last executing test programs: 14m12.517522541s ago: executing program 1 (id=836): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x300, &(0x7f0000000640)={&(0x7f0000000680)={0x54, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0xf, 0xffe}}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x7, 0x0, {0xbaf4, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x5, 0x2}}, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14m12.434677717s ago: executing program 1 (id=837): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2e00000099f8941fe980963dca9813da7ec92536434d9d841148d6d96d8263a846696bb39d4ab904562c48f432182855febbfc04ea724b6651b1b0a61b49c6372b49a3badf530e0e33c5a2", @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='v', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) 14m12.43085374s ago: executing program 1 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0xf, 0x42, 0x1, 0x200, 0x400, 0x1, 0x8}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x79}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 14m12.294204633s ago: executing program 1 (id=839): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = socket(0x10, 0x803, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) (async) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r6 = syz_ublk_setup_io_uring(0x6c62, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) r11 = openat(0xffffffffffffff9c, 0x0, 0x48000, 0x0) getdents64(r11, &(0x7f0000001f00)=""/4093, 0xffd) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec17, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0x172}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r10, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20004082}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaa67c2eca5a9aaaaaaaaaaaaaaaaaa6202dd6000000000000000fe000000000000000000000000002bfe8000000000000000000000000000bb371aad00"], 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) (async) r15 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r15, &(0x7f0000000000)='3', 0x4e) (async) ioctl$SIOCGETSGCNT_IN6(r15, 0x89e1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r15, 0x4601, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 14m12.09760781s ago: executing program 1 (id=843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00930000000000000000000000000000d3882cf4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 14m12.093501781s ago: executing program 1 (id=844): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000000)) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r6) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x200000, 0xb, "0062ba00096304001b2ec83b95f3e88ff600"}) syz_open_pts(r6, 0x20400) ioctl$TCFLSH(r6, 0x540b, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) signalfd(r5, &(0x7f0000000180)={[0x9, 0x7]}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0xb) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r8, 0x0, r9, 0x0, 0x7ffff000, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private2, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6, 0x3}, {0x4, 0xa}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13m56.611653398s ago: executing program 32 (id=844): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000000)) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r6) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x200000, 0xb, "0062ba00096304001b2ec83b95f3e88ff600"}) syz_open_pts(r6, 0x20400) ioctl$TCFLSH(r6, 0x540b, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) signalfd(r5, &(0x7f0000000180)={[0x9, 0x7]}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0xb) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r8, 0x0, r9, 0x0, 0x7ffff000, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private2, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6, 0x3}, {0x4, 0xa}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.214855447s ago: executing program 4 (id=4501): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x3000000, 'veth1\x00', {0x300}, 0x2}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40094) 1.130438667s ago: executing program 2 (id=4503): r0 = openat$ttynull(0xffffff9c, &(0x7f00000000c0), 0xf0401, 0x0) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x400000000000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f00000009c0)=[{}], r2, 0x0, '\x00', 0x0, 0x1}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) unshare(0x4a000200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x1c, &(0x7f00000001c0)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) r8 = mmap$IORING_OFF_CQ_RING(0x0, 0x0, 0x0, 0x8010, r3, 0x8000000) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, r12, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x7, 0x0, r3, r3, 0x0, 0x2, 0x0, 0x0, {0x0, r13}}) 1.130115185s ago: executing program 4 (id=4504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r0 = getpid() (rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x15, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5}, 0x94) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 32) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) (async, rerun: 64) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40022063, 0x0) (async, rerun: 64) getrusage(0xffffffffffffffff, &(0x7f0000000380)) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xb0, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000002) (async) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 1.128359301s ago: executing program 0 (id=4505): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1\x00', {0x300}, 0x2}) (fail_nth: 7) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40094) 1.052564057s ago: executing program 2 (id=4506): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)="489ab1aabb2ff7e98c0d098e41a3b37a5abd17cdd9ee79c08137fcada4466f061ad14d270e3fd2b6c6c5a55e3a9991c2a5e23984610fe4c3ee1f8e888a38e78e15d9b49d76e4df00cfc42caebb01577a32eaea73437e6c", 0xd62) r2 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x7, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r4, r6}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 1.052465556s ago: executing program 0 (id=4507): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb200018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1.003585359s ago: executing program 0 (id=4508): r0 = socket$inet(0x2, 0x1, 0xfffffffc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f00000001c0)='P', 0x1, 0x4008044, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) syz_usb_connect(0x4, 0xad6, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x7d, 0x33, 0x7a, 0x20, 0x2639, 0x1, 0xeda0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac4, 0x4, 0x5, 0x0, 0x10, 0x7, "", [{{0x9, 0x4, 0x6e, 0x1, 0xc, 0x49, 0x9a, 0x3a, 0x9, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x3, 0x9, 0xd5, '&R', "d7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x6}, @as_header={0x7, 0x24, 0x1, 0x10, 0xe, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x101, 0x8, 0x6, "087eb780f3"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x3, 0x6, 0x2, "3cc063709d9eea8886"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x1001}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0xb, 0x0, [@generic={0x22, 0x21, "c9bd695a9c7654b227ea623eacba419a1bca7b456bd8f2e58fa690dfafed3f06"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x9, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xd}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x3, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x4, 0xf1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x80, 0x4, 0x80, [@generic={0x4a, 0x22, "9afc759a6aad7948135b088e0af8ba9744c0f17d9f3f667d0ee144046c2fa30eac1a8bd96ece3abaaf0917260383f35211213168fe9f540528027c9e426690ef783b452fcd6f8165"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x3, 0x9, 0x5, [@generic={0x4f, 0x5, "d34e69ca8b8c480da3ef49d37aed854726aeb0f7ed3c37e3810ddf9b4de5f90059c5ebdbe444bcd5f5685460dae8d1b9770d0bc857dce17411442d2754fff01e9407dd287e7e0ac0b2c69097a6"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xa9, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}, @generic={0xfe, 0x24, "c9a22d4ba6fb85d0fc2865a76a17161cfb5b35e50a1c120474966917460a900fb709275597c39a2099268b70999526f8f6f3c6226401b460288b689251d72bd75635763a689eda590c062ad934fe07c04a6782bb12d44cea29e4ba48070c8f02661b7922983d49e2376f113fdf6bdf6f6fb5e8df308f1fceb9485773b504565bd590da69bbcfb443b5f3af10a29fe6d88e318675532cc939034e3e0b144fbf595e3a0b3d5688cdeb252288c9e6db122ba01e3d1703883b9fb5b55809f133892785f8a8d06d19d77320d4fe9e1b3b64510c0403d1f5ab5b746d59accf700c985f56c4d40b55f5812fe4b7589ea48dabb89a052b6ae8094b44536be1e6"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x3, 0x4, 0xa}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x7, 0xc, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x5, 0x0, 0x2, [@generic={0x31, 0x30, "d551f5cd83550250e83e3c591db133ce1a18769d654b5ed5b278cfcfe31bb49f825761958102bc8c54c681cb576162"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x101}]}}]}}, {{0x9, 0x4, 0x8, 0x1, 0xe, 0x15, 0x1c, 0xce, 0x83, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5c, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x1}}], [{{0x9, 0x5, 0x5, 0x26, 0x78f, 0x8, 0x0, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x3, 0x41}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x596c}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x0, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x0, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xf}, @generic={0xaa, 0xe, "0ab8f0199142cb53c67d528638bc7dcffeb527c94f77f58f8acc7bd692c5b1754a14133d09bff6f99c4fc504d10a8e5736933a72ca447bf7828165612a38bab3d583192624cbeae9833ab373e0129424b2c00f63ac40ddee1d64459d93f4a9c31f965c13a516015e65853986c49b763a5b7a338eb19eae69f9f25963f39a4662a1f62a34ecb51009e1e70bf5936b8b2cf8bb04f929b591872e4c1a218d91412c3d19356a6def5e93"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x26, 