAULT_INJECTION: forcing a failure. [ 135.376938][ T8459] name failslab, interval 1, probability 0, space 0, times 1 [ 135.376960][ T8459] CPU: 2 UID: 0 PID: 8459 Comm: syz.3.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.376977][ T8459] Tainted: [L]=SOFTLOCKUP [ 135.376981][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.376988][ T8459] Call Trace: [ 135.376992][ T8459] [ 135.376997][ T8459] dump_stack_lvl+0x100/0x190 [ 135.377017][ T8459] should_fail_ex.cold+0x5/0xa [ 135.377032][ T8459] should_failslab+0xc2/0x120 [ 135.377049][ T8459] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.377066][ T8459] ? fscontext_alloc_log+0x4a/0x1b0 [ 135.377086][ T8459] fscontext_alloc_log+0x4a/0x1b0 [ 135.377103][ T8459] __ia32_sys_fsopen+0x15b/0x230 [ 135.377120][ T8459] __do_fast_syscall_32+0x13a/0x8b0 [ 135.377138][ T8459] do_fast_syscall_32+0x32/0x70 [ 135.377155][ T8459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.377168][ T8459] RIP: 0023:0xf70befec [ 135.377181][ T8459] Code: Unable to access opcode bytes at 0xf70befc2. [ 135.377186][ T8459] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 135.377196][ T8459] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 135.377203][ T8459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.377209][ T8459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.377214][ T8459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.377221][ T8459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.377235][ T8459] [ 135.617984][ T9] usb 5-1: USB disconnect, device number 10 [ 135.988779][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.148760][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 136.151898][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 136.160732][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.160749][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.160766][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.164567][ T10] usb 8-1: config 0 descriptor?? [ 136.384209][ T8493] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿ, name , dev 40f00 [ 136.590845][ T10] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 136.850297][ T5821] usb 8-1: USB disconnect, device number 8 [ 137.149972][ T8507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.929'. [ 137.178233][ T8509] cgroup: Unknown subsys name 'cpuset' [ 137.398764][ T5821] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 137.569327][ T5821] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.570198][ T5821] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.570215][ T5821] usb 7-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.570228][ T5821] usb 7-1: config 1 interface 0 has no altsetting 0 [ 137.571127][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.571139][ T5821] usb 7-1: SerialNumber: syz [ 137.577104][ T5821] hub 7-1:1.0: bad descriptor, ignoring hub [ 137.577116][ T5821] hub 7-1:1.0: probe with driver hub failed with error -5 [ 137.577362][ T5821] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 137.669001][ T2321] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 137.785310][ T5821] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 137.799934][ T5821] usb 7-1: USB disconnect, device number 11 [ 137.819596][ T2321] usb 6-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 137.820385][ T2321] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 137.820405][ T2321] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 137.821890][ T2321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.821901][ T2321] usb 6-1: Product: syz [ 137.821908][ T2321] usb 6-1: Manufacturer: syz [ 137.821920][ T2321] usb 6-1: SerialNumber: syz [ 138.032211][ T2321] usb 6-1: Can't get UAC3 power state for id 10 [ 138.034033][ T2321] usb 6-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 138.062336][ T2321] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 138.067479][ T2321] usb 6-1: USB disconnect, device number 11 [ 138.085993][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.316773][ T8545] mmap: syz.0.947 (8545) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.543044][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 138.642500][ T8576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.961'. [ 138.858775][ T35] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 139.019663][ T35] usb 8-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 139.020554][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 139.020576][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.022719][ T35] usb 8-1: config 0 descriptor?? [ 139.048735][ T6728] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 139.209825][ T6728] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.210643][ T6728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.212432][ T6728] usb 7-1: config 0 descriptor?? [ 139.216163][ T6728] cp210x 7-1:0.0: cp210x converter detected [ 139.218765][ T58] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 139.233437][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 139.235846][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 139.237541][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 139.238150][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 139.244070][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 139.244164][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 139.247101][ T35] usb 8-1: USB disconnect, device number 9 [ 139.368908][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 139.369601][ T58] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=dc.21 [ 139.370746][ T58] usb 6-1: config 9 has an invalid interface number: 180 but max is 0 [ 139.370760][ T58] usb 6-1: config 9 has no interface number 0 [ 139.370778][ T58] usb 6-1: config 9 interface 180 has no altsetting 0 [ 139.373790][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.373806][ T58] usb 6-1: Product: syz [ 139.373813][ T58] usb 6-1: Manufacturer: syz [ 139.373820][ T58] usb 6-1: SerialNumber: syz [ 139.382074][ T58] r8152-cfgselector 6-1: Unknown version 0x0000 [ 139.591280][ T58] r8152-cfgselector 6-1: Unknown version 0x0000 [ 139.591558][ T58] r8153_ecm 6-1:9.180: skipping garbage [ 139.591566][ T58] r8153_ecm 6-1:9.180: skipping garbage [ 139.591573][ T58] r8152-cfgselector 6-1: No union descriptors [ 139.595504][ T58] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 139.620687][ T6728] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 139.781198][ T8625] netlink: 5856 bytes leftover after parsing attributes in process `syz.3.983'. [ 139.800370][ T2321] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.817419][ T8627] netlink: 'syz.3.984': attribute type 8 has an invalid length. [ 139.960257][ T2321] usb 5-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 139.961879][ T2321] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.961909][ T2321] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.961931][ T2321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.961962][ T2321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.967728][ T2321] usb 5-1: config 0 descriptor?? [ 139.981328][ T8635] FAULT_INJECTION: forcing a failure. [ 139.981328][ T8635] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.981352][ T8635] CPU: 3 UID: 0 PID: 8635 Comm: syz.3.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.981367][ T8635] Tainted: [L]=SOFTLOCKUP [ 139.981371][ T8635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.981378][ T8635] Call Trace: [ 139.981383][ T8635] [ 139.981388][ T8635] dump_stack_lvl+0x100/0x190 [ 139.981406][ T8635] should_fail_ex.cold+0x5/0xa [ 139.981421][ T8635] _copy_from_user+0x2e/0xd0 [ 139.981437][ T8635] get_old_timespec32+0x82/0x130 [ 139.981467][ T8635] ? __pfx_get_old_timespec32+0x10/0x10 [ 139.981484][ T8635] ? find_held_lock+0x2b/0x80 [ 139.981500][ T8635] __ia32_sys_utimensat_time32+0x17b/0x290 [ 139.981519][ T8635] ? __pfx___ia32_sys_utimensat_time32+0x10/0x10 [ 139.981536][ T8635] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 139.981555][ T8635] __do_fast_syscall_32+0x13a/0x8b0 [ 139.981575][ T8635] do_fast_syscall_32+0x32/0x70 [ 139.981591][ T8635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.981605][ T8635] RIP: 0023:0xf70befec [ 139.981619][ T8635] Code: Unable to access opcode bytes at 0xf70befc2. [ 139.981624][ T8635] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000140 [ 139.981635][ T8635] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 139.981642][ T8635] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.981648][ T8635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.981654][ T8635] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.981660][ T8635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.981674][ T8635] [ 140.026558][ T6728] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 140.026582][ T6728] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 140.031144][ T6728] usb 7-1: cp210x converter now attached to ttyUSB0 [ 140.032380][ T6728] usb 7-1: USB disconnect, device number 12 [ 140.035612][ T6728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.035878][ T6728] cp210x 7-1:0.0: device disconnected [ 140.142161][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 140.376206][ T2321] hid-penmount 0003:14E1:6000.000E: unbalanced collection at end of report description [ 140.376534][ T2321] hid-penmount 0003:14E1:6000.000E: probe with driver hid-penmount failed with error -22 [ 140.576204][ T2321] usb 5-1: USB disconnect, device number 11 [ 141.010453][ T2321] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 141.175671][ T2321] usb 7-1: unable to get BOS descriptor or descriptor too short [ 141.176327][ T2321] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.177421][ T2321] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 141.177438][ T2321] usb 7-1: can't read configurations, error -71 [ 143.528740][ T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 143.738328][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 143.747931][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.750148][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 143.750272][ T10] usb 8-1: can't read configurations, error -71 [ 144.304313][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 145.262613][ T8754] syzkaller0: entered promiscuous mode [ 145.262637][ T8754] syzkaller0: entered allmulticast mode [ 145.918860][ T10] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 146.071860][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 146.072493][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.073171][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 146.073187][ T10] usb 8-1: can't read configurations, error -71 [ 146.651222][ T8781] syzkaller0: entered promiscuous mode [ 146.651237][ T8781] syzkaller0: entered allmulticast mode [ 147.992114][ T8815] syzkaller0: entered promiscuous mode [ 147.992132][ T8815] syzkaller0: entered allmulticast mode [ 148.250189][ T25] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 148.401524][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 148.402560][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.402589][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.404765][ T25] usb 6-1: config 0 descriptor?? [ 148.594193][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 148.627435][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 148.638770][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 148.642324][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 148.644485][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 148.662641][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 148.662717][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 148.667437][ T25] usb 6-1: USB disconnect, device number 13 [ 148.727946][ T8838] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1049'. [ 148.728218][ T8838] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1049'. [ 149.230910][ T8850] syzkaller0: entered promiscuous mode [ 149.230939][ T8850] syzkaller0: entered allmulticast mode [ 149.400607][ T8859] loop0: detected capacity change from 0 to 32768 [ 149.409171][ T8859] loop1: detected capacity change from 0 to 65536 [ 149.703927][ T8870] syzkaller0: entered promiscuous mode [ 149.703941][ T8870] syzkaller0: entered allmulticast mode [ 149.910224][ T8876] tipc: Enabling of bearer rejected, failed to enable media [ 149.911739][ T8876] syzkaller0: entered promiscuous mode [ 149.911752][ T8876] syzkaller0: entered allmulticast mode [ 150.762038][ T8887] syzkaller0: entered promiscuous mode [ 150.762065][ T8887] syzkaller0: entered allmulticast mode [ 150.975929][ T8896] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1068'. [ 150.976657][ T8896] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1068'. [ 153.242359][ T8923] syzkaller0: entered promiscuous mode [ 153.242596][ T8923] syzkaller0: entered allmulticast mode [ 153.607758][ T25] wiimote 0005:057E:0306.000F: item fetching failed at offset 14/15 [ 153.608204][ T25] wiimote 0005:057E:0306.000F: HID parse failed [ 153.608495][ T25] wiimote 0005:057E:0306.000F: probe with driver wiimote failed with error -22 [ 153.658568][ T8938] tipc: Enabling of bearer rejected, failed to enable media [ 153.659759][ T8938] syzkaller0: entered promiscuous mode [ 153.659779][ T8938] syzkaller0: entered allmulticast mode [ 153.858745][ T2321] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 154.011665][ T2321] usb 7-1: unable to get BOS descriptor or descriptor too short [ 154.012356][ T2321] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.013022][ T2321] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 154.013041][ T2321] usb 7-1: can't read configurations, error -71 [ 154.918303][ T8967] tipc: Enabling of bearer rejected, failed to enable media [ 154.924065][ T8967] syzkaller0: entered promiscuous mode [ 154.924191][ T8967] syzkaller0: entered allmulticast mode [ 155.079569][ T8971] tipc: Enabling of bearer rejected, failed to enable media [ 155.080427][ T8971] syzkaller0: entered promiscuous mode [ 155.080445][ T8971] syzkaller0: entered allmulticast mode [ 155.980054][ T8978] device-mapper: ioctl: device has been removed from the dev hash table. [ 156.642718][ T9000] loop0: detected capacity change from 0 to 32768 [ 156.651830][ T9000] loop1: detected capacity change from 0 to 65536 [ 157.112799][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 157.113854][ T9005] syzkaller0: entered promiscuous mode [ 157.113876][ T9005] syzkaller0: entered allmulticast mode [ 157.741360][ T9010] device-mapper: ioctl: device has been removed from the dev hash table. [ 158.062310][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'. [ 158.498163][ T9038] loop0: detected capacity change from 0 to 32768 [ 158.503145][ T9038] loop1: detected capacity change from 0 to 65536 [ 158.901423][ T9045] syzkaller0: entered promiscuous mode [ 158.901437][ T9045] syzkaller0: entered allmulticast mode [ 159.811072][ T9048] device-mapper: ioctl: device has been removed from the dev hash table. [ 160.173119][ T9064] FAULT_INJECTION: forcing a failure. [ 160.173119][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 160.173141][ T9064] CPU: 2 UID: 0 PID: 9064 Comm: syz.2.1118 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.173156][ T9064] Tainted: [L]=SOFTLOCKUP [ 160.173160][ T9064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.173166][ T9064] Call Trace: [ 160.173170][ T9064] [ 160.173175][ T9064] dump_stack_lvl+0x100/0x190 [ 160.173194][ T9064] should_fail_ex.cold+0x5/0xa [ 160.173222][ T9064] should_failslab+0xc2/0x120 [ 160.173239][ T9064] __kmalloc_cache_noprof+0x91/0x6d0 [ 160.173256][ T9064] ? fscontext_alloc_log+0x4a/0x1b0 [ 160.173277][ T9064] fscontext_alloc_log+0x4a/0x1b0 [ 160.173294][ T9064] __ia32_sys_fsopen+0x15b/0x230 [ 160.173312][ T9064] __do_fast_syscall_32+0x13a/0x8b0 [ 160.173342][ T9064] do_fast_syscall_32+0x32/0x70 [ 160.173360][ T9064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.173375][ T9064] RIP: 0023:0xf7fe8fec [ 160.173389][ T9064] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 160.173395][ T9064] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 160.173406][ T9064] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 160.173413][ T9064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.173420][ T9064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.173427][ T9064] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.173436][ T9064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.173456][ T9064] [ 160.900294][ T9078] syzkaller0: entered promiscuous mode [ 160.900308][ T9078] syzkaller0: entered allmulticast mode [ 161.423637][ T9083] loop0: detected capacity change from 0 to 32768 [ 161.425655][ T9083] loop1: detected capacity change from 0 to 65536 [ 162.465857][ T9098] device-mapper: ioctl: device has been removed from the dev hash table. [ 162.530066][ T9108] syzkaller0: entered promiscuous mode [ 162.530089][ T9108] syzkaller0: entered allmulticast mode [ 164.374246][ T9141] syzkaller0: entered promiscuous mode [ 164.374260][ T9141] syzkaller0: entered allmulticast mode [ 165.142417][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 165.142456][ T5095] Bluetooth: hci3: command 0x0405 tx timeout [ 165.142479][ T5095] Bluetooth: hci1: command 0x0406 tx timeout [ 165.143123][ T5095] Bluetooth: hci0: command 0x0406 tx timeout [ 165.437012][ T9154] FAULT_INJECTION: forcing a failure. [ 165.437012][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 165.437042][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.2.