last executing test programs: 5m26.37817564s ago: executing program 0 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r0 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m26.285196536s ago: executing program 0 (id=207): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0xea6, 0x5, 0x7ff, 0x9, 0x8, 0x8, 0x5}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 5m26.166680914s ago: executing program 0 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351", 0x41, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 5m25.904268101s ago: executing program 0 (id=213): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080088a200040600000e8100400088", @ANYRESOCT=r0], 0x4a) 5m24.750939256s ago: executing program 0 (id=224): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m24.578234517s ago: executing program 0 (id=228): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000001100)='8086 29c0 ffffffff ffffffff 0 0 1', 0x21) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') 5m9.514330369s ago: executing program 32 (id=228): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000001100)='8086 29c0 ffffffff ffffffff 0 0 1', 0x21) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') 4m47.92432187s ago: executing program 3 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000000), 0x2000000) write(r0, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x10', 0x21) 4m47.602322589s ago: executing program 3 (id=657): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x107c) 4m47.372064488s ago: executing program 3 (id=658): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) 4m45.922834589s ago: executing program 3 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 4m45.874853966s ago: executing program 3 (id=687): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 4m45.473750387s ago: executing program 3 (id=692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="003ad9f462f9", 0x6}], 0x1}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 4m45.387799315s ago: executing program 33 (id=692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="003ad9f462f9", 0x6}], 0x1}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 3m12.456831225s ago: executing program 4 (id=1898): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0xe0e, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 3m12.351455858s ago: executing program 4 (id=1899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248320000dbb8a1", 0x1e}, {&(0x7f0000000300)="0400000002e877da", 0x8}, {&(0x7f0000000180)="5d6d5a46fc44e10be7065c681a2064dcfd0d0be3", 0x14}], 0x3) 3m12.072887578s ago: executing program 4 (id=1903): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m12.00228064s ago: executing program 4 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 3m11.930330882s ago: executing program 4 (id=1906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 3m11.380882919s ago: executing program 4 (id=1919): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xa5a0, 0x4, 0x20a, 0x4, 0x10001, 0xb, 0x1, 0x8}, 0x0) 3m11.165030898s ago: executing program 34 (id=1919): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xa5a0, 0x4, 0x20a, 0x4, 0x10001, 0xb, 0x1, 0x8}, 0x0) 2m14.80733776s ago: executing program 1 (id=2413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) 2m14.558651947s ago: executing program 1 (id=2427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m14.39127744s ago: executing program 1 (id=2420): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2m14.342940043s ago: executing program 1 (id=2423): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) connect$llc(r0, &(0x7f0000000200)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x14, @local}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f0000000300)={@local, @local, @void, {@generic={0x3, "121573"}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000400)={@local, @local, @void, {@generic={0x4, "12140101"}}}, 0x0) 2m14.231348184s ago: executing program 1 (id=2424): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 2m14.142136756s ago: executing program 1 (id=2426): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m58.676458148s ago: executing program 35 (id=2426): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m5.819113691s ago: executing program 7 (id=3116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1m5.459662323s ago: executing program 7 (id=3131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x41000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m5.279418068s ago: executing program 7 (id=3124): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 1m4.969634465s ago: executing program 7 (id=3127): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, 0x0) 1m4.357476938s ago: executing program 7 (id=3138): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 1m4.226998171s ago: executing program 7 (id=3140): io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x1, 0x1277}) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0xf9f, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 49.13139017s ago: executing program 36 (id=3140): io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x1, 0x1277}) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0xf9f, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 30.247391595s ago: executing program 5 (id=3410): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) io_setup(0x6, &(0x7f0000001380)) 29.80349727s ago: executing program 5 (id=3418): setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) close(r0) 29.700358057s ago: executing program 5 (id=3420): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 28.831827805s ago: executing program 5 (id=3431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x7ffffffd) 28.800868375s ago: executing program 5 (id=3432): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 28.681709198s ago: executing program 5 (id=3438): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 13.686125252s ago: executing program 37 (id=3438): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 2.197569249s ago: executing program 6 (id=3758): fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000a40), 0x5, 0x400) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000c40)={0x80000000, 0x0, &(0x7f0000000bc0)}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r2, 0x1b00}}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.131882335s ago: executing program 2 (id=3760): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000050000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 2.130807508s ago: executing program 6 (id=3761): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x679f, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "fea81b7ace0214634e09a7e18eaf07b6d8035c3df21f7ea8060a000000"}, 0x28) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mlock(&(0x7f0000dc4000/0x4000)=nil, 0x4000) 2.010027258s ago: executing program 6 (id=3764): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.865108016s ago: executing program 2 (id=3767): unshare(0x64000600) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.611076072s ago: executing program 8 (id=3769): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) 1.527754147s ago: executing program 2 (id=3770): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0xfff, 0x2000003, 0xffff2ceb, 0x15, "0062ba7d821f000000000000000e00fffeff00"}) r2 = syz_open_pts(r1, 0x8182) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 1.521806426s ago: executing program 8 (id=3771): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local, 0x200001}, @local, 0x8, 0x4, 0x3, 0x80000004, 0x24b, 0x10001, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r1, 0xffffc000) close(0x3) 1.458789113s ago: executing program 2 (id=3772): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.382057863s ago: executing program 2 (id=3773): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.310496548s ago: executing program 2 (id=3774): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.233755376s ago: executing program 8 (id=3775): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.139753809s ago: executing program 6 (id=3777): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 1.02006889s ago: executing program 8 (id=3778): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.014753113s ago: executing program 6 (id=3779): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="4025136f63b8fca16d2db6ead95d4d5fdb753e3f1623136da5bba77f7afaede2ec15dd54cf6e57a3363bbb211b3597545db5c6dc8eca6b", 0x37}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)="0ca5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000cc0)="08e2433a9653677aded8e0353afa62705f1d9c8608da940ac4b1e1d8819dea231c5e837ce53acae15ec65f388004d98897665d04f0cc7db9f3e6cb41a2627fd2cd68389558df0e041acc86f111f15cd393bbf44a06e043c81a7515888332d4cfeae7dbd0090381eae6f4b4a057aca32bd9889991e094964fe83e929252993c003888f1a8b6086bc30096ac5fa153464cff0ee8c02fd907651a885b817a75d885a3280a1ad9d247cc5ab9aec38abdef178aed9ff19eac92c9dc7618d3f517220463885bbba9bc2c314812902e2e7448e694c679bf2c95cd1a144116", 0xdb}], 0x1}}], 0x3, 0x4000001) 896.136816ms ago: executing program 9 (id=3780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 681.905982ms ago: executing program 9 (id=3781): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1341, 0x0) 549.310616ms ago: executing program 9 (id=3782): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x2d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 440.971643ms ago: executing program 9 (id=3783): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e84380001000000000000f32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060af1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c2e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2446c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bb84c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8bf1fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3bbe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeeb2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bceea0dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e28c8c0100012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df9a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a1337afd3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d05000480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5999bba500feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d2813000000000000728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a5733a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdf3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8c7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee565db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8198fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x400000e, {0x0, 0xfffffff7, 0x0, '\x00', {0x1, 0xd, 0x10000000400adf, 0xf, 0x0, r2, 0x2000, '\x00', 0x998f, 0x4, 0xfffffffc, 0x7, {0xfffffffffffffff9, 0x200}, {0x231, 0x8}, {0x0, 0x7}, {0x1010000005, 0x4a00}, 0xb, 0x40000009, 0x2, 0xfffffff7}}}}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x22038302, 0x7, 0xf001, 0x804, 0x2, 0x0, 0x0, 0x8, 0x102}}, 0x50) 434.78875ms ago: executing program 8 (id=3784): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2a8607278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e2ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a043b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r2, 0xffffffffffffffff, 0xffffffff, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 281.477744ms ago: executing program 9 (id=3785): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 270.618275ms ago: executing program 8 (id=3786): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) 109.957515ms ago: executing program 9 (id=3787): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 0s ago: executing program 6 (id=3788): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)) kernel console output (not intermixed with test programs): 5957] usb 11-1: string descriptor 0 read error: -22 [ 353.222518][ T5957] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.096961][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.132918][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.139650][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.141170][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.141617][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.811794][ T7044] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.811947][ T7044] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.004004][ T7044] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.004081][ T7044] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.084389][T14876] usb 11-1: 1:1: usb_set_interface failed (-110) [ 359.105687][ T5957] usb 11-1: USB disconnect, device number 6 [ 359.284252][ T7044] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.284412][ T7044] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.412671][ T7044] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.412762][ T7044] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.419737][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.419870][T14893] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.419985][T14893] bridge_slave_0: entered allmulticast mode [ 359.420848][T14893] bridge_slave_0: entered promiscuous mode [ 359.431989][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.432180][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.432402][T14893] bridge_slave_1: entered allmulticast mode [ 359.433510][T14893] bridge_slave_1: entered promiscuous mode [ 359.453825][T14893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.457400][T14893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.482440][T14893] team0: Port device team_slave_0 added [ 359.484080][T14893] team0: Port device team_slave_1 added [ 359.501816][T14893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.501885][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.501967][T14893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.503249][T14893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.503267][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.503293][T14893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.524100][T14893] hsr_slave_0: entered promiscuous mode [ 359.524745][T14893] hsr_slave_1: entered promiscuous mode [ 359.525214][T14893] debugfs: 'hsr0' already exists in 'hsr' [ 359.525234][T14893] Cannot create hsr debugfs directory [ 359.786591][ T7044] bridge_slave_1: left allmulticast mode [ 359.788601][ T7044] bridge_slave_1: left promiscuous mode [ 359.790863][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.816683][ T7044] bridge_slave_0: left allmulticast mode [ 359.819407][ T7044] bridge_slave_0: left promiscuous mode [ 359.824313][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.016282][ T7044] bond1 (unregistering): (slave geneve2): Releasing active interface [ 360.040774][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.062796][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.067489][ T7044] bond0 (unregistering): Released all slaves [ 360.072514][ T7044] bond1 (unregistering): Released all slaves [ 360.080136][ T7044] bond2 (unregistering): Released all slaves [ 360.216236][ T5740] Bluetooth: hci4: command tx timeout [ 360.216709][ T5740] Bluetooth: hci3: command 0x0406 tx timeout [ 360.469777][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 360.472768][T14893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 360.478975][T14893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.483843][T14893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 360.491505][T14893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.497123][T14893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 