last executing test programs: 3m39.224219406s ago: executing program 3 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m39.096278085s ago: executing program 3 (id=14): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m38.95756315s ago: executing program 3 (id=16): socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008094}, 0x800) getpid() mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='z', 0x1) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r4, @ANYBLOB]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) 3m37.696964999s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3m37.501740618s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000003140)) write(r0, &(0x7f0000000000)='7', 0x1) 3m36.321340862s ago: executing program 3 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3m21.133546306s ago: executing program 32 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3m17.081763546s ago: executing program 0 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2}, {0xfe00, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3m17.00154424s ago: executing program 0 (id=135): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(r0, &(0x7f0000000000)="01", 0x1) 3m16.871067364s ago: executing program 0 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') setresuid(0x0, 0xee01, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0xffffff00, 0x9) 3m16.850199568s ago: executing program 0 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x9, 0x7d, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x2, 0x5, 0x3d, 0x0, 0x0, 0x4, 0xc0, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xfffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m16.719440859s ago: executing program 0 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x36b7, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m16.665187056s ago: executing program 0 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x20004800) 3m1.553794482s ago: executing program 33 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x20004800) 4.826529343s ago: executing program 4 (id=1248): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x7) openat$dlm_control(0xffffff9c, &(0x7f00000000c0), 0x402, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.936771087s ago: executing program 4 (id=1259): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4000080) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c86", 0x2d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 3.049624381s ago: executing program 2 (id=1263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) 2.9531104s ago: executing program 2 (id=1264): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000280)={0x0, 0x3, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x640002, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.917067104s ago: executing program 2 (id=1265): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.790871595s ago: executing program 4 (id=1267): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a43"], 0x97) 2.783329248s ago: executing program 2 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r1, &(0x7f00000001c0)=[{{0x77359400}, 0x4, 0x4, 0x9}], 0xfffffffffffffe58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="b435c9a47c461d66859e516a7e075cfaa7ea669911bd463536dcdd55c803689caf70c27f9fe5c9dc0bcbd77ffd23ef2004347797fd83e3a9ef93373b4274e73e70a00187e1dde80a27f3b70b72305fd489bfd9de43482f69d554fe82ada96781be2477ac870eda1c69425ad4a64249f2d7eb6b2475523f33dd65e677e6872a4081c609045d4d66a0f17435a7704a7db06f57a12739a8fa7bd6e050fa243c7ab0c8feaabc8690cb09", 0xa8}], 0x1, 0x9) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x651, 0x12c8000000000000, 0x8000009655, 0x80000001, 0x4000062db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0xc83a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/30) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 2.698648039s ago: executing program 2 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="03", 0x12}], 0x1}, 0x20004014) 2.693568413s ago: executing program 4 (id=1271): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x3c7, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, {0xa366}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}], 0x1) 2.635830953s ago: executing program 2 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) mkdirat(r2, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x12) accept4(r2, &(0x7f0000000500)=@rc={0x1f, @none}, &(0x7f0000000580)=0x80, 0x800) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000080)='grpquota') ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x206) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000240), 0x800) bind$unix(r4, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) linkat(r3, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000200)='./dev\x00', 0x400) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0xfffffffffffffffe, 0xfff, {0x7, 0x2d, 0xa72, 0x40, 0xe0b, 0x7fc, 0x2, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000400)={'P\x00', 0x0, 0x5, 0x3, 0x7ff, 0x1, "ff9b15e5a8c80625c8c35500", '\x00\x00\a\x00', "020400", "0001ffff", ["50d5c2a708000000e40000b6", "006167000000000000ffff00", "a1330700"]}) 1.644040272s ago: executing program 4 (id=1276): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.532207472s ago: executing program 4 (id=1279): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001340)="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", 0xff5) 1.453289676s ago: executing program 1 (id=1281): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.259927424s ago: executing program 1 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1012}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='200000000\n', 0xa) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write(r0, &(0x7f0000000200)="52540012345652540012345786dd600000000048294020010db800000000000000000000000120010db8000000000000000000000002600000000020064020010db800000000000000000000001020010db800000000000000000000002004d20050000003e8000000015010ffffe4af00006162636465666768696a6b6c", 0x7e) write(r0, &(0x7f0000000300)="52540012345652540012345786dd600000000048294020010db800000000000000000000000120010db8000000000000000000000002600000000020064020010db800000000000000000000001020010db800000000000000000000002004d20050000003f4000000015018ffff9c5300006d6e6f707172737475767778", 0x7e) 1.08979644s ago: executing program 1 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') add_key(0x0, 0x0, &(0x7f00000001c0)="4ba26cfd32b5285cdc8fdc68f43ead0d53323d10e3ad4304bc006c38f51fdb1a9e", 0x21, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.002580692s ago: executing program 1 (id=1285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000200)="9176227ad455cef3b6f27a6f5ffc5758c70ec6402cefd3e5b3e847427abdf6f7b8f74e650b14fe28eb4d9050ba2ab7990451b5dcdcf4fd13e082df84bb7ba72efb12e380f5ccf7c1d4941c6505e83681576745"}) 903.305882ms ago: executing program 5 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x9, 0x1, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) 869.582662ms ago: executing program 1 (id=1287): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) 818.827263ms ago: executing program 5 (id=1288): mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40246608, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 712.894172ms ago: executing program 5 (id=1289): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000840)={0x2, @pix={0x0, 0x4000, 0x4f565559, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="aabbcc", 0x3}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000005c0)={0x1, &(0x7f0000000540)=[{0x6, 0x1, 0x0, 0x45e2}]}, 0x8) close(0x3) 662.792606ms ago: executing program 5 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygrou-/myevent ./dummy:0', 0x1b) 662.629891ms ago: executing program 5 (id=1291): unshare(0x68040200) socket$packet(0x11, 0x3, 0x300) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0x160}}, 0x0) 633.439999ms ago: executing program 1 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0xe5c, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x100000001, 0x5, 0x8000000000000001, 0x2627bc44, 0xba4, 0x3, 0xfffffffffffffff4}, 0x0, &(0x7f00000001c0)={0x7ff, 0x7, 0x3ff, 0x4e, 0x3, 0x164, 0x1, 0x7f}, 0x0, 0x0) readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1) 0s ago: executing program 5 (id=1293): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./ceph_mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000100)='./ceph_mnt\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='abort_on_full,ms_mode=legacy,nocephx_sign_messages,nocrc,mount_timeout=2\x00') r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027', 0x9) write(r1, &(0x7f0000000600)='\x00'/272, 0x110) write(r1, &(0x7f0000000800)="01ffff7fffffffff3f00"/26, 0x1a) write(r1, &(0x7f0000000900)="070100000000000000000000000000000029000000010018000000000000000000000000000100000000000000000100000000000000000000000000000000000000000000000000000000000000b0e68b83000000000000000000", 0x5b) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) kernel console output (not intermixed with test programs): T30] usb 10-1: SerialNumber: syz [ 227.249600][ T50] usb 7-1: USB disconnect, device number 28 [ 227.281021][ T50] legousbtower 7-1:14.228: LEGO USB Tower #-159 now disconnected [ 227.293772][ T8638] FAULT_INJECTION: forcing a failure. [ 227.293772][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 227.293793][ T8638] CPU: 2 UID: 0 PID: 8638 Comm: syz.2.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.293809][ T8638] Tainted: [L]=SOFTLOCKUP [ 227.293814][ T8638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.293821][ T8638] Call Trace: [ 227.293825][ T8638] [ 227.293830][ T8638] dump_stack_lvl+0x100/0x190 [ 227.293862][ T8638] should_fail_ex.cold+0x5/0xa [ 227.293878][ T8638] should_failslab+0xc2/0x120 [ 227.293897][ T8638] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 227.293912][ T8638] ? kstrdup_const+0x63/0x80 [ 227.293924][ T8638] kstrdup+0x51/0xe0 [ 227.293935][ T8638] kstrdup_const+0x63/0x80 [ 227.293946][ T8638] __kernfs_new_node+0x9b/0xa10 [ 227.293964][ T8638] ? __pfx___kernfs_new_node+0x10/0x10 [ 227.293981][ T8638] ? lock_acquire+0x1d1/0x380 [ 227.293996][ T8638] ? kernfs_root+0x23/0x2a0 [ 227.294008][ T8638] ? find_held_lock+0x2b/0x80 [ 227.294020][ T8638] ? kernfs_root+0xee/0x2a0 [ 227.294031][ T8638] ? kernfs_root+0xee/0x2a0 [ 227.294047][ T8638] kernfs_create_dir_ns+0xa6/0x2b0 [ 227.294062][ T8638] ? percpu_ref_init+0x244/0x3f0 [ 227.294081][ T8638] cgroup_mkdir+0x3be/0x1330 [ 227.294098][ T8638] ? __pfx_cgroup_mkdir+0x10/0x10 [ 227.294115][ T8638] kernfs_iop_mkdir+0x111/0x190 [ 227.294129][ T8638] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 227.294145][ T8638] vfs_mkdir+0x364/0x850 [ 227.294164][ T8638] filename_mkdirat+0x48b/0x5e0 [ 227.294179][ T8638] ? __pfx_filename_mkdirat+0x10/0x10 [ 227.294193][ T8638] ? strncpy_from_user+0x19d/0x2d0 [ 227.294208][ T8638] ? do_getname+0x191/0x390 [ 227.294224][ T8638] __ia32_sys_mkdirat+0x88/0xc0 [ 227.294238][ T8638] __do_fast_syscall_32+0x13a/0x8b0 [ 227.294262][ T8638] do_fast_syscall_32+0x32/0x70 [ 227.294279][ T8638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.294293][ T8638] RIP: 0023:0xf6fcefec [ 227.294306][ T8638] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 227.294311][ T8638] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 227.294323][ T8638] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 227.294331][ T8638] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 227.294338][ T8638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.294344][ T8638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.294350][ T8638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.294363][ T8638] [ 227.339472][ T30] usb 10-1: usb_control_msg returned -32 [ 227.339507][ T30] usbtmc 10-1:1.0: can't read capabilities [ 227.682638][ T8660] 9p: Bad value for 'rfdno' [ 227.688132][ T8655] zswap: compressor z not available [ 228.094925][ T8664] FAULT_INJECTION: forcing a failure. [ 228.094925][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 228.094955][ T8664] CPU: 3 UID: 0 PID: 8664 Comm: syz.1.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.094982][ T8664] Tainted: [L]=SOFTLOCKUP [ 228.094989][ T8664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.095001][ T8664] Call Trace: [ 228.095007][ T8664] [ 228.095014][ T8664] dump_stack_lvl+0x100/0x190 [ 228.095042][ T8664] should_fail_ex.cold+0x5/0xa [ 228.095065][ T8664] should_failslab+0xc2/0x120 [ 228.095087][ T8664] kmem_cache_alloc_noprof+0x92/0x6a0 [ 228.095106][ T8664] ? __pfx_map_id_range_down+0x10/0x10 [ 228.095129][ T8664] ? security_inode_alloc+0x3b/0x2c0 [ 228.095154][ T8664] security_inode_alloc+0x3b/0x2c0 [ 228.095174][ T8664] inode_init_always_gfp+0xc6f/0xfb0 [ 228.095199][ T8664] alloc_inode+0x8e/0x250 [ 228.095224][ T8664] path_from_stashed+0x25b/0x760 [ 228.095247][ T8664] ns_get_path+0x60/0x80 [ 228.095265][ T8664] proc_ns_get_link+0x260/0x2e0 [ 228.095283][ T8664] ? __pfx_proc_ns_get_link+0x10/0x10 [ 228.095300][ T8664] ? try_to_unlazy+0x2f1/0x910 [ 228.095325][ T8664] pick_link+0xd17/0x13c0 [ 228.095339][ T8664] ? __pfx_proc_ns_get_link+0x10/0x10 [ 228.095358][ T8664] step_into_slowpath+0x9ba/0xf90 [ 228.095390][ T8664] ? find_held_lock+0x2b/0x80 [ 228.095412][ T8664] ? __pfx_step_into_slowpath+0x10/0x10 [ 228.095431][ T8664] ? lookup_fast+0x2da/0x600 [ 228.095449][ T8664] path_openat+0xfab/0x2440 [ 228.095471][ T8664] ? __pfx_path_openat+0x10/0x10 [ 228.095494][ T8664] do_file_open+0x20e/0x430 [ 228.095515][ T8664] ? __pfx_do_file_open+0x10/0x10 [ 228.095553][ T8664] ? _raw_spin_unlock+0x28/0x50 [ 228.095577][ T8664] ? alloc_fd+0x471/0x7a0 [ 228.095606][ T8664] do_sys_openat2+0x10f/0x1e0 [ 228.095631][ T8664] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.095659][ T8664] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 228.095677][ T8664] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 228.095707][ T8664] __ia32_compat_sys_openat+0x12d/0x210 [ 228.095734][ T8664] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 228.095770][ T8664] do_int80_emulation+0x166/0x650 [ 228.095800][ T8664] asm_int80_emulation+0x1a/0x20 [ 228.095817][ T8664] RIP: 0023:0xf71a75ab [ 228.095830][ T8664] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 228.095846][ T8664] RSP: 002b:00000000f54663cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.095865][ T8664] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466490 [ 228.095876][ T8664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.095887][ T8664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.095897][ T8664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.095908][ T8664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.095934][ T8664] [ 228.218784][ T8662] usbtmc 10-1:1.0: usb_control_msg returned -32 [ 228.279059][ T6997] usb 10-1: USB disconnect, device number 21 [ 228.460943][ T8667] zswap: compressor z not available [ 228.471839][ T8667] 9p: Bad value for 'rfdno' [ 229.172731][ T8690] 9p: Bad value for 'rfdno' [ 229.534522][ T8686] zswap: compressor z not available [ 230.135014][ T8722] 9p: Bad value for 'rfdno' [ 230.165969][ T8720] zswap: compressor z not available [ 230.883037][ T8741] FAULT_INJECTION: forcing a failure. [ 230.883037][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 230.883073][ T8741] CPU: 2 UID: 0 PID: 8741 Comm: syz.5.