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.437058][ T9154] Tainted: [L]=SOFTLOCKUP [ 165.437062][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.437068][ T9154] Call Trace: [ 165.437073][ T9154] [ 165.437077][ T9154] dump_stack_lvl+0x100/0x190 [ 165.437095][ T9154] should_fail_ex.cold+0x5/0xa [ 165.437109][ T9154] should_failslab+0xc2/0x120 [ 165.437124][ T9154] __kmalloc_cache_noprof+0x91/0x6d0 [ 165.437141][ T9154] ? fscontext_alloc_log+0x4a/0x1b0 [ 165.437160][ T9154] fscontext_alloc_log+0x4a/0x1b0 [ 165.437177][ T9154] __ia32_sys_fsopen+0x15b/0x230 [ 165.437193][ T9154] __do_fast_syscall_32+0x13a/0x8b0 [ 165.437212][ T9154] do_fast_syscall_32+0x32/0x70 [ 165.437229][ T9154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.437242][ T9154] RIP: 0023:0xf7fe8fec [ 165.437255][ T9154] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 165.437259][ T9154] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 165.437270][ T9154] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 165.437277][ T9154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.437299][ T9154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.437306][ T9154] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 165.437312][ T9154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.437327][ T9154] [ 165.558025][ T9156] syzkaller0: entered promiscuous mode [ 165.558045][ T9156] syzkaller0: entered allmulticast mode [ 167.347176][ T9173] syzkaller0: entered promiscuous mode [ 167.347198][ T9173] syzkaller0: entered allmulticast mode [ 167.501773][ T9181] loop0: detected capacity change from 0 to 32768 [ 167.553240][ T9184] loop1: detected capacity change from 0 to 65536 [ 169.860438][ T10] wiimote 0005:057E:0306.0010: unbalanced collection at end of report description [ 169.860687][ T10] wiimote 0005:057E:0306.0010: HID parse failed [ 169.863798][ T10] wiimote 0005:057E:0306.0010: probe with driver wiimote failed with error -22 [ 169.925840][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 170.110715][ T5740] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 170.263677][ T5740] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.264356][ T5740] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.264999][ T5740] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.265015][ T5740] usb 5-1: can't read configurations, error -71 [ 172.007222][ T50] wiimote 0005:057E:0306.0011: unbalanced collection at end of report description [ 172.007689][ T50] wiimote 0005:057E:0306.0011: HID parse failed [ 172.008223][ T50] wiimote 0005:057E:0306.0011: probe with driver wiimote failed with error -22 [ 172.268830][ T50] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 172.550552][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.553789][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.556404][ T50] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 172.556605][ T50] usb 5-1: can't read configurations, error -71 [ 173.217474][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 173.232434][ T9285] syzkaller0: entered promiscuous mode [ 173.232449][ T9285] syzkaller0: entered allmulticast mode [ 174.868170][ T9316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.002963][ T9318] tipc: Enabled bearer , priority 0 [ 175.005304][ T9318] syzkaller0: entered promiscuous mode [ 175.005326][ T9318] syzkaller0: entered allmulticast mode [ 175.021714][ T9318] tipc: Resetting bearer [ 175.026391][ T9317] tipc: Resetting bearer [ 175.045861][ T9317] tipc: Disabling bearer [ 175.648091][ T9328] syzkaller0: entered promiscuous mode [ 175.648105][ T9328] syzkaller0: entered allmulticast mode [ 175.654100][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 175.961440][ T9336] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1199'. [ 175.990712][ T9336] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1199'. [ 176.614802][ T9349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.114090][ T9362] tipc: Enabled bearer , priority 0 [ 177.115947][ T9362] syzkaller0: entered promiscuous mode [ 177.115961][ T9362] syzkaller0: entered allmulticast mode [ 177.138418][ T9362] tipc: Resetting bearer [ 177.148866][ T9361] tipc: Resetting bearer [ 177.191380][ T9361] tipc: Disabling bearer [ 177.342324][ T5883] wiimote 0005:057E:0306.0012: unbalanced collection at end of report description [ 177.342934][ T5883] wiimote 0005:057E:0306.0012: HID parse failed [ 177.343242][ T5883] wiimote 0005:057E:0306.0012: probe with driver wiimote failed with error -22 [ 177.638771][ T5883] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 178.042594][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.104263][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.203724][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 178.203747][ T5883] usb 5-1: can't read configurations, error -71 [ 178.671106][ T9390] tipc: Enabled bearer , priority 0 [ 178.672030][ T9390] syzkaller0: entered promiscuous mode [ 178.672041][ T9390] syzkaller0: entered allmulticast mode [ 178.689499][ T9390] tipc: Resetting bearer [ 178.708993][ T9389] tipc: Resetting bearer [ 178.739132][ T9389] tipc: Disabling bearer [ 178.888556][ T9396] syzkaller0: entered promiscuous mode [ 178.888570][ T9396] syzkaller0: entered allmulticast mode [ 179.706224][ T9402] syzkaller0: entered promiscuous mode [ 179.706240][ T9402] syzkaller0: entered allmulticast mode [ 181.239429][ T9427] tipc: Enabled bearer , priority 0 [ 181.240074][ T9427] syzkaller0: entered promiscuous mode [ 181.240085][ T9427] syzkaller0: entered allmulticast mode [ 181.249096][ T9427] tipc: Resetting bearer [ 181.268643][ T9426] tipc: Resetting bearer [ 181.297899][ T9426] tipc: Disabling bearer [ 181.932407][ T9445] FAULT_INJECTION: forcing a failure. [ 181.932407][ T9445] name failslab, interval 1, probability 0, space 0, times 0 [ 181.932439][ T9445] CPU: 3 UID: 0 PID: 9445 Comm: syz.3.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.932463][ T9445] Tainted: [L]=SOFTLOCKUP [ 181.932469][ T9445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.932496][ T9445] Call Trace: [ 181.932503][ T9445] [ 181.932510][ T9445] dump_stack_lvl+0x100/0x190 [ 181.932539][ T9445] should_fail_ex.cold+0x5/0xa [ 181.932563][ T9445] should_failslab+0xc2/0x120 [ 181.932586][ T9445] __kmalloc_cache_noprof+0x91/0x6d0 [ 181.932616][ T9445] ? fscontext_alloc_log+0x4a/0x1b0 [ 181.932644][ T9445] fscontext_alloc_log+0x4a/0x1b0 [ 181.932672][ T9445] __ia32_sys_fsopen+0x15b/0x230 [ 181.932699][ T9445] __do_fast_syscall_32+0x13a/0x8b0 [ 181.932732][ T9445] do_fast_syscall_32+0x32/0x70 [ 181.932762][ T9445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.932786][ T9445] RIP: 0023:0xf70befec [ 181.932805][ T9445] Code: Unable to access opcode bytes at 0xf70befc2. [ 181.932813][ T9445] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 181.932830][ T9445] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 181.932841][ T9445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.932851][ T9445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.932861][ T9445] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.932871][ T9445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.932893][ T9445] [ 182.219610][ T58] wiimote 0005:057E:0306.0013: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 182.221651][ T58] wiimote 0005:057E:0306.0013: New device registered [ 182.238366][ T9460] wiimote 0005:057E:0306.0013: Device removed [ 182.354285][ T9465] fido_id[9465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.031706][ T9473] tipc: Enabled bearer , priority 0 [ 183.032284][ T9473] syzkaller0: entered promiscuous mode [ 183.032298][ T9473] syzkaller0: entered allmulticast mode [ 183.036750][ T9473] tipc: Resetting bearer [ 183.118357][ T9472] tipc: Resetting bearer [ 183.145774][ T9472] tipc: Disabling bearer [ 183.298834][ T58] wiimote 0005:057E:0306.0013: detected device: Nintendo Wii Remote (Gen 1) [ 183.323714][ T58] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input19 [ 183.356036][ T58] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input20 [ 183.365938][ T58] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input18 [ 186.552311][ T9522] syzkaller0: entered promiscuous mode [ 186.552333][ T9522] syzkaller0: entered allmulticast mode [ 186.556818][ T9520] syzkaller0: entered promiscuous mode [ 186.556847][ T9520] syzkaller0: entered allmulticast mode [ 187.138127][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 188.943729][ T9557] syzkaller0: entered promiscuous mode [ 188.943744][ T9557] syzkaller0: entered allmulticast mode [ 189.060565][ T9568] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1268'. [ 189.061377][ T9568] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1268'. [ 190.923158][ T9604] syzkaller0: entered promiscuous mode [ 190.923172][ T9604] syzkaller0: entered allmulticast mode [ 192.357982][ T9650] syzkaller0: entered promiscuous mode [ 192.358006][ T9650] syzkaller0: entered allmulticast mode [ 193.791215][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.791258][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.141616][ T9689] syzkaller0: entered promiscuous mode [ 194.141637][ T9689] syzkaller0: entered allmulticast mode [ 194.483720][ T10] wiimote 0005:057E:0306.0014: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 194.484985][ T10] wiimote 0005:057E:0306.0014: New device registered [ 194.488051][ T9692] wiimote 0005:057E:0306.0014: Device removed [ 194.525211][ T9694] fido_id[9694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.651201][ T2321] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 194.799191][ T2321] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.800014][ T2321] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 194.800030][ T2321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 194.801533][ T2321] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.801546][ T2321] usb 6-1: Product: syz [ 194.801553][ T2321] usb 6-1: Manufacturer: syz [ 194.801560][ T2321] usb 6-1: SerialNumber: syz [ 194.802785][ T2321] usb 6-1: config 0 descriptor?? [ 194.810609][ T2321] usb 6-1: selecting invalid altsetting 0 [ 195.065899][ T2321] usb 6-1: USB disconnect, device number 14 [ 195.538961][ T10] wiimote 0005:057E:0306.0014: detected device: Nintendo Wii Remote (Gen 1) [ 195.573276][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input22 [ 195.576392][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input23 [ 195.590376][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input21 [ 195.828920][ T5883] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 195.913344][ T9715] syzkaller0: entered promiscuous mode [ 195.913367][ T9715] syzkaller0: entered allmulticast mode [ 195.999702][ T5883] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.000559][ T5883] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 196.000576][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 196.002439][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.002452][ T5883] usb 8-1: Product: syz [ 196.002460][ T5883] usb 8-1: Manufacturer: syz [ 196.002467][ T5883] usb 8-1: SerialNumber: syz [ 196.009449][ T5883] usb 8-1: config 0 descriptor?? [ 196.011926][ T5883] usb 8-1: selecting invalid altsetting 0 [ 196.226382][ T5882] usb 8-1: USB disconnect, device number 14 [ 196.775676][ T9724] loop0: detected capacity change from 0 to 32768 [ 197.493054][ T9746] syzkaller0: entered promiscuous mode [ 197.493076][ T9746] syzkaller0: entered allmulticast mode [ 199.012720][ T9779] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1325'. [ 199.013134][ T9779] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1325'. [ 201.033331][ T9815] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1334'. [ 201.034150][ T9810] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1334'. [ 201.435385][ T58] wiimote 0005:057E:0306.0015: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 201.435512][ T58] wiimote 0005:057E:0306.0015: New device registered [ 201.436012][ T9833] wiimote 0005:057E:0306.0015: Device removed [ 201.510423][ T9839] fido_id[9839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.589992][ T9846] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1344'. [ 201.590352][ T9846] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1344'. [ 202.198829][ T5883] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 202.361909][ T5883] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.363000][ T5883] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 202.363025][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.365388][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.365409][ T5883] usb 5-1: Product: syz [ 202.365421][ T5883] usb 5-1: Manufacturer: syz [ 202.365433][ T5883] usb 5-1: SerialNumber: syz [ 202.369501][ T5883] usb 5-1: config 0 descriptor?? [ 202.383191][ T5883] usb 5-1: selecting invalid altsetting 0 [ 202.617484][ T2321] usb 5-1: USB disconnect, device number 18 [ 203.224120][ T5740] wiimote 0005:057E:0306.0016: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 203.224284][ T5740] wiimote 0005:057E:0306.0016: New device registered [ 203.236559][ T9887] wiimote 