0x9, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x2, 0x40, [@generic={0xad, 0xc, "30a27097260c36b3f89b24a6eba7a5bda4e1aa362d4e1dc2a1a33071393b28f5f5d27d67b9b61477ec4b06a84b8c7c2e871a3ed7c78940b72c7e6ea6ae9aec5e45ab626dc0eb63a04d775378e4f6eb67e82dbd0436e6ac77b995df98a1fdebeb98c205ab831945b5081e9bf0c47c17e7eba50ad4ff1eab5dd26e54b48f0ab43e9e005ed4b6975164f74b9c85dade039558a5f9e06db868c941a613fdc5bb610170c3ad9ad76a260246ebc9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x3, 0x7f, [@generic={0xb9, 0x6, "8999d03c385623c03c5c80c2cdb3796f14f7d310ca7c2c8f124b909d54a205e0ba11eb7cd4a2cc2dc815ab41d710ad6110e555c21535d3afe34bd1adcad8e3d619a62ff4c921ea00b3d99620010beea180a9eaf64a8599b8c0ff99c98bfd9e30dd05a321d4e2b20421258cb4438b040d027a1650a44c12802786604524b7bf3b932632a518d749168eea6565a092c7b8e3a2ee2bbc7b8dd135cf996066448afa696e236187a4fdd4d32722e64a441ad62f1431c50f4900"}]}}, {{0x9, 0x5, 0x1, 0xf, 0x401, 0x45, 0x9, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x20, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0xb86603f4c55f87ee, 0x9, 0x9, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7216}]}}, {{0x9, 0x5, 0x0, 0x1d, 0x200, 0x2, 0x2, 0xb}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xfd, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xa2, 0xe9, 0x1, [@generic={0xf6, 0x4, "df75d168d367f50cb8321ad69fdcbbbcaeb52055e4739004be81d542abf3c0b88283acfb2911e5b4005195c894e431781cdb779e86fbada1f9dbf479f08a6adf16f7572ee76ee41a06381ba58c8ce132d58968467f819262f65ec35b7b30e22241301b249299fb83261e0d9ea9d5b0e2b5bf5c66d306a8aa7c4f83d1cf4d689400842f9986c4c4b86f3042d6c60cb43c3c609a2742edc2fa5fd53a2aecefae32d1fbf0b5b12e97c9246ef984cde054315024a132a3ada7b28c429f8934c3102ec93c07296fe3fa8f927e06a0a33a9a423074da3a6aa7ebf4267f2f948e0c0e3df0dc380f9a8200d3767ed8f601c28f724f1d9163"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xe, 0x3, 0x81, [@generic={0x92, 0x23, "7d3b6599ac6adb7e2b5003574b61404a239ebe25a481dddb1606d98c06d95498f234f3322b1bea997bd5275a211930afc5fe05499d7006318473046b9ebc375345c4d5c4b424c10c53c83190be2a9f052a4b906592a3c88f6dceaa490457e2c3ace0f7e6846bb0d4b20d4b7c5a1650477b322e2a35b7d1291167f47c1bd1cb0e497b9fd75c0374f0da0223ca8cedf627"}]}}]}}, {{0x9, 0x4, 0xd3, 0x6a, 0x1, 0xff, 0x78, 0x75, 0x10, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "11"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0xe32, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x8001, 0x2fff, 0x1e, 0x2, 0x0, 0x4}, @obex={0x5}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x24, 0x5, 0x2, 0x38}, @country_functional={0xc, 0x24, 0x7, 0xbc, 0x4c, [0x2, 0x9, 0x7]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x60}]}, @generic={0x74, 0xa, "446e204011993c133cc9bb6e840b675d75ace840f64aa0ba26922986591d25b644179f0f21a85dad401f04071edb840652d061e625071ed849866a5f452104005aa86690ab319b3154acd28b4716173394adfa1daa065b56c76b75931cdcd7491681b500404664a81b4297cae4214b995d20"}], [{{0x9, 0x5, 0xd, 0x0, 0xc, 0x4, 0x36, 0x4, [@generic={0xae, 0x23, "6147fbd26a4f0b66dadcbaef608d95b137aee74441b7f1c84777629bba5284dc701f97639cb9cb9f6bd77244af38612547622c8add234b974a37c442dfc2ec2dd2713e08474167880450b3de713c2e3fa3238bf93b23cb162d768d2660f417c3a3146a966912b540fe7cd274be3e96cbb51efb261966322e482ffbe68a6fa4e3339d060a5927fa65b92cdbc6f75f4eaa2949833dcc59fca37216e3b92ce0e7d8cf84612011c40d4924daecfc"}]}}]}}, {{0x9, 0x4, 0xef, 0x6f, 0x1, 0xff, 0xff, 0x0, 0x2, [@uac_as, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e02a5533"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x2, 0xa6}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x5, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xd1}]}], [{{0x9, 0x5, 0x1, 0x52de8e11a35ece, 0x8, 0x8, 0x3, 0x6, [@generic={0x101, 0xf, "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"}, @generic={0xad, 0xe, "39c7309dd7c72449715e397c74277ced52969043d9aae54a911e5f43ff7e8e5854a0f6ae733bf7135823f6e9a56fa53ae579b4f08a08d66362e9b5648ffe116dd0bf75c8002ddb97ae1901e0739157da6a18761607f67869729f348d43e7ebeec239f85f2365ed9e7584ae7615d4b6a8c4c8b977be0c74c9650ffeae73c9a5e8467c7a8324136cf26a88d50c54b0f546406e2348c968d58c4d847114db145f693753ea600cb34486064188"}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0xb, 0x7, 0x7f, 0xff, 0x7f}, 0xf, &(0x7f0000000e40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4b, 0x9}]}, 0x2, [{0x6, &(0x7f0000000e80)=@string={0x6, 0x3, "cd616cc9"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4}}]}) sendto$inet(r0, &(0x7f0000000000)="01a4", 0x2, 0x0, 0x0, 0x0) 1.002407073s ago: executing program 2 (id=4510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0xb, 0x20001000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) fspick(0xffffffffffffffff, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='9', 0x1) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) write(r5, &(0x7f0000000000)='16', 0x2) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r7}, 0xc) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) unshare(0x6a040000) 763.080505ms ago: executing program 2 (id=4511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 739.000624ms ago: executing program 2 (id=4513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000002ec0)={0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x148, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x118, 0x2, {{0x8001, 0x5, 0x7, 0x3, 0x5, 0xffff}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x5fc6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x3, 0x9, 0x9, 0x7}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x3f5a, 0x10, 0x10e8, 0xb82c}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x400, 0x3}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x800, 0xa}}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x40, 0xffffffff, 0x6, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x80000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x1000, 0x3, 0x8001, 0x9df}}, @NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x5, 0x3}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x80000001}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x5}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x100, 0x400, 0x1}}]}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r5}, 0x14) sendto(r7, &(0x7f0000000600)='\x00', 0x1, 0x0, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, r9, 0x4}, 0xc) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000640)=""/202, &(0x7f0000000740)=0xca) openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, 0x0, &(0x7f0000000080)) 532.618216ms ago: executing program 2 (id=4516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/425], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0100020009b299ea"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x384b, 0x0, 0x2, 0xeb}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x20, 0x2, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x8, 0x10000, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49eb, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x903c, 0x0, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0)) 432.595546ms ago: executing program 0 (id=4517): r0 = syz_io_uring_setup(0x3371, &(0x7f0000000040)={0x0, 0x8b6d, 0x20, 0x3, 0x314}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x7473, 0x80000, 0x3, 0x1c4}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bbf, 0x8000, 0x3, 0x347, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2740, 0x8000, 0x2, 0x284}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bf, 0x400, 0x1, 0x38a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63af, 0x42a, 0x1, 0x17b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb}, 0x0, 0x0, '\x00', {0x3, 0xfcc, 0x0, &(0x7f0000000540)=@buf_1k="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"}}, &(0x7f00000015c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000015, 0x12, r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000080001000800000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x1c) 428.478789ms ago: executing program 0 (id=4525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/uevent\x00', 0x21201, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, r0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000300)}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setresuid(0xee01, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0xc, 0x7, 0x79f, 0x10}) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write(r0, &(0x7f00000001c0)=' ', 0x25) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r8, &(0x7f0000000000)='3', 0x4e) mmap$KVM_DIRTY_RING(&(0x7f0000bdc000/0x4000)=nil, 0x24000, 0x0, 0x8010, r8, 0x40000) 387.23032ms ago: executing program 3 (id=4519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080046b4002c00000000a3069078ac1414bbac1414aa940400004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000358fe67558b08f1cad73478f78d4a7fd4c2e204c101c5466d7de32ad2036a9ac79f58fc66cb3835b3fdfbd3f50ce777e3abd5e8501610c068d92b890415517bbe405a87bb32afac6be10b57c6ac3c28daf52c7956537dce6598a5cbd158b19080e77fe9d66668fac67a93453626d2073eeffa2b538ea57484723e343bdc3dacdec0f44ef931e6d3f28302d73f851d66a2f8a1f1ddda5e67ee2c9636a12ba3727d1d06ad47ea08a7849e5a01883d8b9e0de4a11848793b183a302057c1c5c0b8cc9a72ee2ddb887b3506f9207259996f3a4f7c625ebc02d95bcbd4f4597c4caa9fc84ad640600000039c3b5bbb47b621b2665d23f695d745461b075e108a0185dd5b9985ad0da59e2e1faa0d89e4f7094a2c01c58bc22b9505a0320e67a0130727edbdd01c7142e764ee82d6a136ab8337ae1cd16f6d235310bbfcd5f560a6875f9ea89600026f780a348c6a65f2f86b78dc4c779b118de1c81b16b916fcb0b72b627de39a9a45cd1d598f0f6"], 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, r3, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) listen(r1, 0x100) r4 = dup(r0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xff82}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) 382.548371ms ago: executing program 0 (id=4520): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x140, 0x1, 0x2003, 0xfb, 0x401, 0x1, 0x8000, 0x6, 0x8, 0xf1e4, 0x2, 0x7f, 0x800000f8, 0x8, 0x4c8, 0x827, 0x8000, 0x401, 0x1, 0x8, 0x6, 0xf, 0xff, 0x2007, 0x8, 0x200000, 0xaf, 0x0, 0x7, 0xffffffff, 0x2]}) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000003700)={0x2020}, 0x2020) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x2}}]}, {0x0, [0x2e, 0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000002240)=""/190, 0x37, 0xbe, 0x1, 0x9b0}, 0x28) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000002a80)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffff8001, 0x7, 0x7, 0x40, r4, 0xc4, '\x00', 0x0, r5, 0x5, 0x1, 0x1, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r11, &(0x7f0000000200)={0x2020}, 0x2020) 340.112126ms ago: executing program 3 (id=4521): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 293.97671ms ago: executing program 3 (id=4522): r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 288.296608ms ago: executing program 3 (id=4531): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 202.852895ms ago: executing program 4 (id=4523): msgget$private(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 202.575676ms ago: executing program 3 (id=4524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001500)='8', 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x2, 0x44042) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0xb2ad}, 0x8) 131.86454ms ago: executing program 4 (id=4526): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff66}, 0x94) (async) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d0000000002000000000000270200000000000000000000090300000000005f006100"], 0x0, 0x52}, 0x20) (async) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0xf8, 0x0, {r3}}, 0x20) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) mount$bpf(0x0, &(0x7f0000016540)='.\x00', &(0x7f0000016580), 0x2000411, &(0x7f0000018740)={[{@mode={'mode', 0x3d, 0xffffffffffffffff}}]}) (async) read$FUSE(r2, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000640)={0x50, 0x0, r4, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa6d41, 0x5) r6 = dup3(r5, r2, 0x80000) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000a00)={{}, "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"}) r7 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000140)=""/241) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.904248ms ago: executing program 4 (id=4527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000001c1000000000000005000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xe, r4}, 0x10) r5 = syz_io_uring_setup(0x408c, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x3, 0x2e1}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r7, 0x0, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r5, r6, r5, r6, r6], 0x5) setsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0x8) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f00000000c0)={0x51f, 0x2, 0x1}) read$FUSE(r6, &(0x7f00000022c0)={0x2020}, 0x2020) 2.02677ms ago: executing program 3 (id=4528): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f00000001c0)='P', 0x1, 0x4008044, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4", 0x2, 0x0, 0x0, 0x240) 0s ago: executing program 4 (id=4529): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac261bc3", @ANYRES16=r4, @ANYBLOB="3fab00000000fbdbdf252e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740087ff01007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xc4}, 0x1, 0x0, 0x0, 0x404c814}, 0x4000801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r6 = socket(0x10, 0x2, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f00000004c0)={0x1f, @none}, 0x14) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g2\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g2\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): 955.578626][T12547] usb usb5-port1: unable to enumerate USB device [ 956.556935][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3905'. [ 957.325187][T19827] ufs: failed to set blocksize [ 957.496744][T18392] usb 8-1: USB disconnect, device number 95 [ 958.412930][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3907'. [ 958.868345][T19826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.024870][T19826] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 959.209858][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 959.249986][ T5743] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 959.315035][T19864] netlink: 'syz.4.3915': attribute type 1 has an invalid length. [ 959.315334][ T5743] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 959.315364][ T5743] Bluetooth: hci0: unexpected event for opcode 0x042f [ 959.328424][ T43] audit: type=1800 audit(1791164314.281:5096): pid=19858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3911" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 959.350355][T19864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.511652][T19864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.512003][T19864] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 959.512768][T19864] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 960.272293][ T35] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 960.454852][ T35] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 960.455884][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 960.455913][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 960.455939][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 960.455965][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 960.456000][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.461075][T19873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 960.461237][T19873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 960.463333][ T35] pl2303 5-1:1.0: pl2303 converter detected [ 960.472957][ T35] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 960.731471][T14530] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 960.791691][T19870] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 960.792010][T19870] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 960.792285][T19870] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 960.792860][T19870] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 960.792904][T19870] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 960.796137][ T35] usb 5-1: USB disconnect, device number 106 [ 960.818739][ T35] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 960.819366][ T35] pl2303 5-1:1.0: device disconnected [ 960.924589][T14530] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 961.119968][T14530] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 961.119987][T14530] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 961.176979][T14530] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.177006][T14530] usb 9-1: Product: syz [ 961.177019][T14530] usb 9-1: Manufacturer: syz [ 961.177031][T14530] usb 9-1: SerialNumber: syz [ 961.486515][T19896] ufs: failed to set blocksize [ 961.635281][T14530] usb 9-1: Limiting number of CPorts to U8_MAX [ 961.945754][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 962.026222][T19907] syzkaller0: entered promiscuous mode [ 962.026246][T19907] syzkaller0: entered allmulticast mode [ 962.309937][T14105] usb 9-1: failed to submit out-urb: -90 [ 962.310041][T14105] greybus greybus1: 0/0:0: failed to send response 0 for type 0x01: -90 [ 962.518484][T19876] sctp: [Deprecated]: syz.4.3919 (pid 19876) Use of int in max_burst socket option. [ 962.518484][T19876] Use struct sctp_assoc_value instead [ 962.803655][T14105] usb 9-1: failed to submit out-urb: -90 [ 962.803714][T14105] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x14 failed: -90 [ 962.804178][T14105] greybus 1-svc: failed to get rail count: -90 [ 962.851085][T14105] usb 9-1: failed to submit out-urb: -90 [ 962.851111][T14105] greybus greybus1: 0/0:0: failed to send response 0 for type 0x02: -90 [ 962.863562][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.894117][T14105] usb 9-1: failed to submit out-urb: -90 [ 962.894143][T14105] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x10 failed: -90 [ 962.894333][T14105] greybus 1-svc: power mode change failed on AP to switch link: -90 [ 963.333404][T19895] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 963.405554][T14530] usb 9-1: USB disconnect, device number 59 [ 963.405626][ C0] usb 9-1: failed to resubmit arpc in-urb: -19 [ 963.405649][ C0] usb 9-1: failed to resubmit arpc in-urb: -19 [ 963.405666][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 963.405681][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 963.405697][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 963.405713][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 963.413904][T14530] usb 9-1: failed to send ARPC request 4: -19 [ 963.413941][T14530] usb 9-1: failed to execute ARPC: -19 [ 963.413949][T14530] usb 9-1: failed to flush cport 0: -19 [ 963.413957][T14530] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 963.414016][T14530] usb 9-1: failed to send ARPC request 2: -19 [ 963.414047][T14530] usb 9-1: failed to execute ARPC: -19 [ 963.414054][T14530] usb 9-1: failed to quiesce cport 0: -19 (0) [ 963.414063][T14530] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 963.414183][T14530] usb 9-1: failed to send ARPC request 3: -19 [ 963.414212][T14530] usb 9-1: failed to execute ARPC: -19 [ 963.414220][T14530] usb 9-1: failed to clear cport 0: -19 [ 963.414228][T14530] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 963.837496][T19925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3932'. [ 963.954421][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'. [ 964.281782][ T43] audit: type=1800 audit(1791164319.231:5097): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3937" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 