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.883101][ T8741] Tainted: [L]=SOFTLOCKUP [ 230.883108][ T8741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.883120][ T8741] Call Trace: [ 230.883127][ T8741] [ 230.883134][ T8741] dump_stack_lvl+0x100/0x190 [ 230.883164][ T8741] should_fail_ex.cold+0x5/0xa [ 230.883189][ T8741] should_failslab+0xc2/0x120 [ 230.883214][ T8741] __kmalloc_cache_noprof+0x91/0x6d0 [ 230.883243][ T8741] ? percpu_ref_init+0xec/0x3f0 [ 230.883271][ T8741] ? __pfx_css_release+0x10/0x10 [ 230.883294][ T8741] percpu_ref_init+0xec/0x3f0 [ 230.883326][ T8741] cgroup_mkdir+0x2a0/0x1330 [ 230.883356][ T8741] ? __pfx_cgroup_mkdir+0x10/0x10 [ 230.883380][ T8741] kernfs_iop_mkdir+0x111/0x190 [ 230.883403][ T8741] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 230.883427][ T8741] vfs_mkdir+0x364/0x850 [ 230.883458][ T8741] filename_mkdirat+0x48b/0x5e0 [ 230.883484][ T8741] ? __pfx_filename_mkdirat+0x10/0x10 [ 230.883504][ T8741] ? strncpy_from_user+0x19d/0x2d0 [ 230.883531][ T8741] ? do_getname+0x191/0x390 [ 230.883559][ T8741] __ia32_sys_mkdirat+0x88/0xc0 [ 230.883590][ T8741] __do_fast_syscall_32+0x13a/0x8b0 [ 230.883621][ T8741] do_fast_syscall_32+0x32/0x70 [ 230.883651][ T8741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.883676][ T8741] RIP: 0023:0xf7fd3fec [ 230.883696][ T8741] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 230.883705][ T8741] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 230.883722][ T8741] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 230.883734][ T8741] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 230.883747][ T8741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.883758][ T8741] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.883770][ T8741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.883796][ T8741] [ 231.131219][ T8758] 9p: Bad value for 'rfdno' [ 231.662543][ T8775] 9p: Bad value for 'rfdno' [ 231.720463][ T8776] FAULT_INJECTION: forcing a failure. [ 231.720463][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 231.720519][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.720549][ T8776] Tainted: [L]=SOFTLOCKUP [ 231.720553][ T8776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.720561][ T8776] Call Trace: [ 231.720565][ T8776] [ 231.720570][ T8776] dump_stack_lvl+0x100/0x190 [ 231.720588][ T8776] should_fail_ex.cold+0x5/0xa [ 231.720615][ T8776] should_failslab+0xc2/0x120 [ 231.720632][ T8776] __kmalloc_cache_noprof+0x91/0x6d0 [ 231.720649][ T8776] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 231.720662][ T8776] ? blk_alloc_queue_stats+0x3f/0x110 [ 231.720676][ T8776] blk_alloc_queue_stats+0x3f/0x110 [ 231.720688][ T8776] blk_alloc_queue+0xda/0x790 [ 231.720700][ T8776] ? alloc_pages_node_noprof+0x11d/0x200 [ 231.720713][ T8776] blk_mq_alloc_queue+0x174/0x290 [ 231.720728][ T8776] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 231.720756][ T8776] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 231.720775][ T8776] __blk_mq_alloc_disk+0x29/0x120 [ 231.720792][ T8776] loop_add+0x498/0xb60 [ 231.720806][ T8776] ? __pfx_loop_add+0x10/0x10 [ 231.720826][ T8776] ? __fget_files+0x34/0x3d0 [ 231.720840][ T8776] ? find_held_lock+0x2b/0x80 [ 231.720852][ T8776] ? __fget_files+0x215/0x3d0 [ 231.720867][ T8776] loop_control_ioctl+0xae/0x620 [ 231.720880][ T8776] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.720895][ T8776] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.720908][ T8776] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 231.720927][ T8776] __do_fast_syscall_32+0x13a/0x8b0 [ 231.720948][ T8776] do_fast_syscall_32+0x32/0x70 [ 231.720964][ T8776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.720978][ T8776] RIP: 0023:0xf7fa7fec [ 231.720992][ T8776] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 231.720997][ T8776] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 231.721009][ T8776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 231.721017][ T8776] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.721023][ T8776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.721029][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.721035][ T8776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.721048][ T8776] [ 231.855743][ T8749] zswap: compressor z not available [ 231.909955][ T8773] zswap: compressor z not available [ 232.950663][ T8803] jffs2: notice: (8803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.098571][ T8815] jffs2: notice: (8815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.320804][ T8827] 9p: Bad value for 'rfdno' [ 233.390911][ T8825] zswap: compressor z not available [ 233.415540][ T6997] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 233.575489][ T6997] usb 6-1: Using ep0 maxpacket: 8 [ 233.581591][ T6997] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.584866][ T6997] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.585257][ T6997] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.585272][ T6997] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 233.585285][ T6997] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 233.585299][ T6997] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 233.585458][ T6997] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.585506][ T6997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.823853][ T6997] usb 6-1: GET_CAPABILITIES returned 0 [ 233.824025][ T6997] usbtmc 6-1:16.0: can't read capabilities [ 234.025838][ T1039] usb 6-1: USB disconnect, device number 22 [ 234.251780][ T8837] 9p: Bad value for 'rfdno' [ 234.253857][ T8838] 9p: Bad value for 'rfdno' [ 235.017918][ T8835] zswap: compressor z not available [ 235.018172][ T8834] zswap: compressor z not available [ 235.174836][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.887'. [ 235.339203][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 235.503827][ T8867] 9p: Bad value for 'rfdno' [ 235.628274][ T8871] 9p: Bad value for 'rfdno' [ 235.711467][ T8860] zswap: compressor z not available [ 236.250952][ T8869] zswap: compressor z not available [ 236.458009][ T8878] zswap: compressor z not available [ 236.460038][ T8878] 9p: Bad value for 'rfdno' [ 236.835540][ T5831] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 236.996344][ T5831] usb 9-1: Using ep0 maxpacket: 8 [ 236.997116][ T5831] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.998348][ T5831] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.998370][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.998389][ T5831] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 236.998410][ T5831] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 236.998430][ T5831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 236.998448][ T5831] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.998504][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.115550][ T1039] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 237.206849][ T5831] usb 9-1: GET_CAPABILITIES returned 0 [ 237.206885][ T5831] usbtmc 9-1:16.0: can't read capabilities [ 237.276219][ T1039] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 237.277055][ T1039] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.278090][ T1039] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.279922][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.279940][ T1039] usb 6-1: Product: syz [ 237.279952][ T1039] usb 6-1: Manufacturer: syz [ 237.279966][ T1039] usb 6-1: SerialNumber: syz [ 237.284428][ T1039] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 237.289053][ T1039] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 237.292910][ T1039] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 237.410356][ T1039] usb 9-1: USB disconnect, device number 22 [ 237.484670][ T8898] kvm: MWAIT instruction emulated as NOP! [ 237.875867][ T8913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.915498][ T5831] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 238.065519][ T5831] usb 10-1: Using ep0 maxpacket: 32 [ 238.068399][ T5831] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 238.069131][ T5831] usb 10-1: config 0 has no interfaces? [ 238.071646][ T5831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.071665][ T5831] usb 10-1: Product: syz [ 238.071677][ T5831] usb 10-1: Manufacturer: syz [ 238.071689][ T5831] usb 10-1: SerialNumber: syz [ 238.073891][ T5831] usb 10-1: config 0 descriptor?? [ 238.114964][ T8923] 9p: Bad value for 'rfdno' [ 238.125591][ T8920] zswap: compressor z not available [ 238.338880][ T30] usb 10-1: USB disconnect, device number 22 [ 239.075807][ T8894] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 239.079738][ T1039] usb 6-1: USB disconnect, device number 23 [ 239.087385][ T1039] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 239.089659][ T1039] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 239.090037][ T1039] ti_usb_3410_5052 6-1:2.0: device disconnected [ 239.185479][ T30] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 239.198904][ T5752] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 239.336580][ T30] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 239.337508][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.337528][ T30] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.339550][ T30] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 239.339571][ T30] usb 7-1: Product: syz [ 239.339582][ T30] usb 7-1: Manufacturer: syz [ 239.339594][ T30] usb 7-1: SerialNumber: syz [ 239.344445][ T30] usb 7-1: config 0 descriptor?? [ 239.346352][ T5752] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 239.347683][ T5752] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.347721][ T5752] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.354783][ T5752] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 239.354941][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 239.354996][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 239.356413][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 239.356470][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 239.359749][ T5752] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 239.360735][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 239.360768][ T5752] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 239.362528][ T5752] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 239.535686][ T8936] zswap: compressor z not available [ 239.537047][ T8936] 9p: Bad value for 'rfdno' [ 239.626162][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.634068][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.635510][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.646223][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.646877][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 240.151904][ T5752] usb 10-1: USB disconnect, device number 23 [ 240.235317][ T5752] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 240.280832][ T5752] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 240.294965][ T5752] keyspan 10-1:1.0: device disconnected [ 240.414142][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 241.179417][ T8956] 9p: Bad value for 'rfdno' [ 241.817066][ T8954] zswap: compressor z not available [ 241.986350][ T8965] jffs2: notice: (8965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.988420][ T30] usb 7-1: USB disconnect, device number 29 [ 242.068944][ T8967] kvm: pic: non byte read [ 242.071184][ T8967] kvm: pic: non byte read [ 242.073296][ T8967] kvm: pic: non byte read [ 242.075262][ T8967] kvm: pic: single mode not supported [ 242.075313][ T8967] kvm: pic: level sensitive irq not supported [ 242.076626][ T8967] kvm: pic: non byte read [ 242.081883][ T8967] kvm: pic: non byte read [ 242.094039][ T8967] kvm: pic: non byte read [ 242.096749][ T8967] kvm: pic: non byte read [ 242.101266][ T8967] kvm: pic: non byte read [ 242.102642][ T8967] kvm: pic: level sensitive irq not supported [ 242.102932][ T8967] kvm: pic: non byte read [ 242.106044][ T8970] input: syz1 as /devices/virtual/input/input17 [ 242.347007][ T8979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.505503][ T30] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 242.517034][ T8990] 9p: Bad value for 'rfdno' [ 242.537176][ T8987] zswap: compressor z not available [ 242.656955][ T30] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 242.657674][ T8995] zswap: compressor z not available [ 242.658038][ T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.658074][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.662102][ T8995] 9p: Bad value for 'rfdno' [ 242.664162][ T30] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 242.664518][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 242.664569][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 242.668558][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 242.668618][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 242.674016][ T30] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 242.680683][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 242.680749][ T30] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 242.694171][ T30] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 242.883599][ T9003] 9p: Bad value for 'rfdno' [ 243.080182][ T1039] usb 9-1: USB disconnect, device number 23 [ 243.180782][ T1039] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 243.220784][ T1039] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 243.260867][ T1039] keyspan 9-1:1.0: device disconnected [ 244.197478][ T9001] zswap: compressor z not available [ 244.740206][ T9008] FAULT_INJECTION: forcing a failure. [ 244.740206][ T9008] name failslab, interval 1, probability 0, space 0, times 0 [ 244.740229][ T9008] CPU: 2 UID: 0 PID: 9008 Comm: syz.5.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.740245][ T9008] Tainted: [L]=SOFTLOCKUP [ 244.740250][ T9008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.740257][ T9008] Call Trace: [ 244.740261][ T9008] [ 244.740266][ T9008] dump_stack_lvl+0x100/0x190 [ 244.740286][ T9008] should_fail_ex.cold+0x5/0xa [ 244.740301][ T9008] should_failslab+0xc2/0x120 [ 244.740317][ T9008] __kmalloc_noprof+0xfc/0x840 [ 244.740330][ T9008] ? trace_kmalloc+0xeb/0x110 [ 244.740343][ T9008] ? lsm_blob_alloc+0x68/0x90 [ 244.740358][ T9008] lsm_blob_alloc+0x68/0x90 [ 244.740370][ T9008] security_sk_alloc+0x2d/0x290 [ 244.740385][ T9008] sk_prot_alloc+0x12a/0x2a0 [ 244.740410][ T9008] sk_alloc+0x36/0xe80 [ 244.740424][ T9008] tun_chr_open+0x82/0x5e0 [ 244.740437][ T9008] ? __pfx_misc_open+0x10/0x10 [ 244.740484][ T9008] ? __pfx_tun_chr_open+0x10/0x10 [ 244.740523][ T9008] misc_open+0x26d/0x450 [ 244.740548][ T9008] ? __pfx_misc_open+0x10/0x10 [ 244.740569][ T9008] chrdev_open+0x234/0x6a0 [ 244.740587][ T9008] ? __pfx_apparmor_file_open+0x10/0x10 [ 244.740606][ T9008] ? __pfx_chrdev_open+0x10/0x10 [ 244.740620][ T9008] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 244.740637][ T9008] do_dentry_open+0x6ab/0x14d0 [ 244.740649][ T9008] ? __pfx_chrdev_open+0x10/0x10 [ 244.740664][ T9008] vfs_open+0x82/0x3f0 [ 244.740682][ T9008] path_openat+0x19fa/0x2440 [ 244.740698][ T9008] ? __pfx_path_openat+0x10/0x10 [ 244.740716][ T9008] do_file_open+0x20e/0x430 [ 244.740731][ T9008] ? __pfx_do_file_open+0x10/0x10 [ 244.740754][ T9008] ? _raw_spin_unlock+0x28/0x50 [ 244.740768][ T9008] ? alloc_fd+0x471/0x7a0 [ 244.740784][ T9008] do_sys_openat2+0x10f/0x1e0 [ 244.740799][ T9008] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.740819][ T9008] __ia32_compat_sys_openat+0x12d/0x210 [ 244.740835][ T9008] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 244.740858][ T9008] __do_fast_syscall_32+0x13a/0x8b0 [ 244.740875][ T9008] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.740893][ T9008] do_fast_syscall_32+0x32/0x70 [ 244.740910][ T9008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.740925][ T9008] RIP: 0023:0xf7fd3fec [ 244.740938][ T9008] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 244.740943][ T9008] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 244.740955][ T9008] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 244.740963][ T9008] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.740971][ T9008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.740977][ T9008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.740983][ T9008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.740997][ T9008] [ 244.831370][ T9013] gre1: entered promiscuous mode [ 245.083280][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 245.105663][ T25] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 245.109712][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.950'. [ 245.144205][ T9036] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 245.203120][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.950'. [ 245.203167][ T9036] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 245.257937][ T9048] 9p: Bad value for 'rfdno' [ 245.283848][ T25] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 245.293787][ T25] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.314131][ T25] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.325006][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.325021][ T25] usb 9-1: Product: syz [ 245.325028][ T25] usb 9-1: Manufacturer: syz [ 245.325035][ T25] usb 9-1: SerialNumber: syz [ 245.336177][ T9051] 9p: Bad value for 'rfdno' [ 245.443964][ T25] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 245.587100][ T25] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 245.631427][ T9055] 9p: Bad value for 'rfdno' [ 245.716070][ T25] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 246.234785][ T9044] zswap: compressor z not available [ 246.946313][ T9049] zswap: compressor z not available [ 247.091662][ T9054] zswap: compressor z not available [ 247.668496][ T9080] zswap: compressor z not available [ 247.671114][ T9080] 9p: Bad value for 'rfdno' [ 247.715920][ T9017] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 247.719575][ T1039] usb 9-1: USB disconnect, device number 24 [ 247.731363][ T1039] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 247.736200][ T1039] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 247.736633][ T1039] ti_usb_3410_5052 9-1:2.0: device disconnected [ 248.933653][ T9121] syzkaller0: left promiscuous mode [ 248.933667][ T9121] syzkaller0: left allmulticast mode [ 249.019937][ T9128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.155531][ T1039] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 249.306150][ T1039] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 249.306644][ T1039] usb 9-1: config 0 has no interfaces? [ 249.308473][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.308492][ T1039] usb 9-1: Product: syz [ 249.308503][ T1039] usb 9-1: Manufacturer: syz [ 249.308514][ T1039] usb 9-1: SerialNumber: syz [ 249.312154][ T1039] usb 9-1: config 0 descriptor?? [ 249.381052][ T9145] FAULT_INJECTION: forcing a failure. [ 249.381052][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 249.381085][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.2.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.381113][ T9145] Tainted: [L]=SOFTLOCKUP [ 249.381121][ T9145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.381132][ T9145] Call Trace: [ 249.381139][ T9145] [ 249.381146][ T9145] dump_stack_lvl+0x100/0x190 [ 249.381176][ T9145] should_fail_ex.cold+0x5/0xa [ 249.381201][ T9145] should_failslab+0xc2/0x120 [ 249.381227][ T9145] kmem_cache_alloc_noprof+0x92/0x6a0 [ 249.381249][ T9145] ? d_instantiate+0x8a/0xb0 [ 249.381275][ T9145] ? alloc_empty_file+0x5b/0x1c0 [ 249.381305][ T9145] alloc_empty_file+0x5b/0x1c0 [ 249.381329][ T9145] alloc_file_pseudo+0x183/0x290 [ 249.381356][ T9145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 249.381389][ T9145] __shmem_file_setup+0x205/0x460 [ 249.381413][ T9145] ? __pfx___shmem_file_setup+0x10/0x10 [ 249.381439][ T9145] ? vm_area_alloc+0x1f/0x160 [ 249.381468][ T9145] shmem_zero_setup+0x96/0x1b0 [ 249.381498][ T9145] __mmap_region+0x2692/0x32c0 [ 249.381531][ T9145] ? __pfx___mmap_region+0x10/0x10 [ 249.381560][ T9145] ? __lock_acquire+0x5c0/0x1f40 [ 249.381612][ T9145] ? mas_next_slot+0xc05/0x13a0 [ 249.381658][ T9145] ? unmapped_area_topdown+0x54e/0x6a0 [ 249.381694][ T9145] ? lock_acquire+0x1d1/0x380 [ 249.381719][ T9145] ? __update_page_owner_handle+0x63/0x530 [ 249.381786][ T9145] mmap_region+0x3db/0x6d0 [ 249.381807][ T9145] ? __pfx_mmap_region+0x10/0x10 [ 249.381825][ T9145] ? shmem_get_unmapped_area+0x141/0x960 [ 249.381852][ T9145] ? cap_mmap_addr+0x4b/0x120 [ 249.381873][ T9145] ? bpf_lsm_mmap_addr+0x9/0x30 [ 249.381898][ T9145] ? security_mmap_addr+0x71/0x1e0 [ 249.381925][ T9145] ? __get_unmapped_area+0x255/0x3e0 [ 249.381963][ T9145] do_mmap+0x12c7/0x1c30 [ 249.381990][ T9145] ? lock_acquire+0x1d1/0x380 [ 249.382015][ T9145] ? __pfx_do_mmap+0x10/0x10 [ 249.382048][ T9145] ? __pfx_down_write_killable+0x10/0x10 [ 249.382072][ T9145] vm_mmap_pgoff+0x28d/0x470 [ 249.382097][ T9145] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 249.382116][ T9145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 249.382141][ T9145] ? kvm_alloc_apic_access_page+0x27/0x110 [ 249.382171][ T9145] vm_mmap+0x8e/0xc0 [ 249.382193][ T9145] __x86_set_memory_region+0x2c8/0x7a0 [ 249.382216][ T9145] ? kvm_alloc_apic_access_page+0x27/0x110 [ 249.382241][ T9145] ? __pfx___x86_set_memory_region+0x10/0x10 [ 249.382265][ T9145] ? __pfx___mutex_lock+0x10/0x10 [ 249.382291][ T9145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 249.382317][ T9145] ? policy_nodemask+0xed/0x4f0 [ 249.382347][ T9145] ? __asan_memset+0x23/0x50 [ 249.382365][ T9145] ? alloc_loaded_vmcs+0x1b5/0x2d0 [ 249.382396][ T9145] kvm_alloc_apic_access_page+0x9e/0x110 [ 249.382452][ T9145] vmx_vcpu_create+0x79b/0xb90 [ 249.382473][ T9145] ? intel_pmu_init+0x3ac/0x560 [ 249.382499][ T9145] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 249.382519][ T9145] ? rcu_is_watching+0x13/0xc0 [ 249.382552][ T9145] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.382584][ T9145] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.382616][ T9145] kvm_arch_vcpu_create+0x670/0xab0 [ 249.382642][ T9145] kvm_vm_ioctl+0x7e3/0x42d0 [ 249.382665][ T9145] ? tomoyo_path_number_perm+0x46d/0x580 [ 249.382695][ T9145] ? __pfx_stack_trace_save+0x10/0x10 [ 249.382723][ T9145] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 249.382739][ T9145] ? __lock_acquire+0x5c0/0x1f40 [ 249.382768][ T9145] ? tomoyo_path_number_perm+0x46d/0x580 [ 249.382796][ T9145] ? kasan_save_stack+0x3f/0x50 [ 249.382816][ T9145] ? kasan_save_stack+0x30/0x50 [ 249.382836][ T9145] ? kasan_save_track+0x14/0x30 [ 249.382856][ T9145] ? kasan_save_free_info+0x3b/0x70 [ 249.382883][ T9145] ? __kasan_slab_free+0x5f/0x80 [ 249.382905][ T9145] ? kfree+0x22b/0x6d0 [ 249.382930][ T9145] ? tomoyo_path_number_perm+0x46d/0x580 [ 249.382955][ T9145] ? security_file_ioctl_compat+0xd3/0x230 [ 249.382981][ T9145] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 249.383009][ T9145] ? __do_fast_syscall_32+0x13a/0x8b0 [ 249.383037][ T9145] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 249.383066][ T9145] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 249.383118][ T9145] ? kasan_quarantine_put+0x104/0x240 [ 249.383138][ T9145] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.383162][ T9145] ? find_held_lock+0x2b/0x80 [ 249.383181][ T9145] ? tomoyo_path_number_perm+0x28f/0x580 [ 249.383203][ T9145] ? tomoyo_path_number_perm+0x28f/0x580 [ 249.383229][ T9145] ? tomoyo_path_number_perm+0x188/0x580 [ 249.383253][ T9145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.383275][ T9145] ? futex_wait+0x11e/0x370 [ 249.383302][ T9145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.383329][ T9145] ? do_vfs_ioctl+0x226/0x13e0 [ 249.383355][ T9145] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.383382][ T9145] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 249.383402][ T9145] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 249.383420][ T9145] ? __fget_files+0x34/0x3d0 [ 249.383442][ T9145] ? find_held_lock+0x2b/0x80 [ 249.383459][ T9145] ? __fget_files+0x215/0x3d0 [ 249.383476][ T9145] ? hook_file_ioctl_common+0x140/0x440 [ 249.383510][ T9145] ? __fget_files+0x21f/0x3d0 [ 249.383535][ T9145] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 249.383555][ T9145] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 249.383600][ T9145] __do_fast_syscall_32+0x13a/0x8b0 [ 249.383635][ T9145] do_fast_syscall_32+0x32/0x70 [ 249.383663][ T9145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.383686][ T9145] RIP: 0023:0xf6fcefec [ 249.383707][ T9145] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 249.383715][ T9145] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 249.383734][ T9145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 249.383746][ T9145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.383757][ T9145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.383769][ T9145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.383781][ T9145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.383807][ T9145] [ 249.458430][ T9151] tipc: Started in network mode [ 249.458443][ T9151] tipc: Node identity 815e0004, cluster identity 4711 [ 249.458450][ T9151] tipc: Node number set to 2170421252 [ 249.520775][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.521007][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.523313][ T1831] usb 9-1: USB disconnect, device number 25 [ 249.549454][ T9157] binder: 9156:9157 ioctl c0306201 80000040 returned -14 [ 249.549665][ T9157] binder: 9156:9157 ioctl c0306201 80000640 returned -22 [ 249.675489][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 249.836116][ T9] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 249.837268][ T9] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.838345][ T9] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.842595][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.842614][ T9] usb 10-1: Product: syz [ 249.842626][ T9] usb 10-1: Manufacturer: syz [ 249.842636][ T9] usb 10-1: SerialNumber: syz [ 249.856405][ T9] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 249.860859][ T9] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 249.863292][ T9] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 250.076492][ T9177] zswap: compressor z not available [ 250.089419][ T9177] 9p: Bad value for 'rfdno' [ 250.889553][ T9187] kvm: user requested TSC rate below hardware speed [ 250.890172][ T9187] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 250.890379][ T9187] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 251.060343][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 251.062332][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 251.110515][ T9192] syzkaller1: entered promiscuous mode [ 251.110532][ T9192] syzkaller1: entered allmulticast mode [ 251.276102][ T9196] kvm: pic: non byte read [ 251.278447][ T9196] kvm: pic: level sensitive irq not supported [ 251.278738][ T9196] kvm: pic: non byte read [ 251.280176][ T9196] kvm: pic: single mode not supported [ 251.280461][ T9196] kvm: pic: non byte read [ 251.645603][ T9149] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 251.653352][ T30] usb 10-1: USB disconnect, device number 24 [ 251.661398][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 251.665995][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 251.666966][ T30] ti_usb_3410_5052 10-1:2.0: device disconnected [ 252.302723][ T9207] zswap: compressor z not available [ 252.304370][ T9207] 9p: Bad value for 'rfdno' [ 252.915648][ T9] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 252.922866][ T9221] FAULT_INJECTION: forcing a failure. [ 252.922866][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 252.922896][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.2.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.922920][ T9221] Tainted: [L]=SOFTLOCKUP [ 252.922925][ T9221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.922934][ T9221] Call Trace: [ 252.922939][ T9221] [ 252.922946][ T9221] dump_stack_lvl+0x100/0x190 [ 252.922973][ T9221] should_fail_ex.cold+0x5/0xa [ 252.923008][ T9221] should_failslab+0xc2/0x120 [ 252.923031][ T9221] __kmalloc_cache_noprof+0x91/0x6d0 [ 252.923058][ T9221] ? lockdep_init_map_type+0x5c/0x250 [ 252.923081][ T9221] ? snd_seq_prioq_new+0x3f/0x110 [ 252.923106][ T9221] snd_seq_prioq_new+0x3f/0x110 [ 252.923127][ T9221] snd_seq_queue_alloc+0x153/0x540 [ 252.923146][ T9221] snd_seq_ioctl_create_queue+0xa9/0x370 [ 252.923170][ T9221] call_seq_client_ctl+0xa3/0x130 [ 252.923192][ T9221] snd_seq_kernel_client_ctl+0x35/0x50 [ 252.923213][ T9221] alloc_seq_queue+0xdb/0x180 [ 252.923236][ T9221] ? __pfx_alloc_seq_queue+0x10/0x10 [ 252.923268][ T9221] ? find_held_lock+0x2b/0x80 [ 252.923286][ T9221] ? mark_held_locks+0x40/0x70 [ 252.923313][ T9221] snd_seq_oss_open+0x2b2/0xa10 [ 252.923339][ T9221] odev_open+0x6f/0x90 [ 252.923360][ T9221] ? __pfx_odev_open+0x10/0x10 [ 252.923380][ T9221] soundcore_open+0x2e3/0x5a0 [ 252.923404][ T9221] ? __pfx_soundcore_open+0x10/0x10 [ 252.923425][ T9221] chrdev_open+0x234/0x6a0 [ 252.923446][ T9221] ? __pfx_apparmor_file_open+0x10/0x10 [ 252.923472][ T9221] ? __pfx_chrdev_open+0x10/0x10 [ 252.923491][ T9221] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 252.923517][ T9221] do_dentry_open+0x6ab/0x14d0 [ 252.923534][ T9221] ? __pfx_chrdev_open+0x10/0x10 [ 252.923558][ T9221] vfs_open+0x82/0x3f0 [ 252.923581][ T9221] path_openat+0x19fa/0x2440 [ 252.923604][ T9221] ? __pfx_path_openat+0x10/0x10 [ 252.923664][ T9221] do_file_open+0x20e/0x430 [ 252.923686][ T9221] ? __pfx_do_file_open+0x10/0x10 [ 252.923721][ T9221] ? _raw_spin_unlock+0x28/0x50 [ 252.923744][ T9221] ? alloc_fd+0x471/0x7a0 [ 252.923769][ T9221] do_sys_openat2+0x10f/0x1e0 [ 252.923790][ T9221] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.923819][ T9221] __ia32_compat_sys_openat+0x12d/0x210 [ 252.923844][ T9221] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 252.923875][ T9221] __do_fast_syscall_32+0x13a/0x8b0 [ 252.923902][ T9221] do_fast_syscall_32+0x32/0x70 [ 252.923927][ T9221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.923948][ T9221] RIP: 0023:0xf6fcefec [ 252.923966][ T9221] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 252.923974][ T9221] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 252.923992][ T9221] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 252.924012][ T9221] RDX: 0000000000008002 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.924022][ T9221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.924032][ T9221] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.924043][ T9221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.924063][ T9221] [ 253.066035][ T9] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 253.068743][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.068763][ T9] usb 9-1: Product: syz [ 253.068773][ T9] usb 9-1: Manufacturer: syz [ 253.068783][ T9] usb 9-1: SerialNumber: syz [ 253.323196][ T9236] 9p: Bad value for 'rfdno' [ 253.382653][ T9234] zswap: compressor z not available [ 253.495696][ T30] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 253.518427][ T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 253.675949][ T30] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 253.676821][ T30] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.677634][ T30] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.681292][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.681306][ T30] usb 7-1: Product: syz [ 253.681314][ T30] usb 7-1: Manufacturer: syz [ 253.681322][ T30] usb 7-1: SerialNumber: syz [ 253.686872][ T30] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 253.724892][ T30] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 253.726568][ T30] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 254.056888][ T9243] FAULT_INJECTION: forcing a failure. [ 254.056888][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 254.056910][ T9243] CPU: 2 UID: 0 PID: 9243 Comm: syz.5.