0005:057E:0306.0016: Device removed [ 203.351871][ T9889] fido_id[9889]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.413546][ T9895] loop0: detected capacity change from 0 to 32768 [ 203.607858][ T9903] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1364'. [ 203.608250][ T9903] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1364'. [ 203.687177][ T9905] syzkaller0: entered promiscuous mode [ 203.687199][ T9905] syzkaller0: entered allmulticast mode [ 203.738787][ T6728] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 203.909490][ T6728] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.910293][ T6728] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 203.910309][ T6728] usb 7-1: config 0 interface 0 has no altsetting 0 [ 203.911830][ T6728] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.911842][ T6728] usb 7-1: Product: syz [ 203.911849][ T6728] usb 7-1: Manufacturer: syz [ 203.911856][ T6728] usb 7-1: SerialNumber: syz [ 203.916102][ T6728] usb 7-1: config 0 descriptor?? [ 203.918820][ T6728] usb 7-1: selecting invalid altsetting 0 [ 204.167783][ T6728] usb 7-1: USB disconnect, device number 17 [ 204.269113][ T5740] wiimote 0005:057E:0306.0016: detected device: Nintendo Wii Remote (Gen 1) [ 204.488929][ T2321] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 204.542792][ T5740] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input25 [ 204.580717][ T5740] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input26 [ 204.630843][ T5740] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input24 [ 204.649315][ T2321] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.650426][ T2321] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 204.650451][ T2321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.652614][ T2321] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.652636][ T2321] usb 6-1: Product: syz [ 204.652649][ T2321] usb 6-1: Manufacturer: syz [ 204.652660][ T2321] usb 6-1: SerialNumber: syz [ 204.656107][ T2321] usb 6-1: config 0 descriptor?? [ 204.660224][ T2321] usb 6-1: selecting invalid altsetting 0 [ 204.875281][ T2321] usb 6-1: USB disconnect, device number 15 [ 205.108536][ T9928] syzkaller0: entered promiscuous mode [ 205.108552][ T9928] syzkaller0: entered allmulticast mode [ 207.203508][ T9970] syzkaller0: entered promiscuous mode [ 207.203524][ T9970] syzkaller0: entered allmulticast mode [ 210.833052][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 210.938424][T10049] jffs2: notice: (10049) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.517040][T10065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1414'. [ 211.522655][T10065] fuse: Bad value for 'group_id' [ 211.522692][T10065] fuse: Bad value for 'group_id' [ 212.523421][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 212.608031][T10096] jffs2: notice: (10096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.260627][T10108] loop0: detected capacity change from 0 to 32768 [ 213.859704][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 213.961534][T10129] lo: entered allmulticast mode [ 214.087171][T10136] lo: left allmulticast mode [ 214.276343][T10139] lo: entered allmulticast mode [ 214.476946][T10142] lo: left allmulticast mode [ 214.564945][T10144] loop0: detected capacity change from 0 to 32768 [ 214.815476][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 214.903216][T10155] jffs2: notice: (10155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.132965][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 216.269422][T10176] loop0: detected capacity change from 0 to 32768 [ 217.033078][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 217.779269][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 217.914171][T10212] jffs2: notice: (10212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.093057][T10215] loop0: detected capacity change from 0 to 32768 [ 218.560008][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 218.701185][T10225] jffs2: notice: (10225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.709634][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 219.723398][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 219.826393][T10243] jffs2: notice: (10243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.851225][T10247] loop0: detected capacity change from 0 to 32768 [ 220.333354][T10252] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1466'. [ 220.422350][T10252] fuse: Unknown parameter 'grou00000000000000000000' [ 221.686470][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 221.732801][T10268] jffs2: notice: (10268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.368141][T10296] lo: entered allmulticast mode [ 223.570673][T10296] lo: left allmulticast mode [ 223.666782][T10304] lo: entered allmulticast mode [ 223.853860][T10305] lo: left allmulticast mode [ 224.056931][T10315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1482'. [ 224.069607][T10315] fuse: Unknown parameter 'group_id00000000000000000000' [ 224.596496][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 224.694875][T10322] jffs2: notice: (10322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.559600][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 225.662370][T10335] jffs2: notice: (10335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.701544][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 226.759961][T10350] jffs2: notice: (10350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.528608][T10357] syzkaller0: entered promiscuous mode [ 227.531153][T10357] syzkaller0: entered allmulticast mode [ 228.830989][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 228.931684][T10383] jffs2: notice: (10383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.077216][T10388] lo: entered allmulticast mode [ 229.334439][T10393] lo: left allmulticast mode [ 229.865089][T10397] syzkaller0: entered promiscuous mode [ 229.865104][T10397] syzkaller0: entered allmulticast mode [ 230.170598][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 230.188025][T10406] jffs2: notice: (10406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.228202][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 231.337657][T10424] jffs2: notice: (10424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.778889][T10432] syzkaller0: entered promiscuous mode [ 231.778905][T10432] syzkaller0: entered allmulticast mode [ 232.889183][T10451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1519'. [ 232.904117][T10451] fuse: Bad value for 'fd' [ 233.162290][T10459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1521'. [ 233.168423][T10459] fuse: Unknown parameter 'group_id00000000000000000000' [ 233.788478][T10463] lo: entered allmulticast mode [ 234.094791][T10463] lo: left allmulticast mode [ 235.257765][T10492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1528'. [ 235.281666][T10492] fuse: Bad value for 'fd' [ 235.470951][T10500] lo: entered allmulticast mode [ 235.561139][T10505] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1530'. [ 235.580421][T10505] fuse: Bad value for 'rootmode' [ 236.597591][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 236.619851][T10515] lo: entered allmulticast mode [ 236.635604][T10504] lo: left allmulticast mode [ 236.711202][T10520] jffs2: notice: (10520) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.912161][T10519] lo: left allmulticast mode [ 236.961414][T10525] lo: entered allmulticast mode [ 237.161240][T10525] lo: left allmulticast mode [ 237.318800][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 237.402818][T10540] jffs2: notice: (10540) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.534688][T10534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1538'. [ 237.543897][T10534] fuse: Bad value for 'rootmode' [ 238.202587][T10552] lo: entered allmulticast mode [ 238.385939][T10553] lo: left allmulticast mode [ 238.468477][T10558] lo: entered allmulticast mode [ 238.607728][T10558] lo: left allmulticast mode [ 238.768507][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 238.841939][T10571] jffs2: notice: (10571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.616939][T10580] lo: entered allmulticast mode [ 239.936355][T10593] lo: left allmulticast mode [ 240.752551][T10607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1554'. [ 240.914502][T10607] fuse: Unknown parameter 'user_i00000000000000000000' [ 241.587202][T10615] lo: entered allmulticast mode [ 241.633538][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 241.729658][T10623] jffs2: notice: (10623) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.815369][T10626] lo: left allmulticast mode [ 244.747498][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 245.555086][T10677] jffs2: notice: (10677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 245.803000][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 245.887742][T10689] jffs2: notice: (10689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 246.604919][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'. [ 247.546337][ T25] wiimote 0005:057E:0306.0017: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 247.546474][ T25] wiimote 0005:057E:0306.0017: New device registered [ 247.547255][T10713] wiimote 0005:057E:0306.0017: Device removed [ 247.679817][T10716] fido_id[10716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.776607][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 247.916929][T10719] jffs2: notice: (10719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.949378][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 249.013960][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 249.122553][T10747] jffs2: notice: (10747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.243211][ T6728] wiimote 0005:057E:0306.0018: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 250.243366][ T6728] wiimote 0005:057E:0306.0018: New device registered [ 250.243850][T10764] wiimote 0005:057E:0306.0018: Device removed [ 250.351298][T10768] fido_id[10768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.918485][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 251.029127][T10773] jffs2: notice: (10773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.177460][ T30] wiimote 0005:057E:0306.0019: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 252.177697][ T30] wiimote 0005:057E:0306.0019: New device registered [ 252.180952][T10801] wiimote 0005:057E:0306.0019: Device removed [ 252.264302][T10804] fido_id[10804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 252.838222][T10811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1604'. [ 253.218726][ T30] wiimote 0005:057E:0306.0019: detected device: Nintendo Wii Remote (Gen 1) [ 253.748105][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input28 [ 253.752339][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input29 [ 253.759929][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input27 [ 253.914224][T10822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1607'. [ 253.954564][T10822] fuse: Unknown parameter '0x0000000000000008' [ 255.207059][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1612'. [ 255.228616][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.228735][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.954324][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 256.046809][T10847] No source specified [ 256.342783][T10850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1615'. [ 258.026251][T10875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1619'. [ 258.040604][T10875] fuse: Unknown parameter '0x0000000000000008' [ 260.190870][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 260.299244][T10902] No source specified [ 261.073259][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'. [ 261.740394][T10926] bridge1: entered promiscuous mode [ 261.740445][T10926] bridge1: entered allmulticast mode [ 262.322595][T10937] bridge0: entered promiscuous mode [ 262.322643][T10937] bridge0: entered allmulticast mode [ 262.804601][T10943] bridge2: entered promiscuous mode [ 262.804810][T10943] bridge2: entered allmulticast mode [ 263.096636][T10947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1640'. [ 263.432245][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 264.265170][ T5820] wiimote 0005:057E:0306.001A: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 264.279824][ T5820] wiimote 0005:057E:0306.001A: New device registered [ 264.282833][T10958] wiimote 0005:057E:0306.001A: Device removed [ 264.357108][T10960] fido_id[10960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.034243][T10968] bridge3: entered promiscuous mode [ 265.034315][T10968] bridge3: entered allmulticast mode [ 265.298841][ T5820] wiimote 0005:057E:0306.001A: detected device: Nintendo Wii Remote (Gen 1) [ 265.324693][ T5820] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input31 [ 265.342912][ T5820] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input32 [ 265.350271][ T5820] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input30 [ 266.136271][T10989] could not allocate digest TFM handle sha512-neon [ 266.684535][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 267.099802][T11002] bridge1: entered promiscuous mode [ 267.099825][T11002] bridge1: entered allmulticast mode [ 267.420327][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1654'. [ 268.398996][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 268.469132][T11021] jffs2: notice: (11021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.065447][T11053] bridge4: entered promiscuous mode [ 271.065493][T11053] bridge4: entered allmulticast mode [ 271.074315][T11061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1666'. [ 273.354454][T11101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1673'. [ 273.645660][T11103] could not allocate digest TFM handle sha512-neon [ 274.249095][T11115] bridge5: entered promiscuous mode [ 274.249110][T11115] bridge5: entered allmulticast mode [ 274.363297][ T5821] wiimote 0005:057E:0306.001B: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 274.363609][ T5821] wiimote 0005:057E:0306.001B: New device registered [ 274.371750][T11118] wiimote 0005:057E:0306.001B: Device removed [ 274.447154][T11120] fido_id[11120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.378736][ T5821] wiimote 0005:057E:0306.001B: detected device: Nintendo Wii Remote (Gen 1) [ 275.399532][ T5821] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001B/input/input34 [ 275.406289][ T5821] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001B/input/input35 [ 275.412663][ T5821] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001B/input/input33 [ 275.736574][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 275.852612][T11146] jffs2: notice: (11146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 276.869641][T11162] could not allocate digest TFM handle sha512-neon [ 278.027597][T11182] could not allocate digest TFM handle sha512-neon [ 278.043144][T11184] bridge1: entered promiscuous mode [ 278.043191][T11184] bridge1: entered allmulticast mode [ 278.950698][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 279.039277][T11193] jffs2: notice: (11193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 279.179606][T11199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1693'. [ 