360.511975][T14893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.522605][T14893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 360.538182][T14893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.691681][ T7044] hsr_slave_0: left promiscuous mode [ 360.692903][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.692948][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.704731][ T7044] veth0_macvtap: left promiscuous mode [ 360.908164][ T7044] team0 (unregistering): Port device team_slave_1 removed [ 360.928466][ T7044] team0 (unregistering): Port device team_slave_0 removed [ 361.072907][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 361.106750][T14893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.126269][T14893] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.132183][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.132324][ T7168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.137901][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.137966][ T7168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.477541][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 361.700845][T14893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.816079][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 361.933398][T14893] veth0_vlan: entered promiscuous mode [ 361.953680][T14893] veth1_vlan: entered promiscuous mode [ 361.988270][T14893] veth0_macvtap: entered promiscuous mode [ 361.994980][T14893] veth1_macvtap: entered promiscuous mode [ 362.010846][T14893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.020879][T14893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.110230][ T7044] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.110407][ T7044] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.110501][ T7044] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.110569][ T7044] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.198031][T11723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.198063][T11723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.232365][T11723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.232429][T11723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.275668][ T5742] Bluetooth: hci4: command tx timeout [ 363.479469][T15030] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 363.501097][T15030] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 363.503951][T15030] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 363.507916][T15030] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 363.539501][T15030] pci 0000:00:03.0: Adding to iommu group 3 [ 363.552459][T15030] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 363.558476][T15030] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 363.561378][T15030] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 363.703475][T15049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.262132][T15072] FAULT_INJECTION: forcing a failure. [ 364.262132][T15072] name failslab, interval 1, probability 0, space 0, times 0 [ 364.264074][T15072] CPU: 3 UID: 0 PID: 15072 Comm: syz.8.3260 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.264126][T15072] Tainted: [L]=SOFTLOCKUP [ 364.264134][T15072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.264147][T15072] Call Trace: [ 364.264156][T15072] [ 364.264167][T15072] dump_stack_lvl+0x100/0x190 [ 364.264203][T15072] should_fail_ex.cold+0x5/0xa [ 364.264228][T15072] should_failslab+0xc2/0x120 [ 364.264269][T15072] kmem_cache_alloc_noprof+0x92/0x6a0 [ 364.264290][T15072] ? security_file_alloc+0x34/0x2c0 [ 364.264318][T15072] security_file_alloc+0x34/0x2c0 [ 364.264345][T15072] init_file+0x95/0x480 [ 364.264369][T15072] alloc_empty_file+0x79/0x1c0 [ 364.264389][T15072] alloc_file_pseudo+0x183/0x290 [ 364.264413][T15072] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 364.264439][T15072] ? _raw_spin_unlock+0x28/0x50 [ 364.264460][T15072] ? alloc_fd+0x471/0x7a0 [ 364.264477][T15072] __anon_inode_getfile+0xe8/0x280 [ 364.264506][T15072] do_epoll_create+0x3ac/0x540 [ 364.264530][T15072] __ia32_sys_epoll_create1+0x30/0x40 [ 364.264556][T15072] __do_fast_syscall_32+0x13a/0x8b0 [ 364.264581][T15072] do_fast_syscall_32+0x32/0x70 [ 364.264606][T15072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.264629][T15072] RIP: 0023:0xf7fa6fec [ 364.264651][T15072] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 364.264659][T15072] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000149 [ 364.264675][T15072] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 364.264685][T15072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.264697][T15072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.264710][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.264721][T15072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.264747][T15072] [ 364.267740][T15070] FAULT_INJECTION: forcing a failure. [ 364.267740][T15070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.267776][T15070] CPU: 3 UID: 0 PID: 15070 Comm: syz.6.3261 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.267805][T15070] Tainted: [L]=SOFTLOCKUP [ 364.267814][T15070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.267827][T15070] Call Trace: [ 364.267834][T15070] [ 364.267843][T15070] dump_stack_lvl+0x100/0x190 [ 364.267871][T15070] should_fail_ex.cold+0x5/0xa [ 364.267926][T15070] ? prepare_alloc_pages+0x16d/0x5b0 [ 364.267955][T15070] should_fail_alloc_page+0xeb/0x140 [ 364.267985][T15070] prepare_alloc_pages+0x1f0/0x5b0 [ 364.268007][T15070] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 364.268037][T15070] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 364.268074][T15070] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 364.268096][T15070] ? timerqueue_linked_add+0x260/0x430 [ 364.268118][T15070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.268155][T15070] ? find_held_lock+0x2b/0x80 [ 364.268171][T15070] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 364.268196][T15070] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 364.268225][T15070] ? rcu_is_watching+0x13/0xc0 [ 364.268243][T15070] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 364.268263][T15070] ? lockdep_hardirqs_on+0x7d/0x110 [ 364.268290][T15070] ? rcu_is_watching+0x13/0xc0 [ 364.268308][T15070] ? trace_sched_exit_tp+0x120/0x160 [ 364.268330][T15070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.268356][T15070] ? policy_nodemask+0xed/0x4f0 [ 364.268379][T15070] alloc_pages_mpol+0x201/0x550 [ 364.268404][T15070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 364.268430][T15070] ? lock_acquire+0x1d1/0x380 [ 364.268451][T15070] alloc_pages_noprof+0x1a/0x160 [ 364.268480][T15070] anon_pipe_prefill_and_lock+0x102/0x580 [ 364.268506][T15070] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 364.268533][T15070] ? __pfx_aa_file_perm+0x10/0x10 [ 364.268552][T15070] anon_pipe_write+0x164/0x1b50 [ 364.268574][T15070] ? find_held_lock+0x2b/0x80 [ 364.268592][T15070] ? futex_wake+0x4ea/0x5e0 [ 364.268617][T15070] ? __pfx_anon_pipe_write+0x10/0x10 [ 364.268632][T15070] ? common_file_perm+0x266/0x500 [ 364.268663][T15070] ? bpf_lsm_file_permission+0x9/0x10 [ 364.268688][T15070] ? security_file_permission+0x76/0x210 [ 364.268711][T15070] ? rw_verify_area+0xce/0x6d0 [ 364.268739][T15070] vfs_write+0x6af/0x1050 [ 364.268758][T15070] ? __pfx_anon_pipe_write+0x10/0x10 [ 364.268801][T15070] ? __pfx_vfs_write+0x10/0x10 [ 364.268818][T15070] ? find_held_lock+0x2b/0x80 [ 364.268857][T15070] ksys_write+0x1f8/0x250 [ 364.268875][T15070] ? __pfx_ksys_write+0x10/0x10 [ 364.268894][T15070] __do_fast_syscall_32+0x13a/0x8b0 [ 364.268925][T15070] do_fast_syscall_32+0x32/0x70 [ 364.268952][T15070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.268976][T15070] RIP: 0023:0xf70aefec [ 364.269000][T15070] Code: Unable to access opcode bytes at 0xf70aefc2. [ 364.269009][T15070] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 364.269029][T15070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 364.269043][T15070] RDX: 00000000ffffff9a RSI: 0000000000000000 RDI: 0000000000000000 [ 364.269056][T15070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.269067][T15070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.269075][T15070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.269101][T15070] [ 364.356154][ T5742] Bluetooth: hci4: command tx timeout [ 364.812582][ T43] audit: type=1326 audit(1788713014.230:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.8.3267" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa6fec code=0x0 [ 364.845661][ T1483] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 364.849507][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'. [ 364.850036][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'. [ 364.996684][ T1483] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 364.997977][ T1483] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.998002][ T1483] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.998037][ T1483] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.009903][ T1483] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 365.021207][ T1483] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 365.178814][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3273'. [ 365.415759][T15081] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 365.416304][T15081] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 365.416525][T15081] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 365.503697][T15081] SPCP8x5 ttyUSB0: Set UART format 0x1709 failed (error = -32) [ 365.619461][ T5957] usb 10-1: USB disconnect, device number 17 [ 365.631101][ T5957] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 365.640893][ T5957] spcp8x5 10-1:1.0: device disconnected [ 365.828117][T15121] FAULT_INJECTION: forcing a failure. [ 365.828117][T15121] name failslab, interval 1, probability 0, space 0, times 0 [ 365.828203][T15121] CPU: 2 UID: 0 PID: 15121 Comm: syz.6.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.828254][T15121] Tainted: [L]=SOFTLOCKUP [ 365.828264][T15121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.828278][T15121] Call Trace: [ 365.828288][T15121] [ 365.828298][T15121] dump_stack_lvl+0x100/0x190 [ 365.828334][T15121] should_fail_ex.cold+0x5/0xa [ 365.828361][T15121] ? __pfx_ucma_event_handler+0x10/0x10 [ 365.828393][T15121] should_failslab+0xc2/0x120 [ 365.828420][T15121] ? __pfx_ucma_event_handler+0x10/0x10 [ 365.828450][T15121] __kmalloc_cache_noprof+0x91/0x6d0 [ 365.828483][T15121] ? lock_acquire+0x1d1/0x380 [ 365.828522][T15121] ? __rdma_create_id+0x5b/0x8f0 [ 365.828555][T15121] ? __pfx_ucma_event_handler+0x10/0x10 [ 365.828586][T15121] __rdma_create_id+0x5b/0x8f0 [ 365.828614][T15121] ? __pfx_ucma_event_handler+0x10/0x10 [ 365.828649][T15121] rdma_create_user_id+0x7d/0xe0 [ 365.828683][T15121] ucma_create_id+0x189/0x380 [ 365.828715][T15121] ? __pfx_ucma_create_id+0x10/0x10 [ 365.828745][T15121] ? __might_fault+0xc5/0x140 [ 365.828789][T15121] ? __pfx_ucma_create_id+0x10/0x10 [ 365.828818][T15121] ucma_write+0x1fb/0x330 [ 365.828844][T15121] ? __pfx_ucma_write+0x10/0x10 [ 365.828868][T15121] ? bpf_lsm_file_permission+0x9/0x10 [ 365.828897][T15121] ? security_file_permission+0x76/0x210 [ 365.828931][T15121] ? rw_verify_area+0xce/0x6d0 [ 365.828967][T15121] vfs_write+0x2aa/0x1050 [ 365.828990][T15121] ? __pfx_ucma_write+0x10/0x10 [ 365.829013][T15121] ? lock_acquire+0x1d1/0x380 [ 365.829040][T15121] ? __fget_files+0x34/0x3d0 [ 365.829084][T15121] ? __pfx_vfs_write+0x10/0x10 [ 365.829105][T15121] ? find_held_lock+0x2b/0x80 [ 365.829129][T15121] ? __fget_files+0x215/0x3d0 [ 365.829150][T15121] ? __fget_files+0x215/0x3d0 [ 365.829179][T15121] ? __fget_files+0x21f/0x3d0 [ 365.829214][T15121] ksys_write+0x1f8/0x250 [ 365.829239][T15121] ? __pfx_ksys_write+0x10/0x10 [ 365.829273][T15121] __do_fast_syscall_32+0x13a/0x8b0 [ 365.829314][T15121] do_fast_syscall_32+0x32/0x70 [ 365.829350][T15121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.829382][T15121] RIP: 0023:0xf70aefec [ 365.829413][T15121] Code: Unable to access opcode bytes at 0xf70aefc2. [ 365.829424][T15121] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 365.829544][T15121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 365.829564][T15121] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.829580][T15121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.829597][T15121] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 365.829613][T15121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.829647][T15121] [ 366.352969][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.362710][T15141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.435664][ T5742] Bluetooth: hci4: command tx timeout [ 366.643989][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1c26 instead [ 366.644049][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0bd1 instead [ 366.644271][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xa9e7 instead [ 366.644283][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x7f15 instead [ 366.644293][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xe54a instead [ 366.644304][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6f8b instead [ 366.644313][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x004f instead [ 366.644324][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5d41 instead [ 366.644335][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x18d1 instead [ 366.644344][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x431e instead [ 366.644354][T15157] jffs2: Further such events for this erase block will not be printed [ 366.644734][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x60c7 instead [ 366.644747][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x69fe instead [ 366.644757][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x124e instead [ 366.644766][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xc452 instead [ 366.644776][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb08b instead [ 366.644787][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xe21f instead [ 366.644797][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x30b1 instead [ 366.644806][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xccf4 instead [ 366.644816][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x293f instead [ 366.644827][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xac39 instead [ 366.644836][T15157] jffs2: Further such events for this erase block will not be printed [ 366.645092][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xdda6 instead [ 366.645102][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x87fb instead [ 366.645111][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x538a instead [ 366.645119][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xef4b instead [ 366.645128][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x1fd9 instead [ 366.645137][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xbfd9 instead [ 366.645146][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe17b instead [ 366.645155][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x0add instead [ 366.645164][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x6bc0 instead [ 366.645172][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xa459 instead [ 366.645181][T15157] jffs2: Further such events for this erase block will not be printed [ 366.645998][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x50d8 instead [ 366.646012][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x02b2 instead [ 366.646023][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xf466 instead [ 366.646032][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x0054 instead [ 