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.056925][ T9243] Tainted: [L]=SOFTLOCKUP [ 254.056930][ T9243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.056936][ T9243] Call Trace: [ 254.056940][ T9243] [ 254.056946][ T9243] dump_stack_lvl+0x100/0x190 [ 254.056971][ T9243] should_fail_ex.cold+0x5/0xa [ 254.056987][ T9243] should_failslab+0xc2/0x120 [ 254.057003][ T9243] __kmalloc_cache_noprof+0x91/0x6d0 [ 254.057021][ T9243] ? find_held_lock+0x2b/0x80 [ 254.057033][ T9243] ? init_srcu_struct_fields+0xa67/0xfa0 [ 254.057051][ T9243] init_srcu_struct_fields+0xa67/0xfa0 [ 254.057074][ T9243] blk_mq_alloc_tag_set+0x3cc/0x1330 [ 254.057097][ T9243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.057125][ T9243] ? idr_alloc+0xdd/0x130 [ 254.057151][ T9243] ? __pfx_idr_alloc+0x10/0x10 [ 254.057183][ T9243] loop_add+0x3b7/0xb60 [ 254.057204][ T9243] ? __pfx_loop_add+0x10/0x10 [ 254.057228][ T9243] ? __fget_files+0x34/0x3d0 [ 254.057241][ T9243] ? find_held_lock+0x2b/0x80 [ 254.057253][ T9243] ? __fget_files+0x215/0x3d0 [ 254.057267][ T9243] loop_control_ioctl+0xae/0x620 [ 254.057281][ T9243] ? __pfx_loop_control_ioctl+0x10/0x10 [ 254.057297][ T9243] ? __pfx_loop_control_ioctl+0x10/0x10 [ 254.057311][ T9243] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 254.057330][ T9243] __do_fast_syscall_32+0x13a/0x8b0 [ 254.057348][ T9243] do_fast_syscall_32+0x32/0x70 [ 254.057365][ T9243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.057379][ T9243] RIP: 0023:0xf7fd3fec [ 254.057393][ T9243] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 254.057401][ T9243] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 254.057419][ T9243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 254.057431][ T9243] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.057459][ T9243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.057473][ T9243] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 254.057485][ T9243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.057507][ T9243] [ 254.927648][ T9226] Set syz1 is full, maxelem 65536 reached [ 255.003175][ T9251] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 255.159111][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.159158][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.475677][ T9232] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 255.479498][ T50] usb 7-1: USB disconnect, device number 30 [ 255.491184][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 255.496359][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 255.497106][ T50] ti_usb_3410_5052 7-1:2.0: device disconnected [ 255.706117][ T1831] usb 9-1: USB disconnect, device number 26 [ 255.709453][ T1831] usblp0: removed [ 255.932963][ T9272] 9p: Bad value for 'rfdno' [ 255.966748][ T9269] zswap: compressor z not available [ 256.838599][ T9288] nvme nvme0: failed to connect socket: -512 [ 257.131111][ T9288] nvme_fabrics: missing parameter 'transport=%s' [ 257.131124][ T9288] nvme_fabrics: missing parameter 'nqn=%s' [ 257.428065][ T9309] warning: `syz.5.1036' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.047621][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1049'. [ 258.078286][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.092849][ T9346] macvlan2: entered promiscuous mode [ 258.092871][ T9346] macvlan2: entered allmulticast mode [ 258.093791][ T9346] bond1: (slave macvlan2): Opening slave failed [ 258.161635][ T9352] FAULT_INJECTION: forcing a failure. [ 258.161635][ T9352] name failslab, interval 1, probability 0, space 0, times 0 [ 258.161669][ T9352] CPU: 3 UID: 0 PID: 9352 Comm: syz.4.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.161692][ T9352] Tainted: [L]=SOFTLOCKUP [ 258.161699][ T9352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.161709][ T9352] Call Trace: [ 258.161715][ T9352] [ 258.161722][ T9352] dump_stack_lvl+0x100/0x190 [ 258.161765][ T9352] should_fail_ex.cold+0x5/0xa [ 258.161789][ T9352] should_failslab+0xc2/0x120 [ 258.161821][ T9352] kmem_cache_alloc_noprof+0x92/0x6a0 [ 258.161843][ T9352] ? sk_prot_alloc+0x60/0x2a0 [ 258.161880][ T9352] sk_prot_alloc+0x60/0x2a0 [ 258.161927][ T9352] sk_alloc+0x36/0xe80 [ 258.161950][ T9352] pn_socket_create+0x22d/0x560 [ 258.161978][ T9352] __sock_create+0x339/0x860 [ 258.161997][ T9352] __sys_socket+0x14d/0x260 [ 258.162013][ T9352] ? xfd_validate_state+0x129/0x190 [ 258.162038][ T9352] ? __pfx___sys_socket+0x10/0x10 [ 258.162060][ T9352] __ia32_sys_socket+0x72/0xb0 [ 258.162075][ T9352] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.162106][ T9352] __do_fast_syscall_32+0x13a/0x8b0 [ 258.162134][ T9352] do_fast_syscall_32+0x32/0x70 [ 258.162159][ T9352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.162180][ T9352] RIP: 0023:0xf701efec [ 258.162199][ T9352] Code: Unable to access opcode bytes at 0xf701efc2. [ 258.162207][ T9352] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 258.162227][ T9352] RAX: ffffffffffffffda RBX: 0000000000000023 RCX: 0000000000000005 [ 258.162241][ T9352] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.162252][ T9352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.162262][ T9352] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.162271][ T9352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.162290][ T9352] [ 258.310874][ T9356] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 258.326259][ T5894] libceph: connect (1)127.0.0.1:6789 error -101 [ 258.326422][ T5894] libceph: mon0 (1)127.0.0.1:6789 connect error [ 258.485842][ T5752] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 258.597921][ T5894] libceph: connect (1)127.0.0.1:6789 error -101 [ 258.598048][ T5894] libceph: mon0 (1)127.0.0.1:6789 connect error [ 258.636087][ T5752] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 258.637029][ T5752] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.637042][ T5752] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.638838][ T5752] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 258.638851][ T5752] usb 9-1: Product: syz [ 258.638859][ T5752] usb 9-1: Manufacturer: syz [ 258.638865][ T5752] usb 9-1: SerialNumber: syz [ 258.640295][ T5752] usb 9-1: config 0 descriptor?? [ 258.908796][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 258.910514][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 258.912158][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 258.912928][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 258.915124][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 259.137697][ T9359] ceph: No mds server is up or the cluster is laggy [ 260.009887][ T9] libceph: connect (1)127.0.0.1:6789 error -101 [ 260.009991][ T9] libceph: mon0 (1)127.0.0.1:6789 connect error [ 260.026801][ T5108] usb 9-1: USB disconnect, device number 27 [ 260.557168][ T9366] Dead loop on virtual device ip6_vti0 (net 34), fix it urgently! [ 260.561672][ T9367] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 260.748126][ T9379] 9p: Bad value for 'rfdno' [ 260.763669][ T9375] zswap: compressor z not available [ 260.977641][ T9383] FAULT_INJECTION: forcing a failure. [ 260.977641][ T9383] name failslab, interval 1, probability 0, space 0, times 0 [ 260.977675][ T9383] CPU: 3 UID: 0 PID: 9383 Comm: syz.4.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.977699][ T9383] Tainted: [L]=SOFTLOCKUP [ 260.977705][ T9383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.977714][ T9383] Call Trace: [ 260.977720][ T9383] [ 260.977728][ T9383] dump_stack_lvl+0x100/0x190 [ 260.977755][ T9383] should_fail_ex.cold+0x5/0xa [ 260.977780][ T9383] should_failslab+0xc2/0x120 [ 260.977807][ T9383] __kmalloc_cache_noprof+0x91/0x6d0 [ 260.977837][ T9383] ? find_inode_fast+0xa5/0xa30 [ 260.977862][ T9383] ? nbd_alloc_and_init_config+0x97/0x2a0 [ 260.977897][ T9383] nbd_alloc_and_init_config+0x97/0x2a0 [ 260.977927][ T9383] nbd_open+0x4cc/0x700 [ 260.977956][ T9383] ? __pfx_nbd_open+0x10/0x10 [ 260.977987][ T9383] ? __pfx_nbd_open+0x10/0x10 [ 260.978015][ T9383] blkdev_get_whole+0x99/0x290 [ 260.978039][ T9383] bdev_open+0x2c7/0xe40 [ 260.978065][ T9383] blkdev_open+0x34e/0x4f0 [ 260.978091][ T9383] do_dentry_open+0x6ab/0x14d0 [ 260.978111][ T9383] ? __pfx_blkdev_open+0x10/0x10 [ 260.978141][ T9383] vfs_open+0x82/0x3f0 [ 260.978169][ T9383] path_openat+0x19fa/0x2440 [ 260.978199][ T9383] ? __pfx_path_openat+0x10/0x10 [ 260.978228][ T9383] do_file_open+0x20e/0x430 [ 260.978255][ T9383] ? __pfx_do_file_open+0x10/0x10 [ 260.978295][ T9383] ? _raw_spin_unlock+0x28/0x50 [ 260.978319][ T9383] ? alloc_fd+0x471/0x7a0 [ 260.978374][ T9383] do_sys_openat2+0x10f/0x1e0 [ 260.978411][ T9383] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.978436][ T9383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.978474][ T9383] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 260.978499][ T9383] __ia32_compat_sys_openat+0x12d/0x210 [ 260.978530][ T9383] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 260.978570][ T9383] do_int80_emulation+0x166/0x650 [ 260.978605][ T9383] asm_int80_emulation+0x1a/0x20 [ 260.978624][ T9383] RIP: 0023:0xf71575ab [ 260.978641][ T9383] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 260.978659][ T9383] RSP: 002b:00000000f540d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 260.978698][ T9383] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f540d100 [ 260.978712][ T9383] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.978724][ T9383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.978737][ T9383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.978749][ T9383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.978773][ T9383] [ 261.096621][ T9385] mmap: syz.4.1061 (9385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.285427][ T9390] 9p: Bad value for 'rfdno' [ 261.609073][ T9394] FAULT_INJECTION: forcing a failure. [ 261.609073][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 261.609097][ T9394] CPU: 1 UID: 0 PID: 9394 Comm: syz.1.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.609113][ T9394] Tainted: [L]=SOFTLOCKUP [ 261.609117][ T9394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.609124][ T9394] Call Trace: [ 261.609128][ T9394] [ 261.609133][ T9394] dump_stack_lvl+0x100/0x190 [ 261.609151][ T9394] should_fail_ex.cold+0x5/0xa [ 261.609168][ T9394] should_failslab+0xc2/0x120 [ 261.609184][ T9394] __kmalloc_cache_noprof+0x91/0x6d0 [ 261.609202][ T9394] ? nf_tables_newflowtable+0x62c/0x2830 [ 261.609222][ T9394] nf_tables_newflowtable+0x62c/0x2830 [ 261.609243][ T9394] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 261.609262][ T9394] ? __pfx___nla_validate_parse+0x10/0x10 [ 261.609275][ T9394] ? lock_acquire+0x1d1/0x380 [ 261.609291][ T9394] ? net_generic+0x25/0x2a0 [ 261.609310][ T9394] ? __nla_parse+0x40/0x60 [ 261.609322][ T9394] nfnetlink_rcv_batch+0x1410/0x2880 [ 261.609367][ T9394] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 261.609391][ T9394] ? find_held_lock+0x2b/0x80 [ 261.609405][ T9394] ? __local_bh_enable_ip+0xa5/0x120 [ 261.609423][ T9394] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.609441][ T9394] ? __dev_queue_xmit+0xa12/0x4970 [ 261.609472][ T9394] ? __nla_parse+0x40/0x60 [ 261.609484][ T9394] nfnetlink_rcv+0x3bd/0x440 [ 261.609500][ T9394] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.609525][ T9394] netlink_unicast+0x585/0x850 [ 261.609545][ T9394] ? __pfx_netlink_unicast+0x10/0x10 [ 261.609570][ T9394] netlink_sendmsg+0x8b0/0xda0 [ 261.609594][ T9394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.609611][ T9394] ? apparmor_socket_sendmsg+0x165/0x280 [ 261.609629][ T9394] ____sys_sendmsg+0xa4d/0xbe0 [ 261.609644][ T9394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.609666][ T9394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.609695][ T9394] ___sys_sendmsg+0x190/0x1e0 [ 261.609715][ T9394] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.609733][ T9394] ? futex_wait+0x11e/0x370 [ 261.609763][ T9394] ? find_held_lock+0x2b/0x80 [ 261.609795][ T9394] __sys_sendmsg+0x160/0x210 [ 261.609819][ T9394] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.609853][ T9394] __do_fast_syscall_32+0x13a/0x8b0 [ 261.609882][ T9394] do_fast_syscall_32+0x32/0x70 [ 261.609908][ T9394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.609928][ T9394] RIP: 0023:0xf7fa7fec [ 261.609949][ T9394] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 261.609956][ T9394] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 261.609975][ T9394] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 261.609985][ T9394] RDX: 00000000040080c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.609996][ T9394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.610006][ T9394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 261.610017][ T9394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.610040][ T9394] [ 261.784682][ T9388] zswap: compressor z not available [ 261.827199][ T5894] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 261.998844][ T5894] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 262.001991][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.002010][ T5894] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.004017][ T5894] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 262.004038][ T5894] usb 7-1: Product: syz [ 262.004048][ T5894] usb 7-1: Manufacturer: syz [ 262.004058][ T5894] usb 7-1: SerialNumber: syz [ 262.006097][ T5894] usb 7-1: config 0 descriptor?? [ 262.294437][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 262.298306][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 262.301940][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 262.308474][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 262.535499][ T50] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 262.685543][ T50] usb 10-1: Using ep0 maxpacket: 32 [ 262.688565][ T50] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 262.689402][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.694182][ T50] usb 10-1: config 0 descriptor?? [ 262.700557][ T50] as10x_usb: device has been detected [ 262.701228][ T50] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 262.728743][ T50] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 262.765028][ T50] as10x_usb: error during firmware upload part1 [ 262.765129][ T50] Registered device nBox DVB-T Dongle [ 262.899395][ T50] usb 10-1: USB disconnect, device number 25 [ 262.976975][ T9423] FAULT_INJECTION: forcing a failure. [ 262.976975][ T9423] name failslab, interval 1, probability 0, space 0, times 0 [ 262.977011][ T9423] CPU: 3 UID: 0 PID: 9423 Comm: syz.4.