280.942656][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1698'. [ 283.058016][T11254] bridge6: entered promiscuous mode [ 283.058080][T11254] bridge6: entered allmulticast mode [ 283.238297][T11255] bridge2: entered promiscuous mode [ 283.239006][T11255] bridge2: entered allmulticast mode [ 284.190248][ T25] wiimote 0005:057E:0306.001C: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 284.190416][ T25] wiimote 0005:057E:0306.001C: New device registered [ 284.191489][T11269] wiimote 0005:057E:0306.001C: Device removed [ 284.248121][T11271] fido_id[11271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.218725][ T25] wiimote 0005:057E:0306.001C: detected device: Nintendo Wii Remote (Gen 1) [ 285.228469][ T25] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input37 [ 285.239683][ T25] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input38 [ 285.247664][ T25] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001C/input/input36 [ 286.560507][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 286.643897][T11309] jffs2: notice: (11309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.583984][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1726'. [ 289.349961][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 289.403755][T11338] jffs2: notice: (11338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.199309][T11351] bridge2: entered promiscuous mode [ 290.199324][T11351] bridge2: entered allmulticast mode [ 291.174213][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 291.237980][T11361] jffs2: notice: (11361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.296253][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 291.368620][T11360] jffs2: notice: (11360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.757499][T11378] bridge3: entered promiscuous mode [ 291.757521][T11378] bridge3: entered allmulticast mode [ 292.815878][T11387] could not allocate digest TFM handle sha512-neon [ 292.912371][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 293.032199][T11399] jffs2: notice: (11399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.045063][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 294.131977][T11413] jffs2: notice: (11413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.146512][T11413] 9p: Unknown Cache mode or invalid value mma [ 294.954803][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 295.024682][T11418] bridge7: entered promiscuous mode [ 295.024698][T11418] bridge7: entered allmulticast mode [ 295.089689][T11424] jffs2: notice: (11424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 295.364274][ T30] wiimote 0005:057E:0306.001D: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 295.364528][ T30] wiimote 0005:057E:0306.001D: New device registered [ 295.367646][T11429] wiimote 0005:057E:0306.001D: Device removed [ 295.417994][T11431] fido_id[11431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 296.429081][ T30] wiimote 0005:057E:0306.001D: detected device: Nintendo Wii Remote (Gen 1) [ 296.453068][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input40 [ 296.467238][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input41 [ 296.480614][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001D/input/input39 [ 297.064644][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 297.201567][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 297.233370][T11448] jffs2: notice: (11448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 297.255461][T11448] 9p: Bad value for 'cache' [ 297.307356][T11454] jffs2: notice: (11454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 297.349035][T11454] 9p: Unknown Cache mode or invalid value mm [ 300.067187][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 300.148540][T11487] jffs2: notice: (11487) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 302.093655][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 302.242730][T11509] jffs2: notice: (11509) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 302.280668][T11509] 9p: Unknown Cache mode or invalid value mm [ 302.441056][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 302.540230][T11525] jffs2: notice: (11525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 302.558358][T11525] 9p: Unknown Cache mode or invalid value mma [ 305.102882][T11569] bridge8: entered promiscuous mode [ 305.102907][T11569] bridge8: entered allmulticast mode [ 307.408455][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 309.940071][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'. [ 310.350748][T11656] bridge1: entered promiscuous mode [ 310.350765][T11656] bridge1: entered allmulticast mode [ 312.496350][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 312.828854][ T5882] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 312.983572][T11711] bridge2: entered promiscuous mode [ 312.983599][T11711] bridge2: entered allmulticast mode [ 312.993691][ T5882] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 312.995236][ T5882] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 312.995261][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.995275][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.995288][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 312.996161][ T5882] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 312.996215][ T5882] usb 7-1: Manufacturer: syz [ 312.998954][ T5882] usb 7-1: config 0 descriptor?? [ 313.423996][ T5882] usbhid 7-1:0.0: can't add hid device: -71 [ 313.428718][ T5882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 313.434134][ T5882] usb 7-1: USB disconnect, device number 18 [ 313.850644][T11722] bridge4: entered promiscuous mode [ 313.850708][T11722] bridge4: entered allmulticast mode [ 314.174378][T11728] loop0: detected capacity change from 0 to 32768 [ 314.187470][T11728] loop1: detected capacity change from 0 to 65536 [ 314.805092][T11743] bridge9: entered promiscuous mode [ 314.805106][T11743] bridge9: entered allmulticast mode [ 315.398287][T11749] bridge5: entered promiscuous mode [ 315.398483][T11749] bridge5: entered allmulticast mode [ 315.813641][T11759] device-mapper: table: 248:1: zero-length target [ 315.813651][T11759] device-mapper: ioctl: error adding target to table [ 316.026043][T11764] could not allocate digest TFM handle sha512-neon [ 316.285569][T11777] bridge10: entered promiscuous mode [ 316.285592][T11777] bridge10: entered allmulticast mode [ 316.662086][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.662142][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.716708][T11780] bridge6: entered promiscuous mode [ 316.716734][T11780] bridge6: entered allmulticast mode [ 316.989948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 317.010320][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 317.122959][T11791] nvmet: adding nsid 1 to subsystem testsubsys [ 317.143212][T11791] nvmet: failed to open block device /dev/nullb1: (-2) [ 317.279509][T11795] loop0: detected capacity change from 0 to 32768 [ 317.770501][T11806] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 317.887094][T11810] bridge3: entered promiscuous mode [ 317.887119][T11810] bridge3: entered allmulticast mode [ 317.936838][T11811] bridge7: entered promiscuous mode [ 317.936909][T11811] bridge7: entered allmulticast mode [ 318.111494][T11819] could not allocate digest TFM handle sha512-neon [ 318.486670][T11824] device-mapper: table: 248:0: : unknown target type [ 318.486683][T11824] device-mapper: ioctl: error adding target to table [ 318.558118][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 318.859244][T11836] bridge4: entered promiscuous mode [ 318.859264][T11836] bridge4: entered allmulticast mode [ 319.156361][T11844] could not allocate digest TFM handle sha512-neon [ 319.418874][T11831] device-mapper: ioctl: device has been removed from the dev hash table. [ 320.077814][T11858] loop0: detected capacity change from 0 to 32768 [ 320.177986][T11862] bridge5: entered promiscuous mode [ 320.178001][T11862] bridge5: entered allmulticast mode [ 320.420742][T11869] loop0: detected capacity change from 0 to 32768 [ 320.422060][T11869] loop1: detected capacity change from 0 to 65536 [ 321.536672][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 321.593210][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 322.021129][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 322.288027][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1887'. [ 322.587751][T11904] device-mapper: thin metadata: sb_check failed: csum 496226250: wanted 2612792456 [ 322.587961][T11904] device-mapper: block manager: superblock validator check failed for block 0 [ 322.587978][T11904] device-mapper: thin metadata: couldn't read superblock [ 322.934474][T11914] bridge8: entered promiscuous mode [ 322.934488][T11914] bridge8: entered allmulticast mode [ 322.940201][T11904] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EILSEQ) [ 322.940225][T11904] device-mapper: ioctl: error adding target to table [ 322.952443][T11905] device-mapper: thin metadata: sb_check failed: csum 496226250: wanted 2612792456 [ 322.952466][T11905] device-mapper: block manager: superblock validator check failed for block 0 [ 322.952480][T11905] device-mapper: thin metadata: couldn't read superblock [ 322.987629][T11915] bridge11: entered promiscuous mode [ 322.987651][T11915] bridge11: entered allmulticast mode [ 323.167297][T11905] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EILSEQ) [ 323.167317][T11905] device-mapper: ioctl: error adding target to table [ 323.190075][T11917] device-mapper: thin metadata: sb_check failed: csum 496226250: wanted 2612792456 [ 323.190100][T11917] device-mapper: block manager: superblock validator check failed for block 0 [ 323.190112][T11917] device-mapper: thin metadata: couldn't read superblock [ 323.373632][T11917] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 323.373651][T11917] device-mapper: ioctl: error adding target to table [ 324.098830][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 324.260457][T11929] (syz.1.1888,11929,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 324.260548][T11929] (syz.1.1888,11929,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 324.422345][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 324.422403][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1893'. [ 324.501132][ T66] Bluetooth: min 0 < 6 [ 324.512682][T11938] could not allocate digest TFM handle sha512-neon [ 325.298953][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 326.165919][T11967] bridge6: entered promiscuous mode [ 326.166044][T11967] bridge6: entered allmulticast mode [ 326.578763][ T66] Bluetooth: hci0: command 0x0406 tx timeout [ 327.022767][ T66] Bluetooth: min 0 < 6 [ 327.065078][T11985] loop0: detected capacity change from 0 to 32768 [ 327.688255][T12000] could not allocate digest TFM handle sha512-neon [ 328.025263][T11992] device-mapper: ioctl: device has been removed from the dev hash table. [ 328.945012][ T66] Bluetooth: min 0 < 6 [ 328.996994][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'. [ 328.997044][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 329.058901][ T66] Bluetooth: hci0: command 0x0406 tx timeout [ 329.246961][T12020] bridge12: entered promiscuous mode [ 329.247019][T12020] bridge12: entered allmulticast mode [ 330.385322][T12041] loop1: detected capacity change from 0 to 65536 [ 330.454617][T12047] (syz.0.1922,12047,2):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 330.454702][T12047] (syz.0.1922,12047,2):o2hb_region_dev_store:1944 ERROR: status = -5 [ 330.487892][T12039] could not allocate digest TFM handle sha512-neon [ 330.856815][T12041] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 330.856844][T12041] device-mapper: ioctl: error adding target to table [ 330.978770][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 331.178175][T12059] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 331.178199][T12059] device-mapper: ioctl: error adding target to table [ 331.701268][T12067] bridge9: entered promiscuous mode [ 331.701339][T12067] bridge9: entered allmulticast mode [ 332.390325][T12073] bridge13: entered promiscuous mode [ 332.390340][T12073] bridge13: entered allmulticast mode [ 332.399323][T12075] loop0: detected capacity change from 0 to 32768 [ 332.406810][T12075] loop1: detected capacity change from 0 to 65536 [ 332.411096][T12075] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 333.649496][T12088] device-mapper: ioctl: device has been removed from the dev hash table. [ 334.009174][T12100] bridge10: entered promiscuous mode [ 334.009246][T12100] bridge10: entered allmulticast mode [ 334.828690][T12114] could not allocate digest TFM handle sha512-neon [ 334.969511][T12121] bridge3: entered promiscuous mode [ 334.969527][T12121] bridge3: entered allmulticast mode [ 335.299044][T12123] null_blk: disk nullb1 created [ 335.458914][T12126] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 336.454737][T12143] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 336.539316][T12141] bridge4: entered promiscuous mode [ 336.539379][T12141] bridge4: entered allmulticast mode [ 336.998862][ T5821] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 337.159639][ T5821] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 337.160979][ T5821] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 337.161022][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.161050][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.161071][ T5821] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 337.162440][ T5821] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 337.162460][ T5821] usb 8-1: Manufacturer: syz [ 337.165932][ T5821] usb 8-1: config 0 descriptor?? [ 337.182631][T12156] bridge11: entered promiscuous mode [ 337.182682][T12156] bridge11: entered allmulticast mode [ 337.343608][T12158] device-mapper: thin metadata: sb_check failed: csum 416581950: wanted 2612792456 [ 337.343706][T12158] device-mapper: block manager: superblock validator check failed for block 0 [ 337.343722][T12158] device-mapper: thin metadata: couldn't read superblock [ 337.512621][T12158] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EILSEQ) [ 337.512651][T12158] device-mapper: ioctl: error adding target to table [ 337.596334][ T5821] usbhid 8-1:0.0: can't add hid device: -71 [ 337.596391][ T5821] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 337.605891][ T5821] usb 8-1: USB disconnect, device number 15 [ 337.644794][T12164] loop0: detected capacity change from 0 to 32768 [ 337.650330][T12164] loop1: detected capacity change from 0 to 65536 [ 339.319933][T12198] bridge12: entered promiscuous mode [ 339.320207][T12198] bridge12: entered allmulticast mode [ 339.440303][T12199] bridge14: entered promiscuous mode [ 339.440364][T12199] bridge14: entered allmulticast mode [ 340.265304][T12211] could not allocate digest TFM handle sha512-neon [ 340.820883][T12222] bridge15: entered promiscuous mode [ 340.820944][T12222] bridge15: entered allmulticast mode [ 340.856178][T12225] loop1: detected capacity change from 0 to 65536 [ 341.023636][T12225] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 341.023664][T12225] device-mapper: ioctl: error adding target to table [ 341.533558][T12238] bridge5: entered promiscuous mode [ 341.533686][T12238] bridge5: entered allmulticast mode [ 342.843641][T12256] bridge7: entered promiscuous mode [ 342.843656][T12256] bridge7: entered allmulticast mode [ 342.964051][T12258] could not allocate digest TFM handle sha512-neon [ 343.062753][T12263] bridge13: entered promiscuous mode [ 343.062827][T12263] bridge13: entered allmulticast mode [ 344.813801][T12289] (syz.1.1981,12289,3):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 344.813872][T12289] (syz.1.1981,12289,3):o2hb_region_dev_store:1944 ERROR: status = -5 [ 344.818029][T12287] bridge8: entered promiscuous mode [ 344.818075][T12287] bridge8: entered allmulticast mode [ 344.929880][T12282] bridge6: entered promiscuous mode [ 344.929904][T12282] bridge6: entered allmulticast mode [ 346.344390][T12299] (syz.1.1986,12299,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 346.344449][T12299] (syz.1.1986,12299,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 346.464855][T12303] could not allocate digest TFM handle sha512-neon [ 346.642088][T12311] (syz.1.1987,12311,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 346.642164][T12311] (syz.1.1987,12311,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 346.790924][T12315] bridge7: entered promiscuous mode [ 346.791060][T12315] bridge7: entered allmulticast mode [ 348.065041][T12337] bridge14: entered promiscuous mode [ 348.065089][T12337] bridge14: entered allmulticast mode [ 348.311945][T12341] loop0: detected capacity change from 0 to 32768 [ 348.314424][T12341] loop1: detected capacity change from 0 to 65536 [ 348.342178][T12341] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 348.342204][T12341] device-mapper: ioctl: error adding target to table [ 348.705171][T12350] could not allocate digest TFM handle sha512-neon [ 348.729341][ T5820] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 348.899422][ T5820] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 348.900545][ T5820] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 348.900623][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.900642][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.900658][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 348.901709][ T5820] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 348.901728][ T5820] usb 5-1: Manufacturer: syz [ 348.909054][ T5820] usb 5-1: config 0 descriptor?? [ 349.188332][T12365] (syz.3.2004,12365,1):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 349.188533][T12365] (syz.3.2004,12365,1):o2hb_region_dev_store:1944 ERROR: status = -5 [ 349.338302][ T5820] usbhid 5-1:0.0: can't add hid device: -71 [ 349.338384][ T5820] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.346106][ T5820] usb 5-1: USB disconnect, device number 19 [ 349.955517][T12379] loop0: detected capacity change from 0 to 32768 [ 349.962732][T12379] loop1: detected capacity change from 0 to 65536 [ 349.967925][T12379] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 349.967946][T12379] device-mapper: ioctl: error adding target to table [ 351.789373][T12415] loop1: detected capacity change from 0 to 65536 [ 351.797212][T12415] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 351.797235][T12415] device-mapper: ioctl: error adding target to table [ 352.052557][T12421] loop0: detected capacity change from 0 to 32768 [ 352.073207][T12421] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 352.073230][T12421] device-mapper: ioctl: error adding target to table [ 352.150727][T12424] loop1: detected capacity change from 0 to 65536 [ 352.490977][T12436] lo: entered allmulticast mode [ 352.584947][T12436] lo: left allmulticast mode [ 353.090276][T12458] netlink: 'syz.1.2037': attribute type 8 has an invalid length. [ 354.012764][T12471] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2042'. [ 354.742528][T12476] syzkaller0: entered promiscuous mode [ 354.742549][T12476] syzkaller0: entered allmulticast mode [ 354.841551][T12482] lo: entered allmulticast mode [ 354.983898][T12482] lo: left allmulticast mode [ 356.035363][T12508] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2055'. [ 356.091183][T12512] syzkaller0: entered promiscuous mode [ 356.091197][T12512] syzkaller0: entered allmulticast mode [ 356.632126][T12513] device-mapper: ioctl: device has been removed from the dev hash table. [ 356.726170][T12524] syzkaller0: entered promiscuous mode [ 356.726191][T12524] syzkaller0: entered allmulticast mode [ 357.758886][T12541] could not allocate digest TFM handle sha512-neon [ 358.266019][T12564] syzkaller0: entered promiscuous mode [ 358.266042][T12564] syzkaller0: entered allmulticast mode [ 360.504906][T12652] syzkaller0: entered promiscuous mode [ 360.504923][T12652] syzkaller0: entered allmulticast mode [ 360.694446][T12654] loop0: detected capacity change from 0 to 32768 [ 361.498247][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 362.184143][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2110'. [ 362.867746][T12690] syzkaller0: entered promiscuous mode [ 362.867769][T12690] syzkaller0: entered allmulticast mode [ 363.171987][T12698] loop0: detected capacity change from 0 to 32768 [ 364.210166][T12715] syzkaller0: entered promiscuous mode [ 364.210183][T12715] syzkaller0: entered allmulticast mode [ 364.351231][T12720] syzkaller0: entered promiscuous mode [ 364.351250][T12720] syzkaller0: entered allmulticast mode [ 364.504789][T12725] syzkaller0: entered promiscuous mode [ 364.504813][T12725] syzkaller0: entered allmulticast mode [ 365.337977][T12738] loop0: detected capacity change from 0 to 32768 [ 366.228819][T12746] syzkaller0: entered promiscuous mode [ 366.228841][T12746] syzkaller0: entered allmulticast mode [ 368.096475][T12780] syzkaller0: entered promiscuous mode [ 368.096498][T12780] syzkaller0: entered allmulticast mode [ 368.259756][T12783] syzkaller0: entered promiscuous mode [ 368.259776][T12783] syzkaller0: entered allmulticast mode [ 368.630543][T12791] could not allocate digest TFM handle sha512-neon [ 369.555678][T12807] could not allocate digest TFM handle sha512-neon [ 370.024885][T12817] could not allocate digest TFM handle sha512-neon [ 370.205391][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2158'. [ 370.568440][T12825] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 370.568465][T12825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 370.581129][T12825] vhci_hcd vhci_hcd.0: Device attached [ 370.848779][ T5821] usb 38-1: SetAddress Request (2) to port 0 [ 370.848818][ T5821] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 370.866189][T12831] vhci_hcd: connection closed [ 370.872533][T12832] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 370.886638][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 370.887507][ T5813] vhci_hcd vhci_hcd.0: release socket [ 370.887828][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 371.197313][T12841] could not allocate digest TFM handle sha512-neon [ 371.398095][T12848] could not allocate digest TFM handle sha512-neon [ 371.897314][T12855] could not allocate digest TFM handle sha512-neon [ 372.495544][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 372.497827][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 372.497983][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 372.499530][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 372.776445][T12890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2171'. [ 372.784850][T12886] could not allocate digest TFM handle sha512-neon [ 373.443170][T12901] FAULT_INJECTION: forcing a failure. [ 373.443170][T12901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.443193][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.1.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.443208][T12901] Tainted: [L]=SOFTLOCKUP [ 373.443213][T12901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 373.443219][T12901] Call Trace: [ 373.443223][T12901] [ 373.443227][T12901] dump_stack_lvl+0x100/0x190 [ 373.443246][T12901] should_fail_ex.cold+0x5/0xa [ 373.443261][T12901] _copy_from_user+0x2e/0xd0 [ 373.443276][T12901] __ia32_compat_sys_setitimer+0x180/0x420 [ 373.443289][T12901] ? __pfx___ia32_compat_sys_setitimer+0x10/0x10 [ 373.443305][T12901] ? ksys_write+0x1ac/0x250 [ 373.443316][T12901] ? __pfx_ksys_write+0x10/0x10 [ 373.443335][T12901] __do_fast_syscall_32+0x13a/0x8b0 [ 373.443353][T12901] ? lockdep_hardirqs_on+0x7d/0x110 [ 373.443370][T12901] do_fast_syscall_32+0x32/0x70 [ 373.443387][T12901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.443401][T12901] RIP: 0023:0xf7fb3fec [ 373.443414][T12901] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 373.443419][T12901] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000068 [ 373.443430][T12901] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080000000 [ 373.443436][T12901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.443443][T12901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.443449][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.443455][T12901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.443468][T12901] [ 373.676480][T12907] could not allocate digest TFM handle sha512-neon [ 373.893014][T12919] could not allocate digest TFM handle sha512-neon [ 373.893720][T12920] could not allocate digest TFM handle sha512-neon [ 374.618125][T12934] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2186'. [ 374.625426][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 374.629024][T12931] could not allocate digest TFM handle sha512-neon [ 374.809024][T12938] FAULT_INJECTION: forcing a failure. [ 374.809024][T12938] name failslab, interval 1, probability 0, space 0, times 0 [ 374.809045][T12938] CPU: 2 UID: 0 PID: 12938 Comm: syz.2.2187 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.809061][T12938] Tainted: [L]=SOFTLOCKUP [ 374.809065][T12938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.809071][T12938] Call Trace: [ 374.809075][T12938] [ 374.809079][T12938] dump_stack_lvl+0x100/0x190 [ 374.809098][T12938] should_fail_ex.cold+0x5/0xa [ 374.809113][T12938] should_failslab+0xc2/0x120 [ 374.809128][T12938] kmem_cache_alloc_noprof+0x92/0x6a0 [ 374.809141][T12938] ? do_getname+0x35/0x390 [ 374.809159][T12938] do_getname+0x35/0x390 [ 374.809175][T12938] do_sys_openat2+0xc7/0x1e0 [ 374.809190][T12938] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.809206][T12938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.809224][T12938] ? __fget_files+0x21f/0x3d0 [ 374.809239][T12938] __ia32_compat_sys_openat+0x12d/0x210 [ 374.809255][T12938] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 374.809271][T12938] ? ksys_write+0x1ac/0x250 [ 374.809287][T12938] do_int80_emulation+0x166/0x650 [ 374.809305][T12938] asm_int80_emulation+0x1a/0x20 [ 374.809316][T12938] RIP: 0023:0xf71e75ab [ 374.809325][T12938] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 374.809336][T12938] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 374.809346][T12938] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 374.809353][T12938] RDX: 00000000000a2c25 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.809360][T12938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.809366][T12938] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.809372][T12938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.809385][T12938] [ 375.082258][T12949] could not allocate digest TFM handle sha512-neon [ 375.242155][T12954] could not allocate digest TFM handle sha512-neon [ 375.884530][T12976] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 375.884550][T12976] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.2197'. [ 375.938906][ T5821] usb 38-1: device descriptor read/8, error -110 [ 376.081611][T12978] could not allocate digest TFM handle sha512-neon [ 376.328787][ T3266] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 376.354332][ T5821] usb usb38-port1: attempt power cycle [ 376.481498][ T3266] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 376.482633][ T3266] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 376.482653][ T3266] usb 6-1: config 1 has no interface number 0 [ 376.482679][ T3266] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 376.482699][ T3266] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 376.482718][ T3266] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.485699][ T3266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.485717][ T3266] usb 6-1: Product: syz [ 376.485727][ T3266] usb 6-1: Manufacturer: syz [ 376.485736][ T3266] usb 6-1: SerialNumber: syz [ 376.495834][T12983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.721423][T12983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.745575][T12994] FAULT_INJECTION: forcing a failure. [ 376.745575][T12994] name failslab, interval 1, probability 0, space 0, times 0 [ 376.745597][T12994] CPU: 1 UID: 0 PID: 12994 Comm: syz.2.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.745612][T12994] Tainted: [L]=SOFTLOCKUP [ 376.745616][T12994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.745623][T12994] Call Trace: [ 376.745627][T12994] [ 376.745631][T12994] dump_stack_lvl+0x100/0x190 [ 376.745650][T12994] should_fail_ex.cold+0x5/0xa [ 376.745665][T12994] should_failslab+0xc2/0x120 [ 376.745680][T12994] kmem_cache_alloc_noprof+0x92/0x6a0 [ 376.745693][T12994] ? do_getname+0x35/0x390 [ 376.745710][T12994] do_getname+0x35/0x390 [ 376.745727][T12994] do_sys_openat2+0xc7/0x1e0 [ 376.745742][T12994] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.745759][T12994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.745779][T12994] __ia32_compat_sys_openat+0x12d/0x210 [ 376.745795][T12994] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 376.745812][T12994] ? fput+0x7c/0x100 [ 376.745825][T12994] ? ksys_write+0x1ac/0x250 [ 376.745836][T12994] ? __pfx_ksys_write+0x10/0x10 [ 376.745855][T12994] __do_fast_syscall_32+0x13a/0x8b0 [ 376.745871][T12994] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.745887][T12994] do_fast_syscall_32+0x32/0x70 [ 376.745905][T12994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.745919][T12994] RIP: 0023:0xf7fe8fec [ 376.745932][T12994] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 376.745937][T12994] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 376.745948][T12994] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 376.745955][T12994] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.745961][T12994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.745967][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.745973][T12994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.745986][T12994] [ 376.900938][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2204'. [ 376.913285][ T5821] usb usb38-port1: unable to enumerate USB device [ 377.313162][ T3266] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 377.313934][ T5449] veth1_vlan: left promiscuous mode [ 377.316669][ T3266] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 377.316849][ T3266] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 377.317565][ T3266] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 377.317600][ T3266] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 377.344572][ T3266] usb 6-1: USB disconnect, device number 16 [ 377.400871][ T3266] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 377.709443][ T3266] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 377.764404][T13022] FAULT_INJECTION: forcing a failure. [ 377.764404][T13022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.764436][T13022] CPU: 2 UID: 0 PID: 13022 Comm: syz.3.2206 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.764460][T13022] Tainted: [L]=SOFTLOCKUP [ 377.764466][T13022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.764477][T13022] Call Trace: [ 377.764483][T13022] [ 377.764491][T13022] dump_stack_lvl+0x100/0x190 [ 377.764519][T13022] should_fail_ex.cold+0x5/0xa [ 377.764543][T13022] trace_user_fault_read+0x50a/0x890 [ 377.764575][T13022] tracing_mark_write+0xea/0x3b0 [ 377.764599][T13022] vfs_write+0x2aa/0x1050 [ 377.764636][T13022] ? __pfx_tracing_mark_write+0x10/0x10 [ 377.764658][T13022] ? lock_acquire+0x1d1/0x380 [ 377.764682][T13022] ? __fget_files+0x34/0x3d0 [ 377.764701][T13022] ? __pfx_vfs_write+0x10/0x10 [ 377.764718][T13022] ? find_held_lock+0x2b/0x80 [ 377.764736][T13022] ? __fget_files+0x215/0x3d0 [ 377.764754][T13022] ? __fget_files+0x215/0x3d0 [ 377.764778][T13022] ? __fget_files+0x21f/0x3d0 [ 377.764804][T13022] ksys_write+0x1f8/0x250 [ 377.764823][T13022] ? __pfx_ksys_write+0x10/0x10 [ 377.764840][T13022] ? ksys_write+0x1ac/0x250 [ 377.764857][T13022] ? __pfx_ksys_write+0x10/0x10 [ 377.764881][T13022] __do_fast_syscall_32+0x13a/0x8b0 [ 377.764914][T13022] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.764941][T13022] do_fast_syscall_32+0x32/0x70 [ 377.764968][T13022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.764990][T13022] RIP: 0023:0xf70befec [ 377.765010][T13022] Code: Unable to access opcode bytes at 0xf70befc2. [ 377.765018][T13022] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 377.765036][T13022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 377.765047][T13022] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.765058][T13022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.765068][T13022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.765079][T13022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.765102][T13022] [ 377.806939][T13024] FAULT_INJECTION: forcing a failure. [ 377.806939][T13024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.806969][T13024] CPU: 3 UID: 0 PID: 13024 Comm: syz.1.