366.646042][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xcaab instead [ 366.646052][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x16d5 instead [ 366.646063][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc531 instead [ 366.646073][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd065 instead [ 366.646083][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x2bb4 instead [ 366.646092][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xd2cc instead [ 366.646102][T15157] jffs2: Further such events for this erase block will not be printed [ 366.646351][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x3817 instead [ 366.646361][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xfaa5 instead [ 366.646370][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1f03 instead [ 366.646379][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x0f50 instead [ 366.646387][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x01e3 instead [ 366.646396][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x3b46 instead [ 366.646405][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1f23 instead [ 366.646413][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x633d instead [ 366.646422][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xcb48 instead [ 366.646431][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb320 instead [ 366.646439][T15157] jffs2: Further such events for this erase block will not be printed [ 366.648207][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x67bd instead [ 366.648220][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x521d instead [ 366.648231][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x47dd instead [ 366.648242][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xa378 instead [ 366.648252][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x1bc2 instead [ 366.648262][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x6e51 instead [ 366.648272][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc996 instead [ 366.648283][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xa19e instead [ 366.648293][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x8804 instead [ 366.648304][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x926d instead [ 366.648314][T15157] jffs2: Further such events for this erase block will not be printed [ 366.652019][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x3536 instead [ 366.652037][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x4fdd instead [ 366.652048][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xc7e9 instead [ 366.652060][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xac67 instead [ 366.652070][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xe0e8 instead [ 366.652084][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x06ad instead [ 366.652094][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1041 instead [ 366.652103][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xd58d instead [ 366.652113][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xdab8 instead [ 366.652122][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x9886 instead [ 366.652131][T15157] jffs2: Further such events for this erase block will not be printed [ 366.652395][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x33f9 instead [ 366.652406][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xfc6a instead [ 366.652416][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xc78f instead [ 366.652425][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xaa9b instead [ 366.652435][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xdcf5 instead [ 366.652445][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x751f instead [ 366.652455][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb67f instead [ 366.652465][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x52f2 instead [ 366.652474][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x9233 instead [ 366.652484][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x5cd3 instead [ 366.652493][T15157] jffs2: Further such events for this erase block will not be printed [ 366.652794][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4af9 instead [ 366.652807][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x334a instead [ 366.652817][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xde3a instead [ 366.652827][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xbbb3 instead [ 366.652837][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xd63a instead [ 366.652847][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x8435 instead [ 366.652857][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4577 instead [ 366.652867][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xb3f6 instead [ 366.652877][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x85ab instead [ 366.652887][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x44cf instead [ 366.652935][T15157] jffs2: Further such events for this erase block will not be printed [ 366.653237][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x3ac2 instead [ 366.653248][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xd929 instead [ 366.653258][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x0baf instead [ 366.653268][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x38fa instead [ 366.653278][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xfcb7 instead [ 366.653288][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xb8ea instead [ 366.653298][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x517f instead [ 366.653307][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xa630 instead [ 366.653317][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xd1a0 instead [ 366.653328][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdd6b instead [ 366.653338][T15157] jffs2: Further such events for this erase block will not be printed [ 366.653635][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9ae9 instead [ 366.653647][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xd647 instead [ 366.653659][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x8f31 instead [ 366.653671][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x9ef2 instead [ 366.653682][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x9afa instead [ 366.653694][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x2777 instead [ 366.653706][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7406 instead [ 366.653718][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x6d06 instead [ 366.653789][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xf313 instead [ 366.653803][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x4fb2 instead [ 366.653816][T15157] jffs2: Further such events for this erase block will not be printed [ 366.654120][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xaf27 instead [ 366.654134][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x16b0 instead [ 366.654145][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xb3fa instead [ 366.654156][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x3675 instead [ 366.654167][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xce5e instead [ 366.654177][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xa423 instead [ 366.654188][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1ee4 instead [ 366.654199][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x9a92 instead [ 366.654209][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xd5ff instead [ 366.654220][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xab8a instead [ 366.654230][T15157] jffs2: Further such events for this erase block will not be printed [ 366.654522][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x196a instead [ 366.654534][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x6b38 instead [ 366.654545][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x876a instead [ 366.654556][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xe9ed instead [ 366.654567][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xf791 instead [ 366.654582][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xf99d instead [ 366.654593][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5ee3 instead [ 366.654604][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x8231 instead [ 366.654615][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xa1b4 instead [ 366.654626][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x064a instead [ 366.654640][T15157] jffs2: Further such events for this erase block will not be printed [ 366.655089][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x87dd instead [ 366.655104][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0540 instead [ 366.655115][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x1e63 instead [ 366.655126][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xafc3 instead [ 366.655137][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x08a7 instead [ 366.655149][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x39d8 instead [ 366.655159][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0807 instead [ 366.655170][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xfafa instead [ 366.655181][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x19cb instead [ 366.655192][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x2d86 instead [ 366.655202][T15157] jffs2: Further such events for this erase block will not be printed [ 366.655793][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x88ac instead [ 366.655808][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xa0c3 instead [ 366.655819][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x795b instead [ 366.655830][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x6e54 instead [ 366.655841][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf4a0 instead [ 366.655852][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x7527 instead [ 366.655862][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf04a instead [ 366.655873][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x4218 instead [ 366.655916][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xa196 instead [ 366.655932][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x338b instead [ 366.655946][T15157] jffs2: Further such events for this erase block will not be printed [ 366.656250][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xbb6d instead [ 366.656262][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x564e instead [ 366.656273][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x1cd4 instead [ 366.656284][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xac22 instead [ 366.656294][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x34b3 instead [ 366.656305][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x269c instead [ 366.656315][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x80c2 instead [ 366.656326][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x6811 instead [ 366.656336][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xbd72 instead [ 366.656347][T15157] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xc74e instead [ 366.656357][T15157] jffs2: Further such events for this erase block will not be printed [ 366.657272][T15157] jffs2: notice: (15157) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.955545][ T5888] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 367.106893][ T5888] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.108033][ T5888] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.108050][ T5888] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.108061][ T5888] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.108089][ T5888] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.109312][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.109325][ T5888] usb 10-1: Product: syz [ 367.109333][ T5888] usb 10-1: Manufacturer: syz [ 367.161702][ T5888] cdc_wdm 10-1:1.0: skipping garbage [ 367.161715][ T5888] cdc_wdm 10-1:1.0: skipping garbage [ 367.165786][ T5888] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 367.165801][ T5888] cdc_wdm 10-1:1.0: Unknown control protocol [ 367.483786][ T3373] usb 10-1: USB disconnect, device number 18 [ 367.497516][ T5888] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 367.647636][ T5888] usb 13-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 367.648654][ T5888] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.648679][ T5888] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.648693][ T5888] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.648704][ T5888] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 367.650343][ T5888] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.650363][ T5888] usb 13-1: Product: syz [ 367.650374][ T5888] usb 13-1: Manufacturer: syz [ 367.650386][ T5888] usb 13-1: SerialNumber: syz [ 367.796444][ T5888] ushc 13-1:1.0: probe with driver ushc failed with error -110 [ 368.340110][T15198] ushc 13-1:1.0: probe with driver ushc failed with error -110 [ 368.351836][ T5957] usb 13-1: USB disconnect, device number 2 [ 368.595641][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.601346][ T5742] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 368.971086][T15215] support for the xor transformation has been removed. [ 369.366663][T15242] FAULT_INJECTION: forcing a failure. [ 369.366663][T15242] name failslab, interval 1, probability 0, space 0, times 0 [ 369.366729][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.6.3326 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.366759][T15242] Tainted: [L]=SOFTLOCKUP [ 369.366765][T15242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.366772][T15242] Call Trace: [ 369.366777][T15242] [ 369.366784][T15242] dump_stack_lvl+0x100/0x190 [ 369.366807][T15242] should_fail_ex.cold+0x5/0xa [ 369.366825][T15242] should_failslab+0xc2/0x120 [ 369.366845][T15242] kmem_cache_alloc_noprof+0x92/0x6a0 [ 369.366860][T15242] ? d_instantiate+0x8a/0xb0 [ 369.366876][T15242] ? alloc_empty_file+0x5b/0x1c0 [ 369.366894][T15242] alloc_empty_file+0x5b/0x1c0 [ 369.366910][T15242] alloc_file_pseudo+0x183/0x290 [ 369.366927][T15242] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 369.366945][T15242] ? alloc_fd+0x471/0x7a0 [ 369.366959][T15242] ? do_raw_spin_unlock+0x145/0x1e0 [ 369.366979][T15242] __anon_inode_getfile+0xe8/0x280 [ 369.366998][T15242] anon_inode_getfile_fmode+0x37/0xa0 [ 369.367016][T15242] __do_sys_fanotify_init+0xa0d/0xe30 [ 369.367032][T15242] __do_fast_syscall_32+0x13a/0x8b0 [ 369.367051][T15242] do_fast_syscall_32+0x32/0x70 [ 369.367068][T15242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.367082][T15242] RIP: 0023:0xf70aefec [ 369.367098][T15242] Code: Unable to access opcode bytes at 0xf70aefc2. [ 369.367104][T15242] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000152 [ 369.367117][T15242] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001000 [ 369.367127][T15242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.367137][T15242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.367148][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.367156][T15242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.367173][T15242] [ 369.505068][T15244] FAULT_INJECTION: forcing a failure. [ 369.505068][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 369.505186][T15244] CPU: 0 UID: 0 PID: 15244 Comm: syz.2.