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.977039][ T9423] Tainted: [L]=SOFTLOCKUP [ 262.977047][ T9423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.977059][ T9423] Call Trace: [ 262.977066][ T9423] [ 262.977074][ T9423] dump_stack_lvl+0x100/0x190 [ 262.977115][ T9423] should_fail_ex.cold+0x5/0xa [ 262.977140][ T9423] should_failslab+0xc2/0x120 [ 262.977172][ T9423] __kmalloc_cache_noprof+0x91/0x6d0 [ 262.977203][ T9423] ? fuse_chan_new+0x40/0x320 [ 262.977230][ T9423] fuse_chan_new+0x40/0x320 [ 262.977253][ T9423] fuse_dev_chan_new+0x14/0x2b0 [ 262.977276][ T9423] ? bpf_lsm_capable+0x9/0x10 [ 262.977302][ T9423] fuse_get_tree+0x42/0x490 [ 262.977323][ T9423] vfs_get_tree+0x92/0x320 [ 262.977349][ T9423] path_mount+0x7d0/0x24c0 [ 262.977402][ T9423] ? __pfx_path_mount+0x10/0x10 [ 262.977429][ T9423] ? lockdep_hardirqs_on+0x7d/0x110 [ 262.977466][ T9423] ? putname+0xb1/0x110 [ 262.977490][ T9423] ? kmem_cache_free+0x127/0x6c0 [ 262.977526][ T9423] ? __ia32_sys_mount+0x292/0x310 [ 262.977551][ T9423] __ia32_sys_mount+0x292/0x310 [ 262.977576][ T9423] ? __pfx___ia32_sys_mount+0x10/0x10 [ 262.977607][ T9423] __do_fast_syscall_32+0x13a/0x8b0 [ 262.977647][ T9423] do_fast_syscall_32+0x32/0x70 [ 262.977674][ T9423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.977698][ T9423] RIP: 0023:0xf701efec [ 262.977719][ T9423] Code: Unable to access opcode bytes at 0xf701efc2. [ 262.977728][ T9423] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 262.977746][ T9423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 262.977758][ T9423] RDX: 0000000080002100 RSI: 0000000000200000 RDI: 0000000080004400 [ 262.977768][ T9423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.977780][ T9423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.977792][ T9423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.977817][ T9423] [ 263.078573][ T9425] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 263.095247][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.119785][ T50] Unregistered device nBox DVB-T Dongle [ 263.122112][ T50] as10x_usb: device has been disconnected [ 263.133041][ T9425] bridge1: entered promiscuous mode [ 263.142976][ T9425] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 263.914809][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 263.914862][ T43] audit: type=1326 audit(1789177391.258:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.914891][ T43] audit: type=1326 audit(1789177391.258:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.915100][ T43] audit: type=1326 audit(1789177391.258:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.915122][ T43] audit: type=1326 audit(1789177391.258:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4017 code=0x7ffc0000 [ 263.915250][ T43] audit: type=1326 audit(1789177391.258:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4017 code=0x7ffc0000 [ 263.915343][ T43] audit: type=1326 audit(1789177391.258:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.927561][ T43] audit: type=1326 audit(1789177391.258:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.927608][ T43] audit: type=1326 audit(1789177391.268:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4017 code=0x7ffc0000 [ 263.927639][ T43] audit: type=1326 audit(1789177391.268:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 263.927671][ T43] audit: type=1326 audit(1789177391.268:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.5.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4017 code=0x7ffc0000 [ 264.181590][ T30] usb 7-1: USB disconnect, device number 31 [ 264.220333][ T9451] FAULT_INJECTION: forcing a failure. [ 264.220333][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.220356][ T9451] CPU: 3 UID: 0 PID: 9451 Comm: syz.4.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.220372][ T9451] Tainted: [L]=SOFTLOCKUP [ 264.220377][ T9451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.220384][ T9451] Call Trace: [ 264.220388][ T9451] [ 264.220393][ T9451] dump_stack_lvl+0x100/0x190 [ 264.220412][ T9451] should_fail_ex.cold+0x5/0xa [ 264.220427][ T9451] _copy_from_user+0x2e/0xd0 [ 264.220443][ T9451] ucma_query+0x93/0x500 [ 264.220481][ T9451] ? __might_fault+0xc5/0x140 [ 264.220502][ T9451] ? __pfx_ucma_query+0x10/0x10 [ 264.220519][ T9451] ? __pfx_ucma_query+0x10/0x10 [ 264.220534][ T9451] ucma_write+0x1fb/0x330 [ 264.220547][ T9451] ? __pfx_ucma_write+0x10/0x10 [ 264.220560][ T9451] ? bpf_lsm_file_permission+0x9/0x10 [ 264.220575][ T9451] ? security_file_permission+0x76/0x210 [ 264.220592][ T9451] ? rw_verify_area+0xce/0x6d0 [ 264.220610][ T9451] vfs_write+0x2aa/0x1050 [ 264.220621][ T9451] ? __pfx_ucma_write+0x10/0x10 [ 264.220634][ T9451] ? lock_acquire+0x1d1/0x380 [ 264.220648][ T9451] ? __fget_files+0x34/0x3d0 [ 264.220660][ T9451] ? __pfx_vfs_write+0x10/0x10 [ 264.220670][ T9451] ? find_held_lock+0x2b/0x80 [ 264.220680][ T9451] ? __fget_files+0x215/0x3d0 [ 264.220691][ T9451] ? __fget_files+0x215/0x3d0 [ 264.220705][ T9451] ? __fget_files+0x21f/0x3d0 [ 264.220720][ T9451] ksys_write+0x1f8/0x250 [ 264.220731][ T9451] ? __pfx_ksys_write+0x10/0x10 [ 264.220746][ T9451] __do_fast_syscall_32+0x13a/0x8b0 [ 264.220765][ T9451] do_fast_syscall_32+0x32/0x70 [ 264.220781][ T9451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.220796][ T9451] RIP: 0023:0xf701efec [ 264.220808][ T9451] Code: Unable to access opcode bytes at 0xf701efc2. [ 264.220812][ T9451] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 264.220823][ T9451] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 264.220830][ T9451] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.220836][ T9451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.220842][ T9451] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 264.220848][ T9451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.220862][ T9451] [ 264.352965][ T9455] FAULT_INJECTION: forcing a failure. [ 264.352965][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 264.353000][ T9455] CPU: 1 UID: 0 PID: 9455 Comm: syz.1.1084 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.353027][ T9455] Tainted: [L]=SOFTLOCKUP [ 264.353054][ T9455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.353068][ T9455] Call Trace: [ 264.353075][ T9455] [ 264.353083][ T9455] dump_stack_lvl+0x100/0x190 [ 264.353117][ T9455] should_fail_ex.cold+0x5/0xa [ 264.353144][ T9455] should_failslab+0xc2/0x120 [ 264.353171][ T9455] __kmalloc_node_noprof+0xff/0x880 [ 264.353197][ T9455] ? mempool_init_node+0x11b/0x6f0 [ 264.353218][ T9455] ? __pfx_mempool_free_slab+0x10/0x10 [ 264.353245][ T9455] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 264.353274][ T9455] mempool_init_node+0x11b/0x6f0 [ 264.353299][ T9455] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 264.353327][ T9455] ? __pfx_mempool_free_slab+0x10/0x10 [ 264.353355][ T9455] mempool_init_noprof+0x3a/0x50 [ 264.353376][ T9455] bioset_init+0x45e/0x8a0 [ 264.353408][ T9455] ? __pfx_bioset_init+0x10/0x10 [ 264.353435][ T9455] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 264.353464][ T9455] ? percpu_ref_init+0xec/0x3f0 [ 264.353506][ T9455] ? percpu_ref_init+0x244/0x3f0 [ 264.353540][ T9455] mddev_init+0x102/0x820 [ 264.353572][ T9455] md_alloc+0xc7/0x10a0 [ 264.353597][ T9455] md_probe+0x73/0xf0 [ 264.353615][ T9455] ? __pfx_md_probe+0x10/0x10 [ 264.353631][ T9455] blk_probe_dev+0x149/0x1e0 [ 264.353659][ T9455] blk_request_module+0x16/0xc0 [ 264.353680][ T9455] blkdev_get_no_open+0x9b/0xf0 [ 264.353706][ T9455] bdev_file_open_by_dev+0x70/0x210 [ 264.353733][ T9455] swsusp_check+0x72/0x470 [ 264.353758][ T9455] software_resume+0x6f/0x330 [ 264.353777][ T9455] resume_store+0x248/0x460 [ 264.353797][ T9455] ? __pfx_resume_store+0x10/0x10 [ 264.353823][ T9455] ? find_held_lock+0x2b/0x80 [ 264.353843][ T9455] ? sysfs_file_kobj+0xe4/0x290 [ 264.353862][ T9455] ? sysfs_file_kobj+0xe4/0x290 [ 264.353883][ T9455] ? __pfx_resume_store+0x10/0x10 [ 264.353900][ T9455] kobj_attr_store+0x58/0x80 [ 264.353920][ T9455] ? __pfx_kobj_attr_store+0x10/0x10 [ 264.353940][ T9455] sysfs_kf_write+0xf2/0x150 [ 264.353962][ T9455] kernfs_fop_write_iter+0x3e0/0x5f0 [ 264.353991][ T9455] ? __pfx_sysfs_kf_write+0x10/0x10 [ 264.354012][ T9455] vfs_write+0x6af/0x1050 [ 264.354032][ T9455] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 264.354064][ T9455] ? __pfx_vfs_write+0x10/0x10 [ 264.354082][ T9455] ? find_held_lock+0x2b/0x80 [ 264.354120][ T9455] ksys_write+0x12a/0x250 [ 264.354140][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 264.354168][ T9455] __do_fast_syscall_32+0x13a/0x8b0 [ 264.354202][ T9455] do_fast_syscall_32+0x32/0x70 [ 264.354231][ T9455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.354255][ T9455] RIP: 0023:0xf7fa7fec [ 264.354277][ T9455] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 264.354287][ T9455] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 264.354309][ T9455] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 264.354323][ T9455] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.354360][ T9455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.354371][ T9455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 264.354383][ T9455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.354411][ T9455] [ 264.360002][ T9455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.823468][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.602517][ T9489] FAULT_INJECTION: forcing a failure. [ 265.602517][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 265.602541][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.602556][ T9489] Tainted: [L]=SOFTLOCKUP [ 265.602560][ T9489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.602566][ T9489] Call Trace: [ 265.602571][ T9489] [ 265.602576][ T9489] dump_stack_lvl+0x100/0x190 [ 265.602605][ T9489] should_fail_ex.cold+0x5/0xa [ 265.602621][ T9489] should_failslab+0xc2/0x120 [ 265.602640][ T9489] __kmalloc_noprof+0xfc/0x840 [ 265.602652][ T9489] ? rcu_is_watching+0x13/0xc0 [ 265.602663][ T9489] ? tomoyo_realpath_from_path+0xb6/0x690 [ 265.602679][ T9489] tomoyo_realpath_from_path+0xb6/0x690 [ 265.602693][ T9489] tomoyo_path_number_perm+0x23c/0x580 [ 265.602709][ T9489] ? tomoyo_path_number_perm+0x22e/0x580 [ 265.602725][ T9489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 265.602740][ T9489] ? futex_wait+0x11e/0x370 [ 265.602757][ T9489] ? __lock_acquire+0x5c0/0x1f40 [ 265.602778][ T9489] ? __fget_files+0x34/0x3d0 [ 265.602791][ T9489] ? find_held_lock+0x2b/0x80 [ 265.602802][ T9489] ? __fget_files+0x215/0x3d0 [ 265.602812][ T9489] ? hook_file_ioctl_common+0x140/0x440 [ 265.602828][ T9489] ? __fget_files+0x215/0x3d0 [ 265.602841][ T9489] ? __fget_files+0x21f/0x3d0 [ 265.602855][ T9489] security_file_ioctl_compat+0xd3/0x230 [ 265.602872][ T9489] __ia32_compat_sys_ioctl+0xc2/0x360 [ 265.602891][ T9489] __do_fast_syscall_32+0x13a/0x8b0 [ 265.602914][ T9489] do_fast_syscall_32+0x32/0x70 [ 265.602931][ T9489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.602946][ T9489] RIP: 0023:0xf7fa7fec [ 265.602959][ T9489] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 265.602964][ T9489] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 265.602976][ T9489] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040aed5 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 265.603004][ T9489] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.603011][ T9489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.603017][ T9489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.603023][ T9489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.603037][ T9489] [ 265.603128][ T9489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.836277][ T30] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 265.916438][ T9497] overlayfs: statfs failed on './file0' [ 265.995985][ T30] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 266.000092][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.000108][ T30] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.002726][ T30] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 266.002741][ T30] usb 7-1: Product: syz [ 266.002748][ T30] usb 7-1: Manufacturer: syz [ 266.002755][ T30] usb 7-1: SerialNumber: syz [ 266.008507][ T30] usb 7-1: config 0 descriptor?? [ 266.079435][ T9502] tipc: Enabled bearer , priority 0 [ 266.099144][ T9502] syzkaller0: entered promiscuous mode [ 266.099160][ T9502] syzkaller0: entered allmulticast mode [ 266.099521][ T9502] tipc: Resetting bearer [ 266.132557][ T9501] tipc: Resetting bearer [ 266.757017][ T9520] FAULT_INJECTION: forcing a failure. [ 266.757017][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 266.757052][ T9520] CPU: 3 UID: 0 PID: 9520 Comm: syz.1.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.757079][ T9520] Tainted: [L]=SOFTLOCKUP [ 266.757087][ T9520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.757099][ T9520] Call Trace: [ 266.757106][ T9520] [ 266.757114][ T9520] dump_stack_lvl+0x100/0x190 [ 266.757145][ T9520] should_fail_ex.cold+0x5/0xa [ 266.757171][ T9520] should_failslab+0xc2/0x120 [ 266.757198][ T9520] __kmalloc_cache_noprof+0x91/0x6d0 [ 266.757228][ T9520] ? tipc_nametbl_insert_publ+0x6ee/0x1570 [ 266.757255][ T9520] tipc_nametbl_insert_publ+0x6ee/0x1570 [ 266.757289][ T9520] tipc_nametbl_publish+0x18b/0x300 [ 266.757313][ T9520] tipc_sk_publish+0x1d8/0x430 [ 266.757337][ T9520] ? __pfx_tipc_sk_publish+0x10/0x10 [ 266.757361][ T9520] ? tipc_group_create+0x4c0/0x660 [ 266.757394][ T9520] tipc_setsockopt+0x7af/0xe30 [ 266.757418][ T9520] ? __pfx_tipc_setsockopt+0x10/0x10 [ 266.757439][ T9520] ? lock_acquire+0x1d1/0x380 [ 266.757470][ T9520] ? __fget_files+0x34/0x3d0 [ 266.757502][ T9520] ? __pfx_tipc_setsockopt+0x10/0x10 [ 266.757546][ T9520] do_sock_setsockopt+0xf3/0x1d0 [ 266.757588][ T9520] __sys_setsockopt+0x119/0x190 [ 266.757621][ T9520] __ia32_sys_setsockopt+0xbc/0x160 [ 266.757646][ T9520] ? __do_fast_syscall_32+0xb3/0x8b0 [ 266.757676][ T9520] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.757703][ T9520] __do_fast_syscall_32+0x13a/0x8b0 [ 266.757735][ T9520] do_fast_syscall_32+0x32/0x70 [ 266.757764][ T9520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.757787][ T9520] RIP: 0023:0xf7fa7fec [ 266.757807][ T9520] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 266.757815][ T9520] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 266.757835][ T9520] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000010f [ 266.757846][ T9520] RDX: 0000000000000087 RSI: 0000000080000080 RDI: 0000000000000010 [ 266.757858][ T9520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.757870][ T9520] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 266.757882][ T9520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.757910][ T9520] [ 266.763558][ T9520] tipc: Failed to bind to 65,4,4 [ 268.121881][ T9501] tipc: Disabling bearer [ 268.125349][ T9507] __nla_validate_parse: 1 callbacks suppressed [ 268.125438][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 268.137902][ T5108] usb 7-1: USB disconnect, device number 32 [ 268.164496][ T30] tipc: Node number set to 337747401 [ 268.220762][ T9524] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.220785][ T9524] overlayfs: failed to set xattr on upper [ 268.220792][ T9524] overlayfs: ...falling back to redirect_dir=nofollow. [ 268.220799][ T9524] overlayfs: ...falling back to index=off. [ 268.220805][ T9524] overlayfs: ...falling back to uuid=null. [ 268.230295][ T9524] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 268.309447][ T1831] hid_parser_main: 21 callbacks suppressed [ 268.309463][ T1831] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 268.324005][ T1831] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 268.422724][ T9530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.633509][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 268.764811][ T9550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.824981][ T9554] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.245543][ T1831] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 269.396073][ T1831] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 269.397132][ T1831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.397153][ T1831] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.399147][ T1831] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 269.399160][ T1831] usb 9-1: Product: syz [ 269.399168][ T1831] usb 9-1: Manufacturer: syz [ 269.399175][ T1831] usb 9-1: SerialNumber: syz [ 269.401037][ T1831] usb 9-1: config 0 descriptor?? [ 269.669098][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 269.670888][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 269.672166][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 269.673298][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 269.673792][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 269.986640][ T9593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.102250][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1137'. [ 270.302382][ T9604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 270.448159][ T50] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 270.617640][ T5752] usb 9-1: USB disconnect, device number 28 [ 270.626319][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.630580][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.630605][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.630627][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.630643][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.630665][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.631861][ T50] usb 7-1: config 0 descriptor?? [ 270.961153][ T43] kauditd_printk_skb: 24074 callbacks suppressed [ 270.961165][ T43] audit: type=1800 audit(1789177398.308:24117): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1139" name="/newroot/292/cgroup" dev="tmpfs" ino=1639 res=0 errno=0 [ 271.220520][ T9625] netlink: 'syz.4.1146': attribute type 3 has an invalid length. [ 271.221443][ T9625] netlink: 'syz.4.1146': attribute type 3 has an invalid length. [ 271.268911][ T50] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 271.313230][ T9627] FAULT_INJECTION: forcing a failure. [ 271.313230][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 271.313263][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.4.