965.326691][ T43] audit: type=1800 audit(1791164320.281:5098): pid=19956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3939" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 966.075061][T19974] futex_wake_op: syz.4.3945 tries to shift op by 144; fix this program [ 966.177383][T19977] Invalid ELF header type: 3 != 1 [ 966.178297][T19977] size and base must be multiples of 4 kiB [ 966.178315][T19977] CPU: 3 UID: 0 PID: 19977 Comm: syz.0.3946 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.178341][T19977] Tainted: [L]=SOFTLOCKUP [ 966.178348][T19977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 966.178359][T19977] Call Trace: [ 966.178365][T19977] [ 966.178372][T19977] dump_stack_lvl+0x100/0x190 [ 966.178403][T19977] mtrr_add.cold+0x74/0x87 [ 966.178424][T19977] mtrr_ioctl+0x25a/0xcf0 [ 966.178452][T19977] ? __pfx_mtrr_ioctl+0x10/0x10 [ 966.178483][T19977] ? __fget_files+0x34/0x3d0 [ 966.178507][T19977] ? find_held_lock+0x2b/0x80 [ 966.178537][T19977] ? __fget_files+0x21f/0x3d0 [ 966.178568][T19977] ? __pfx_mtrr_ioctl+0x10/0x10 [ 966.178597][T19977] proc_reg_compat_ioctl+0x229/0x320 [ 966.178626][T19977] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 966.178655][T19977] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 966.178679][T19977] __do_fast_syscall_32+0x13a/0x8b0 [ 966.178707][T19977] do_fast_syscall_32+0x32/0x70 [ 966.178731][T19977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.178754][T19977] RIP: 0023:0xf6fdefec [ 966.178774][T19977] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 966.178784][T19977] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 966.178803][T19977] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400c4d01 [ 966.178817][T19977] RDX: 0000000080000a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.178827][T19977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.178837][T19977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 966.178847][T19977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.178870][T19977] [ 966.321180][T19986] ufs: failed to set blocksize [ 966.935193][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3947'. [ 967.286780][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3948'. [ 967.353568][T19985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.372154][ T5743] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 967.372303][ T5743] Bluetooth: hci0: unexpected event for opcode 0x042f [ 967.464837][T19985] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 968.362365][ T9] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 968.418608][T20013] FAULT_INJECTION: forcing a failure. [ 968.418608][T20013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.418641][T20013] CPU: 3 UID: 0 PID: 20013 Comm: syz.3.3955 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.418666][T20013] Tainted: [L]=SOFTLOCKUP [ 968.418674][T20013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.418685][T20013] Call Trace: [ 968.418692][T20013] [ 968.418700][T20013] dump_stack_lvl+0x100/0x190 [ 968.418730][T20013] should_fail_ex.cold+0x5/0xa [ 968.418755][T20013] _copy_from_user+0x2e/0xd0 [ 968.418782][T20013] get_compat_msghdr+0xb3/0x480 [ 968.418805][T20013] ? __pfx_get_compat_msghdr+0x10/0x10 [ 968.418831][T20013] ? _kstrtoull+0x144/0x200 [ 968.418849][T20013] ? __pfx__kstrtoull+0x10/0x10 [ 968.418871][T20013] ___sys_sendmsg+0x1b6/0x1e0 [ 968.418899][T20013] ? __pfx____sys_sendmsg+0x10/0x10 [ 968.418924][T20013] ? __lock_acquire+0x5c0/0x1f40 [ 968.418957][T20013] ? __fget_files+0x34/0x3d0 [ 968.418995][T20013] __sys_sendmmsg+0x309/0x440 [ 968.419017][T20013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 968.419034][T20013] ? find_held_lock+0x2b/0x80 [ 968.419059][T20013] ? __mutex_unlock_slowpath+0x35d/0x930 [ 968.419094][T20013] ? fput+0x7c/0x100 [ 968.419118][T20013] ? ksys_write+0x1ac/0x250 [ 968.419143][T20013] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 968.419166][T20013] ? lockdep_hardirqs_on+0x7d/0x110 [ 968.419187][T20013] __do_fast_syscall_32+0x13a/0x8b0 [ 968.419210][T20013] ? lockdep_hardirqs_on+0x7d/0x110 [ 968.419233][T20013] do_fast_syscall_32+0x32/0x70 [ 968.419257][T20013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.419279][T20013] RIP: 0023:0xf708efec [ 968.419298][T20013] Code: Unable to access opcode bytes at 0xf708efc2. [ 968.419306][T20013] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 968.419324][T20013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005240 [ 968.419335][T20013] RDX: 0000000004000095 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.419346][T20013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.419356][T20013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 968.419366][T20013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.419389][T20013] [ 968.611399][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 968.653689][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 968.688770][ T9] usb 7-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64 [ 968.688799][ T9] usb 7-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 968.688820][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 968.753036][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.753053][ T9] usb 7-1: Product: 䱇즙靲⍡媪乵Ḉ㎖뵸榜鹘䓍붸頹셑䛏᷋䍂⧄磒ᬢﲇ볡骗㨨館棌䪢쯰 [ 968.753064][ T9] usb 7-1: Manufacturer: 紝ໝﺃ呑㢂㓲ﶄ㲄㫓ꐭ簚鳃㺞휯ܬ̪䉊✤ꗣ✚蚑犈⎃嶿膁␊ⴊ厁︂鬇뫸̐停ᱥ瞚 [ 968.753075][ T9] usb 7-1: SerialNumber: syz [ 969.070249][T20005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 969.070764][T20005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 969.281654][ T9] usb 7-1: USB disconnect, device number 98 [ 969.536671][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 969.564359][ T5743] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 969.564435][ T5743] Bluetooth: hci1: unexpected event for opcode 0x042f [ 969.761543][ T3265] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 969.923935][ T3265] usb 7-1: Using ep0 maxpacket: 8 [ 969.925773][ T3265] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.926762][ T3265] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 969.926798][ T3265] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 969.928815][ T3265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.928836][ T3265] usb 7-1: Product: ࠐ [ 969.928849][ T3265] usb 7-1: Manufacturer: В [ 969.928864][ T3265] usb 7-1: SerialNumber: ᐉ [ 970.037511][T20031] 9pnet_virtio: no channels available for device syz [ 970.045147][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'. [ 970.049858][ T5743] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 970.049940][ T5743] Bluetooth: hci3: unexpected event for opcode 0x042f [ 970.140435][ T3265] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 970.290685][T20035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 970.290711][T20035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 970.290774][T20035] vhci_hcd vhci_hcd.0: Device attached [ 970.298404][T20036] vhci_hcd: connection closed [ 970.298643][T14105] vhci_hcd vhci_hcd.0: stop threads [ 970.298660][T14105] vhci_hcd vhci_hcd.0: release socket [ 970.298671][T14105] vhci_hcd vhci_hcd.0: disconnect device [ 970.316106][T20032] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 970.339363][T20005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.339646][T20005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.341841][T20005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.342032][T20005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.347742][ T3265] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 970.379908][ T3265] usb 7-1: USB disconnect, device number 99 [ 970.393020][ T5743] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 970.393070][ T5743] Bluetooth: hci2: Injecting HCI hardware error event [ 970.540112][T19454] udevd[19454]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.331799][T20051] FAULT_INJECTION: forcing a failure. [ 971.331799][T20051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.331835][T20051] CPU: 2 UID: 0 PID: 20051 Comm: syz.0.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.331852][T20051] Tainted: [L]=SOFTLOCKUP [ 971.331856][T20051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 971.331864][T20051] Call Trace: [ 971.331868][T20051] [ 971.331872][T20051] dump_stack_lvl+0x100/0x190 [ 971.331892][T20051] should_fail_ex.cold+0x5/0xa [ 971.331905][T20051] ? prepare_alloc_pages+0x16d/0x5b0 [ 971.331924][T20051] should_fail_alloc_page+0xeb/0x140 [ 971.331942][T20051] prepare_alloc_pages+0x1f0/0x5b0 [ 971.331972][T20051] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 971.331987][T20051] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 971.332013][T20051] ? __lock_acquire+0x5c0/0x1f40 [ 971.332033][T20051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 971.332049][T20051] ? lock_acquire+0x1d1/0x380 [ 971.332065][T20051] ? unwind_next_frame+0xbd/0x2090 [ 971.332082][T20051] ? lock_acquire+0x1d1/0x380 [ 971.332097][T20051] ? is_bpf_text_address+0x25/0x1a0 [ 971.332115][T20051] ? find_held_lock+0x2b/0x80 [ 971.332129][T20051] ? bpf_ksym_find+0x124/0x1c0 [ 971.332143][T20051] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 971.332160][T20051] ? is_bpf_text_address+0x94/0x1a0 [ 971.332176][T20051] ? kernel_text_address+0x8d/0x100 [ 971.332192][T20051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 971.332210][T20051] ? policy_nodemask+0xed/0x4f0 [ 971.332228][T20051] alloc_pages_mpol+0x201/0x550 [ 971.332246][T20051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 971.332264][T20051] ? lock_acquire+0x1d1/0x380 [ 971.332282][T20051] alloc_pages_noprof+0x1a/0x160 [ 971.332295][T20051] anon_pipe_prefill_and_lock+0x102/0x580 [ 971.332313][T20051] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 971.332331][T20051] ? __pfx_aa_file_perm+0x10/0x10 [ 