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.807001][T13024] Tainted: [L]=SOFTLOCKUP [ 377.807008][T13024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.807019][T13024] Call Trace: [ 377.807025][T13024] [ 377.807031][T13024] dump_stack_lvl+0x100/0x190 [ 377.807059][T13024] should_fail_ex.cold+0x5/0xa [ 377.807083][T13024] _copy_from_user+0x2e/0xd0 [ 377.807105][T13024] __sys_bpf+0x2f5/0x4a30 [ 377.807131][T13024] ? __pfx___sys_bpf+0x10/0x10 [ 377.807148][T13024] ? lock_acquire+0x1d1/0x380 [ 377.807171][T13024] ? get_pid_task+0x2a/0x250 [ 377.807190][T13024] ? find_held_lock+0x2b/0x80 [ 377.807208][T13024] ? get_pid_task+0xfc/0x250 [ 377.807225][T13024] ? get_pid_task+0xfc/0x250 [ 377.807249][T13024] ? proc_fail_nth_write+0x9f/0x220 [ 377.807269][T13024] ? find_held_lock+0x2b/0x80 [ 377.807292][T13024] ? rcu_read_lock_any_held+0x6a/0x90 [ 377.807312][T13024] ? find_held_lock+0x2b/0x80 [ 377.807329][T13024] ? ksys_write+0x190/0x250 [ 377.807347][T13024] ? ksys_write+0x190/0x250 [ 377.807364][T13024] ? lock_acquire+0x1d1/0x380 [ 377.807405][T13024] ? fput+0x7c/0x100 [ 377.807430][T13024] ? __ia32_sys_bpf+0xcc/0x170 [ 377.807447][T13024] __ia32_sys_bpf+0xcc/0x170 [ 377.807467][T13024] ? __do_fast_syscall_32+0xb3/0x8b0 [ 377.807495][T13024] __do_fast_syscall_32+0x13a/0x8b0 [ 377.807521][T13024] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.807546][T13024] do_fast_syscall_32+0x32/0x70 [ 377.807571][T13024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.807594][T13024] RIP: 0023:0xf7fb3fec [ 377.807613][T13024] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 377.807621][T13024] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 377.807639][T13024] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 377.807651][T13024] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 377.807661][T13024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.807671][T13024] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.807682][T13024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.807705][T13024] [ 377.907076][T13030] FAULT_INJECTION: forcing a failure. [ 377.907076][T13030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.907110][T13030] CPU: 2 UID: 0 PID: 13030 Comm: syz.0.2210 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.907137][T13030] Tainted: [L]=SOFTLOCKUP [ 377.907144][T13030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.907155][T13030] Call Trace: [ 377.907162][T13030] [ 377.907170][T13030] dump_stack_lvl+0x100/0x190 [ 377.907202][T13030] should_fail_ex.cold+0x5/0xa [ 377.907227][T13030] _copy_from_user+0x2e/0xd0 [ 377.907252][T13030] get_compat_msghdr+0xb3/0x480 [ 377.907284][T13030] ? __pfx_get_compat_msghdr+0x10/0x10 [ 377.907344][T13030] ___sys_sendmsg+0x1b6/0x1e0 [ 377.907367][T13030] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.907400][T13030] ? find_held_lock+0x2b/0x80 [ 377.907439][T13030] __sys_sendmsg+0x160/0x210 [ 377.907467][T13030] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.907501][T13030] ? __pfx_ksys_write+0x10/0x10 [ 377.907527][T13030] __do_fast_syscall_32+0x13a/0x8b0 [ 377.907557][T13030] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.907588][T13030] do_fast_syscall_32+0x32/0x70 [ 377.907617][T13030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.907642][T13030] RIP: 0023:0xf6feefec [ 377.907663][T13030] Code: Unable to access opcode bytes at 0xf6feefc2. [ 377.907672][T13030] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 377.907691][T13030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 377.907704][T13030] RDX: 00000000000040c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.907715][T13030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.907727][T13030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.907739][T13030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.907765][T13030] [ 378.032387][T13036] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 378.093792][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2216'. [ 378.101214][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.101252][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.174714][T13054] loop2: detected capacity change from 0 to 4095 [ 378.187272][ T5753] Buffer I/O error on dev loop2, logical block 511, async page read [ 378.257494][T13049] Buffer I/O error on dev loop2, logical block 511, async page read [ 378.268147][T13066] FAULT_INJECTION: forcing a failure. [ 378.268147][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 378.268177][T13066] CPU: 2 UID: 0 PID: 13066 Comm: syz.1.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.268201][T13066] Tainted: [L]=SOFTLOCKUP [ 378.268207][T13066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.268218][T13066] Call Trace: [ 378.268224][T13066] [ 378.268232][T13066] dump_stack_lvl+0x100/0x190 [ 378.268260][T13066] should_fail_ex.cold+0x5/0xa [ 378.268284][T13066] should_failslab+0xc2/0x120 [ 378.268309][T13066] __kmalloc_noprof+0xfc/0x840 [ 378.268329][T13066] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 378.268362][T13066] kernfs_fop_write_iter+0x26a/0x5f0 [ 378.268392][T13066] vfs_write+0x6af/0x1050 [ 378.268410][T13066] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 378.268439][T13066] ? __pfx_vfs_write+0x10/0x10 [ 378.268455][T13066] ? find_held_lock+0x2b/0x80 [ 378.268492][T13066] ksys_write+0x12a/0x250 [ 378.268510][T13066] ? __pfx_ksys_write+0x10/0x10 [ 378.268527][T13066] ? ksys_write+0x1ac/0x250 [ 378.268544][T13066] ? __pfx_ksys_write+0x10/0x10 [ 378.268568][T13066] __do_fast_syscall_32+0x13a/0x8b0 [ 378.268595][T13066] ? lockdep_hardirqs_on+0x7d/0x110 [ 378.268638][T13066] do_fast_syscall_32+0x32/0x70 [ 378.268668][T13066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.268690][T13066] RIP: 0023:0xf7fb3fec [ 378.268709][T13066] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 378.268717][T13066] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 378.268735][T13066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 378.268747][T13066] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.268757][T13066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.268768][T13066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 378.268779][T13066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.268804][T13066] [ 378.422693][ T43] audit: type=1326 audit(1789445206.169:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.426424][ T43] audit: type=1326 audit(1789445206.169:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.426652][ T43] audit: type=1326 audit(1789445206.169:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.427423][ T43] audit: type=1326 audit(1789445206.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.428354][ T43] audit: type=1326 audit(1789445206.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.474416][ T43] audit: type=1326 audit(1789445206.179:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.474495][ T43] audit: type=1326 audit(1789445206.219:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.474588][ T43] audit: type=1326 audit(1789445206.219:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.474685][ T43] audit: type=1326 audit(1789445206.219:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 378.474925][ T43] audit: type=1326 audit(1789445206.219:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.3.2224" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 379.223435][T13078] could not allocate digest TFM handle sha512-neon [ 379.436770][T13095] FAULT_INJECTION: forcing a failure. [ 379.436770][T13095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.436800][T13095] CPU: 1 UID: 0 PID: 13095 Comm: syz.2.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.436822][T13095] Tainted: [L]=SOFTLOCKUP [ 379.436828][T13095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.436838][T13095] Call Trace: [ 379.436843][T13095] [ 379.436850][T13095] dump_stack_lvl+0x100/0x190 [ 379.436875][T13095] should_fail_ex.cold+0x5/0xa [ 379.436897][T13095] _copy_to_user+0x32/0xd0 [ 379.436912][T13095] simple_read_from_buffer+0xcb/0x170 [ 379.436926][T13095] proc_fail_nth_read+0x1af/0x230 [ 379.436938][T13095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.436951][T13095] ? rw_verify_area+0xce/0x6d0 [ 379.436967][T13095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.436978][T13095] vfs_read+0x1e4/0xb40 [ 379.436991][T13095] ? lock_acquire+0x1d1/0x380 [ 379.437006][T13095] ? __fget_files+0x34/0x3d0 [ 379.437018][T13095] ? __pfx_vfs_read+0x10/0x10 [ 379.437028][T13095] ? find_held_lock+0x2b/0x80 [ 379.437040][T13095] ? __fget_files+0x215/0x3d0 [ 379.437054][T13095] ? __fget_files+0x21f/0x3d0 [ 379.437070][T13095] ksys_read+0x12a/0x250 [ 379.437081][T13095] ? __pfx_ksys_read+0x10/0x10 [ 379.437095][T13095] do_int80_emulation+0x166/0x650 [ 379.437115][T13095] asm_int80_emulation+0x1a/0x20 [ 379.437127][T13095] RIP: 0023:0xf71e75ab [ 379.437136][T13095] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 379.437147][T13095] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 379.437158][T13095] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a65d0 [ 379.437165][T13095] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 379.437171][T13095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.437177][T13095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 379.437183][T13095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.437197][T13095] [ 379.964944][T13113] loop2: detected capacity change from 0 to 4095 [ 379.968798][ T3266] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 379.985527][T13113] Buffer I/O error on dev loop2, logical block 511, async page read [ 379.989593][ T5753] Buffer I/O error on dev loop2, logical block 511, async page read [ 380.119830][ T3266] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 380.121936][ T3266] usb 5-1: Dual-Role OTG device on HNP port [ 380.122359][ T3266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.122377][ T3266] usb 5-1: SerialNumber: 123456789 [ 380.134998][ T3266] gspca_main: spca501-2.14.0 probing 0000:0000 [ 380.135458][ T3266] gspca_spca501: reg write: error -32 [ 380.135466][ T3266] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 380.135503][ T3266] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 380.136030][ T3266] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.397601][ T5753] Buffer I/O error on dev loop2, logical block 511, async page read [ 380.596402][T13124] FAULT_INJECTION: forcing a failure. [ 380.596402][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 380.596471][T13124] CPU: 0 UID: 0 PID: 13124 Comm: syz.3.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.596488][T13124] Tainted: [L]=SOFTLOCKUP [ 380.596504][T13124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.596510][T13124] Call Trace: [ 380.596515][T13124] [ 380.596520][T13124] dump_stack_lvl+0x100/0x190 [ 380.596540][T13124] should_fail_ex.cold+0x5/0xa [ 380.596555][T13124] should_failslab+0xc2/0x120 [ 380.596570][T13124] kmem_cache_alloc_noprof+0x92/0x6a0 [ 380.596583][T13124] ? do_getname+0x35/0x390 [ 380.596601][T13124] do_getname+0x35/0x390 [ 380.596617][T13124] do_sys_openat2+0xc7/0x1e0 [ 380.596633][T13124] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.596650][T13124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.596671][T13124] __ia32_compat_sys_openat+0x12d/0x210 [ 380.596687][T13124] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 380.596703][T13124] ? fput+0x7c/0x100 [ 380.596716][T13124] ? ksys_write+0x1ac/0x250 [ 380.596727][T13124] ? __pfx_ksys_write+0x10/0x10 [ 380.596741][T13124] __do_fast_syscall_32+0x13a/0x8b0 [ 380.596758][T13124] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.596775][T13124] do_fast_syscall_32+0x32/0x70 [ 380.596792][T13124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.596807][T13124] RIP: 0023:0xf70befec [ 380.596820][T13124] Code: Unable to access opcode bytes at 0xf70befc2. [ 380.596825][T13124] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 380.596836][T13124] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 380.596843][T13124] RDX: 00000000000aca82 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.596849][T13124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.596855][T13124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.596862][T13124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.596875][T13124] [ 381.870388][T13142] FAULT_INJECTION: forcing a failure. [ 381.870388][T13142] name failslab, interval 1, probability 0, space 0, times 0 [ 381.870410][T13142] CPU: 3 UID: 0 PID: 13142 Comm: syz.1.