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.313286][ T9627] Tainted: [L]=SOFTLOCKUP [ 271.313294][ T9627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.313305][ T9627] Call Trace: [ 271.313311][ T9627] [ 271.313319][ T9627] dump_stack_lvl+0x100/0x190 [ 271.313358][ T9627] should_fail_ex.cold+0x5/0xa [ 271.313385][ T9627] should_failslab+0xc2/0x120 [ 271.313415][ T9627] kmem_cache_alloc_noprof+0x92/0x6a0 [ 271.313437][ T9627] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 271.313465][ T9627] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 271.313494][ T9627] mmu_topup_memory_caches+0x25/0x170 [ 271.313514][ T9627] kvm_mmu_load+0xe8/0x2580 [ 271.313543][ T9627] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 271.313566][ T9627] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 271.313592][ T9627] ? __pfx_kvm_mmu_load+0x10/0x10 [ 271.313620][ T9627] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 271.313647][ T9627] ? kvm_check_and_inject_events+0x896/0x1050 [ 271.313679][ T9627] vcpu_run+0x395d/0x5e80 [ 271.313697][ T9627] ? mark_held_locks+0x40/0x70 [ 271.313729][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 271.313759][ T9627] ? __pfx_vcpu_run+0x10/0x10 [ 271.313784][ T9627] ? lock_acquire+0x1d1/0x380 [ 271.313808][ T9627] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 271.313832][ T9627] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 271.313853][ T9627] ? __local_bh_enable_ip+0xa5/0x120 [ 271.313884][ T9627] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 271.313902][ T9627] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 271.313928][ T9627] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 271.313947][ T9627] ? lock_acquire+0x1d1/0x380 [ 271.313976][ T9627] ? do_raw_write_lock+0x11e/0x260 [ 271.313994][ T9627] ? find_held_lock+0x2b/0x80 [ 271.314014][ T9627] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 271.314037][ T9627] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 271.314065][ T9627] kvm_vcpu_ioctl+0x730/0x1700 [ 271.314089][ T9627] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 271.314112][ T9627] ? tomoyo_path_number_perm+0x188/0x580 [ 271.314139][ T9627] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.314163][ T9627] ? futex_wait+0x11e/0x370 [ 271.314191][ T9627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.314217][ T9627] ? do_vfs_ioctl+0x226/0x13e0 [ 271.314245][ T9627] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 271.314275][ T9627] ? __fget_files+0x34/0x3d0 [ 271.314327][ T9627] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 271.314354][ T9627] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 271.314379][ T9627] ? __fget_files+0x21f/0x3d0 [ 271.314405][ T9627] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 271.314429][ T9627] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 271.314457][ T9627] __do_fast_syscall_32+0x13a/0x8b0 [ 271.314487][ T9627] do_fast_syscall_32+0x32/0x70 [ 271.314513][ T9627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.314537][ T9627] RIP: 0023:0xf701efec [ 271.314557][ T9627] Code: Unable to access opcode bytes at 0xf701efc2. [ 271.314565][ T9627] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 271.314583][ T9627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 271.314594][ T9627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.314604][ T9627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.314614][ T9627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.314625][ T9627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.314650][ T9627] [ 271.327473][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 271.447317][ T5858] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.447344][ T5858] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.447361][ T5858] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.447378][ T5858] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.470888][ T9640] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1152'. [ 271.527590][ T30] usb 7-1: USB disconnect, device number 33 [ 271.698991][ T9652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.727498][ T9657] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 271.735745][ T5894] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 271.768801][ T9657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.771700][ T9657] bond3: (slave bond4): making interface the new active one [ 271.772619][ T9657] bond3: (slave bond4): Enslaving as an active interface with an up link [ 271.885932][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 271.886483][ T5894] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 271.888792][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 271.888815][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.890364][ T5894] usb 9-1: config 0 descriptor?? [ 271.891114][ T9641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.935021][ T9676] FAULT_INJECTION: forcing a failure. [ 271.935021][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 271.935048][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: syz.1.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.935064][ T9676] Tainted: [L]=SOFTLOCKUP [ 271.935068][ T9676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.935087][ T9676] Call Trace: [ 271.935091][ T9676] [ 271.935097][ T9676] dump_stack_lvl+0x100/0x190 [ 271.935114][ T9676] should_fail_ex.cold+0x5/0xa [ 271.935130][ T9676] should_failslab+0xc2/0x120 [ 271.935146][ T9676] __kmalloc_noprof+0xfc/0x840 [ 271.935159][ T9676] ? binder_open+0x146/0xde0 [ 271.935182][ T9676] binder_open+0x146/0xde0 [ 271.935195][ T9676] ? __pfx_apparmor_file_open+0x10/0x10 [ 271.935214][ T9676] ? __pfx_binder_open+0x10/0x10 [ 271.935228][ T9676] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 271.935247][ T9676] do_dentry_open+0x6ab/0x14d0 [ 271.935259][ T9676] ? __pfx_binder_open+0x10/0x10 [ 271.935274][ T9676] vfs_open+0x82/0x3f0 [ 271.935290][ T9676] path_openat+0x19fa/0x2440 [ 271.935305][ T9676] ? __pfx_path_openat+0x10/0x10 [ 271.935323][ T9676] do_file_open+0x20e/0x430 [ 271.935338][ T9676] ? __pfx_do_file_open+0x10/0x10 [ 271.935361][ T9676] ? _raw_spin_unlock+0x28/0x50 [ 271.935376][ T9676] ? alloc_fd+0x471/0x7a0 [ 271.935391][ T9676] do_sys_openat2+0x10f/0x1e0 [ 271.935407][ T9676] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.935423][ T9676] ? find_held_lock+0x2b/0x80 [ 271.935434][ T9676] ? __fget_files+0x215/0x3d0 [ 271.935449][ T9676] __ia32_compat_sys_openat+0x12d/0x210 [ 271.935466][ T9676] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 271.935489][ T9676] __do_fast_syscall_32+0x13a/0x8b0 [ 271.935510][ T9676] do_fast_syscall_32+0x32/0x70 [ 271.935527][ T9676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.935540][ T9676] RIP: 0023:0xf7fa7fec [ 271.935554][ T9676] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 271.935559][ T9676] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 271.935570][ T9676] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 271.935576][ T9676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.935583][ T9676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.935589][ T9676] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.935595][ T9676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.935608][ T9676] [ 271.938760][ T9676] binder: 9675:9676 ioctl c0306201 0 returned -14 [ 272.076701][ T30] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 272.105666][ T5894] usbhid 9-1:0.0: can't add hid device: -71 [ 272.105723][ T5894] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 272.107071][ T5894] usb 9-1: USB disconnect, device number 29 [ 272.185470][ T9692] kvm: pic: non byte read [ 272.186242][ T9692] kvm: pic: non byte read [ 272.186810][ T9692] kvm: pic: single mode not supported [ 272.186816][ T9692] kvm: pic: level sensitive irq not supported [ 272.187047][ T9692] kvm: pic: non byte read [ 272.187579][ T9692] kvm: pic: single mode not supported [ 272.187797][ T9692] kvm: pic: non byte read [ 272.245476][ T30] usb 10-1: Using ep0 maxpacket: 8 [ 272.245932][ T30] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.246741][ T30] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 272.246763][ T30] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.246774][ T30] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.246786][ T30] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.246797][ T30] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.246816][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.450745][ T30] usb 10-1: GET_CAPABILITIES returned 0 [ 272.450769][ T30] usbtmc 10-1:16.0: can't read capabilities [ 272.740765][ T9705] FAULT_INJECTION: forcing a failure. [ 272.740765][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.740792][ T9705] CPU: 2 UID: 0 PID: 9705 Comm: syz.4.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.740812][ T9705] Tainted: [L]=SOFTLOCKUP [ 272.740817][ T9705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.740827][ T9705] Call Trace: [ 272.740833][ T9705] [ 272.740839][ T9705] dump_stack_lvl+0x100/0x190 [ 272.740862][ T9705] should_fail_ex.cold+0x5/0xa [ 272.740882][ T9705] _copy_from_user+0x2e/0xd0 [ 272.740900][ T9705] get_user_ifreq+0x116/0x1c0 [ 272.740922][ T9705] sock_do_ioctl+0x16e/0x280 [ 272.740944][ T9705] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.740968][ T9705] ? do_vfs_ioctl+0x226/0x13e0 [ 272.740989][ T9705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.741009][ T9705] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 272.741025][ T9705] ? unix_ioctl+0x9c/0x570 [ 272.741041][ T9705] compat_sock_ioctl+0x568/0x760 [ 272.741058][ T9705] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 272.741072][ T9705] ? hook_file_ioctl_common+0x140/0x440 [ 272.741097][ T9705] ? __fget_files+0x21f/0x3d0 [ 272.741115][ T9705] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 272.741131][ T9705] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 272.741155][ T9705] __do_fast_syscall_32+0x13a/0x8b0 [ 272.741179][ T9705] do_fast_syscall_32+0x32/0x70 [ 272.741219][ T9705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.741241][ T9705] RIP: 0023:0xf701efec [ 272.741259][ T9705] Code: Unable to access opcode bytes at 0xf701efc2. [ 272.741265][ T9705] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 272.741281][ T9705] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008923 [ 272.741291][ T9705] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.741301][ T9705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.741311][ T9705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 272.741320][ T9705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.741339][ T9705] [ 272.826121][ T1831] usb 10-1: USB disconnect, device number 26 [ 273.306674][ T9712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.545536][ T5894] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 273.695505][ T5752] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 273.696012][ T5894] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.697015][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.697039][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.697059][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 273.697076][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.697108][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.700281][ T5894] usb 10-1: config 0 descriptor?? [ 273.846149][ T5752] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 273.847035][ T5752] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.847054][ T5752] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.849458][ T5752] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 273.849471][ T5752] usb 7-1: Product: syz [ 273.849478][ T5752] usb 7-1: Manufacturer: syz [ 273.849485][ T5752] usb 7-1: SerialNumber: syz [ 273.850812][ T5752] usb 7-1: config 0 descriptor?? [ 274.035172][ T43] audit: type=1800 audit(1789177401.378:24118): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1172" name="/newroot/239/cgroup" dev="tmpfs" ino=1320 res=0 errno=0 [ 274.171453][ T9731] __nla_validate_parse: 1 callbacks suppressed [ 274.171474][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 274.175887][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 274.176709][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 274.177893][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 274.178714][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 274.572570][ T5894] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 274.630449][ T5752] usb 10-1: USB disconnect, device number 27 [ 275.783380][ T5894] usb 7-1: USB disconnect, device number 34 [ 275.810448][ T43] audit: type=1800 audit(1789177403.158:24119): pid=9768 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1192" name=C0 dev="sda1" ino=2040 res=0 errno=0 [ 275.876535][ T9770] 0: reclassify loop, rule prio 0, protocol 03 [ 276.108915][ T9777] syz_tun: entered allmulticast mode [ 276.144929][ T9776] syz_tun: left allmulticast mode [ 276.175750][ T9] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 276.326236][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.327152][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.327169][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.327181][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 276.327192][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.327211][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.335866][ T9] usb 9-1: config 0 descriptor?? [ 276.585648][ T30] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 276.670230][ T43] audit: type=1800 audit(1789177404.018:24120): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1194" name="/newroot/263/cgroup" dev="tmpfs" ino=1484 res=0 errno=0 [ 276.737312][ T30] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 276.738148][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.738169][ T30] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.740045][ T30] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 276.740058][ T30] usb 6-1: Product: syz [ 276.740066][ T30] usb 6-1: Manufacturer: syz [ 276.740074][ T30] usb 6-1: SerialNumber: syz [ 276.744146][ T30] usb 6-1: config 0 descriptor?? [ 276.889650][ T9810] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 277.032962][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 277.037155][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 277.039212][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 277.042021][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 277.043719][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 277.380033][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 277.542125][ T9] usb 9-1: USB disconnect, device number 30 [ 278.625796][ T25] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 278.777329][ T25] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 278.779571][ T25] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.781382][ T25] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.785709][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.785730][ T25] usb 10-1: Product: syz [ 278.785741][ T25] usb 10-1: Manufacturer: syz [ 278.785751][ T25] usb 10-1: SerialNumber: syz [ 278.795036][ T25] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 278.801984][ T25] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 278.805320][ T25] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 278.907667][ T9] usb 6-1: USB disconnect, device number 24 [ 279.482811][ T9845] @ÿ: renamed from veth0_vlan (while UP) [ 279.482840][ T9845] FAULT_INJECTION: forcing a failure. [ 279.482840][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 279.482868][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.2.