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.505246][T15244] Tainted: [L]=SOFTLOCKUP [ 369.505256][T15244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.505272][T15244] Call Trace: [ 369.505282][T15244] [ 369.505293][T15244] dump_stack_lvl+0x100/0x190 [ 369.505336][T15244] should_fail_ex.cold+0x5/0xa [ 369.505367][T15244] should_failslab+0xc2/0x120 [ 369.505393][T15244] __kvmalloc_node_noprof+0x113/0x9b0 [ 369.505415][T15244] ? apparmor_capable+0x1d7/0x4d0 [ 369.505444][T15244] ? groups_alloc+0x77/0x120 [ 369.505471][T15244] groups_alloc+0x77/0x120 [ 369.505492][T15244] __ia32_sys_setgroups16+0x99/0x190 [ 369.505515][T15244] __do_fast_syscall_32+0x13a/0x8b0 [ 369.505549][T15244] do_fast_syscall_32+0x32/0x70 [ 369.505579][T15244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.505605][T15244] RIP: 0023:0xf70aefec [ 369.505629][T15244] Code: Unable to access opcode bytes at 0xf70aefc2. [ 369.505640][T15244] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000051 [ 369.505663][T15244] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 369.505679][T15244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.505691][T15244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.505702][T15244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 369.505713][T15244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.505739][T15244] [ 369.551699][T15246] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 369.977189][T15267] fuse: Bad value for 'fd' [ 370.043416][T15271] fuse: Bad value for 'fd' [ 370.190434][T15274] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3349'. [ 370.870100][T15305] FAULT_INJECTION: forcing a failure. [ 370.870100][T15305] name failslab, interval 1, probability 0, space 0, times 0 [ 370.870208][T15305] CPU: 0 UID: 0 PID: 15305 Comm: syz.2.3353 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.870251][T15305] Tainted: [L]=SOFTLOCKUP [ 370.870342][T15305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.870354][T15305] Call Trace: [ 370.870359][T15305] [ 370.870366][T15305] dump_stack_lvl+0x100/0x190 [ 370.870389][T15305] should_fail_ex.cold+0x5/0xa [ 370.870420][T15305] should_failslab+0xc2/0x120 [ 370.870438][T15305] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 370.870456][T15305] ? __d_alloc+0x35/0xa50 [ 370.870475][T15305] __d_alloc+0x35/0xa50 [ 370.870489][T15305] ? do_raw_spin_lock+0x128/0x260 [ 370.870512][T15305] d_alloc+0x4a/0x1e0 [ 370.870528][T15305] d_alloc_name+0x83/0xb0 [ 370.870543][T15305] ? __pfx_d_alloc_name+0x10/0x10 [ 370.870557][T15305] ? fast_dput+0x168/0x6f0 [ 370.870573][T15305] ? dput.part.0+0x4f/0x240 [ 370.870590][T15305] proc_setup_thread_self+0x3f/0x1e0 [ 370.870637][T15305] proc_fill_super+0x5d4/0x870 [ 370.870656][T15305] ? __pfx_proc_fill_super+0x10/0x10 [ 370.870673][T15305] get_tree_nodev+0xdd/0x190 [ 370.870686][T15305] vfs_get_tree+0x92/0x320 [ 370.870705][T15305] path_mount+0x7d0/0x24c0 [ 370.870724][T15305] ? __pfx_path_mount+0x10/0x10 [ 370.870740][T15305] ? lockdep_hardirqs_on+0x7d/0x110 [ 370.870758][T15305] ? putname+0xb1/0x110 [ 370.870771][T15305] ? kmem_cache_free+0x127/0x6c0 [ 370.870794][T15305] ? __ia32_sys_mount+0x292/0x310 [ 370.870809][T15305] __ia32_sys_mount+0x292/0x310 [ 370.870825][T15305] ? __pfx___ia32_sys_mount+0x10/0x10 [ 370.870844][T15305] __do_fast_syscall_32+0x13a/0x8b0 [ 370.870864][T15305] do_fast_syscall_32+0x32/0x70 [ 370.870882][T15305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.870897][T15305] RIP: 0023:0xf70aefec [ 370.870916][T15305] Code: Unable to access opcode bytes at 0xf70aefc2. [ 370.870922][T15305] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 370.870935][T15305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 370.870943][T15305] RDX: 0000000080000240 RSI: 0000000000004000 RDI: 0000000000000000 [ 370.870952][T15305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.870959][T15305] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.870968][T15305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.870986][T15305] [ 370.871059][T15305] proc_fill_super: can't allocate /proc/thread-self [ 371.035797][T15308] process '/newroot/890/file0' started with executable stack [ 371.219462][T15318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3358'. [ 371.221607][T15318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3358'. [ 371.645747][ T7172] wlan1: Trigger new scan to find an IBSS to join [ 371.725643][ T3373] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 371.885678][ T3373] usb 13-1: Using ep0 maxpacket: 32 [ 371.887595][ T3373] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 371.888726][ T3373] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 371.888770][ T3373] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 371.888791][ T3373] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.888814][ T3373] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 371.891004][ T3373] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.891032][ T3373] usb 13-1: Product: syz [ 371.891045][ T3373] usb 13-1: Manufacturer: syz [ 371.891058][ T3373] usb 13-1: SerialNumber: syz [ 371.899716][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 371.904201][ T3373] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input34 [ 372.135660][ T3373] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 372.135712][ T3373] (id 0x00) [ 372.245509][ T3373] rc_core: IR keymap rc-imon-pad not found [ 372.245578][ T3373] Registered IR keymap rc-empty [ 372.245691][ T3373] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 372.245706][ T3373] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 372.322336][T15350] binder: 15349:15350 ioctl c0306201 80000080 returned -14 [ 372.323332][T15350] binder: 15349:15350 ioctl c0306201 80000000 returned -22 [ 372.338651][ T3373] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 372.350725][ T3373] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input35 [ 372.373536][ T3373] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:3> initialized [ 372.576603][ T3373] usb 13-1: USB disconnect, device number 3 [ 372.581998][T15331] imon:send_packet: packet tx failed (-71) [ 372.595940][T15331] imon:vfd_write: send packet #0 failed [ 373.178651][T15369] device-mapper: ioctl: name not supplied when creating device [ 375.572607][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1c26 instead [ 375.596157][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0bd1 instead [ 375.596488][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xa9e7 instead [ 375.596712][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x7f15 instead [ 375.596728][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xe54a instead [ 375.596740][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6f8b instead [ 375.596752][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x004f instead [ 375.596765][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5d41 instead [ 375.596777][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x18d1 instead [ 375.596790][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x431e instead [ 375.596802][T15406] jffs2: Further such events for this erase block will not be printed [ 375.597200][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x60c7 instead [ 375.597217][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x69fe instead [ 375.597229][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x124e instead [ 375.597242][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xc452 instead [ 375.597254][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb08b instead [ 375.597266][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xe21f instead [ 375.597278][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x30b1 instead [ 375.597291][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xccf4 instead [ 375.597303][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x293f instead [ 375.597316][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xac39 instead [ 375.597328][T15406] jffs2: Further such events for this erase block will not be printed [ 375.597654][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xdda6 instead [ 375.597667][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x87fb instead [ 375.597679][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x538a instead [ 375.597691][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xef4b instead [ 375.597702][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x1fd9 instead [ 375.597714][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xbfd9 instead [ 375.597725][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe17b instead [ 375.597736][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x0add instead [ 375.597747][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x6bc0 instead [ 375.597759][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xa459 instead [ 375.597770][T15406] jffs2: Further such events for this erase block will not be printed [ 375.598094][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x50d8 instead [ 375.598108][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x02b2 instead [ 375.598120][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xf466 instead [ 375.598133][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x0054 instead [ 375.598145][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xcaab instead [ 375.598157][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x16d5 instead [ 375.598169][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xc531 instead [ 375.598181][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd065 instead [ 375.598194][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x2bb4 instead [ 375.598206][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xd2cc instead [ 375.598218][T15406] jffs2: Further such events for this erase block will not be printed [ 375.598530][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x3817 instead [ 375.598542][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xfaa5 instead [ 375.598556][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1f03 instead [ 375.598567][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x0f50 instead [ 375.598580][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x01e3 instead [ 375.598591][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x3b46 instead [ 375.598603][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1f23 instead [ 375.598615][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x633d instead [ 375.598628][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xcb48 instead [ 375.598640][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb320 instead [ 375.598652][T15406] jffs2: Further such events for this erase block will not be printed [ 375.598950][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x67bd instead [ 375.598960][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x521d instead [ 375.598969][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x47dd instead [ 375.598978][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xa378 instead [ 375.598987][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x1bc2 instead [ 375.598996][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x6e51 instead [ 375.599005][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc996 instead [ 375.599014][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xa19e instead [ 375.599022][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x8804 instead [ 375.599031][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x926d instead [ 375.599040][T15406] jffs2: Further such events for this erase block will not be printed [ 375.599322][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x3536 instead [ 375.599332][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x4fdd instead [ 375.599341][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xc7e9 instead [ 375.599350][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xac67 instead [ 375.599359][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xe0e8 instead [ 375.599367][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x06ad instead [ 375.599376][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1041 instead [ 375.599385][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xd58d instead [ 375.599394][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xdab8 instead [ 375.599402][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x9886 instead [ 375.599411][T15406] jffs2: Further such events for this erase block will not be printed [ 375.599658][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x33f9 instead [ 375.599669][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xfc6a instead [ 375.599678][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xc78f instead [ 375.599686][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xaa9b instead [ 375.599695][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xdcf5 instead [ 375.599704][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x751f instead [ 375.599712][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb67f instead [ 375.599722][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x52f2 instead [ 375.599730][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x9233 instead [ 375.599739][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x5cd3 instead [ 375.599748][T15406] jffs2: Further such events for this erase block will not be printed [ 375.600068][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4af9 instead [ 375.600081][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x334a instead [ 375.600090][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xde3a instead [ 375.600098][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xbbb3 instead [ 375.600107][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xd63a instead [ 375.600117][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x8435 instead [ 375.600127][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4577 instead [ 375.600137][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xb3f6 instead [ 375.600146][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x85ab instead [ 375.600157][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x44cf instead [ 375.600166][T15406] jffs2: Further such events for this erase block will not be printed [ 375.600409][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x3ac2 instead [ 375.600421][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xd929 instead [ 375.600430][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x0baf instead [ 375.600439][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x38fa instead [ 375.600447][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xfcb7 instead [ 375.600456][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xb8ea instead [ 375.600465][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x517f instead [ 375.600474][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xa630 instead [ 375.600483][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xd1a0 instead [ 375.600492][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdd6b instead [ 375.600500][T15406] jffs2: Further such events for this erase block will not be printed [ 375.600741][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9ae9 instead [ 375.600751][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xd647 instead [ 375.600760][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x8f31 instead [ 375.600772][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x9ef2 instead [ 375.600781][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x9afa instead [ 375.600790][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x2777 instead [ 375.600798][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7406 instead [ 375.600808][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x6d06 instead [ 375.600817][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xf313 instead [ 375.600826][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x4fb2 instead [ 375.600834][T15406] jffs2: Further such events for this erase block will not be printed [ 375.601075][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xaf27 instead [ 375.601090][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x16b0 instead [ 375.601099][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xb3fa instead [ 375.601108][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x3675 instead [ 375.601117][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xce5e instead [ 375.601126][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xa423 instead [ 375.601134][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1ee4 instead [ 375.601143][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x9a92 instead [ 375.601152][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xd5ff instead [ 375.601161][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xab8a instead [ 375.601170][T15406] jffs2: Further such events for this erase block will not be printed [ 375.601409][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x196a instead [ 375.601420][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x6b38 instead [ 375.601429][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x876a instead [ 375.601438][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xe9ed instead [ 375.601447][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xf791 instead [ 375.601456][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xf99d instead [ 375.601464][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5ee3 instead [ 375.601473][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x8231 instead [ 375.601482][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xa1b4 instead [ 375.601491][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x064a instead [ 375.601499][T15406] jffs2: Further such events for this erase block will not be printed [ 375.601823][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x87dd instead [ 375.601840][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0540 instead [ 375.601850][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x1e63 instead [ 375.601859][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xafc3 instead [ 375.601868][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x08a7 instead [ 375.601877][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x39d8 instead [ 375.601885][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0807 instead [ 375.601894][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xfafa instead [ 375.601903][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x19cb instead [ 375.601912][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x2d86 instead [ 375.601920][T15406] jffs2: Further such events for this erase block will not be printed [ 375.602167][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x88ac instead [ 375.602179][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xa0c3 instead [ 375.602187][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x795b instead [ 375.602196][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x6e54 instead [ 375.602205][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf4a0 instead [ 375.602214][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x7527 instead [ 375.602223][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf04a instead [ 375.602232][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x4218 instead [ 375.602241][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xa196 instead [ 375.602250][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x338b instead [ 375.602258][T15406] jffs2: Further such events for this erase block will not be printed [ 375.602559][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xbb6d instead [ 375.602574][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x564e instead [ 375.602584][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x1cd4 instead [ 375.602594][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xac22 instead [ 375.602603][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x34b3 instead [ 375.602613][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x269c instead [ 375.602622][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x80c2 instead [ 375.602632][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x6811 instead [ 375.602641][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xbd72 instead [ 375.602651][T15406] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xc74e instead [ 375.602660][T15406] jffs2: Further such events for this erase block will not be printed [ 375.603300][T15406] jffs2: notice: (15406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.904914][T15420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 375.904949][T15420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 375.908579][T15422] vhci_hcd: xmit failed -107 [ 375.930304][T15420] vhci_hcd vhci_hcd.0: Device attached [ 375.939699][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 375.939719][ T5792] vhci_hcd vhci_hcd.0: release socket [ 375.939735][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 376.310357][T15443] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.3398'. [ 376.316294][T15445] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3399'. [ 376.319302][T15445] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3399'. [ 376.470296][T15454] FAULT_INJECTION: forcing a failure. [ 376.470296][T15454] name failslab, interval 1, probability 0, space 0, times 0 [ 376.470380][T15454] CPU: 2 UID: 0 PID: 15454 Comm: syz.8.3403 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.470419][T15454] Tainted: [L]=SOFTLOCKUP [ 376.470428][T15454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.470438][T15454] Call Trace: [ 376.470445][T15454] [ 376.470454][T15454] dump_stack_lvl+0x100/0x190 [ 376.470483][T15454] should_fail_ex.cold+0x5/0xa [ 376.470507][T15454] should_failslab+0xc2/0x120 [ 376.470531][T15454] kmem_cache_alloc_noprof+0x92/0x6a0 [ 376.470555][T15454] ? copy_pid_ns+0x32b/0x10a0 [ 376.470589][T15454] copy_pid_ns+0x32b/0x10a0 [ 376.470618][T15454] ? __pfx_copy_pid_ns+0x10/0x10 [ 376.470647][T15454] ? __pfx_copy_mnt_ns+0x10/0x10 [ 376.470673][T15454] ? create_new_namespaces+0x30/0xac0 [ 376.470702][T15454] create_new_namespaces+0x2aa/0xac0 [ 376.470734][T15454] unshare_nsproxy_namespaces+0xf2/0x220 [ 376.470761][T15454] ksys_unshare+0x4a2/0xa70 [ 376.470780][T15454] ? __pfx_ksys_unshare+0x10/0x10 [ 376.470807][T15454] __ia32_sys_unshare+0x30/0x40 [ 376.470818][T15454] __do_fast_syscall_32+0x13a/0x8b0 [ 376.470837][T15454] do_fast_syscall_32+0x32/0x70 [ 376.470854][T15454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.470868][T15454] RIP: 0023:0xf7fa6fec [ 376.470883][T15454] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 376.470889][T15454] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 376.470901][T15454] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 376.470908][T15454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.470915][T15454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.470922][T15454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 376.470929][T15454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.470943][T15454] [ 376.541072][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 376.557570][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 376.565204][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 376.597207][ T7177] wlan1: Trigger new scan to find an IBSS to join [ 377.120047][T15470] FAULT_INJECTION: forcing a failure. [ 377.120047][T15470] name failslab, interval 1, probability 0, space 0, times 0 [ 377.120111][T15470] CPU: 0 UID: 0 PID: 15470 Comm: syz.5.3410 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.120131][T15470] Tainted: [L]=SOFTLOCKUP [ 377.120136][T15470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.120144][T15470] Call Trace: [ 377.120150][T15470] [ 377.120156][T15470] dump_stack_lvl+0x100/0x190 [ 377.120178][T15470] should_fail_ex.cold+0x5/0xa [ 377.120197][T15470] should_failslab+0xc2/0x120 [ 377.120215][T15470] kmem_cache_alloc_noprof+0x92/0x6a0 [ 377.120229][T15470] ? __pfx_map_id_range_down+0x10/0x10 [ 377.120249][T15470] ? security_inode_alloc+0x3b/0x2c0 [ 377.120270][T15470] security_inode_alloc+0x3b/0x2c0 [ 377.120286][T15470] inode_init_always_gfp+0xc6f/0xfb0 [ 377.120302][T15470] alloc_inode+0x8e/0x250 [ 377.120320][T15470] alloc_anon_inode+0x2a/0x3e0 [ 377.120336][T15470] ioctx_alloc+0x4dc/0x21a0 [ 377.120355][T15470] ? __might_fault+0xc5/0x140 [ 377.120375][T15470] ? find_held_lock+0x2b/0x80 [ 377.120388][T15470] ? __pfx_ioctx_alloc+0x10/0x10 [ 377.120407][T15470] __ia32_compat_sys_io_setup+0xc8/0x220 [ 377.120425][T15470] __do_fast_syscall_32+0x13a/0x8b0 [ 377.120444][T15470] do_fast_syscall_32+0x32/0x70 [ 377.120460][T15470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.120475][T15470] RIP: 0023:0xf6ffefec [ 377.120490][T15470] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 377.120496][T15470] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 377.120510][T15470] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001380 [ 377.120518][T15470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.120525][T15470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.120532][T15470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.120538][T15470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.120553][T15470] [ 377.138485][T15477] FAULT_INJECTION: forcing a failure. [ 377.138485][T15477] name failslab, interval 1, probability 0, space 0, times 0 [ 377.138511][T15477] CPU: 2 UID: 0 PID: 15477 Comm: syz.2.3413 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.138529][T15477] Tainted: [L]=SOFTLOCKUP [ 377.138534][T15477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.138543][T15477] Call Trace: [ 377.138548][T15477] [ 377.138554][T15477] dump_stack_lvl+0x100/0x190 [ 377.138574][T15477] should_fail_ex.cold+0x5/0xa [ 377.138592][T15477] should_failslab+0xc2/0x120 [ 377.138608][T15477] kmem_cache_alloc_noprof+0x92/0x6a0 [ 377.138623][T15477] ? do_getname_kernel+0x5d/0x250 [ 377.138640][T15477] do_getname_kernel+0x5d/0x250 [ 377.138657][T15477] kern_path+0x1f/0x50 [ 377.138668][T15477] lookup_bdev+0xd8/0x2a0 [ 377.138679][T15477] ? __pfx_lookup_bdev+0x10/0x10 [ 377.138691][T15477] ? do_getname+0x191/0x390 [ 377.138708][T15477] quotactl_block+0xc9/0x680 [ 377.138724][T15477] ? __pfx_do_futex+0x10/0x10 [ 377.138736][T15477] ? __pfx_quotactl_block+0x10/0x10 [ 377.138756][T15477] __ia32_sys_quotactl+0x179/0x400 [ 377.138773][T15477] ? __pfx___ia32_sys_quotactl+0x10/0x10 [ 377.138796][T15477] __do_fast_syscall_32+0x13a/0x8b0 [ 377.138816][T15477] do_fast_syscall_32+0x32/0x70 [ 377.138832][T15477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.138847][T15477] RIP: 0023:0xf70aefec [ 377.138861][T15477] Code: Unable to access opcode bytes at 0xf70aefc2. [ 377.138866][T15477] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000083 [ 377.138877][T15477] RAX: ffffffffffffffda RBX: 0000000080000602 RCX: 0000000080000380 [ 377.138885][T15477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.138892][T15477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.138900][T15477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.138907][T15477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.138928][T15477] [ 377.445137][T15498] FAULT_INJECTION: forcing a failure. [ 377.445137][T15498] name failslab, interval 1, probability 0, space 0, times 0 [ 377.445231][T15498] CPU: 2 UID: 0 PID: 15498 Comm: syz.6.3419 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.445266][T15498] Tainted: [L]=SOFTLOCKUP [ 377.445274][T15498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.445284][T15498] Call Trace: [ 377.445289][T15498] [ 377.445296][T15498] dump_stack_lvl+0x100/0x190 [ 377.445322][T15498] should_fail_ex.cold+0x5/0xa [ 377.445342][T15498] should_failslab+0xc2/0x120 [ 377.445362][T15498] __kmalloc_cache_noprof+0x91/0x6d0 [ 377.445385][T15498] ? newseg+0x26b/0xed0 [ 377.445407][T15498] newseg+0x26b/0xed0 [ 377.445445][T15498] ? __pfx_newseg+0x10/0x10 [ 377.445465][T15498] ? down_write+0x146/0x1f0 [ 377.445487][T15498] ? do_vfs_ioctl+0x226/0x13e0 [ 377.445512][T15498] ipcget+0xee/0xf50 [ 377.445533][T15498] ? __pfx_do_futex+0x10/0x10 [ 377.445552][T15498] ? find_held_lock+0x2b/0x80 [ 377.445578][T15498] ? __fget_files+0x215/0x3d0 [ 377.445602][T15498] ? __pfx_ipcget+0x10/0x10 [ 377.445637][T15498] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 377.445665][T15498] __ia32_sys_shmget+0x13b/0x1b0 [ 377.445686][T15498] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 377.445712][T15498] __do_fast_syscall_32+0x13a/0x8b0 [ 377.445735][T15498] do_fast_syscall_32+0x32/0x70 [ 377.445754][T15498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.445772][T15498] RIP: 0023:0xf70aefec [ 377.445789][T15498] Code: Unable to access opcode bytes at 0xf70aefc2. [ 377.445795][T15498] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000018b [ 377.445809][T15498] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002000 [ 377.445818][T15498] RDX: 0000000000000020 RSI: 0000000080ffd000 RDI: 0000000000000000 [ 377.445827][T15498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.445838][T15498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.445848][T15498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.445868][T15498] [ 377.514065][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.573662][T15504] fuse: Bad value for 'fd' [ 378.272603][T15531] bridge1: entered promiscuous mode [ 378.272662][T15531] bridge1: entered allmulticast mode [ 378.274111][T15531] team0: Port device bridge1 added [ 378.289970][T15531] bridge0: port 3(team0) entered blocking state [ 378.290094][T15531] bridge0: port 3(team0) entered disabled state [ 378.290189][T15531] team0: entered allmulticast mode [ 378.290200][T15531] team_slave_0: entered allmulticast mode [ 378.290213][T15531] team_slave_1: entered allmulticast mode [ 378.291373][T15531] team0: entered promiscuous mode [ 378.291392][T15531] team_slave_0: entered promiscuous mode [ 378.291518][T15531] team_slave_1: entered promiscuous mode [ 378.294440][T15531] bridge0: port 3(team0) entered blocking state [ 378.294489][T15531] bridge0: port 3(team0) entered forwarding state [ 378.294984][T15532] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3437'. [ 378.323532][T15536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3433'. [ 378.367553][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.013417][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3449'. [ 380.405837][ T43] audit: type=1326 audit(1788713029.830:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.6.3462" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 380.685173][T15622] FAULT_INJECTION: forcing a failure. [ 380.685173][T15622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.685269][T15622] CPU: 2 UID: 0 PID: 15622 Comm: syz.2.3465 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.685310][T15622] Tainted: [L]=SOFTLOCKUP [ 380.685318][T15622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.685331][T15622] Call Trace: [ 380.685338][T15622] [ 380.685348][T15622] dump_stack_lvl+0x100/0x190 [ 380.685381][T15622] should_fail_ex.cold+0x5/0xa [ 380.685403][T15622] ? prepare_alloc_pages+0x16d/0x5b0 [ 380.685452][T15622] should_fail_alloc_page+0xeb/0x140 [ 380.685479][T15622] prepare_alloc_pages+0x1f0/0x5b0 [ 380.685509][T15622] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 380.685541][T15622] ? __lock_acquire+0x4c5/0x1ec0 [ 380.685579][T15622] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.685615][T15622] ? __lock_acquire+0x4c5/0x1ec0 [ 380.685643][T15622] ? do_raw_spin_unlock+0x145/0x1e0 [ 380.685673][T15622] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.685700][T15622] ? rcu_is_watching+0x13/0xc0 [ 380.685721][T15622] ? trace_hrtimer_start+0x77/0x220 [ 380.685745][T15622] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 380.685772][T15622] ? find_held_lock+0x2b/0x80 [ 380.685791][T15622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.685820][T15622] ? policy_nodemask+0xed/0x4f0 [ 380.685848][T15622] alloc_pages_mpol+0x201/0x550 [ 380.685876][T15622] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 380.685910][T15622] alloc_pages_noprof+0x1a/0x160 [ 380.685937][T15622] pte_alloc_one+0x1c/0x3d0 [ 380.685961][T15622] do_fault+0x960/0x1830 [ 380.685985][T15622] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 380.686015][T15622] ? __pfx_do_fault+0x10/0x10 [ 380.686046][T15622] ? pgd_none+0x9f/0xe0 [ 380.686074][T15622] ? __pfx_pgd_none+0x10/0x10 [ 380.686104][T15622] ? find_held_lock+0x2b/0x80 [ 380.686129][T15622] __handle_mm_fault+0x150b/0x2f60 [ 380.686166][T15622] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.686197][T15622] ? __pfx_mt_find+0x10/0x10 [ 380.686242][T15622] ? find_vma+0xbf/0x140 [ 380.686263][T15622] ? __pfx_find_vma+0x10/0x10 [ 380.686287][T15622] handle_mm_fault+0x363/0xa20 [ 380.686322][T15622] do_user_addr_fault+0x745/0x12f0 [ 380.686362][T15622] exc_page_fault+0x6f/0xd0 [ 380.686390][T15622] asm_exc_page_fault+0x26/0x30 [ 380.686411][T15622] RIP: 0010:__get_user_4+0x14/0x30 [ 380.686435][T15622] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 380.686457][T15622] RSP: 0018:ffffc900031bfdc8 EFLAGS: 00050287 [ 380.686475][T15622] RAX: 00000000f5151000 RBX: ffff88806b6f4b00 RCX: ffffc90007a23000 [ 380.686490][T15622] RDX: 00007ffffffff000 RSI: ffffffff825f8681 RDI: ffffffff8c622580 [ 380.686504][T15622] RBP: 00000000f5151000 R08: 0000000000065f0c R09: 00000000000001d5 [ 380.686518][T15622] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 380.686532][T15622] R13: ffff88801c0cb300 R14: 0000000000000000 R15: 0000000000000000 [ 380.686627][T15622] ? __might_fault+0x111/0x140 [ 380.686664][T15622] lookup_ioctx+0x5c/0x820 [ 380.686694][T15622] __ia32_sys_io_destroy+0x85/0x1f0 [ 380.686724][T15622] ? __pfx___ia32_sys_io_destroy+0x10/0x10 [ 380.686751][T15622] ? xfd_validate_state+0x129/0x190 [ 380.686793][T15622] __do_fast_syscall_32+0x13a/0x8b0 [ 380.686826][T15622] do_fast_syscall_32+0x32/0x70 [ 380.686854][T15622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.686879][T15622] RIP: 0023:0xf70aefec [ 380.686902][T15622] Code: Unable to access opcode bytes at 0xf70aefc2. [ 380.686911][T15622] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f6 [ 380.686929][T15622] RAX: ffffffffffffffda RBX: 00000000f5151000 RCX: 0000000000000000 [ 380.686942][T15622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.686954][T15622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.686966][T15622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.686978][T15622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.687005][T15622] [ 381.481695][ T35] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0010/input/input36 [ 381.621345][ T35] hid-generic 0005:057C:0306.0010: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 381.705699][ T7750] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 381.821813][T15647] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 381.822382][T15647] device-mapper: ioctl: only supply one of name or uuid, cmd(12) [ 381.856301][ T7750] usb 13-1: Using ep0 maxpacket: 8 [ 381.859397][ T7750] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 381.863848][ T7750] usb 13-1: config 0 has no interfaces? [ 381.869028][ T7750] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.873191][ T7750] usb 13-1: Product: syz [ 381.873215][ T7750] usb 13-1: Manufacturer: syz [ 381.873229][ T7750] usb 13-1: SerialNumber: syz [ 381.891464][ T7750] usb 13-1: config 0 descriptor?? [ 382.126050][ T7750] usb 13-1: USB disconnect, device number 4 [ 382.336976][T15663] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 382.337081][T15663] device-mapper: ioctl: error adding target to table [ 382.688074][T15683] netlink: 'syz.6.3499': attribute type 21 has an invalid length. [ 382.688131][T15683] netlink: 'syz.6.3499': attribute type 22 has an invalid length. [ 382.688173][T15683] netlink: 'syz.6.3499': attribute type 23 has an invalid length. [ 382.688203][T15683] netlink: 'syz.6.3499': attribute type 25 has an invalid length. [ 382.688232][T15683] netlink: 'syz.6.3499': attribute type 26 has an invalid length. [ 382.688263][T15683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3499'. [ 383.380389][T15719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3505'. [ 385.384064][T15798] loop3: detected capacity change from 0 to 7 [ 385.391115][T15798] Dev loop3: unable to read RDB block 7 [ 385.391199][T15798] loop3: unable to read partition table [ 385.391607][T15798] loop3: partition table beyond EOD, truncated [ 385.391636][T15798] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 385.565795][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.025260][T15825] nbd8: detected capacity change from 0 to 1 [ 386.035032][T14896] buffer_io_error: 477 callbacks suppressed [ 386.035141][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035165][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035191][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035213][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035227][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035235][T14896] ldm_validate_partition_table(): Disk read failed. [ 386.035248][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035262][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035338][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035359][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035370][T14896] Dev nbd8: unable to read RDB block 0 [ 386.035386][T14896] Buffer I/O error on dev nbd8, logical block 0, async page read [ 386.035463][T14896] nbd8: unable to read partition table [ 386.035565][T14896] nbd8: partition table beyond EOD, truncated [ 386.082378][T14896] ldm_validate_partition_table(): Disk read failed. [ 386.082611][T14896] Dev nbd8: unable to read RDB block 0 [ 386.082650][T14896] nbd8: unable to read partition table [ 386.082798][T14896] nbd8: partition table beyond EOD, truncated [ 386.193191][T15827] block nbd8: shutting down sockets [ 386.306819][T15835] FAULT_INJECTION: forcing a failure. [ 386.306819][T15835] name failslab, interval 1, probability 0, space 0, times 0 [ 386.306896][T15835] CPU: 2 UID: 0 PID: 15835 Comm: syz.6.3549 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.306927][T15835] Tainted: [L]=SOFTLOCKUP [ 386.306934][T15835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.306947][T15835] Call Trace: [ 386.306954][T15835] [ 386.306963][T15835] dump_stack_lvl+0x100/0x190 [ 386.306994][T15835] should_fail_ex.cold+0x5/0xa [ 386.307024][T15835] should_failslab+0xc2/0x120 [ 386.307048][T15835] kmem_cache_alloc_noprof+0x92/0x6a0 [ 386.307070][T15835] ? anon_vma_fork+0x8d/0x6a0 [ 386.307105][T15835] anon_vma_fork+0x8d/0x6a0 [ 386.307133][T15835] ? vm_area_dup+0x66a/0x9d0 [ 386.307160][T15835] dup_mmap+0x10e6/0x2370 [ 386.307194][T15835] ? __pfx_dup_mmap+0x10/0x10 [ 386.307219][T15835] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.307244][T15835] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.307271][T15835] ? __lock_acquire+0x4c5/0x1ec0 [ 386.307307][T15835] ? lock_acquire+0x1d1/0x380 [ 386.307330][T15835] ? copy_process+0x4806/0x8370 [ 386.307368][T15835] copy_process+0x4811/0x8370 [ 386.307412][T15835] ? __pfx_copy_process+0x10/0x10 [ 386.307453][T15835] kernel_clone+0x176/0x9d0 [ 386.307480][T15835] ? find_held_lock+0x2b/0x80 [ 386.307500][T15835] ? __pfx_kernel_clone+0x10/0x10 [ 386.307533][T15835] ? ksys_write+0x190/0x250 [ 386.307558][T15835] __do_compat_sys_ia32_clone+0xd4/0x120 [ 386.307588][T15835] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 386.307611][T15835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.307659][T15835] __do_fast_syscall_32+0x13a/0x8b0 [ 386.307691][T15835] do_fast_syscall_32+0x32/0x70 [ 386.307717][T15835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.307741][T15835] RIP: 0023:0xf70aefec [ 386.307764][T15835] Code: Unable to access opcode bytes at 0xf70aefc2. [ 386.307774][T15835] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 386.307825][T15835] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 386.307839][T15835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.307851][T15835] RBP: 00000000f549d5ec R08: 0000000000000000 R09: 0000000000000000 [ 386.307864][T15835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.307876][T15835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.307902][T15835] [ 386.459535][T15843] gadgetfs: bound to dummy_udc driver [ 387.740768][T15873] FAULT_INJECTION: forcing a failure. [ 387.740768][T15873] name failslab, interval 1, probability 0, space 0, times 0 [ 387.755636][T15873] CPU: 3 UID: 0 PID: 15873 Comm: syz.8.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.755690][T15873] Tainted: [L]=SOFTLOCKUP [ 387.755699][T15873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.755713][T15873] Call Trace: [ 387.755721][T15873] [ 387.755732][T15873] dump_stack_lvl+0x100/0x190 [ 387.755769][T15873] should_fail_ex.cold+0x5/0xa [ 387.755826][T15873] should_failslab+0xc2/0x120 [ 387.755856][T15873] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 387.755884][T15873] ? kstrdup_const+0x63/0x80 [ 387.755918][T15873] kstrdup+0x51/0xe0 [ 387.755950][T15873] kstrdup_const+0x63/0x80 [ 387.755981][T15873] __kernfs_new_node+0x9b/0xa10 [ 387.756011][T15873] ? __pfx___kernfs_new_node+0x10/0x10 [ 387.756041][T15873] ? lock_acquire+0x1d1/0x380 [ 387.756067][T15873] ? kernfs_root+0x23/0x2a0 [ 387.756090][T15873] ? find_held_lock+0x2b/0x80 [ 387.756109][T15873] ? kernfs_root+0xee/0x2a0 [ 387.756129][T15873] ? kernfs_root+0xee/0x2a0 [ 387.756157][T15873] kernfs_new_node+0x117/0x150 [ 387.756188][T15873] __kernfs_create_file+0x53/0x350 [ 387.756223][T15873] cgroup_addrm_files+0x4ef/0xdb0 [ 387.756267][T15873] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 387.756308][T15873] ? idr_replace+0xfa/0x170 [ 387.756342][T15873] css_populate_dir+0x161/0x590 [ 387.756378][T15873] cgroup_apply_control_enable+0x441/0xdd0 [ 387.756426][T15873] cgroup_mkdir+0x57f/0x1330 [ 387.756461][T15873] ? __pfx_cgroup_mkdir+0x10/0x10 [ 387.756483][T15873] kernfs_iop_mkdir+0x111/0x190 [ 387.756502][T15873] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 387.756525][T15873] vfs_mkdir+0x364/0x850 [ 387.756560][T15873] filename_mkdirat+0x48b/0x5e0 [ 387.756588][T15873] ? __pfx_filename_mkdirat+0x10/0x10 [ 387.756613][T15873] ? strncpy_from_user+0x19d/0x2d0 [ 387.756641][T15873] ? do_getname+0x191/0x390 [ 387.756671][T15873] __ia32_sys_mkdirat+0x88/0xc0 [ 387.756698][T15873] __do_fast_syscall_32+0x13a/0x8b0 [ 387.756731][T15873] do_fast_syscall_32+0x32/0x70 [ 387.756760][T15873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.756785][T15873] RIP: 0023:0xf7fa6fec [ 387.756811][T15873] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 387.756820][T15873] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 387.756843][T15873] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 387.756857][T15873] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 387.756870][T15873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.756882][T15873] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 387.756894][T15873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.756920][T15873] [ 387.757006][T15873] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 388.885033][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 389.258678][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 390.300621][T15921] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 390.330842][T15921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.545888][T15924] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3587'. [ 391.025595][ T854] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 391.176006][ T854] usb 13-1: Using ep0 maxpacket: 16 [ 391.176535][ T854] usb 13-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 391.177510][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.177535][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.177554][ T854] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 391.177580][ T854] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.180705][ T854] usb 13-1: config 0 descriptor?? [ 391.605699][ T854] hid_parser_main: 5 callbacks suppressed [ 391.605785][ T854] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 391.605815][ T854] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 391.605842][ T854] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 391.605870][ T854] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 391.605900][ T854] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 391.628695][ T854] appleir 0003:05AC:8241.0011: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 391.858308][ T42] usb 13-1: USB disconnect, device number 5 [ 392.623207][T15964] syzkaller1: entered promiscuous mode [ 392.623261][T15964] syzkaller1: entered allmulticast mode [ 393.160342][T15995] FAULT_INJECTION: forcing a failure. [ 393.160342][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 393.160424][T15995] CPU: 2 UID: 0 PID: 15995 Comm: syz.6.3620 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.160471][T15995] Tainted: [L]=SOFTLOCKUP [ 393.160481][T15995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.160493][T15995] Call Trace: [ 393.160502][T15995] [ 393.160512][T15995] dump_stack_lvl+0x100/0x190 [ 393.160545][T15995] should_fail_ex.cold+0x5/0xa [ 393.160571][T15995] should_failslab+0xc2/0x120 [ 393.160595][T15995] kmem_cache_alloc_noprof+0x92/0x6a0 [ 393.160616][T15995] ? d_instantiate+0x8a/0xb0 [ 393.160641][T15995] ? alloc_empty_file+0x5b/0x1c0 [ 393.160669][T15995] alloc_empty_file+0x5b/0x1c0 [ 393.160695][T15995] alloc_file_pseudo+0x183/0x290 [ 393.160720][T15995] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 393.160765][T15995] ? _raw_spin_unlock+0x28/0x50 [ 393.160790][T15995] ? alloc_fd+0x471/0x7a0 [ 393.160814][T15995] __anon_inode_getfile+0xe8/0x280 [ 393.160848][T15995] do_epoll_create+0x3ac/0x540 [ 393.160872][T15995] __ia32_sys_epoll_create1+0x30/0x40 [ 393.160903][T15995] __do_fast_syscall_32+0x13a/0x8b0 [ 393.160937][T15995] do_fast_syscall_32+0x32/0x70 [ 393.160966][T15995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.160989][T15995] RIP: 0023:0xf70aefec [ 393.161011][T15995] Code: Unable to access opcode bytes at 0xf70aefc2. [ 393.161020][T15995] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000149 [ 393.161040][T15995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 393.161052][T15995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.161059][T15995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.161066][T15995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 393.161073][T15995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.161089][T15995] [ 393.312075][T14051] IPVS: starting estimator thread 0... [ 393.425684][T16003] IPVS: using max 43 ests per chain, 103200 per kthread [ 393.606979][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.623731][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.626278][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.637876][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.638307][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.192081][T16019] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.192159][T16019] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.192263][T16019] bridge_slave_0: entered allmulticast mode [ 395.193120][T16019] bridge_slave_0: entered promiscuous mode [ 395.210889][T16019] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.210963][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.211051][T16019] bridge_slave_1: entered allmulticast mode [ 395.228444][T16019] bridge_slave_1: entered promiscuous mode [ 395.343939][T16019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.369166][T16019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.432138][T16019] team0: Port device team_slave_0 added [ 395.433875][T16019] team0: Port device team_slave_1 added [ 395.497570][T16019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.497635][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.497840][T16019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.501103][T16019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.501115][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.501130][T16019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.579299][T16019] hsr_slave_0: entered promiscuous mode [ 395.582095][T16019] hsr_slave_1: entered promiscuous mode [ 395.585259][T16019] debugfs: 'hsr0' already exists in 'hsr' [ 395.585282][T16019] Cannot create hsr debugfs directory [ 395.805648][ T5749] Bluetooth: hci2: command tx timeout [ 395.943255][ T854] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 396.107340][ T854] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.113692][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.115835][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.115863][ T854] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.115900][ T854] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.335797][ T854] usb 13-1: config 0 descriptor?? [ 396.814394][T16019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 396.838911][ T854] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 396.870201][T16019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.871492][T16019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 396.886533][T16019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.889574][T16019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 396.900510][T16019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.901242][T16019] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 396.910718][T16019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.412219][T16019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.595522][T16019] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.631171][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.631319][T14051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.763814][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.763936][T14051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.875877][ T5749] Bluetooth: hci2: command tx timeout [ 398.102883][T16116] FAULT_INJECTION: forcing a failure. [ 398.102883][T16116] name failslab, interval 1, probability 0, space 0, times 0 [ 398.102972][T16116] CPU: 2 UID: 0 PID: 16116 Comm: syz.2.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.103022][T16116] Tainted: [L]=SOFTLOCKUP [ 398.103030][T16116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.103042][T16116] Call Trace: [ 398.103050][T16116] [ 398.103060][T16116] dump_stack_lvl+0x100/0x190 [ 398.103088][T16116] should_fail_ex.cold+0x5/0xa [ 398.103115][T16116] should_failslab+0xc2/0x120 [ 398.103140][T16116] __kmalloc_node_noprof+0xff/0x880 [ 398.103158][T16116] ? __pfx___up_read+0x10/0x10 [ 398.103184][T16116] ? crypto_create_tfm_node+0x8d/0x3b0 [ 398.103216][T16116] crypto_create_tfm_node+0x8d/0x3b0 [ 398.103242][T16116] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 398.103265][T16116] crypto_spawn_tfm2+0x62/0xc0 [ 398.103290][T16116] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 398.103315][T16116] crypto_sig_init_tfm+0xba/0xf0 [ 398.103332][T16116] crypto_create_tfm_node+0x171/0x3b0 [ 398.103358][T16116] crypto_alloc_tfm_node+0x102/0x260 [ 398.103388][T16116] public_key_verify_signature+0x21b/0x910 [ 398.103412][T16116] ? __pfx_public_key_verify_signature+0x10/0x10 [ 398.103440][T16116] ? asymmetric_key_generate_id+0x7e/0x180 [ 398.103477][T16116] x509_check_for_self_signed+0x325/0x510 [ 398.103502][T16116] x509_cert_parse+0x60c/0x910 [ 398.103520][T16116] x509_key_preparse+0x65/0x9c0 [ 398.103546][T16116] asymmetric_key_preparse+0xce/0x1d0 [ 398.103574][T16116] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 398.103600][T16116] __key_create_or_update+0x463/0xe30 [ 398.103630][T16116] ? __pfx___key_create_or_update+0x10/0x10 [ 398.103658][T16116] ? lookup_user_key+0x3f3/0x1300 [ 398.103697][T16116] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 398.103723][T16116] key_create_or_update+0x42/0x60 [ 398.103789][T16116] __do_sys_add_key+0x2e8/0x460 [ 398.103812][T16116] ? __pfx___do_sys_add_key+0x10/0x10 [ 398.103843][T16116] __do_fast_syscall_32+0x13a/0x8b0 [ 398.103875][T16116] do_fast_syscall_32+0x32/0x70 [ 398.103899][T16116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.103920][T16116] RIP: 0023:0xf70aefec [ 398.103943][T16116] Code: Unable to access opcode bytes at 0xf70aefc2. [ 398.103952][T16116] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 398.103974][T16116] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 398.103988][T16116] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 398.104008][T16116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.104017][T16116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 398.104045][T16116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.104074][T16116] [ 398.484842][T16130] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 398.801709][T16019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.009730][ T5888] usb 13-1: USB disconnect, device number 6 [ 399.393331][T16019] veth0_vlan: entered promiscuous mode [ 399.405396][T16019] veth1_vlan: entered promiscuous mode [ 399.421560][T16019] veth0_macvtap: entered promiscuous mode [ 399.424385][T16019] veth1_macvtap: entered promiscuous mode [ 399.433907][T16019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.441289][T16019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.480273][ T5792] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.480362][ T5792] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.480404][ T5792] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.480436][ T5792] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.575144][ T7177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.575211][ T7177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.602357][ T7177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.602453][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.955586][ T5749] Bluetooth: hci2: command tx timeout [ 400.043661][ T5957] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 400.221221][ T5957] usb 14-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 400.227199][ T5957] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.230540][ T5957] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.234185][ T5957] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.238972][ T5957] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.246668][ T5957] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.246705][ T5957] usb 14-1: Product: syz [ 400.246735][ T5957] usb 14-1: Manufacturer: syz [ 400.246757][ T5957] usb 14-1: SerialNumber: syz [ 400.425600][ T5957] ushc 14-1:1.0: probe with driver ushc failed with error -110 [ 400.672753][T16205] fuse: Bad value for 'fd' [ 401.046642][T16215] ushc 14-1:1.0: probe with driver ushc failed with error -110 [ 401.113138][ T5957] usb 14-1: USB disconnect, device number 2 [ 401.226449][T16008] syz.8.3623 (16008) used greatest stack depth: 17384 bytes left [ 401.849058][T16245] FAULT_INJECTION: forcing a failure. [ 401.849058][T16245] name failslab, interval 1, probability 0, space 0, times 0 [ 401.849131][T16245] CPU: 3 UID: 0 PID: 16245 Comm: syz.6.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.849161][T16245] Tainted: [L]=SOFTLOCKUP [ 401.849167][T16245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.849174][T16245] Call Trace: [ 401.849179][T16245] [ 401.849185][T16245] dump_stack_lvl+0x100/0x190 [ 401.849208][T16245] should_fail_ex.cold+0x5/0xa [ 401.849227][T16245] should_failslab+0xc2/0x120 [ 401.849245][T16245] kmem_cache_alloc_noprof+0x92/0x6a0 [ 401.849260][T16245] ? mas_preallocate+0xc22/0xee0 [ 401.849282][T16245] mas_preallocate+0xc22/0xee0 [ 401.849308][T16245] ? __pfx_mas_preallocate+0x10/0x10 [ 401.849330][T16245] ? __asan_memset+0x23/0x50 [ 401.849342][T16245] ? init_multi_vma_prep+0x33c/0x650 [ 401.849364][T16245] commit_merge+0x3cc/0x2150 [ 401.849385][T16245] ? __vma_start_write+0x1c6/0x280 [ 401.849404][T16245] ? __pfx_commit_merge+0x10/0x10 [ 401.849427][T16245] ? __pfx___vma_start_write+0x10/0x10 [ 401.849444][T16245] ? __pfx_mas_prev+0x10/0x10 [ 401.849457][T16245] ? dup_anon_vma+0x74/0x2f0 [ 401.849477][T16245] vma_modify+0xd81/0x29b0 [ 401.849501][T16245] ? __pfx_vma_modify+0x10/0x10 [ 401.849522][T16245] ? lock_acquire+0x1d1/0x380 [ 401.849558][T16245] vma_modify_flags+0x2c3/0x460 [ 401.849577][T16245] ? __pfx_vma_modify_flags+0x10/0x10 [ 401.849602][T16245] ? __pfx_futex_wake_mark+0x10/0x10 [ 401.849622][T16245] mlock_fixup+0x4a8/0xc60 [ 401.849643][T16245] ? __pfx_mlock_fixup+0x10/0x10 [ 401.849670][T16245] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 401.849692][T16245] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 401.849718][T16245] ? __pfx___might_resched+0x10/0x10 [ 401.849737][T16245] ? down_write_killable+0x152/0x240 [ 401.849760][T16245] __do_sys_munlockall+0xc7/0x270 [ 401.849774][T16245] __do_fast_syscall_32+0x13a/0x8b0 [ 401.849794][T16245] do_fast_syscall_32+0x32/0x70 [ 401.849816][T16245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.849835][T16245] RIP: 0023:0xf70aefec [ 401.849853][T16245] Code: Unable to access opcode bytes at 0xf70aefc2. [ 401.849859][T16245] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000099 [ 401.849873][T16245] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 401.849882][T16245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.849891][T16245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.849899][T16245] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.849908][T16245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.849926][T16245] [ 402.050215][ T5749] Bluetooth: hci2: command tx timeout [ 402.304067][T16264] syzkaller0: entered promiscuous mode [ 402.304160][T16264] syzkaller0: entered allmulticast mode [ 402.479685][T16273] FAULT_INJECTION: forcing a failure. [ 402.479685][T16273] name failslab, interval 1, probability 0, space 0, times 0 [ 402.479828][T16273] CPU: 3 UID: 0 PID: 16273 Comm: syz.9.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.479893][T16273] Tainted: [L]=SOFTLOCKUP [ 402.479907][T16273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.479926][T16273] Call Trace: [ 402.479938][T16273] [ 402.479950][T16273] dump_stack_lvl+0x100/0x190 [ 402.479995][T16273] should_fail_ex.cold+0x5/0xa [ 402.480031][T16273] should_failslab+0xc2/0x120 [ 402.480065][T16273] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 402.480089][T16273] ? __d_alloc+0x35/0xa50 [ 402.480121][T16273] __d_alloc+0x35/0xa50 [ 402.480145][T16273] ? do_raw_spin_lock+0x128/0x260 [ 402.480180][T16273] d_alloc+0x4a/0x1e0 [ 402.480209][T16273] d_alloc_name+0x83/0xb0 [ 402.480237][T16273] ? __pfx_d_alloc_name+0x10/0x10 [ 402.480263][T16273] ? fast_dput+0x168/0x6f0 [ 402.480291][T16273] ? dput.part.0+0x4f/0x240 [ 402.480321][T16273] proc_setup_thread_self+0x3f/0x1e0 [ 402.480346][T16273] proc_fill_super+0x5d4/0x870 [ 402.480380][T16273] ? __pfx_proc_fill_super+0x10/0x10 [ 402.480404][T16273] get_tree_nodev+0xdd/0x190 [ 402.480426][T16273] vfs_get_tree+0x92/0x320 [ 402.480455][T16273] path_mount+0x7d0/0x24c0 [ 402.480486][T16273] ? __pfx_path_mount+0x10/0x10 [ 402.480511][T16273] ? lockdep_hardirqs_on+0x7d/0x110 [ 402.480542][T16273] ? putname+0xb1/0x110 [ 402.480566][T16273] ? kmem_cache_free+0x127/0x6c0 [ 402.480607][T16273] ? __ia32_sys_mount+0x292/0x310 [ 402.480633][T16273] __ia32_sys_mount+0x292/0x310 [ 402.480661][T16273] ? __pfx___ia32_sys_mount+0x10/0x10 [ 402.480698][T16273] __do_fast_syscall_32+0x13a/0x8b0 [ 402.480734][T16273] do_fast_syscall_32+0x32/0x70 [ 402.480762][T16273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.480788][T16273] RIP: 0023:0xf6feefec [ 402.480827][T16273] Code: Unable to access opcode bytes at 0xf6feefc2. [ 402.480837][T16273] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 402.480858][T16273] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 402.480873][T16273] RDX: 0000000080000240 RSI: 0000000000004000 RDI: 0000000000000000 [ 402.480892][T16273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.480904][T16273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 402.480917][T16273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.480945][T16273] [ 402.488849][T16273] proc_fill_super: can't allocate /proc/thread-self [ 402.636632][T16280] FAULT_INJECTION: forcing a failure. [ 402.636632][T16280] name failslab, interval 1, probability 0, space 0, times 0 [ 402.640771][T16280] CPU: 2 UID: 0 PID: 16280 Comm: syz.9.3708 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.640808][T16280] Tainted: [L]=SOFTLOCKUP [ 402.640814][T16280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.640822][T16280] Call Trace: [ 402.640828][T16280] [ 402.640835][T16280] dump_stack_lvl+0x100/0x190 [ 402.640857][T16280] should_fail_ex.cold+0x5/0xa [ 402.640876][T16280] should_failslab+0xc2/0x120 [ 402.640896][T16280] __kmalloc_noprof+0xfc/0x840 [ 402.640911][T16280] ? lsm_blob_alloc+0x68/0x90 [ 402.640928][T16280] lsm_blob_alloc+0x68/0x90 [ 402.640942][T16280] security_prepare_creds+0x2d/0x290 [ 402.640961][T16280] prepare_creds+0x5d6/0x950 [ 402.640977][T16280] set_current_groups+0x15/0xd0 [ 402.640993][T16280] __ia32_sys_setgroups16+0xda/0x190 [ 402.641007][T16280] __do_fast_syscall_32+0x13a/0x8b0 [ 402.641026][T16280] do_fast_syscall_32+0x32/0x70 [ 402.641043][T16280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.641058][T16280] RIP: 0023:0xf6feefec [ 402.641074][T16280] Code: Unable to access opcode bytes at 0xf6feefc2. [ 402.641080][T16280] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000051 [ 402.641093][T16280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 402.641101][T16280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.641108][T16280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.641115][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.641122][T16280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.641140][T16280] [ 403.425745][ T5887] libceph: connect (1)0.0.0.0:6789 error -22 [ 403.426037][ T5887] libceph: mon0 (1)0.0.0.0:6789 connect error [ 403.489874][ T7750] libceph: connect (1)127.0.0.1:6789 error -101 [ 403.490130][ T7750] libceph: mon0 (1)127.0.0.1:6789 connect error [ 403.685625][ T5887] libceph: connect (1)0.0.0.0:6789 error -22 [ 403.685755][ T5887] libceph: mon0 (1)0.0.0.0:6789 connect error [ 403.761675][ T7750] libceph: connect (1)127.0.0.1:6789 error -101 [ 403.761862][ T7750] libceph: mon0 (1)127.0.0.1:6789 connect error [ 404.011922][ T43] audit: type=1326 audit(1788713053.433:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.3740" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 404.198198][ T5887] libceph: connect (1)0.0.0.0:6789 error -22 [ 404.198330][ T5887] libceph: mon0 (1)0.0.0.0:6789 connect error [ 404.258593][T16335] ceph: No mds server is up or the cluster is laggy [ 404.262543][T16341] ceph: No mds server is up or the cluster is laggy [ 404.266885][ T7750] libceph: connect (1)127.0.0.1:6789 error -101 [ 404.267033][ T7750] libceph: mon0 (1)127.0.0.1:6789 connect error [ 404.490962][T16385] fuse: Bad value for 'fd' [ 404.556516][T16389] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 404.599887][T16393] device-mapper: ioctl: name not supplied when creating device [ 404.600317][T16393] device-mapper: table: 248:2: too large device [ 404.600327][T16393] device-mapper: ioctl: error adding target to table [ 405.138457][T16424] FAULT_INJECTION: forcing a failure. [ 405.138457][T16424] name failslab, interval 1, probability 0, space 0, times 0 [ 405.138546][T16424] CPU: 3 UID: 0 PID: 16424 Comm: syz.2.