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.870426][T13142] Tainted: [L]=SOFTLOCKUP [ 381.870430][T13142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.870436][T13142] Call Trace: [ 381.870440][T13142] [ 381.870444][T13142] dump_stack_lvl+0x100/0x190 [ 381.870478][T13142] should_fail_ex.cold+0x5/0xa [ 381.870494][T13142] should_failslab+0xc2/0x120 [ 381.870510][T13142] __kmalloc_noprof+0xfc/0x840 [ 381.870524][T13142] ? anon_vma_name_alloc+0x58/0x100 [ 381.870544][T13142] anon_vma_name_alloc+0x58/0x100 [ 381.870560][T13142] set_anon_vma_name+0x214/0x4c0 [ 381.870576][T13142] ? __pfx_set_anon_vma_name+0x10/0x10 [ 381.870593][T13142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.870609][T13142] ? cap_task_prctl+0x104/0xa50 [ 381.870624][T13142] ? static_key_count+0x5a/0x70 [ 381.870640][T13142] ? security_task_prctl+0x11c/0x160 [ 381.870654][T13142] __do_sys_prctl+0xb41/0x2270 [ 381.870668][T13142] ? __pfx___do_sys_prctl+0x10/0x10 [ 381.870685][T13142] __do_fast_syscall_32+0x13a/0x8b0 [ 381.870702][T13142] ? lockdep_hardirqs_on+0x7d/0x110 [ 381.870718][T13142] do_fast_syscall_32+0x32/0x70 [ 381.870763][T13142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.870777][T13142] RIP: 0023:0xf7fb3fec [ 381.870789][T13142] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 381.870795][T13142] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 381.870806][T13142] RAX: ffffffffffffffda RBX: 0000000053564d41 RCX: 0000000000000000 [ 381.870813][T13142] RDX: 0000000080ffb000 RSI: 00000000fffffd00 RDI: 0000000080000000 [ 381.870820][T13142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.870826][T13142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.870832][T13142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.870846][T13142] [ 384.316853][T13155] could not allocate digest TFM handle sha512-neon [ 385.623745][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 385.623759][ T43] audit: type=1326 audit(1789445213.369:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.623785][ T43] audit: type=1326 audit(1789445213.369:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.627918][ T43] audit: type=1326 audit(1789445213.369:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.628020][ T43] audit: type=1326 audit(1789445213.369:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.629074][ T43] audit: type=1326 audit(1789445213.369:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.640972][ T43] audit: type=1326 audit(1789445213.389:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.641016][ T43] audit: type=1326 audit(1789445213.389:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.641051][ T43] audit: type=1326 audit(1789445213.389:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.668511][ T43] audit: type=1326 audit(1789445213.409:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 385.670852][ T43] audit: type=1326 audit(1789445213.419:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 385.918958][ T5883] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 386.086847][ T5883] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 386.144890][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.144907][ T5883] usb 7-1: Product: syz [ 386.144914][ T5883] usb 7-1: Manufacturer: syz [ 386.144921][ T5883] usb 7-1: SerialNumber: syz [ 386.315765][ T5883] usb 7-1: USB2VGA dongle found at address 19 [ 386.512915][ T5883] kworker/1:3: page allocation failure: order:4, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.513002][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.513017][ T5883] Tainted: [L]=SOFTLOCKUP [ 386.513022][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.513029][ T5883] Workqueue: usb_hub_wq hub_event [ 386.513049][ T5883] Call Trace: [ 386.513053][ T5883] [ 386.513057][ T5883] dump_stack_lvl+0x100/0x190 [ 386.513074][ T5883] warn_alloc.cold+0x9e/0xb2 [ 386.513087][ T5883] ? __pfx_warn_alloc+0x10/0x10 [ 386.513098][ T5883] ? find_held_lock+0x2b/0x80 [ 386.513110][ T5883] ? psi_memstall_leave+0x19c/0x360 [ 386.513127][ T5883] ? psi_memstall_leave+0x1eb/0x360 [ 386.513140][ T5883] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.513159][ T5883] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 386.513197][ T5883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.513211][ T5883] ? kasan_save_stack+0x30/0x50 [ 386.513224][ T5883] ? __kasan_kmalloc+0xaa/0xb0 [ 386.513236][ T5883] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 386.513258][ T5883] ? sisusb_probe.cold+0x3b3/0xcbd [ 386.513270][ T5883] ? usb_probe_interface+0x386/0x9b0 [ 386.513280][ T5883] ? really_probe+0x241/0xa60 [ 386.513294][ T5883] ? __driver_probe_device+0x210/0x460 [ 386.513309][ T5883] ? driver_probe_device+0x4a/0x140 [ 386.513323][ T5883] ? __device_attach_driver+0x1df/0x320 [ 386.513338][ T5883] ? bus_for_each_drv+0x159/0x1e0 [ 386.513349][ T5883] ? device_initial_probe+0xaf/0xd0 [ 386.513363][ T5883] ? bus_probe_device+0x64/0x160 [ 386.513374][ T5883] ? device_add+0x121d/0x1970 [ 386.513391][ T5883] ? really_probe+0x241/0xa60 [ 386.513403][ T5883] ? __driver_probe_device+0x210/0x460 [ 386.513417][ T5883] ? driver_probe_device+0x4a/0x140 [ 386.513431][ T5883] ? __device_attach_driver+0x1df/0x320 [ 386.513447][ T5883] ? __lock_acquire+0x5c0/0x1f40 [ 386.513462][ T5883] ? ret_from_fork_asm+0x1a/0x30 [ 386.513475][ T5883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.513491][ T5883] ? policy_nodemask+0xed/0x4f0 [ 386.513507][ T5883] alloc_pages_mpol+0x201/0x550 [ 386.513523][ T5883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 386.513542][ T5883] ___kmalloc_large_node+0xe8/0x130 [ 386.513559][ T5883] __kmalloc_large_noprof+0x1c/0x70 [ 386.513575][ T5883] sisusb_probe.cold+0x509/0xcbd [ 386.513590][ T5883] usb_probe_interface+0x386/0x9b0 [ 386.513604][ T5883] ? __pfx_usb_probe_interface+0x10/0x10 [ 386.513615][ T5883] ? kernfs_put+0x3f/0x60 [ 386.513631][ T5883] ? sysfs_create_link+0x68/0xc0 [ 386.513645][ T5883] ? __pfx_usb_probe_interface+0x10/0x10 [ 386.513657][ T5883] really_probe+0x241/0xa60 [ 386.513673][ T5883] __driver_probe_device+0x210/0x460 [ 386.513687][ T5883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.513704][ T5883] driver_probe_device+0x4a/0x140 [ 386.513719][ T5883] __device_attach_driver+0x1df/0x320 [ 386.513735][ T5883] ? __pfx___device_attach_driver+0x10/0x10 [ 386.513749][ T5883] bus_for_each_drv+0x159/0x1e0 [ 386.513761][ T5883] ? __pfx_bus_for_each_drv+0x10/0x10 [ 386.513773][ T5883] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.513789][ T5883] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.513806][ T5883] __device_attach+0x1e4/0x4d0 [ 386.513821][ T5883] ? __pfx___device_attach+0x10/0x10 [ 386.513836][ T5883] ? do_raw_spin_unlock+0x145/0x1e0 [ 386.513849][ T5883] device_initial_probe+0xaf/0xd0 [ 386.513865][ T5883] bus_probe_device+0x64/0x160 [ 386.513880][ T5883] device_add+0x121d/0x1970 [ 386.513898][ T5883] ? __pfx_device_add+0x10/0x10 [ 386.513920][ T5883] usb_set_configuration+0xd97/0x1c60 [ 386.513950][ T5883] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 386.513969][ T5883] usb_generic_driver_probe+0xa1/0xe0 [ 386.513989][ T5883] usb_probe_device+0xef/0x400 [ 386.514012][ T5883] ? __pfx_usb_probe_device+0x10/0x10 [ 386.514054][ T5883] really_probe+0x241/0xa60 [ 386.514079][ T5883] __driver_probe_device+0x210/0x460 [ 386.514099][ T5883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.514115][ T5883] driver_probe_device+0x4a/0x140 [ 386.514130][ T5883] __device_attach_driver+0x1df/0x320 [ 386.514145][ T5883] ? __pfx___device_attach_driver+0x10/0x10 [ 386.514160][ T5883] bus_for_each_drv+0x159/0x1e0 [ 386.514172][ T5883] ? __pfx_bus_for_each_drv+0x10/0x10 [ 386.514185][ T5883] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.514200][ T5883] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.514217][ T5883] __device_attach+0x1e4/0x4d0 [ 386.514232][ T5883] ? __pfx___device_attach+0x10/0x10 [ 386.514252][ T5883] ? do_raw_spin_unlock+0x145/0x1e0 [ 386.514265][ T5883] device_initial_probe+0xaf/0xd0 [ 386.514280][ T5883] bus_probe_device+0x64/0x160 [ 386.514295][ T5883] device_add+0x121d/0x1970 [ 386.514313][ T5883] ? __pfx_device_add+0x10/0x10 [ 386.514329][ T5883] ? add_device_randomness+0xc9/0x110 [ 386.514347][ T5883] usb_new_device.part.0+0xcc2/0x1686 [ 386.514364][ T5883] ? do_raw_spin_lock+0x128/0x260 [ 386.514382][ T5883] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 386.514398][ T5883] ? mark_held_locks+0x40/0x70 [ 386.514415][ T5883] hub_event.cold+0x1e3/0xe90 [ 386.514443][ T5883] ? __pfx_hub_event+0x10/0x10 [ 386.514460][ T5883] ? down_read_killable_nested+0x2b0/0x520 [ 386.514473][ T5883] ? lock_acquire+0x1d1/0x380 [ 386.514487][ T5883] ? process_one_work+0xa2c/0x1b10 [ 386.514502][ T5883] ? process_one_work+0x906/0x1b10 [ 386.514514][ T5883] ? process_one_work+0x906/0x1b10 [ 386.514530][ T5883] process_one_work+0xac7/0x1b10 [ 386.514549][ T5883] ? __pfx_process_one_work+0x10/0x10 [ 386.514564][ T5883] ? lock_acquire+0x1d1/0x380 [ 386.514582][ T5883] ? __pfx_hub_event+0x10/0x10 [ 386.514600][ T5883] worker_thread+0x5ef/0xe50 [ 386.514618][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 386.514632][ T5883] ? kthread+0x13a/0x450 [ 386.514643][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 386.514655][ T5883] kthread+0x373/0x450 [ 386.514666][ T5883] ? __pfx_kthread+0x10/0x10 [ 386.514679][ T5883] ret_from_fork+0x730/0xd60 [ 386.514697][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 386.514734][ T5883] ? __switch_to+0x800/0x10f0 [ 386.514752][ T5883] ? __pfx_kthread+0x10/0x10 [ 386.514765][ T5883] ret_from_fork_asm+0x1a/0x30 [ 386.514783][ T5883] [ 386.522773][ T5883] Mem-Info: [ 386.522783][ T5883] active_anon:20901 inactive_anon:43547 isolated_anon:0 [ 386.522783][ T5883] active_file:10632 inactive_file:10441 isolated_file:0 [ 386.522783][ T5883] unevictable:1000 dirty:87 writeback:0 [ 386.522783][ T5883] slab_reclaimable:6679 slab_unreclaimable:55496 [ 386.522783][ T5883] mapped:48139 shmem:62235 pagetables:1422 [ 386.522783][ T5883] sec_pagetables:307 bounce:0 [ 386.522783][ T5883] kernel_misc_reclaimable:0 [ 386.522783][ T5883] free:18722 free_pcp:238 free_cma:0 [ 386.522811][ T5883] Node 0 active_anon:1544kB inactive_anon:1584kB active_file:68kB inactive_file:60kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:1176kB dirty:0kB writeback:0kB shmem:5120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1124kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.522839][ T5883] Node 1 active_anon:82060kB inactive_anon:172604kB active_file:42460kB inactive_file:41704kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:191380kB dirty:348kB writeback:0kB shmem:243820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4640kB pagetables:4564kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.522866][ T5883] Node 0 DMA free:2520kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.522896][ T5883] lowmem_reserve[]: 0 277 277 277 277 [ 386.522914][ T5883] Node 0 DMA32 free:16000kB boost:14336kB min:26964kB low:30120kB high:33276kB reserved_highatomic:2048kB free_highatomic:320kB active_anon:1544kB inactive_anon:1584kB active_file:68kB inactive_file:60kB unevictable:2000kB writepending:0kB zspages:2932kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.522944][ T5883] lowmem_reserve[]: 0 0 0 0 0 [ 386.522962][ T5883] Node 1 DMA32 free:56368kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:82060kB inactive_anon:172604kB active_file:42460kB inactive_file:41704kB unevictable:2000kB writepending:348kB zspages:4824kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:244kB free_cma:0kB [ 386.522992][ T5883] lowmem_reserve[]: 0 0 0 0 0 [ 386.523009][ T5883] Node 0 DMA: 134*4kB (UE) 32*8kB (UE) 12*16kB (UE) 10*32kB (E) 5*64kB (E) 3*128kB (UE) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2520kB [ 386.523082][ T5883] Node 0 DMA32: 348*4kB (UMEH) 97*8kB (UMEH) 108*16kB (UMEH) 71*32kB (UMEH) 24*64kB (UME) 15*128kB (UME) 5*256kB (UME) 2*512kB (UE) 2*1024kB (M) 1*2048kB (E) 0*4096kB = 16024kB [ 386.523160][ T5883] Node 1 DMA32: 459*4kB (UME) 503*8kB (UME) 464*16kB (UME) 404*32kB (UME) 177*64kB (UME) 46*128kB (UME) 24*256kB (UME) 7*512kB (UE) 3*1024kB (UM) 0*2048kB 0*4096kB = 56228kB [ 386.523235][ T5883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.523304][ T5883] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.523314][ T5883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.523322][ T5883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.523330][ T5883] 83386 total pagecache pages [ 386.523334][ T5883] 81 pages in swap cache [ 386.523337][ T5883] Free swap = 22200kB [ 386.523341][ T5883] Total swap = 124996kB [ 386.523346][ T5883] 524155 pages RAM [ 386.523349][ T5883] 0 pages HighMem/MovableOnly [ 386.523353][ T5883] 212121 pages reserved [ 386.523356][ T5883] 0 pages cma reserved [ 386.523498][ T5883] usb 7-1: Allocated 5 output buffers [ 387.218446][ T5883] usb 7-1: Failed to early initialize device [ 387.227808][ T5883] usb 7-1: USB disconnect, device number 19 [ 388.987932][T13181] ------------[ cut here ]------------ [ 388.987942][T13181] current->flags & PF_MEMALLOC [ 388.987947][T13181] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: syz.0.2252/13181 [ 388.995718][T13181] Modules linked in: [ 388.997195][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.0.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.000809][T13181] Tainted: [L]=SOFTLOCKUP [ 389.002227][T13181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.005605][T13181] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.007792][T13181] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 389.014096][T13181] RSP: 0018:ffffc900037860b8 EFLAGS: 00010202 [ 389.015996][T13181] RAX: ffff88802a050000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 389.018452][T13181] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 389.021158][T13181] RBP: ffff88802a05002c R08: 0000000000008000 R09: 0000000000000001 [ 389.023664][T13181] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 389.026030][T13181] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920006f0c31 [ 389.028724][T13181] FS: 0000000000000000(0000) GS:ffff888096960000(0063) knlGS:00000000f53ddb40 [ 389.031522][T13181] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 389.033517][T13181] CR2: 000000008002f000 CR3: 000000006089a000 CR4: 0000000000352ef0 [ 389.035934][T13181] Call Trace: [ 389.037158][T13181] [ 389.038105][T13181] ? lock_acquire+0x1d1/0x380 [ 389.039837][T13181] ? unwind_next_frame+0xbd/0x2090 [ 389.041463][T13181] ? lock_acquire+0x1d1/0x380 [ 389.043063][T13181] ? unwind_next_frame+0xbd/0x2090 [ 389.044979][T13181] ? find_held_lock+0x2b/0x80 [ 389.046481][T13181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.048469][T13181] ? unwind_next_frame+0x3be/0x2090 [ 389.050363][T13181] ? unwind_next_frame+0x3c8/0x2090 [ 389.052045][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.053613][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.055188][T13181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.057040][T13181] ? policy_nodemask+0xed/0x4f0 [ 389.058580][T13181] alloc_pages_mpol+0x201/0x550 [ 389.060326][T13181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.062026][T13181] ? filemap_get_entry+0x22d/0x450 [ 389.063642][T13181] ? filemap_get_entry+0x22d/0x450 [ 389.065246][T13181] folio_alloc_noprof+0x22/0x250 [ 389.066823][T13181] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 389.068985][T13181] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 389.071156][T13181] ? lock_acquire+0x1d1/0x380 [ 389.072643][T13181] ? ext4_get_group_info+0x146/0x480 [ 389.074311][T13181] ? find_held_lock+0x2b/0x80 [ 389.075812][T13181] __filemap_get_folio_mpol+0x653/0x1320 [ 389.077574][T13181] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 389.079526][T13181] ext4_discard_preallocations+0x584/0x10c0 [ 389.081571][T13181] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 