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.482898][ T9845] Tainted: [L]=SOFTLOCKUP [ 279.482904][ T9845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.482915][ T9845] Call Trace: [ 279.482922][ T9845] [ 279.482930][ T9845] dump_stack_lvl+0x100/0x190 [ 279.482971][ T9845] should_fail_ex.cold+0x5/0xa [ 279.482995][ T9845] should_failslab+0xc2/0x120 [ 279.483022][ T9845] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 279.483051][ T9845] ? device_rename+0x88/0x250 [ 279.483079][ T9845] kstrdup+0x51/0xe0 [ 279.483102][ T9845] device_rename+0x88/0x250 [ 279.483125][ T9845] netif_change_name+0x284/0x830 [ 279.483161][ T9845] ? __pfx_netif_change_name+0x10/0x10 [ 279.483184][ T9845] ? mark_held_locks+0x40/0x70 [ 279.483209][ T9845] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 279.483238][ T9845] ? full_name_hash+0xbc/0x100 [ 279.483261][ T9845] dev_change_name+0xb2/0x260 [ 279.483287][ T9845] dev_ifsioc+0x16a6/0x1f10 [ 279.483332][ T9845] ? __pfx_dev_ifsioc+0x10/0x10 [ 279.483355][ T9845] ? __pfx___mutex_lock+0x10/0x10 [ 279.483392][ T9845] ? apparmor_capable+0x1d7/0x4d0 [ 279.483414][ T9845] ? dev_load+0x8e/0x240 [ 279.483440][ T9845] ? bpf_lsm_capable+0x9/0x10 [ 279.483471][ T9845] dev_ioctl+0x223/0x1070 [ 279.483497][ T9845] sock_do_ioctl+0x1a0/0x280 [ 279.483522][ T9845] ? __pfx_sock_do_ioctl+0x10/0x10 [ 279.483551][ T9845] ? do_vfs_ioctl+0x226/0x13e0 [ 279.483575][ T9845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.483601][ T9845] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 279.483621][ T9845] ? unix_ioctl+0x9c/0x570 [ 279.483644][ T9845] compat_sock_ioctl+0x568/0x760 [ 279.483667][ T9845] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 279.483684][ T9845] ? hook_file_ioctl_common+0x140/0x440 [ 279.483718][ T9845] ? __fget_files+0x21f/0x3d0 [ 279.483741][ T9845] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 279.483762][ T9845] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 279.483791][ T9845] __do_fast_syscall_32+0x13a/0x8b0 [ 279.483820][ T9845] do_fast_syscall_32+0x32/0x70 [ 279.483845][ T9845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.483868][ T9845] RIP: 0023:0xf6fcefec [ 279.483890][ T9845] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 279.483899][ T9845] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 279.483921][ T9845] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008923 [ 279.483934][ T9845] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.483946][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.483960][ T9845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 279.483969][ T9845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.483992][ T9845] [ 279.582724][ T9848] FAULT_INJECTION: forcing a failure. [ 279.582724][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 279.582754][ T9848] CPU: 3 UID: 0 PID: 9848 Comm: syz.4.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.582777][ T9848] Tainted: [L]=SOFTLOCKUP [ 279.582783][ T9848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.582792][ T9848] Call Trace: [ 279.582797][ T9848] [ 279.582807][ T9848] dump_stack_lvl+0x100/0x190 [ 279.582835][ T9848] should_fail_ex.cold+0x5/0xa [ 279.582854][ T9848] ? __pfx_cgroup_show_path+0x10/0x10 [ 279.582877][ T9848] should_failslab+0xc2/0x120 [ 279.582895][ T9848] ? __pfx_cgroup_show_path+0x10/0x10 [ 279.582915][ T9848] __kmalloc_cache_noprof+0x91/0x6d0 [ 279.582945][ T9848] ? kernfs_root+0x23/0x2a0 [ 279.582981][ T9848] ? cgroup_show_path+0xb2/0x730 [ 279.583011][ T9848] ? __pfx_cgroup_show_path+0x10/0x10 [ 279.583031][ T9848] cgroup_show_path+0xb2/0x730 [ 279.583053][ T9848] ? __pfx_cgroup_show_path+0x10/0x10 [ 279.583073][ T9848] kernfs_sop_show_path+0xe9/0x160 [ 279.583088][ T9848] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 279.583103][ T9848] show_path+0x9e/0x100 [ 279.583125][ T9848] show_mountinfo+0x1d8/0x820 [ 279.583142][ T9848] ? __pfx_show_mountinfo+0x10/0x10 [ 279.583165][ T9848] seq_read_iter+0xbce/0x1270 [ 279.583187][ T9848] ? __pfx_seq_read_iter+0x10/0x10 [ 279.583207][ T9848] vfs_read+0x82e/0xb40 [ 279.583225][ T9848] ? __pfx_vfs_read+0x10/0x10 [ 279.583238][ T9848] ? find_held_lock+0x2b/0x80 [ 279.583268][ T9848] ksys_read+0x12a/0x250 [ 279.583282][ T9848] ? __pfx_ksys_read+0x10/0x10 [ 279.583303][ T9848] __do_fast_syscall_32+0x13a/0x8b0 [ 279.583330][ T9848] do_fast_syscall_32+0x32/0x70 [ 279.583353][ T9848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.583371][ T9848] RIP: 0023:0xf701efec [ 279.583387][ T9848] Code: Unable to access opcode bytes at 0xf701efc2. [ 279.583397][ T9848] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 279.583414][ T9848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003480 [ 279.583425][ T9848] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.583433][ T9848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.583442][ T9848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 279.583450][ T9848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.583470][ T9848] [ 279.606253][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 279.623896][ T9850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1212'. [ 279.633917][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 280.245520][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 280.396099][ T9] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 280.397380][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.397444][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.400243][ T9] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 280.400258][ T9] usb 7-1: Product: syz [ 280.400266][ T9] usb 7-1: Manufacturer: syz [ 280.400274][ T9] usb 7-1: SerialNumber: syz [ 280.402388][ T9] usb 7-1: config 0 descriptor?? [ 280.516130][ T9817] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 280.519068][ T9] usb 10-1: USB disconnect, device number 28 [ 280.529516][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 280.532234][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 280.532629][ T9] ti_usb_3410_5052 10-1:2.0: device disconnected [ 280.682459][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 280.686585][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 280.688905][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 280.690376][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 280.691908][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 281.101031][ T9871] @ÿ: renamed from veth0_vlan (while UP) [ 281.101058][ T9871] FAULT_INJECTION: forcing a failure. [ 281.101058][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 281.101086][ T9871] CPU: 1 UID: 0 PID: 9871 Comm: syz.5.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.101114][ T9871] Tainted: [L]=SOFTLOCKUP [ 281.101121][ T9871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.101133][ T9871] Call Trace: [ 281.101141][ T9871] [ 281.101150][ T9871] dump_stack_lvl+0x100/0x190 [ 281.101207][ T9871] should_fail_ex.cold+0x5/0xa [ 281.101237][ T9871] should_failslab+0xc2/0x120 [ 281.101264][ T9871] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 281.101292][ T9871] ? device_rename+0x88/0x250 [ 281.101318][ T9871] kstrdup+0x51/0xe0 [ 281.101337][ T9871] device_rename+0x88/0x250 [ 281.101361][ T9871] netif_change_name+0x284/0x830 [ 281.101397][ T9871] ? __pfx_netif_change_name+0x10/0x10 [ 281.101427][ T9871] ? rcu_is_watching+0x13/0xc0 [ 281.101445][ T9871] ? full_name_hash+0xbc/0x100 [ 281.101473][ T9871] dev_change_name+0xb2/0x260 [ 281.101503][ T9871] dev_ifsioc+0x16a6/0x1f10 [ 281.101532][ T9871] ? __pfx_dev_ifsioc+0x10/0x10 [ 281.101555][ T9871] ? __pfx___mutex_lock+0x10/0x10 [ 281.101593][ T9871] ? apparmor_capable+0x1d7/0x4d0 [ 281.101624][ T9871] ? dev_load+0x8e/0x240 [ 281.101651][ T9871] ? bpf_lsm_capable+0x9/0x10 [ 281.101687][ T9871] dev_ioctl+0x223/0x1070 [ 281.101717][ T9871] sock_do_ioctl+0x1a0/0x280 [ 281.101748][ T9871] ? __pfx_sock_do_ioctl+0x10/0x10 [ 281.101802][ T9871] ? do_vfs_ioctl+0x226/0x13e0 [ 281.101836][ T9871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.101865][ T9871] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 281.101888][ T9871] ? unix_ioctl+0x9c/0x570 [ 281.101910][ T9871] compat_sock_ioctl+0x568/0x760 [ 281.101934][ T9871] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 281.101954][ T9871] ? hook_file_ioctl_common+0x140/0x440 [ 281.101999][ T9871] ? __fget_files+0x21f/0x3d0 [ 281.102031][ T9871] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 281.102056][ T9871] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 281.102091][ T9871] __do_fast_syscall_32+0x13a/0x8b0 [ 281.102125][ T9871] do_fast_syscall_32+0x32/0x70 [ 281.102156][ T9871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.102181][ T9871] RIP: 0023:0xf7fd3fec [ 281.102203][ T9871] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 281.102212][ T9871] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 281.102235][ T9871] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008923 [ 281.102248][ T9871] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.102295][ T9871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.102307][ T9871] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 281.102319][ T9871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.102349][ T9871] [ 281.253383][ T9876] FAULT_INJECTION: forcing a failure. [ 281.253383][ T9876] name failslab, interval 1, probability 0, space 0, times 0 [ 281.253406][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.5.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.253423][ T9876] Tainted: [L]=SOFTLOCKUP [ 281.253427][ T9876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.253435][ T9876] Call Trace: [ 281.253440][ T9876] [ 281.253445][ T9876] dump_stack_lvl+0x100/0x190 [ 281.253464][ T9876] should_fail_ex.cold+0x5/0xa [ 281.253480][ T9876] should_failslab+0xc2/0x120 [ 281.253496][ T9876] __kvmalloc_node_noprof+0x113/0x9b0 [ 281.253512][ T9876] ? seq_read_iter+0x819/0x1270 [ 281.253527][ T9876] seq_read_iter+0x819/0x1270 [ 281.253542][ T9876] ? __pfx_seq_read_iter+0x10/0x10 [ 281.253554][ T9876] vfs_read+0x82e/0xb40 [ 281.253567][ T9876] ? __pfx_vfs_read+0x10/0x10 [ 281.253577][ T9876] ? find_held_lock+0x2b/0x80 [ 281.253598][ T9876] ksys_read+0x12a/0x250 [ 281.253609][ T9876] ? __pfx_ksys_read+0x10/0x10 [ 281.253624][ T9876] __do_fast_syscall_32+0x13a/0x8b0 [ 281.253643][ T9876] do_fast_syscall_32+0x32/0x70 [ 281.253660][ T9876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.253674][ T9876] RIP: 0023:0xf7fd3fec [ 281.253686][ T9876] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 281.253691][ T9876] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 281.253703][ T9876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003480 [ 281.253710][ T9876] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.253716][ T9876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.253722][ T9876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 281.253729][ T9876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.253743][ T9876] [ 281.369799][ T9878] orangefs: client-core tried to read wrong size [ 281.856747][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 282.026009][ T10] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 282.027161][ T10] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.028219][ T10] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.030497][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.030520][ T10] usb 6-1: Product: syz [ 282.030534][ T10] usb 6-1: Manufacturer: syz [ 282.030548][ T10] usb 6-1: SerialNumber: syz [ 282.048956][ T10] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 282.056410][ T10] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 282.073386][ T10] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 282.964155][ T10] usb 7-1: USB disconnect, device number 35 [ 283.795620][ T9894] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 283.803376][ T1831] usb 6-1: USB disconnect, device number 25 [ 283.813290][ T1831] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 283.818905][ T1831] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 283.825330][ T1831] ti_usb_3410_5052 6-1:2.0: device disconnected [ 284.002147][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 284.011165][ T10] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 284.622884][ T9955] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 285.127651][ T9965] kvm: pic: level sensitive irq not supported [ 285.128912][ T9965] kvm: pic: non byte write [ 285.324517][ T9971] evm: overlay not supported [ 285.343269][ T9971] overlayfs: failed to verify origin (254/file1, ino=1415, err=-116) [ 285.343520][ T9971] overlayfs: failed to verify origin (254/file1, ino=1415, err=-116) [ 286.315346][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.336771][ T9993] FAULT_INJECTION: forcing a failure. [ 286.336771][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 286.336795][ T9993] CPU: 2 UID: 0 PID: 9993 Comm: syz.2.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.336812][ T9993] Tainted: [L]=SOFTLOCKUP [ 286.336818][ T9993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.336825][ T9993] Call Trace: [ 286.336830][ T9993] [ 286.336835][ T9993] dump_stack_lvl+0x100/0x190 [ 286.336855][ T9993] should_fail_ex.cold+0x5/0xa [ 286.336870][ T9993] should_failslab+0xc2/0x120 [ 286.336887][ T9993] __kmalloc_cache_noprof+0x91/0x6d0 [ 286.336906][ T9993] ? snd_pcm_oss_open+0x5c5/0x1380 [ 286.336927][ T9993] snd_pcm_oss_open+0x5c5/0x1380 [ 286.336948][ T9993] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 286.336984][ T9993] ? __pfx_default_wake_function+0x10/0x10 [ 286.337005][ T9993] ? __lock_acquire+0x5c0/0x1f40 [ 286.337025][ T9993] ? do_raw_spin_lock+0x128/0x260 [ 286.337045][ T9993] ? soundcore_open+0x231/0x5a0 [ 286.337063][ T9993] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 286.337080][ T9993] soundcore_open+0x2e3/0x5a0 [ 286.337096][ T9993] ? __pfx_soundcore_open+0x10/0x10 [ 286.337111][ T9993] chrdev_open+0x234/0x6a0 [ 286.337124][ T9993] ? __pfx_apparmor_file_open+0x10/0x10 [ 286.337141][ T9993] ? __pfx_chrdev_open+0x10/0x10 [ 286.337155][ T9993] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 286.337176][ T9993] do_dentry_open+0x6ab/0x14d0 [ 286.337188][ T9993] ? __pfx_chrdev_open+0x10/0x10 [ 286.337204][ T9993] vfs_open+0x82/0x3f0 [ 286.337220][ T9993] path_openat+0x19fa/0x2440 [ 286.337235][ T9993] ? __pfx_path_openat+0x10/0x10 [ 286.337252][ T9993] do_file_open+0x20e/0x430 [ 286.337280][ T9993] ? __pfx_do_file_open+0x10/0x10 [ 286.337303][ T9993] ? _raw_spin_unlock+0x28/0x50 [ 286.337323][ T9993] ? alloc_fd+0x471/0x7a0 [ 286.337341][ T9993] do_sys_openat2+0x10f/0x1e0 [ 286.337357][ T9993] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.337380][ T9993] __ia32_compat_sys_openat+0x12d/0x210 [ 286.337397][ T9993] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 286.337421][ T9993] __do_fast_syscall_32+0x13a/0x8b0 [ 286.337441][ T9993] do_fast_syscall_32+0x32/0x70 [ 286.337459][ T9993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.337474][ T9993] RIP: 0023:0xf6fcefec [ 286.337487][ T9993] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 286.337493][ T9993] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 286.337504][ T9993] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 286.337511][ T9993] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.337518][ T9993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.337524][ T9993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 286.337531][ T9993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.337545][ T9993] [ 286.448646][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.454640][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.512382][T10000] FAULT_INJECTION: forcing a failure. [ 286.512382][T10000] name failslab, interval 1, probability 0, space 0, times 0 [ 286.512408][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.2.