971.332349][T20051] anon_pipe_write+0x164/0x1b50 [ 971.332364][T20051] ? lock_acquire+0x1d1/0x380 [ 971.332380][T20051] ? get_pid_task+0x2a/0x250 [ 971.332392][T20051] ? find_held_lock+0x2b/0x80 [ 971.332404][T20051] ? get_pid_task+0xfc/0x250 [ 971.332417][T20051] ? __pfx_anon_pipe_write+0x10/0x10 [ 971.332432][T20051] ? common_file_perm+0x266/0x500 [ 971.332446][T20051] ? bpf_lsm_file_permission+0x9/0x10 [ 971.332463][T20051] ? security_file_permission+0x76/0x210 [ 971.332476][T20051] ? rw_verify_area+0xce/0x6d0 [ 971.332490][T20051] vfs_write+0x6af/0x1050 [ 971.332508][T20051] ? __pfx_anon_pipe_write+0x10/0x10 [ 971.332525][T20051] ? __pfx_vfs_write+0x10/0x10 [ 971.332537][T20051] ? find_held_lock+0x2b/0x80 [ 971.332558][T20051] ksys_write+0x1f8/0x250 [ 971.332571][T20051] ? __pfx_ksys_write+0x10/0x10 [ 971.332584][T20051] ? ksys_write+0x1ac/0x250 [ 971.332597][T20051] ? __pfx_ksys_write+0x10/0x10 [ 971.332613][T20051] __do_fast_syscall_32+0x13a/0x8b0 [ 971.332628][T20051] ? lockdep_hardirqs_on+0x7d/0x110 [ 971.332643][T20051] do_fast_syscall_32+0x32/0x70 [ 971.332658][T20051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 971.332673][T20051] RIP: 0023:0xf6fdefec [ 971.332687][T20051] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 971.332692][T20051] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 971.332703][T20051] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 971.332711][T20051] RDX: 00000000560c89bb RSI: 0000000000000000 RDI: 0000000000000000 [ 971.332717][T20051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.332724][T20051] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 971.332733][T20051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 971.332747][T20051] [ 972.527164][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 972.655366][T20071] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 972.797985][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3973'. [ 972.883718][ T5743] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 972.883770][ T5743] Bluetooth: hci2: unexpected event for opcode 0x042f [ 974.266340][ T43] audit: type=1800 audit(1791164329.211:5099): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3980" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 974.359855][T20103] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 974.548421][T18900] Bluetooth: hci2: hardware error 0x00 [ 975.632923][ T854] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 975.815554][T20096] syzkaller1: entered promiscuous mode [ 975.815571][T20096] syzkaller1: entered allmulticast mode [ 975.882961][ T854] usb 8-1: device descriptor read/64, error -71 [ 976.002463][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3986'. [ 976.163269][ T854] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 976.227667][ T5743] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 976.227812][ T5743] Bluetooth: hci1: unexpected event for opcode 0x042f [ 976.301707][ T854] usb 8-1: device descriptor read/64, error -71 [ 976.412814][ T854] usb usb8-port1: attempt power cycle [ 976.781625][ T854] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 976.836630][ T854] usb 8-1: device descriptor read/8, error -71 [ 976.871459][T18900] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 977.096731][ T854] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 977.114687][ T854] usb 8-1: device descriptor read/8, error -71 [ 977.222136][ T854] usb usb8-port1: unable to enumerate USB device [ 977.328088][T20143] syzkaller1: entered promiscuous mode [ 977.328111][T20143] syzkaller1: entered allmulticast mode [ 977.330293][T20143] FAULT_INJECTION: forcing a failure. [ 977.330293][T20143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.330322][T20143] CPU: 2 UID: 0 PID: 20143 Comm: syz.4.3984 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.330349][T20143] Tainted: [L]=SOFTLOCKUP [ 977.330357][T20143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 977.330367][T20143] Call Trace: [ 977.330373][T20143] [ 977.330380][T20143] dump_stack_lvl+0x100/0x190 [ 977.330414][T20143] should_fail_ex.cold+0x5/0xa [ 977.330439][T20143] _copy_from_iter+0x1f4/0x1690 [ 977.330473][T20143] ? __pfx__copy_from_iter+0x10/0x10 [ 977.330500][T20143] ? _copy_from_iter+0x270/0x1690 [ 977.330527][T20143] ? __lock_acquire+0x5c0/0x1f40 [ 977.330558][T20143] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 977.330595][T20143] skb_copy_datagram_from_iter+0x11f/0x720 [ 977.330623][T20143] ? aa_file_perm+0x197/0x14d0 [ 977.330647][T20143] ? iov_iter_advance+0xac/0x6d0 [ 977.330671][T20143] ? find_held_lock+0x2b/0x80 [ 977.330712][T20143] tun_get_user+0x1866/0x3cc0 [ 977.330752][T20143] ? __lock_acquire+0x5c0/0x1f40 [ 977.330779][T20143] ? __pfx_tun_get_user+0x10/0x10 [ 977.330810][T20143] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 977.330838][T20143] ? find_held_lock+0x2b/0x80 [ 977.330859][T20143] ? tun_get+0x191/0x370 [ 977.330885][T20143] ? tun_get+0x191/0x370 [ 977.330918][T20143] tun_chr_write_iter+0xdc/0x200 [ 977.330938][T20143] vfs_write+0x6af/0x1050 [ 977.330962][T20143] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 977.330982][T20143] ? __pfx_vfs_write+0x10/0x10 [ 977.331002][T20143] ? find_held_lock+0x2b/0x80 [ 977.331039][T20143] ksys_write+0x12a/0x250 [ 977.331061][T20143] ? __pfx_ksys_write+0x10/0x10 [ 977.331081][T20143] ? ksys_write+0x1ac/0x250 [ 977.331103][T20143] ? __pfx_ksys_write+0x10/0x10 [ 977.331130][T20143] __do_fast_syscall_32+0x13a/0x8b0 [ 977.331156][T20143] ? lockdep_hardirqs_on+0x7d/0x110 [ 977.331181][T20143] do_fast_syscall_32+0x32/0x70 [ 977.331206][T20143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.331229][T20143] RIP: 0023:0xf702efec [ 977.331250][T20143] Code: Unable to access opcode bytes at 0xf702efc2. [ 977.331259][T20143] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 977.331278][T20143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 977.331292][T20143] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 977.331302][T20143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.331313][T20143] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 977.331326][T20143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.331350][T20143] [ 978.508857][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 978.557804][T20172] xt_MASQUERADE: bad rangesize 29 [ 978.688291][T20172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 979.045770][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 979.047886][T18900] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 979.047905][T18900] Bluetooth: hci3: unexpected event for opcode 0x042f [ 981.591492][T12547] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 981.699858][T20216] FAULT_INJECTION: forcing a failure. [ 981.699858][T20216] name failslab, interval 1, probability 0, space 0, times 0 [ 981.699882][T20216] CPU: 2 UID: 0 PID: 20216 Comm: syz.4.4011 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.699898][T20216] Tainted: [L]=SOFTLOCKUP [ 981.699902][T20216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 981.699909][T20216] Call Trace: [ 981.699915][T20216] [ 981.699921][T20216] dump_stack_lvl+0x100/0x190 [ 981.699941][T20216] should_fail_ex.cold+0x5/0xa [ 981.699956][T20216] should_failslab+0xc2/0x120 [ 981.699974][T20216] __kmalloc_noprof+0xfc/0x840 [ 981.699988][T20216] ? bit_cursor+0x938/0x14e0 [ 981.700006][T20216] bit_cursor+0x938/0x14e0 [ 981.700025][T20216] ? __pfx_bit_cursor+0x10/0x10 [ 981.700039][T20216] ? enable_work+0x295/0x320 [ 981.700058][T20216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 981.700077][T20216] ? get_color+0x1da/0x450 [ 981.700090][T20216] ? __pfx_bit_cursor+0x10/0x10 [ 981.700103][T20216] fbcon_cursor+0x43c/0x5e0 [ 981.700115][T20216] ? add_softcursor+0x1e0/0x290 [ 981.700133][T20216] set_cursor+0x1db/0x250 [ 981.700149][T20216] con_write+0x8c/0xb0 [ 981.700160][T20216] n_tty_write+0x431/0x1160 [ 981.700180][T20216] ? __pfx_n_tty_write+0x10/0x10 [ 981.700192][T20216] ? __kasan_kmalloc+0xaa/0xb0 [ 981.700208][T20216] ? __pfx_woken_wake_function+0x10/0x10 [ 981.700221][T20216] ? rcu_is_watching+0x13/0xc0 [ 981.700233][T20216] ? file_tty_write.isra.0+0x694/0x890 [ 981.700250][T20216] ? kfree+0x1e5/0x6d0 [ 981.700262][T20216] ? __pfx_n_tty_write+0x10/0x10 [ 981.700276][T20216] file_tty_write.isra.0+0x4d2/0x890 [ 981.700297][T20216] vfs_write+0x6af/0x1050 [ 981.700311][T20216] ? __pfx_tty_write+0x10/0x10 [ 981.700330][T20216] ? __pfx_vfs_write+0x10/0x10 [ 981.700342][T20216] ? find_held_lock+0x2b/0x80 [ 981.700365][T20216] ksys_write+0x12a/0x250 [ 981.700379][T20216] ? __pfx_ksys_write+0x10/0x10 [ 981.700391][T20216] ? ksys_write+0x1ac/0x250 [ 981.700404][T20216] ? __pfx_ksys_write+0x10/0x10 [ 981.700426][T20216] __do_fast_syscall_32+0x13a/0x8b0 [ 981.700442][T20216] ? lockdep_hardirqs_on+0x7d/0x110 [ 981.700457][T20216] do_fast_syscall_32+0x32/0x70 [ 981.700472][T20216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 981.700487][T20216] RIP: 0023:0xf702efec [ 981.700500][T20216] Code: Unable to access opcode bytes at 0xf702efc2. [ 981.700505][T20216] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 981.700516][T20216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 981.700524][T20216] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.700530][T20216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.700537][T20216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 981.700543][T20216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.700558][T20216] [ 981.755095][T12547] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 981.755913][T12547] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 981.755928][T12547] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 981.757487][T12547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.757500][T12547] usb 5-1: Product: syz [ 981.757509][T12547] usb 5-1: Manufacturer: syz [ 981.757517][T12547] usb 