389.083560][T13181] ? __pfx_xa_destroy+0x10/0x10 [ 389.085110][T13181] ? inode_wait_for_writeback+0x171/0x390 [ 389.086905][T13181] ext4_clear_inode+0x6e/0x280 [ 389.088425][T13181] ext4_evict_inode+0x1de/0x17d0 [ 389.090169][T13181] ? evict+0x37e/0xad0 [ 389.091528][T13181] ? __pfx_ext4_evict_inode+0x10/0x10 [ 389.093246][T13181] evict+0x3c2/0xad0 [ 389.094495][T13181] ? _raw_spin_unlock+0x28/0x50 [ 389.096042][T13181] ? __list_lru_walk_one+0x26d/0x550 [ 389.097709][T13181] ? __pfx_evict+0x10/0x10 [ 389.099259][T13181] ? _raw_spin_unlock+0x28/0x50 [ 389.100794][T13181] ? dentry_kill+0x584/0xc20 [ 389.102297][T13181] dispose_list+0x117/0x1e0 [ 389.103748][T13181] prune_icache_sb+0xea/0x150 [ 389.105244][T13181] ? list_lru_count_one+0x147/0x320 [ 389.106888][T13181] ? __pfx_prune_icache_sb+0x10/0x10 [ 389.108553][T13181] super_cache_scan+0x3ac/0x5c0 [ 389.110139][T13181] do_shrink_slab+0x416/0x1200 [ 389.111694][T13181] shrink_slab+0xa82/0x12e0 [ 389.113129][T13181] ? shrink_slab+0x677/0x12e0 [ 389.114615][T13181] ? __pfx_shrink_slab+0x10/0x10 [ 389.116179][T13181] ? __pfx_get_random_u8+0x10/0x10 [ 389.117787][T13181] ? lock_acquire+0x1d1/0x380 [ 389.119320][T13181] shrink_one+0x398/0x850 [ 389.120692][T13181] ? shrink_node+0x2b00/0x4320 [ 389.122220][T13181] shrink_node+0x2b20/0x4320 [ 389.123687][T13181] ? __queue_work+0x4d6/0x1370 [ 389.125191][T13181] ? shrink_node+0x286e/0x4320 [ 389.126711][T13181] ? __pfx_shrink_node+0x10/0x10 [ 389.128273][T13181] ? queue_work_on+0x141/0x1e0 [ 389.129936][T13181] ? do_try_to_free_pages+0x33e/0x16d0 [ 389.131682][T13181] do_try_to_free_pages+0x33e/0x16d0 [ 389.133343][T13181] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 389.135148][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.136714][T13181] try_to_free_pages+0x2a0/0x740 [ 389.138274][T13181] ? __pfx_try_to_free_pages+0x10/0x10 [ 389.140088][T13181] ? find_held_lock+0x2b/0x80 [ 389.141610][T13181] ? fs_reclaim_acquire+0x70/0x100 [ 389.143225][T13181] ? fs_reclaim_acquire+0x70/0x100 [ 389.144841][T13181] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 389.146837][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.148399][T13181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.150417][T13181] ? __css_rstat_updated+0x1ce/0x590 [ 389.152094][T13181] ? lock_acquire+0x1d1/0x380 [ 389.153658][T13181] ? do_raw_spin_lock+0x128/0x260 [ 389.155250][T13181] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.156939][T13181] ? find_held_lock+0x2b/0x80 [ 389.158434][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.160085][T13181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.161962][T13181] ? policy_nodemask+0xed/0x4f0 [ 389.163498][T13181] alloc_pages_mpol+0x201/0x550 [ 389.165017][T13181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.166723][T13181] folio_alloc_mpol_noprof+0x36/0x260 [ 389.168418][T13181] shmem_alloc_folio+0x135/0x160 [ 389.170044][T13181] shmem_alloc_and_add_folio+0x371/0xd40 [ 389.171837][T13181] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 389.173815][T13181] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 389.175700][T13181] shmem_get_folio_gfp+0x75b/0x1980 [ 389.177331][T13181] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 389.179141][T13181] ? filemap_map_pages+0x114a/0x2100 [ 389.180805][T13181] shmem_fault+0x1fb/0xa30 [ 389.182237][T13181] ? __pfx_shmem_fault+0x10/0x10 [ 389.183794][T13181] ? __pfx_filemap_map_pages+0x10/0x10 [ 389.185491][T13181] ? find_held_lock+0x2b/0x80 [ 389.186997][T13181] ? __pfx_filemap_map_pages+0x10/0x10 [ 389.188746][T13181] __do_fault+0x10b/0x440 [ 389.190104][T13181] do_fault+0xb3f/0x1830 [ 389.191472][T13181] ? __pfx_do_fault+0x10/0x10 [ 389.192981][T13181] ? rcu_read_unlock+0x2d/0xb0 [ 389.194701][T13181] ? rcu_read_unlock+0x2d/0xb0 [ 389.196265][T13181] ? __pte_offset_map+0x179/0x310 [ 389.197674][T13181] __handle_mm_fault+0x150b/0x2f60 [ 389.199325][T13181] ? __pfx___handle_mm_fault+0x10/0x10 [ 389.200912][T13181] ? pte_offset_map_lock+0x174/0x320 [ 389.202585][T13181] ? find_held_lock+0x2b/0x80 [ 389.204081][T13181] ? find_held_lock+0x2b/0x80 [ 389.205564][T13181] ? follow_page_pte+0x536/0x1050 [ 389.207160][T13181] handle_mm_fault+0x363/0xa20 [ 389.208732][T13181] __get_user_pages+0x8ae/0x2c30 [ 389.210298][T13181] ? __pfx_mt_find+0x10/0x10 [ 389.211776][T13181] ? __pfx___get_user_pages+0x10/0x10 [ 389.213450][T13181] populate_vma_page_range+0x267/0x3f0 [ 389.215153][T13181] ? __pfx_populate_vma_page_range+0x10/0x10 [ 389.217018][T13181] ? __pfx_find_vma_intersection+0x10/0x10 [ 389.218884][T13181] __mm_populate+0x107/0x3a0 [ 389.220335][T13181] ? __pfx___mm_populate+0x10/0x10 [ 389.221947][T13181] ? up_write+0x2dc/0x5b0 [ 389.223312][T13181] vm_mmap_pgoff+0x441/0x470 [ 389.224768][T13181] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 389.226369][T13181] ? __pfx_do_futex+0x10/0x10 [ 389.227857][T13181] ksys_mmap_pgoff+0xe4/0x610 [ 389.229394][T13181] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 389.231309][T13181] ? __task_pid_nr_ns+0x1ca/0x510 [ 389.232886][T13181] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 389.234552][T13181] __do_fast_syscall_32+0x13a/0x8b0 [ 389.236188][T13181] do_fast_syscall_32+0x32/0x70 [ 389.237719][T13181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.239747][T13181] RIP: 0023:0xf6feefec [ 389.241054][T13181] Code: Unable to access opcode bytes at 0xf6feefc2. [ 389.243180][T13181] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 389.245763][T13181] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 389.248225][T13181] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 389.250983][T13181] RBP: 000000001b5cb000 R08: 0000000000000000 R09: 0000000000000000 [ 389.253466][T13181] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 389.255909][T13181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.258379][T13181] [ 389.259425][T13181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.261709][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.0.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.265069][T13181] Tainted: [L]=SOFTLOCKUP [ 389.266424][T13181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.269588][T13181] Call Trace: [ 389.270773][T13181] [ 389.271765][T13181] dump_stack_lvl+0x100/0x190 [ 389.273243][T13181] vpanic+0x553/0x970 [ 389.274469][T13181] ? __pfx_vpanic+0x10/0x10 [ 389.275822][T13181] panic+0xd1/0xe0 [ 389.277017][T13181] ? __pfx_panic+0x10/0x10 [ 389.278438][T13181] check_panic_on_warn.cold+0x19/0x34 [ 389.280135][T13181] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.282074][T13181] __warn.cold+0x191/0x318 [ 389.283492][T13181] __report_bug+0x30f/0x440 [ 389.284932][T13181] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.286878][T13181] ? __pfx___report_bug+0x10/0x10 [ 389.288464][T13181] ? __zone_watermark_ok+0x281/0x500 [ 389.290116][T13181] ? get_page_from_freelist+0x344/0x35d0 [ 389.291914][T13181] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.293929][T13181] report_bug+0xb3/0x220 [ 389.295288][T13181] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.297381][T13181] handle_bug+0x16a/0x2a0 [ 389.298755][T13181] exc_invalid_op+0x17/0x50 [ 389.300286][T13181] asm_exc_invalid_op+0x1a/0x20 [ 389.301845][T13181] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 389.303867][T13181] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 389.310005][T13181] RSP: 0018:ffffc900037860b8 EFLAGS: 00010202 [ 389.312018][T13181] RAX: ffff88802a050000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 389.314379][T13181] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 389.316859][T13181] RBP: ffff88802a05002c R08: 0000000000008000 R09: 0000000000000001 [ 389.319582][T13181] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 389.321930][T13181] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920006f0c31 [ 389.324286][T13181] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 389.326179][T13181] ? lock_acquire+0x1d1/0x380 [ 389.327739][T13181] ? unwind_next_frame+0xbd/0x2090 [ 389.329378][T13181] ? lock_acquire+0x1d1/0x380 [ 389.330882][T13181] ? unwind_next_frame+0xbd/0x2090 [ 389.332510][T13181] ? find_held_lock+0x2b/0x80 [ 389.333959][T13181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.335866][T13181] ? unwind_next_frame+0x3be/0x2090 [ 389.337449][T13181] ? unwind_next_frame+0x3c8/0x2090 [ 389.339080][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.340635][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.342222][T13181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.344073][T13181] ? policy_nodemask+0xed/0x4f0 [ 389.345600][T13181] alloc_pages_mpol+0x201/0x550 [ 389.347122][T13181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.348851][T13181] ? filemap_get_entry+0x22d/0x450 [ 389.350447][T13181] ? filemap_get_entry+0x22d/0x450 [ 389.352066][T13181] folio_alloc_noprof+0x22/0x250 [ 389.353549][T13181] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 389.355455][T13181] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 389.357551][T13181] ? lock_acquire+0x1d1/0x380 [ 389.359043][T13181] ? ext4_get_group_info+0x146/0x480 [ 389.360706][T13181] ? find_held_lock+0x2b/0x80 [ 389.362199][T13181] __filemap_get_folio_mpol+0x653/0x1320 [ 389.363977][T13181] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 389.365698][T13181] ext4_discard_preallocations+0x584/0x10c0 [ 389.367539][T13181] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 389.369500][T13181] ? __pfx_xa_destroy+0x10/0x10 [ 389.371102][T13181] ? inode_wait_for_writeback+0x171/0x390 [ 389.372887][T13181] ext4_clear_inode+0x6e/0x280 [ 389.374410][T13181] ext4_evict_inode+0x1de/0x17d0 [ 389.375994][T13181] ? evict+0x37e/0xad0 [ 389.377296][T13181] ? __pfx_ext4_evict_inode+0x10/0x10 [ 389.378993][T13181] evict+0x3c2/0xad0 [ 389.380237][T13181] ? _raw_spin_unlock+0x28/0x50 [ 389.381787][T13181] ? __list_lru_walk_one+0x26d/0x550 [ 389.383461][T13181] ? __pfx_evict+0x10/0x10 [ 389.384875][T13181] ? _raw_spin_unlock+0x28/0x50 [ 389.386420][T13181] ? dentry_kill+0x584/0xc20 [ 389.387891][T13181] dispose_list+0x117/0x1e0 [ 389.389327][T13181] prune_icache_sb+0xea/0x150 [ 389.390826][T13181] ? list_lru_count_one+0x147/0x320 [ 389.392471][T13181] ? __pfx_prune_icache_sb+0x10/0x10 [ 389.394136][T13181] super_cache_scan+0x3ac/0x5c0 [ 389.395686][T13181] do_shrink_slab+0x416/0x1200 [ 389.397194][T13181] shrink_slab+0xa82/0x12e0 [ 389.398632][T13181] ? shrink_slab+0x677/0x12e0 [ 389.400126][T13181] ? __pfx_shrink_slab+0x10/0x10 [ 389.401710][T13181] ? __pfx_get_random_u8+0x10/0x10 [ 389.403342][T13181] ? lock_acquire+0x1d1/0x380 [ 389.404833][T13181] shrink_one+0x398/0x850 [ 389.406208][T13181] ? shrink_node+0x2b00/0x4320 [ 389.407732][T13181] shrink_node+0x2b20/0x4320 [ 389.409186][T13181] ? __queue_work+0x4d6/0x1370 [ 389.410674][T13181] ? shrink_node+0x286e/0x4320 [ 389.412188][T13181] ? __pfx_shrink_node+0x10/0x10 [ 389.413713][T13181] ? queue_work_on+0x141/0x1e0 [ 389.415165][T13181] ? do_try_to_free_pages+0x33e/0x16d0 [ 389.416839][T13181] do_try_to_free_pages+0x33e/0x16d0 [ 389.418453][T13181] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 389.420257][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.421807][T13181] try_to_free_pages+0x2a0/0x740 [ 389.423349][T13181] ? __pfx_try_to_free_pages+0x10/0x10 [ 389.425039][T13181] ? find_held_lock+0x2b/0x80 [ 389.426489][T13181] ? fs_reclaim_acquire+0x70/0x100 [ 389.428104][T13181] ? fs_reclaim_acquire+0x70/0x100 [ 389.429716][T13181] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 389.431625][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.433178][T13181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.435239][T13181] ? __css_rstat_updated+0x1ce/0x590 [ 389.436892][T13181] ? lock_acquire+0x1d1/0x380 [ 389.438357][T13181] ? do_raw_spin_lock+0x128/0x260 [ 389.439973][T13181] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.441730][T13181] ? find_held_lock+0x2b/0x80 [ 389.443238][T13181] ? __lock_acquire+0x5c0/0x1f40 [ 389.444810][T13181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.446703][T13181] ? policy_nodemask+0xed/0x4f0 [ 389.448252][T13181] alloc_pages_mpol+0x201/0x550 [ 389.449793][T13181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.451519][T13181] folio_alloc_mpol_noprof+0x36/0x260 [ 389.453201][T13181] shmem_alloc_folio+0x135/0x160 [ 389.454775][T13181] shmem_alloc_and_add_folio+0x371/0xd40 [ 389.456541][T13181] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 389.458472][T13181] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 389.460370][T13181] shmem_get_folio_gfp+0x75b/0x1980 [ 389.462033][T13181] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 389.463808][T13181] ? filemap_map_pages+0x114a/0x2100 [ 389.465478][T13181] shmem_fault+0x1fb/0xa30 [ 389.466905][T13181] ? __pfx_shmem_fault+0x10/0x10 [ 389.468470][T13181] ? __pfx_filemap_map_pages+0x10/0x10 [ 389.470174][T13181] ? find_held_lock+0x2b/0x80 [ 389.471689][T13181] ? __pfx_filemap_map_pages+0x10/0x10 [ 389.473399][T13181] __do_fault+0x10b/0x440 [ 389.474769][T13181] do_fault+0xb3f/0x1830 [ 389.476110][T13181] ? __pfx_do_fault+0x10/0x10 [ 389.477601][T13181] ? rcu_read_unlock+0x2d/0xb0 [ 389.479122][T13181] ? rcu_read_unlock+0x2d/0xb0 [ 389.480633][T13181] ? __pte_offset_map+0x179/0x310 [ 389.482227][T13181] __handle_mm_fault+0x150b/0x2f60 [ 389.483855][T13181] ? __pfx___handle_mm_fault+0x10/0x10 [ 389.485680][T13181] ? pte_offset_map_lock+0x174/0x320 [ 389.487352][T13181] ? find_held_lock+0x2b/0x80 [ 389.488897][T13181] ? find_held_lock+0x2b/0x80 [ 389.490392][T13181] ? follow_page_pte+0x536/0x1050 [ 389.492048][T13181] handle_mm_fault+0x363/0xa20 [ 389.493638][T13181] __get_user_pages+0x8ae/0x2c30 [ 389.495212][T13181] ? __pfx_mt_find+0x10/0x10 [ 389.496676][T13181] ? __pfx___get_user_pages+0x10/0x10 [ 389.498399][T13181] populate_vma_page_range+0x267/0x3f0 [ 389.500123][T13181] ? __pfx_populate_vma_page_range+0x10/0x10 [ 389.502011][T13181] ? __pfx_find_vma_intersection+0x10/0x10 [ 389.503926][T13181] __mm_populate+0x107/0x3a0 [ 389.505408][T13181] ? __pfx___mm_populate+0x10/0x10 [ 389.507031][T13181] ? up_write+0x2dc/0x5b0 [ 389.508426][T13181] vm_mmap_pgoff+0x441/0x470 [ 389.509893][T13181] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 389.511554][T13181] ? __pfx_do_futex+0x10/0x10 [ 389.513048][T13181] ksys_mmap_pgoff+0xe4/0x610 [ 389.514538][T13181] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 389.516425][T13181] ? __task_pid_nr_ns+0x1ca/0x510 [ 389.518018][T13181] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 389.519749][T13181] __do_fast_syscall_32+0x13a/0x8b0 [ 389.521411][T13181] do_fast_syscall_32+0x32/0x70 [ 389.522966][T13181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.524957][T13181] RIP: 0023:0xf6feefec [ 389.526259][T13181] Code: Unable to access opcode bytes at 0xf6feefc2. [ 389.528358][T13181] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 389.530982][T13181] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 389.533476][T13181] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 389.535940][T13181] RBP: 000000001b5cb000 R08: 0000000000000000 R09: 0000000000000000 [ 389.538452][T13181] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 389.540934][T13181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.543466][T13181] [ 389.545095][T13181] Kernel Offset: disabled [ 389.546466][T13181] Rebooting in 86400 seconds..