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.512424][T10000] Tainted: [L]=SOFTLOCKUP [ 286.512428][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.512435][T10000] Call Trace: [ 286.512439][T10000] [ 286.512444][T10000] dump_stack_lvl+0x100/0x190 [ 286.512477][T10000] should_fail_ex.cold+0x5/0xa [ 286.512493][T10000] should_failslab+0xc2/0x120 [ 286.512510][T10000] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 286.512524][T10000] ? bpf_fs_alloc_inode+0x26/0x130 [ 286.512542][T10000] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 286.512559][T10000] bpf_fs_alloc_inode+0x26/0x130 [ 286.512575][T10000] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 286.512590][T10000] alloc_inode+0x68/0x250 [ 286.512610][T10000] new_inode+0x22/0x1c0 [ 286.512627][T10000] bpf_fill_super+0x21f/0x960 [ 286.512644][T10000] ? __pfx_set_anon_super_fc+0x10/0x10 [ 286.512661][T10000] ? __pfx_bpf_fill_super+0x10/0x10 [ 286.512678][T10000] ? __pfx___mutex_lock+0x10/0x10 [ 286.512697][T10000] ? rcu_is_watching+0x13/0xc0 [ 286.512709][T10000] ? apparmor_capable+0x1d7/0x4d0 [ 286.512726][T10000] ? __pfx_bpf_fill_super+0x10/0x10 [ 286.512742][T10000] get_tree_nodev+0xdd/0x190 [ 286.512753][T10000] vfs_get_tree+0x92/0x320 [ 286.512769][T10000] vfs_cmd_create+0xd7/0x2a0 [ 286.512792][T10000] __do_sys_fsconfig+0x55a/0xcb0 [ 286.512811][T10000] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 286.512827][T10000] ? xfd_validate_state+0x129/0x190 [ 286.512852][T10000] __do_fast_syscall_32+0x13a/0x8b0 [ 286.512873][T10000] do_fast_syscall_32+0x32/0x70 [ 286.512891][T10000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.512906][T10000] RIP: 0023:0xf6fcefec [ 286.512919][T10000] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 286.512924][T10000] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 286.512935][T10000] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 286.512942][T10000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.512949][T10000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.512955][T10000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 286.512961][T10000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.512975][T10000] [ 286.646902][ T5858] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.647114][ T5858] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.647145][ T5858] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.647176][ T5858] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.820155][T10021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 287.095544][ T5752] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 287.246127][ T5752] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 287.247384][ T5752] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.248314][ T5752] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.250541][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.250562][ T5752] usb 7-1: Product: syz [ 287.250575][ T5752] usb 7-1: Manufacturer: syz [ 287.250588][ T5752] usb 7-1: SerialNumber: syz [ 287.261922][ T5752] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 287.265648][ T5752] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 287.268449][ T5752] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 287.873264][T10044] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.013965][T10057] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 288.013983][T10057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.017029][T10057] vhci_hcd vhci_hcd.0: Device attached [ 288.019271][T10058] vhci_hcd: connection closed [ 288.024080][ T5550] vhci_hcd vhci_hcd.5: stop threads [ 288.024589][ T5550] vhci_hcd vhci_hcd.5: release socket [ 288.024604][ T5550] vhci_hcd vhci_hcd.5: disconnect device [ 288.155543][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 288.315453][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 288.315995][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.316826][ T10] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 288.316852][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 288.316865][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.316878][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 288.316891][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 288.316902][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.316924][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.511635][T10066] binder: 10065:10066 unknown command 0 [ 288.511652][T10066] binder: 10065:10066 ioctl c0306201 800004c0 returned -22 [ 288.748911][T10078] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 288.748947][T10078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.797966][T10080] FAULT_INJECTION: forcing a failure. [ 288.797966][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 288.797998][T10080] CPU: 3 UID: 0 PID: 10080 Comm: syz.5.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.798037][T10080] Tainted: [L]=SOFTLOCKUP [ 288.798044][T10080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.798057][T10080] Call Trace: [ 288.798065][T10080] [ 288.798075][T10080] dump_stack_lvl+0x100/0x190 [ 288.798104][T10080] should_fail_ex.cold+0x5/0xa [ 288.798126][T10080] should_failslab+0xc2/0x120 [ 288.798155][T10080] __kmalloc_cache_noprof+0x91/0x6d0 [ 288.798186][T10080] ? __trace_uprobe_create+0x5c4/0x2310 [ 288.798237][T10080] __trace_uprobe_create+0x5c4/0x2310 [ 288.798278][T10080] ? __pfx___trace_uprobe_create+0x10/0x10 [ 288.798313][T10080] ? trace_kmalloc+0xeb/0x110 [ 288.798340][T10080] ? __kasan_kmalloc+0xaa/0xb0 [ 288.798364][T10080] ? __kmalloc_noprof+0x350/0x840 [ 288.798387][T10080] ? argv_split+0x173/0x420 [ 288.798416][T10080] ? argv_split+0x359/0x420 [ 288.798441][T10080] ? __pfx___trace_uprobe_create+0x10/0x10 [ 288.798477][T10080] trace_probe_create+0xef/0x100 [ 288.798510][T10080] ? __pfx_trace_probe_create+0x10/0x10 [ 288.798547][T10080] dyn_event_create+0x50/0x90 [ 288.798567][T10080] create_or_delete_trace_uprobe+0x5a/0xb0 [ 288.798585][T10080] trace_parse_run_command+0x1ab/0x3b0 [ 288.798601][T10080] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 288.798620][T10080] vfs_write+0x2aa/0x1050 [ 288.798633][T10080] ? __pfx_probes_write+0x10/0x10 [ 288.798650][T10080] ? lock_acquire+0x1d1/0x380 [ 288.798664][T10080] ? __fget_files+0x34/0x3d0 [ 288.798677][T10080] ? __pfx_vfs_write+0x10/0x10 [ 288.798687][T10080] ? find_held_lock+0x2b/0x80 [ 288.798698][T10080] ? __fget_files+0x215/0x3d0 [ 288.798713][T10080] ? __fget_files+0x21f/0x3d0 [ 288.798729][T10080] ksys_write+0x12a/0x250 [ 288.798740][T10080] ? __pfx_ksys_write+0x10/0x10 [ 288.798755][T10080] __do_fast_syscall_32+0x13a/0x8b0 [ 288.798775][T10080] do_fast_syscall_32+0x32/0x70 [ 288.798791][T10080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.798806][T10080] RIP: 0023:0xf7fd3fec [ 288.798819][T10080] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 288.798825][T10080] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 288.798836][T10080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 288.798845][T10080] RDX: 000000000000001b RSI: 0000000000000000 RDI: 0000000000000000 [ 288.798852][T10080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.798859][T10080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 288.798866][T10080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.798881][T10080] [ 288.924044][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 288.924084][ T10] usbtmc 9-1:16.0: can't read capabilities [ 288.928439][T10082] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1291'. [ 288.995853][T10025] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 288.999333][ T30] usb 7-1: USB disconnect, device number 36 [ 289.005289][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 289.007355][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 289.007744][ T30] ti_usb_3410_5052 7-1:2.0: device disconnected [ 289.124896][ C2] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 289.124973][ C2] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 289.128915][T10051] usbtmc 9-1:16.0: Unable to send data, error -71 [ 289.129773][ T6097] usb 9-1: USB disconnect, device number 31 [ 289.540673][ T1831] ------------[ cut here ]------------ [ 289.540688][ T1831] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 289.540697][ T1831] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#2: kworker/2:2/1831 [ 289.559781][ T1831] Modules linked in: [ 289.561549][ T1831] CPU: 2 UID: 0 PID: 1831 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.567203][ T1831] Tainted: [L]=SOFTLOCKUP [ 289.569390][ T1831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.573957][ T1831] Workqueue: ceph-msgr ceph_con_workfn [ 289.576576][ T1831] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.579386][ T1831] Code: f6 84 db 0f 84 1b ee ff ff e9 fc a6 e1 f5 e8 fa 4f 78 f6 90 0f 0b 90 e9 9f db ff ff e8 ec 4f 78 f6 90 0f 0b e8 e4 4f 78 f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 d6 4f 78 f6 90 0f 0b e8 ce 4f 78 f6 90 [ 289.588514][ T1831] RSP: 0018:ffffc9000ca8f9e8 EFLAGS: 00010293 [ 289.593255][ T1831] RAX: 0000000000000000 RBX: ffff88804cd3488b RCX: 0000000000000000 [ 289.596595][ T1831] RDX: ffff8880247f2580 RSI: ffffffff8b9311ec RDI: ffff8880247f2580 [ 289.599970][ T1831] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 289.604273][ T1831] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 289.608059][ T1831] R13: ffff88804cd34950 R14: ffff88804cd34418 R15: dffffc0000000000 [ 289.611995][ T1831] FS: 0000000000000000(0000) GS:ffff888096b60000(0000) knlGS:0000000000000000 [ 289.615787][ T1831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.618533][ T1831] CR2: 000000002fc18ff8 CR3: 00000000779d6000 CR4: 0000000000352ef0 [ 289.621856][ T1831] DR0: 0000000000000005 DR1: 00000000570fac24 DR2: 0000000000000010 [ 289.625148][ T1831] DR3: 00000000000003ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 289.628553][ T1831] Call Trace: [ 289.629954][ T1831] [ 289.631289][ T1831] ? ceph_con_workfn+0x48/0x13e0 [ 289.633379][ T1831] ? register_lock_class+0x3f/0x7b0 [ 289.635647][ T1831] ? __lock_acquire+0x5c0/0x1f40 [ 289.637762][ T1831] ? __pfx___mutex_lock+0x10/0x10 [ 289.639965][ T1831] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 289.642399][ T1831] ceph_con_workfn+0x9a5/0x13e0 [ 289.644506][ T1831] process_one_work+0xac7/0x1b10 [ 289.646706][ T1831] ? __pfx_process_one_work+0x10/0x10 [ 289.648951][ T1831] ? lock_acquire+0x1d1/0x380 [ 289.651047][ T1831] ? __pfx_ceph_con_workfn+0x10/0x10 [ 289.653356][ T1831] worker_thread+0x5ef/0xe50 [ 289.655331][ T1831] ? __pfx_worker_thread+0x10/0x10 [ 289.657584][ T1831] ? kthread+0x13a/0x450 [ 289.659465][ T1831] ? __pfx_worker_thread+0x10/0x10 [ 289.661605][ T1831] kthread+0x373/0x450 [ 289.663404][ T1831] ? __pfx_kthread+0x10/0x10 [ 289.665549][ T1831] ret_from_fork+0x730/0xd60 [ 289.667804][ T1831] ? __pfx_ret_from_fork+0x10/0x10 [ 289.670294][ T1831] ? __switch_to+0x800/0x10f0 [ 289.672465][ T1831] ? __pfx_kthread+0x10/0x10 [ 289.674641][ T1831] ret_from_fork_asm+0x1a/0x30 [ 289.674672][T10088] ceph: No mds server is up or the cluster is laggy [ 289.679563][ T1831] [ 289.680894][ T1831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.683909][ T1831] CPU: 2 UID: 0 PID: 1831 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.688830][ T1831] Tainted: [L]=SOFTLOCKUP [ 289.690874][ T1831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.695215][ T1831] Workqueue: ceph-msgr ceph_con_workfn [ 289.697502][ T1831] Call Trace: [ 289.698930][ T1831] [ 289.700185][ T1831] dump_stack_lvl+0x100/0x190 [ 289.702175][ T1831] vpanic+0x553/0x970 [ 289.703850][ T1831] ? __pfx_vpanic+0x10/0x10 [ 289.705746][ T1831] panic+0xd1/0xe0 [ 289.707351][ T1831] ? __pfx_panic+0x10/0x10 [ 289.709245][ T1831] check_panic_on_warn.cold+0x19/0x34 [ 289.711602][ T1831] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 289.714034][ T1831] __warn.cold+0x191/0x318 [ 289.716101][ T1831] __report_bug+0x30f/0x440 [ 289.717996][ T1831] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 289.720332][ T1831] ? __pfx___report_bug+0x10/0x10 [ 289.722442][ T1831] ? __pfx_tcp_recvmsg+0x10/0x10 [ 289.724487][ T1831] ? inet_recvmsg+0xdc/0x4c0 [ 289.726453][ T1831] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 289.728638][ T1831] ? rcu_is_watching+0x13/0xc0 [ 289.730631][ T1831] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 289.732913][ T1831] report_bug+0xb3/0x220 [ 289.734706][ T1831] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 289.737027][ T1831] handle_bug+0x16a/0x2a0 [ 289.738838][ T1831] exc_invalid_op+0x17/0x50 [ 289.740705][ T1831] asm_exc_invalid_op+0x1a/0x20 [ 289.742960][ T1831] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 289.745784][ T1831] Code: f6 84 db 0f 84 1b ee ff ff e9 fc a6 e1 f5 e8 fa 4f 78 f6 90 0f 0b 90 e9 9f db ff ff e8 ec 4f 78 f6 90 0f 0b e8 e4 4f 78 f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 d6 4f 78 f6 90 0f 0b e8 ce 4f 78 f6 90 [ 289.753627][ T1831] RSP: 0018:ffffc9000ca8f9e8 EFLAGS: 00010293 [ 289.756158][ T1831] RAX: 0000000000000000 RBX: ffff88804cd3488b RCX: 0000000000000000 [ 289.759415][ T1831] RDX: ffff8880247f2580 RSI: ffffffff8b9311ec RDI: ffff8880247f2580 [ 289.762679][ T1831] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 289.766007][ T1831] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 289.769312][ T1831] R13: ffff88804cd34950 R14: ffff88804cd34418 R15: dffffc0000000000 [ 289.772558][ T1831] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 289.774863][ T1831] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 289.777169][ T1831] ? ceph_con_workfn+0x48/0x13e0 [ 289.779233][ T1831] ? register_lock_class+0x3f/0x7b0 [ 289.781385][ T1831] ? __lock_acquire+0x5c0/0x1f40 [ 289.783487][ T1831] ? __pfx___mutex_lock+0x10/0x10 [ 289.785675][ T1831] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 289.788096][ T1831] ceph_con_workfn+0x9a5/0x13e0 [ 289.790130][ T1831] process_one_work+0xac7/0x1b10 [ 289.792191][ T1831] ? __pfx_process_one_work+0x10/0x10 [ 289.794407][ T1831] ? lock_acquire+0x1d1/0x380 [ 289.796391][ T1831] ? __pfx_ceph_con_workfn+0x10/0x10 [ 289.798580][ T1831] worker_thread+0x5ef/0xe50 [ 289.800506][ T1831] ? __pfx_worker_thread+0x10/0x10 [ 289.802502][ T1831] ? kthread+0x13a/0x450 [ 289.804219][ T1831] ? __pfx_worker_thread+0x10/0x10 [ 289.806375][ T1831] kthread+0x373/0x450 [ 289.808074][ T1831] ? __pfx_kthread+0x10/0x10 [ 289.810001][ T1831] ret_from_fork+0x730/0xd60 [ 289.811940][ T1831] ? __pfx_ret_from_fork+0x10/0x10 [ 289.814069][ T1831] ? __switch_to+0x800/0x10f0 [ 289.816073][ T1831] ? __pfx_kthread+0x10/0x10 [ 289.817977][ T1831] ret_from_fork_asm+0x1a/0x30 [ 289.819995][ T1831] [ 289.821992][ T1831] Kernel Offset: disabled [ 289.823815][ T1831] Rebooting in 86400 seconds..