5-1: SerialNumber: syz [ 981.969133][T12547] usb 5-1: Limiting number of CPorts to U8_MAX [ 982.119596][T20221] futex_wake_op: syz.3.4012 tries to shift op by 144; fix this program [ 982.250015][T18900] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 982.254338][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 982.872088][ T12] usb 5-1: failed to submit out-urb: -90 [ 982.872113][ T12] greybus greybus1: 0/0:0: failed to send response 0 for type 0x01: -90 [ 983.056733][T20209] sctp: [Deprecated]: syz.0.4008 (pid 20209) Use of int in max_burst socket option. [ 983.056733][T20209] Use struct sctp_assoc_value instead [ 983.130140][ T12] usb 5-1: failed to submit out-urb: -90 [ 983.130165][ T12] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x14 failed: -90 [ 983.130227][ T12] greybus 1-svc: failed to get rail count: -90 [ 983.144623][ T12] usb 5-1: failed to submit out-urb: -90 [ 983.144639][ T12] greybus greybus1: 0/0:0: failed to send response 0 for type 0x02: -90 [ 983.160891][T14105] usb 5-1: failed to submit out-urb: -90 [ 983.160908][T14105] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x10 failed: -90 [ 983.160942][T14105] greybus 1-svc: power mode change failed on AP to switch link: -90 [ 983.551219][T12547] usb 5-1: USB disconnect, device number 107 [ 983.551429][ C2] usb 5-1: failed to resubmit arpc in-urb: -19 [ 983.551466][ C2] usb 5-1: failed to resubmit arpc in-urb: -19 [ 983.551499][ C2] usb 5-1: failed to resubmit in-urb: -19 [ 983.551533][ C2] usb 5-1: failed to resubmit in-urb: -19 [ 983.551568][ C2] usb 5-1: failed to resubmit in-urb: -19 [ 983.551599][ C2] usb 5-1: failed to resubmit in-urb: -19 [ 983.555184][T12547] usb 5-1: failed to send ARPC request 4: -19 [ 983.555247][T12547] usb 5-1: failed to execute ARPC: -19 [ 983.555264][T12547] usb 5-1: failed to flush cport 0: -19 [ 983.555282][T12547] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 984.743290][T12547] usb 5-1: failed to send ARPC request 2: -19 [ 984.743664][T12547] usb 5-1: failed to execute ARPC: -19 [ 984.743676][T12547] usb 5-1: failed to quiesce cport 0: -19 (0) [ 984.743688][T12547] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 984.746625][T12547] usb 5-1: failed to send ARPC request 3: -19 [ 984.746692][T12547] usb 5-1: failed to execute ARPC: -19 [ 984.746703][T12547] usb 5-1: failed to clear cport 0: -19 [ 984.746713][T12547] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 985.417542][T20253] FAULT_INJECTION: forcing a failure. [ 985.417542][T20253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 985.417631][T20253] CPU: 0 UID: 0 PID: 20253 Comm: syz.0.4019 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.417687][T20253] Tainted: [L]=SOFTLOCKUP [ 985.417695][T20253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 985.417706][T20253] Call Trace: [ 985.417714][T20253] [ 985.417722][T20253] dump_stack_lvl+0x100/0x190 [ 985.417756][T20253] should_fail_ex.cold+0x5/0xa [ 985.417784][T20253] get_futex_key+0x1d0/0x14f0 [ 985.417807][T20253] ? __pfx_get_futex_key+0x10/0x10 [ 985.417880][T20253] ? __pfx___schedule+0x10/0x10 [ 985.417912][T20253] futex_wait_setup+0x91/0x540 [ 985.417946][T20253] __futex_wait+0x19f/0x300 [ 985.417977][T20253] ? __pfx___futex_wait+0x10/0x10 [ 985.418002][T20253] ? __pfx_try_to_wake_up+0x10/0x10 [ 985.418032][T20253] ? futex_hash+0x311/0x400 [ 985.418064][T20253] ? __pfx_futex_wake_mark+0x10/0x10 [ 985.418097][T20253] ? find_held_lock+0x2b/0x80 [ 985.418123][T20253] ? futex_wake+0x4ea/0x5e0 [ 985.418157][T20253] futex_wait+0xe6/0x370 [ 985.418186][T20253] ? __pfx_futex_wait+0x10/0x10 [ 985.418220][T20253] ? rcu_is_watching+0x13/0xc0 [ 985.418245][T20253] ? trace_sched_exit_tp+0x120/0x160 [ 985.418271][T20253] do_futex+0x265/0x440 [ 985.418296][T20253] ? __pfx_do_futex+0x10/0x10 [ 985.418319][T20253] ? __pfx_do_sys_openat2+0x10/0x10 [ 985.418365][T20253] __ia32_sys_futex_time32+0x2f4/0x470 [ 985.418395][T20253] ? xfd_validate_state+0x129/0x190 [ 985.418429][T20253] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 985.418467][T20253] __do_fast_syscall_32+0x13a/0x8b0 [ 985.418496][T20253] ? lockdep_hardirqs_on+0x7d/0x110 [ 985.418527][T20253] do_fast_syscall_32+0x32/0x70 [ 985.418556][T20253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 985.418583][T20253] RIP: 0023:0xf6fdefec [ 985.418602][T20253] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 985.418623][T20253] RSP: 002b:00000000f53cd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 985.418647][T20253] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 985.418661][T20253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 985.418676][T20253] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 985.418689][T20253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.418711][T20253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 985.418741][T20253] [ 986.303420][T18900] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 986.307308][T18900] Bluetooth: hci3: Injecting HCI hardware error event [ 986.310060][ T5743] Bluetooth: hci3: hardware error 0x00 [ 987.461432][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 987.531459][T18900] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 987.531482][T18900] Bluetooth: hci1: unexpected event for opcode 0x042f [ 988.310909][T20285] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 988.378976][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'. [ 988.381736][T18900] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 988.485239][ T43] audit: type=1800 audit(1791164343.441:5100): pid=20283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4031" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 988.791556][ T5743] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 989.898726][T20324] ecryptfs: Unknown parameter '(' [ 991.330112][ T43] audit: type=1800 audit(1791164346.281:5101): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4043" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 992.466546][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.586598][T20363] 9pnet_virtio: no channels available for device syz [ 992.590135][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 992.913719][ T43] audit: type=1800 audit(1791164347.871:5102): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4055" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 993.404362][T20377] netlink: 'syz.4.4056': attribute type 2 has an invalid length. [ 993.404421][T20377] netlink: 'syz.4.4056': attribute type 7 has an invalid length. [ 993.435318][T20377] U: entered promiscuous mode [ 993.878298][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 994.803348][T20401] gadgetfs: bound to dummy_udc driver [ 994.918641][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 995.063710][T20414] netlink: 'syz.0.4062': attribute type 1 has an invalid length. [ 995.063726][T20414] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4062'. [ 995.081451][ T854] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 995.081696][ C2] gadgetfs: connected [ 995.081818][ T854] gadgetfs: disconnected [ 995.261794][ C2] gadgetfs: connected [ 995.264997][ T854] usb 5-1: New USB device found, idVendor=0525, idProduct=24a0, bcdDevice= 1.00 [ 995.265326][ T854] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 995.265361][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.267682][ C2] gadgetfs: configuration #1 [ 995.286954][ T854] usb 5-1: string descriptor 0 read error: -32 [ 995.463454][T20418] 9pnet_virtio: no channels available for device syz [ 995.469035][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4065'. [ 995.481149][ T5743] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 995.481178][ T5743] Bluetooth: hci1: unexpected event for opcode 0x042f [ 995.489769][T20399] gadgetfs: suspended from state 3 [ 995.490192][ T854] usb 5-1: USB disconnect, device number 108 [ 995.491664][T20399] gadgetfs: disconnected [ 995.546971][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 995.661065][T20426] FAULT_INJECTION: forcing a failure. [ 995.661065][T20426] name fail_futex, interval 1, probability 0, space 0, times 0 [ 995.661088][T20426] CPU: 2 UID: 0 PID: 20426 Comm: syz.3.4066 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.661105][T20426] Tainted: [L]=SOFTLOCKUP [ 995.661110][T20426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 995.661118][T20426] Call Trace: [ 995.661122][T20426] [ 995.661127][T20426] dump_stack_lvl+0x100/0x190 [ 995.661148][T20426] should_fail_ex.cold+0x5/0xa [ 995.661163][T20426] get_futex_key+0x1d0/0x14f0 [ 995.661178][T20426] ? __pfx_get_futex_key+0x10/0x10 [ 995.661195][T20426] futex_wake+0xf4/0x5e0 [ 995.661212][T20426] ? __pfx_futex_wake+0x10/0x10 [ 995.661227][T20426] ? kasan_quarantine_put+0x104/0x240 [ 995.661245][T20426] ? putname+0xb1/0x110 [ 995.661259][T20426] ? kmem_cache_free+0x127/0x6c0 [ 995.661274][T20426] do_futex+0x2b2/0x440 [ 995.661312][T20426] ? __pfx_do_futex+0x10/0x10 [ 995.661338][T20426] ? do_sys_openat2+0x159/0x1e0 [ 995.661357][T20426] ? __pfx_do_sys_openat2+0x10/0x10 [ 995.661374][T20426] ? __pfx_get_nodes+0x10/0x10 [ 995.661393][T20426] __ia32_sys_futex_time32+0x2f4/0x470 [ 995.661411][T20426] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 995.661426][T20426] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 995.661443][T20426] __do_fast_syscall_32+0x13a/0x8b0 [ 995.661463][T20426] ? lockdep_hardirqs_on+0x7d/0x110 [ 995.661479][T20426] do_fast_syscall_32+0x32/0x70 [ 995.661496][T20426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 995.661511][T20426] RIP: 0023:0xf708efec [ 995.661526][T20426] Code: Unable to access opcode bytes at 0xf708efc2. [ 995.661532][T20426] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 995.661545][T20426] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 995.661553][T20426] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 