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.138584][T16424] Tainted: [L]=SOFTLOCKUP [ 405.138591][T16424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.138602][T16424] Call Trace: [ 405.138608][T16424] [ 405.138615][T16424] dump_stack_lvl+0x100/0x190 [ 405.138638][T16424] should_fail_ex.cold+0x5/0xa [ 405.138660][T16424] should_failslab+0xc2/0x120 [ 405.138680][T16424] __kvmalloc_node_noprof+0x113/0x9b0 [ 405.138700][T16424] ? bpf_check+0x1b99/0xa7c0 [ 405.138722][T16424] bpf_check+0x1b99/0xa7c0 [ 405.138741][T16424] ? __css_rstat_updated+0x1ce/0x590 [ 405.138760][T16424] ? __lock_acquire+0x4c5/0x1ec0 [ 405.138789][T16424] ? __lock_acquire+0x4c5/0x1ec0 [ 405.138815][T16424] ? __pfx_bpf_check+0x10/0x10 [ 405.138858][T16424] ? lock_acquire+0x1d1/0x380 [ 405.138891][T16424] ? bpf_prog_load+0x1a09/0x2a80 [ 405.138917][T16424] ? find_held_lock+0x2b/0x80 [ 405.138938][T16424] ? bpf_prog_load+0x1a09/0x2a80 [ 405.138961][T16424] ? __asan_memset+0x23/0x50 [ 405.138977][T16424] ? bpf_prog_load+0x1ac3/0x2a80 [ 405.138995][T16424] bpf_prog_load+0x1ac3/0x2a80 [ 405.139018][T16424] ? __pfx_bpf_prog_load+0x10/0x10 [ 405.139038][T16424] ? lock_acquire+0x1d1/0x380 [ 405.139089][T16424] __sys_bpf+0x1f46/0x4a30 [ 405.139116][T16424] ? __pfx___sys_bpf+0x10/0x10 [ 405.139129][T16424] ? find_held_lock+0x2b/0x80 [ 405.139142][T16424] ? futex_wake+0x4ea/0x5e0 [ 405.139171][T16424] ? percpu_counter_add_batch+0xb9/0x230 [ 405.139189][T16424] ? errseq_sample+0x51/0x70 [ 405.139204][T16424] ? file_init_path+0x48e/0x670 [ 405.139238][T16424] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 405.139272][T16424] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 405.139294][T16424] ? fput+0x7c/0x100 [ 405.139311][T16424] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 405.139328][T16424] ? ksys_write+0x1ac/0x250 [ 405.139347][T16424] ? __ia32_sys_bpf+0xcc/0x170 [ 405.139360][T16424] __ia32_sys_bpf+0xcc/0x170 [ 405.139377][T16424] ? __do_fast_syscall_32+0xb3/0x8b0 [ 405.139407][T16424] __do_fast_syscall_32+0x13a/0x8b0 [ 405.139441][T16424] do_fast_syscall_32+0x32/0x70 [ 405.139473][T16424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.139493][T16424] RIP: 0023:0xf70aefec [ 405.139511][T16424] Code: Unable to access opcode bytes at 0xf70aefc2. [ 405.139518][T16424] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 405.139533][T16424] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 405.139542][T16424] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.139550][T16424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.139559][T16424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 405.139567][T16424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.139588][T16424] [ 405.500919][T16434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.533862][T16436] 9p: Bad value for 'rfdno' [ 405.614071][T16438] overlayfs: failed to clone upperpath [ 406.291033][T16460] FAULT_INJECTION: forcing a failure. [ 406.291033][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 406.291083][T16460] CPU: 3 UID: 0 PID: 16460 Comm: syz.9.3780 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.291113][T16460] Tainted: [L]=SOFTLOCKUP [ 406.291119][T16460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.291128][T16460] Call Trace: [ 406.291133][T16460] [ 406.291138][T16460] dump_stack_lvl+0x100/0x190 [ 406.291161][T16460] should_fail_ex.cold+0x5/0xa [ 406.291177][T16460] should_failslab+0xc2/0x120 [ 406.291195][T16460] __kmalloc_node_noprof+0xff/0x880 [ 406.291210][T16460] ? __pfx___up_read+0x10/0x10 [ 406.291228][T16460] ? crypto_create_tfm_node+0x8d/0x3b0 [ 406.291251][T16460] crypto_create_tfm_node+0x8d/0x3b0 [ 406.291274][T16460] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 406.291292][T16460] crypto_spawn_tfm2+0x62/0xc0 [ 406.291308][T16460] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 406.291325][T16460] crypto_sig_init_tfm+0xba/0xf0 [ 406.291339][T16460] crypto_create_tfm_node+0x171/0x3b0 [ 406.291360][T16460] crypto_alloc_tfm_node+0x102/0x260 [ 406.291380][T16460] public_key_verify_signature+0x21b/0x910 [ 406.291395][T16460] ? __pfx_public_key_verify_signature+0x10/0x10 [ 406.291415][T16460] ? asymmetric_key_generate_id+0x7e/0x180 [ 406.291436][T16460] x509_check_for_self_signed+0x325/0x510 [ 406.291452][T16460] x509_cert_parse+0x60c/0x910 [ 406.291466][T16460] x509_key_preparse+0x65/0x9c0 [ 406.291482][T16460] asymmetric_key_preparse+0xce/0x1d0 [ 406.291499][T16460] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 406.291517][T16460] __key_create_or_update+0x463/0xe30 [ 406.291538][T16460] ? __pfx___key_create_or_update+0x10/0x10 [ 406.291556][T16460] ? lookup_user_key+0x3f3/0x1300 [ 406.291579][T16460] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 406.291598][T16460] key_create_or_update+0x42/0x60 [ 406.291617][T16460] __do_sys_add_key+0x2e8/0x460 [ 406.291631][T16460] ? __pfx___do_sys_add_key+0x10/0x10 [ 406.291649][T16460] __do_fast_syscall_32+0x13a/0x8b0 [ 406.291684][T16460] do_fast_syscall_32+0x32/0x70 [ 406.291724][T16460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.291743][T16460] RIP: 0023:0xf6feefec [ 406.291760][T16460] Code: Unable to access opcode bytes at 0xf6feefc2. [ 406.291765][T16460] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 406.291777][T16460] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 406.291785][T16460] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 406.291792][T16460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.291799][T16460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 406.291806][T16460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.291821][T16460] [ 406.880745][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 406.880804][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.880836][ T5749] Tainted: [L]=SOFTLOCKUP [ 406.880842][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.880852][ T5749] Workqueue: hci4 hci_rx_work [ 406.880873][ T5749] Call Trace: [ 406.880878][ T5749] [ 406.880884][ T5749] dump_stack_lvl+0x100/0x190 [ 406.880904][ T5749] sysfs_warn_dup.cold+0x1c/0x28 [ 406.880926][ T5749] sysfs_create_dir_ns+0x24b/0x2b0 [ 406.880940][ T5749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 406.880952][ T5749] ? find_held_lock+0x2b/0x80 [ 406.880964][ T5749] ? kobject_add_internal+0x25f/0x930 [ 406.880977][ T5749] ? kobject_add_internal+0x25f/0x930 [ 406.880990][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 406.881009][ T5749] kobject_add_internal+0x2c8/0x930 [ 406.881024][ T5749] kobject_add+0x16a/0x1e0 [ 406.881037][ T5749] ? __pfx_kobject_add+0x10/0x10 [ 406.881048][ T5749] ? class_to_subsys+0x10f/0x150 [ 406.881068][ T5749] ? kobject_put+0xb9/0x640 [ 406.881077][ T5749] ? _raw_spin_unlock+0x28/0x50 [ 406.881095][ T5749] device_add+0x294/0x1970 [ 406.881111][ T5749] ? __pfx_dev_set_name+0x10/0x10 [ 406.881130][ T5749] ? __pfx_device_add+0x10/0x10 [ 406.881147][ T5749] ? mgmt_send_event_skb+0x2fb/0x460 [ 406.881166][ T5749] hci_conn_add_sysfs+0x1a3/0x260 [ 406.881184][ T5749] le_conn_complete_evt+0x122f/0x2130 [ 406.881202][ T5749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 406.881214][ T5749] ? hci_event_packet+0x186/0xcd0 [ 406.881226][ T5749] ? hci_event_packet+0x186/0xcd0 [ 406.881243][ T5749] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 406.881258][ T5749] ? skb_pull_data+0x15f/0x1e0 [ 406.881277][ T5749] hci_le_meta_evt+0x34a/0x5f0 [ 406.881291][ T5749] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 406.881308][ T5749] hci_event_packet+0x51c/0xcd0 [ 406.881322][ T5749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 406.881337][ T5749] ? __pfx_hci_event_packet+0x10/0x10 [ 406.881353][ T5749] ? lockdep_hardirqs_on+0x7d/0x110 [ 406.881372][ T5749] hci_rx_work+0x451/0xfc0 [ 406.881388][ T5749] process_one_work+0xac7/0x1b10 [ 406.881415][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 406.881431][ T5749] ? lock_acquire+0x1d1/0x380 [ 406.881452][ T5749] ? __pfx_hci_rx_work+0x10/0x10 [ 406.881469][ T5749] worker_thread+0x5ef/0xe50 [ 406.881491][ T5749] ? kthread+0x13a/0x450 [ 406.881504][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 406.881519][ T5749] kthread+0x373/0x450 [ 406.881531][ T5749] ? __pfx_kthread+0x10/0x10 [ 406.881546][ T5749] ret_from_fork+0x730/0xd60 [ 406.881565][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 406.881583][ T5749] ? rcu_is_watching+0x13/0xc0 [ 406.881594][ T5749] ? __switch_to+0x800/0x10f0 [ 406.881609][ T5749] ? __pfx_kthread+0x10/0x10 [ 406.881622][ T5749] ret_from_fork_asm+0x1a/0x30 [ 406.881641][ T5749] [ 406.881686][ T5749] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 406.881711][ T5749] Bluetooth: hci4: failed to register connection device [ 406.949145][T16475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.949248][T16475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.949281][T16475] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 407.295642][T16475] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 407.299308][T16475] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 407.302815][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.8.3786 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.307386][T16475] Tainted: [L]=SOFTLOCKUP [ 407.309469][T16475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.313678][T16475] RIP: 0010:klist_put+0x4d/0x1d0 [ 407.315138][T16475] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c ee 0c [ 407.321413][T16475] RSP: 0000:ffffc9000c2b72c0 EFLAGS: 00010202 [ 407.323263][T16475] RAX: dffffc0000000000 RBX: ffff8880249f3060 RCX: ffffc9002cfa9000 [ 407.325644][T16475] RDX: 000000000000000b RSI: ffffffff8bc3e645 RDI: 0000000000000058 [ 407.328120][T16475] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e838 [ 407.330583][T16475] R10: ffffffff912741c3 R11: 0000000000000000 R12: 0000000000000000 [ 407.333108][T16475] R13: 0000000000000001 R14: ffffffff91274180 R15: dffffc0000000000 [ 407.335843][T16475] FS: 0000000000000000(0000) GS:ffff888096963000(0063) knlGS:00000000f5466b40 [ 407.338818][T16475] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 407.340964][T16475] CR2: 00000000f547cda4 CR3: 0000000057a3c000 CR4: 0000000000352ef0 [ 407.343402][T16475] Call Trace: [ 407.344421][T16475] [ 407.345351][T16475] klist_remove+0x14c/0x2e0 [ 407.346939][T16475] ? __pfx_klist_remove+0x10/0x10 [ 407.348774][T16475] ? __pfx_kobject_move+0x10/0x10 [ 407.350588][T16475] ? kobject_put+0xb9/0x640 [ 407.351999][T16475] device_move+0x12d/0x1140 [ 407.353496][T16475] hci_conn_del_sysfs+0x86/0x1a0 [ 407.354961][T16475] hci_conn_del+0x506/0x1180 [ 407.356462][T16475] hci_abort_conn_sync+0x7d9/0xb20 [ 407.358022][T16475] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 407.359674][T16475] ? lock_acquire+0x1d1/0x380 [ 407.361543][T16475] ? hci_disconnect_all_sync.constprop.0.isra.0+0x7c/0x430 [ 407.364295][T16475] ? find_held_lock+0x2b/0x80 [ 407.366284][T16475] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 407.368569][T16475] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 407.370701][T16475] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 407.372804][T16475] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 407.375495][T16475] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 407.378350][T16475] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 407.380138][T16475] hci_suspend_sync+0xa3d/0xc40 [ 407.382086][T16475] ? enable_work+0x24c/0x320 [ 407.383938][T16475] ? __pfx_hci_suspend_sync+0x10/0x10 [ 407.385981][T16475] ? mgmt_pending_find+0x13e/0x1a0 [ 407.387795][T16475] hci_suspend_dev+0x31d/0x540 [ 407.389223][T16475] ? __pfx_hci_suspend_dev+0x10/0x10 [ 407.390780][T16475] ? kobject_get+0xbb/0x150 [ 407.392163][T16475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.393914][T16475] hci_suspend_notifier+0x21e/0x330 [ 407.395492][T16475] notifier_call_chain+0x99/0x3f0 [ 407.397007][T16475] blocking_notifier_call_chain_robust+0xc8/0x160 [ 407.398909][T16475] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 407.400953][T16475] ? pin_hibernation_swap_type+0x145/0x1a0 [ 407.402942][T16475] ? do_raw_spin_unlock+0x145/0x1e0 [ 407.405265][T16475] pm_notifier_call_chain_robust+0x27/0x60 [ 407.407769][T16475] snapshot_open+0x189/0x2b0 [ 407.409621][T16475] ? __pfx_snapshot_open+0x10/0x10 [ 407.411176][T16475] misc_open+0x26d/0x450 [ 407.412441][T16475] ? __pfx_misc_open+0x10/0x10 [ 407.413890][T16475] chrdev_open+0x234/0x6a0 [ 407.415211][T16475] ? __pfx_apparmor_file_open+0x10/0x10 [ 407.416881][T16475] ? __pfx_chrdev_open+0x10/0x10 [ 407.418355][T16475] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 407.420235][T16475] do_dentry_open+0x6ab/0x14d0 [ 407.421671][T16475] ? __pfx_chrdev_open+0x10/0x10 [ 407.423212][T16475] vfs_open+0x82/0x3f0 [ 407.424479][T16475] path_openat+0x19fa/0x2440 [ 407.426055][T16475] ? __pfx_path_openat+0x10/0x10 [ 407.427727][T16475] do_file_open+0x20e/0x430 [ 407.429441][T16475] ? __pfx_do_file_open+0x10/0x10 [ 407.431465][T16475] ? _raw_spin_unlock+0x28/0x50 [ 407.433179][T16475] ? alloc_fd+0x471/0x7a0 [ 407.434656][T16475] do_sys_openat2+0x10f/0x1e0 [ 407.436184][T16475] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.437741][T16475] __ia32_compat_sys_openat+0x12d/0x210 [ 407.439394][T16475] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 407.441465][T16475] __do_fast_syscall_32+0x13a/0x8b0 [ 407.443064][T16475] ? lockdep_hardirqs_on+0x7d/0x110 [ 407.444675][T16475] do_fast_syscall_32+0x32/0x70 [ 407.446175][T16475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.448273][T16475] RIP: 0023:0xf7fa6fec [ 407.449725][T16475] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 407.452312][T16475] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 407.456039][T16475] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 407.458561][T16475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.460863][T16475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.463146][T16475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 407.465456][T16475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.467772][T16475] [ 407.468707][T16475] Modules linked in: [ 407.470403][T16475] ---[ end trace 0000000000000000 ]--- [ 407.479223][T16475] RIP: 0010:klist_put+0x4d/0x1d0 [ 407.479338][T16475] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c ee 0c [ 407.479393][T16475] RSP: 0000:ffffc9000c2b72c0 EFLAGS: 00010202 [ 407.479433][T16475] RAX: dffffc0000000000 RBX: ffff8880249f3060 RCX: ffffc9002cfa9000 [ 407.479457][T16475] RDX: 000000000000000b RSI: ffffffff8bc3e645 RDI: 0000000000000058 [ 407.479481][T16475] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e838 [ 407.479504][T16475] R10: ffffffff912741c3 R11: 0000000000000000 R12: 0000000000000000 [ 407.479527][T16475] R13: 0000000000000001 R14: ffffffff91274180 R15: dffffc0000000000 [ 407.479550][T16475] FS: 0000000000000000(0000) GS:ffff888096963000(0063) knlGS:00000000f5466b40 [ 407.479596][T16475] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 407.479640][T16475] CR2: 00000000f7fa7000 CR3: 0000000057a3c000 CR4: 0000000000352ef0 [ 407.479685][T16475] Kernel panic - not syncing: Fatal exception [ 407.512821][T16475] Kernel Offset: disabled [ 407.514222][T16475] Rebooting in 86400 seconds..