995.661560][T20426] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 995.661567][T20426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 995.661574][T20426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.661589][T20426] [ 995.865559][T20434] orangefs_devreq_open: device cannot be opened in blocking mode [ 995.871043][T20429] FAULT_INJECTION: forcing a failure. [ 995.871043][T20429] name failslab, interval 1, probability 0, space 0, times 0 [ 995.871074][T20429] CPU: 0 UID: 0 PID: 20429 Comm: syz.2.4077 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.871099][T20429] Tainted: [L]=SOFTLOCKUP [ 995.871106][T20429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 995.871118][T20429] Call Trace: [ 995.871125][T20429] [ 995.871135][T20429] dump_stack_lvl+0x100/0x190 [ 995.871293][T20429] should_fail_ex.cold+0x5/0xa [ 995.871337][T20429] should_failslab+0xc2/0x120 [ 995.871372][T20429] __kmalloc_noprof+0xfc/0x840 [ 995.871401][T20429] ? vhost_dev_set_owner+0x3b2/0xa30 [ 995.871435][T20429] vhost_dev_set_owner+0x3b2/0xa30 [ 995.871471][T20429] vhost_dev_ioctl+0x521/0xe70 [ 995.871503][T20429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 995.871531][T20429] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 995.871556][T20429] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 995.871584][T20429] vhost_vsock_dev_ioctl+0x320/0xb70 [ 995.871612][T20429] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 995.871640][T20429] ? hook_file_ioctl_common+0x140/0x440 [ 995.871668][T20429] ? __fget_files+0x21f/0x3d0 [ 995.871697][T20429] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 995.871725][T20429] compat_ptr_ioctl+0x6e/0xa0 [ 995.871747][T20429] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 995.871767][T20429] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 995.871792][T20429] __do_fast_syscall_32+0x13a/0x8b0 [ 995.871827][T20429] ? lockdep_hardirqs_on+0x7d/0x110 [ 995.871856][T20429] do_fast_syscall_32+0x32/0x70 [ 995.871882][T20429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 995.871908][T20429] RIP: 0023:0xf6ffefec [ 995.871930][T20429] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 995.871941][T20429] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 995.871962][T20429] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000af01 [ 995.871975][T20429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.871987][T20429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.871998][T20429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 995.872008][T20429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.872032][T20429] [ 995.971433][T14530] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 996.084924][T20438] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4070'. [ 996.104778][ T43] audit: type=1400 audit(1791164351.051:5103): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26262010 pid=20437 comm="syz.0.4070" [ 996.134404][T14530] usb 9-1: not running at top speed; connect to a high speed hub [ 996.134434][T14530] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 996.135429][T14530] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.135462][T14530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.142345][T14530] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 996.146594][T14530] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 996.232666][T20440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4071'. [ 996.571566][T14530] usb 9-1: USB disconnect, device number 60 [ 996.579669][T14530] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 996.579986][T14530] cyberjack 9-1:1.0: device disconnected [ 996.892339][T20450] FAULT_INJECTION: forcing a failure. [ 996.892339][T20450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.892412][T20450] CPU: 1 UID: 0 PID: 20450 Comm: syz.2.4074 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.892454][T20450] Tainted: [L]=SOFTLOCKUP [ 996.892463][T20450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 996.892475][T20450] Call Trace: [ 996.892484][T20450] [ 996.892493][T20450] dump_stack_lvl+0x100/0x190 [ 996.892526][T20450] should_fail_ex.cold+0x5/0xa [ 996.892555][T20450] _copy_from_iter+0x1f4/0x1690 [ 996.892588][T20450] ? __asan_memset+0x23/0x50 [ 996.892615][T20450] ? __pfx__copy_from_iter+0x10/0x10 [ 996.892644][T20450] ? __pfx___alloc_skb+0x10/0x10 [ 996.892668][T20450] ? security_socket_getpeersec_dgram+0x90/0x280 [ 996.892701][T20450] netlink_sendmsg+0x808/0xda0 [ 996.892737][T20450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.892770][T20450] ? apparmor_socket_sendmsg+0x165/0x280 [ 996.892805][T20450] ____sys_sendmsg+0xa4d/0xbe0 [ 996.892828][T20450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.892860][T20450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.892888][T20450] ? __pfx___schedule+0x10/0x10 [ 996.892922][T20450] ___sys_sendmsg+0x190/0x1e0 [ 996.892947][T20450] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.892982][T20450] ? find_held_lock+0x2b/0x80 [ 996.893019][T20450] __sys_sendmsg+0x160/0x210 [ 996.893039][T20450] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.893065][T20450] ? __pfx_ksys_write+0x10/0x10 [ 996.893095][T20450] __do_fast_syscall_32+0x13a/0x8b0 [ 996.893120][T20450] ? lockdep_hardirqs_on+0x7d/0x110 [ 996.893144][T20450] do_fast_syscall_32+0x32/0x70 [ 996.893167][T20450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 996.893190][T20450] RIP: 0023:0xf6ffefec [ 996.893210][T20450] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 996.893219][T20450] RSP: 002b:00000000f53ab50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 996.893239][T20450] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000480 [ 996.893251][T20450] RDX: 0000000004000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.893263][T20450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.893295][T20450] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 996.893308][T20450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.893332][T20450] [ 997.449743][T20459] tipc: Started in network mode [ 997.449770][T20459] tipc: Node identity f2d937132d5b, cluster identity 4711 [ 997.449842][T20459] tipc: Enabled bearer , priority 0 [ 997.467172][T20459] syzkaller0: entered promiscuous mode [ 997.467190][T20459] syzkaller0: entered allmulticast mode [ 997.467530][T20459] tipc: Resetting bearer [ 997.478784][T20458] tipc: Resetting bearer [ 997.491436][ T5829] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 997.661479][ T5829] usb 9-1: Using ep0 maxpacket: 8 [ 997.661934][ T5829] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 997.662778][ T5829] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 997.662807][ T5829] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 997.662821][ T5829] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 997.662833][ T5829] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 997.662849][ T5829] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 997.662860][ T5829] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.662880][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.866443][ T5829] usb 9-1: usb_control_msg returned -32 [ 997.866467][ T5829] usbtmc 9-1:16.0: can't read capabilities [ 998.248905][T20474] FAULT_INJECTION: forcing a failure. [ 998.248905][T20474] name failslab, interval 1, probability 0, space 0, times 0 [ 998.248932][T20474] CPU: 0 UID: 0 PID: 20474 Comm: syz.4.4076 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.248948][T20474] Tainted: [L]=SOFTLOCKUP [ 998.248953][T20474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 998.248960][T20474] Call Trace: [ 998.248965][T20474] [ 998.248970][T20474] dump_stack_lvl+0x100/0x190 [ 998.248990][T20474] should_fail_ex.cold+0x5/0xa [ 998.249005][T20474] should_failslab+0xc2/0x120 [ 998.249023][T20474] __kmalloc_noprof+0xfc/0x840 [ 998.249038][T20474] ? usb_alloc_urb+0x66/0xa0 [ 998.249057][T20474] usb_alloc_urb+0x66/0xa0 [ 998.249073][T20474] usbtmc_create_urb+0x13/0x150 [ 998.249087][T20474] usbtmc_write+0x23f/0xcc0 [ 998.249102][T20474] ? common_file_perm+0x266/0x500 [ 998.249116][T20474] ? __pfx_usbtmc_write+0x10/0x10 [ 998.249129][T20474] ? bpf_lsm_file_permission+0x9/0x10 [ 998.249146][T20474] ? security_file_permission+0x76/0x210 [ 998.249160][T20474] ? rw_verify_area+0xce/0x6d0 [ 998.249173][T20474] vfs_write+0x2aa/0x1050 [ 998.249187][T20474] ? __pfx_usbtmc_write+0x10/0x10 [ 998.249200][T20474] ? lock_acquire+0x1d1/0x380 [ 998.249217][T20474] ? __fget_files+0x34/0x3d0 [ 998.249231][T20474] ? __pfx_vfs_write+0x10/0x10 [ 998.249243][T20474] ? find_held_lock+0x2b/0x80 [ 998.249256][T20474] ? __fget_files+0x215/0x3d0 [ 998.249297][T20474] ? __fget_files+0x215/0x3d0 [ 998.249315][T20474] ? __fget_files+0x21f/0x3d0 [ 998.249335][T20474] ksys_write+0x12a/0x250 [ 998.249349][T20474] ? __pfx_ksys_write+0x10/0x10 [ 998.249362][T20474] ? ksys_write+0x1ac/0x250 [ 998.249375][T20474] ? __pfx_ksys_write+0x10/0x10 [ 998.249391][T20474] __do_fast_syscall_32+0x13a/0x8b0 [ 998.249406][T20474] ? lockdep_hardirqs_on+0x7d/0x110 [ 998.249421][T20474] do_fast_syscall_32+0x32/0x70 [ 998.249437][T20474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 998.249458][T20474] RIP: 0023:0xf702efec [ 998.249472][T20474] Code: Unable to access opcode bytes at 0xf702efc2. [ 998.249477][T20474] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 998.249488][T20474] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002680 [ 998.249495][T20474] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 998.249502][T20474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 998.249508][T20474] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 998.249515][T20474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 998.249528][T20474] [ 998.358693][T20479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4082'. [ 999.458199][T20458] tipc: Disabling bearer [ 999.475883][T12547] tipc: Node number set to 3749852947 [ 999.874100][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1000.232524][ T5829] usb 9-1: USB disconnect, device number 61 [ 1000.614003][ T43] audit: type=1800 audit(1791164355.561:5104): pid=20511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4087" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 1000.972239][ T35] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1001.108317][T20523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1001.145225][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1001.146143][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.286570][T20531] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1001.289721][T20531] Cannot find add_set index 0 as target [ 1001.358291][ T35] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1001.454155][T20533] netlink: 'syz.2.4092': attribute type 2 has an invalid length. [ 1001.454201][T20533] netlink: 'syz.2.4092': attribute type 7 has an invalid length. [ 1001.473624][T20533] U: entered promiscuous mode [ 1001.557108][T14530] usb 8-1: USB disconnect, device number 100 [ 1001.760944][T20518] ieee802154 phy0 wpan0: encryption failed: -90 [ 1002.221422][T14530] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1002.371448][T14530] usb 5-1: Using ep0 maxpacket: 8 [ 1002.372292][T14530] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1002.373100][T14530] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1002.373126][T14530] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1002.373180][T14530] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1002.373203][T14530] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1002.373227][T14530] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1002.373269][T14530] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.373310][T14530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.711741][T14530] usb 5-1: usb_control_msg returned -32 [ 1002.711768][T14530] usbtmc 5-1:16.0: can't read capabilities [ 1002.897857][T20561] ptp ptp0: new virtual clock ptp2 [ 1002.897874][T20561] ptp ptp0: guarantee physical clock free running [ 1003.121362][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1003.127434][T20563] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1003.563085][ T43] audit: type=1326 audit(1791164358.521:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.564396][ T43] audit: type=1326 audit(1791164358.521:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.564643][ T43] audit: type=1326 audit(1791164358.521:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.564669][ T43] audit: type=1326 audit(1791164358.521:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.564691][ T43] audit: type=1326 audit(1791164358.521:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.564912][ T43] audit: type=1326 audit(1791164358.521:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.565203][ T43] audit: type=1326 audit(1791164358.521:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.565576][ T43] audit: type=1326 audit(1791164358.521:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.566117][ T43] audit: type=1326 audit(1791164358.521:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.566215][ T43] audit: type=1326 audit(1791164358.521:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.4.4108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1003.963613][T20584] fuse: Bad value for 'group_id' [ 1003.963626][T20584] fuse: Bad value for 'group_id' [ 1004.043782][T20586] netlink: 'syz.3.4109': attribute type 2 has an invalid length. [ 1004.043848][T20586] netlink: 'syz.3.4109': attribute type 7 has an invalid length. [ 1004.078751][T20586] U: entered promiscuous mode [ 1004.982552][T14212] usb 5-1: USB disconnect, device number 109 [ 1005.148628][T20622] bond2: entered allmulticast mode [ 1005.148977][T20622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1005.169554][T20622] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.170939][T20622] macvlan2: entered allmulticast mode [ 1005.170955][T20622] bond0: entered allmulticast mode [ 1005.170969][T20622] bond_slave_0: entered allmulticast mode [ 1005.170984][T20622] bond_slave_1: entered allmulticast mode [ 1005.171289][T20622] bond_slave_0: entered promiscuous mode [ 1005.172178][T20622] bond_slave_1: entered promiscuous mode [ 1005.173258][T20622] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1005.189162][T20622] ip6gretap1: entered allmulticast mode [ 1005.189716][T20622] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1005.190292][T20622] FAULT_INJECTION: forcing a failure. [ 1005.190292][T20622] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.190314][T20622] CPU: 2 UID: 0 PID: 20622 Comm: syz.4.4124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.190330][T20622] Tainted: [L]=SOFTLOCKUP [ 1005.190334][T20622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1005.190342][T20622] Call Trace: [ 1005.190348][T20622] [ 1005.190354][T20622] dump_stack_lvl+0x100/0x190 [ 1005.190380][T20622] should_fail_ex.cold+0x5/0xa [ 1005.190399][T20622] ? __netlink_lookup+0x652/0x900 [ 1005.190424][T20622] should_failslab+0xc2/0x120 [ 1005.190451][T20622] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1005.190472][T20622] ? skb_clone+0x190/0x400 [ 1005.190492][T20622] skb_clone+0x190/0x400 [ 1005.190510][T20622] netlink_deliver_tap+0xaed/0xcc0 [ 1005.190542][T20622] netlink_unicast+0x62b/0x850 [ 1005.190572][T20622] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.190603][T20622] netlink_sendmsg+0x8b0/0xda0 [ 1005.190624][T20622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.190642][T20622] ? apparmor_socket_sendmsg+0x165/0x280 [ 1005.190662][T20622] ____sys_sendmsg+0xa4d/0xbe0 [ 1005.190676][T20622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.190695][T20622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.190715][T20622] ___sys_sendmsg+0x190/0x1e0 [ 1005.190732][T20622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.190753][T20622] ? find_held_lock+0x2b/0x80 [ 1005.190776][T20622] __sys_sendmsg+0x160/0x210 [ 1005.190787][T20622] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.190803][T20622] ? __pfx_ksys_write+0x10/0x10 [ 1005.190833][T20622] __do_fast_syscall_32+0x13a/0x8b0 [ 1005.190849][T20622] ? lockdep_hardirqs_on+0x7d/0x110 [ 1005.190864][T20622] do_fast_syscall_32+0x32/0x70 [ 1005.190880][T20622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.190895][T20622] RIP: 0023:0xf702efec [ 1005.190909][T20622] Code: Unable to access opcode bytes at 0xf702efc2. [ 1005.190915][T20622] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1005.190926][T20622] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 1005.190934][T20622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.190940][T20622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.190946][T20622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1005.190953][T20622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.190967][T20622] [ 1005.190980][T20622] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4124'. [ 1005.191180][T20622] bond_slave_0: left promiscuous mode [ 1005.191238][T20622] bond_slave_1: left promiscuous mode [ 1005.209849][T20622] bond0 (unregistering): left allmulticast mode [ 1005.209870][T20622] bond_slave_0: left allmulticast mode [ 1005.209887][T20622] bond_slave_1: left allmulticast mode [ 1005.222704][T20622] bond2: (slave macvlan2): Releasing backup interface [ 1005.222726][T20622] bond2: (slave macvlan2): the permanent HWaddr of slave - d2:19:5f:16:ac:7d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1005.228819][T20622] macvlan2 (unregistering): left allmulticast mode [ 1005.253514][T20622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.272527][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1005.280503][T20622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.294399][T20622] bond0 (unregistering): Released all slaves [ 1005.306802][T20629] 8021q: VLANs not supported on vcan0 [ 1005.401424][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1006.561474][T20649] netlink: 'syz.0.4134': attribute type 1 has an invalid length. [ 1006.687093][T14212] libceph: connect (1)[c::]:6789 error -22 [ 1006.687177][T14212] libceph: mon0 (1)[c::]:6789 connect error [ 1006.688145][T14212] libceph: connect (1)[c::]:6789 error -22 [ 1006.688217][T14212] libceph: mon0 (1)[c::]:6789 connect error [ 1006.781907][T20660] ceph: No mds server is up or the cluster is laggy [ 1006.898072][T20660] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1006.929066][T20660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.929332][T20660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.203820][T20674] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1007.662862][T14530] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1007.844428][T14530] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1007.850182][T14530] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1007.850282][T14530] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.850412][T14530] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1007.850720][T14530] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.900371][T14530] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1007.900590][T14530] usb 9-1: Product: syz [ 1007.900872][T14530] usb 9-1: Manufacturer: syz [ 1008.079219][T14530] cdc_wdm 9-1:1.0: skipping garbage [ 1008.079675][T14530] cdc_wdm 9-1:1.0: skipping garbage [ 1008.157842][T14530] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1008.157883][T14530] cdc_wdm 9-1:1.0: Unknown control protocol [ 1008.251434][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 1008.255372][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4141'. [ 1008.379314][T19517] usb 9-1: USB disconnect, device number 62 [ 1008.405830][T20688] bond1: entered allmulticast mode [ 1008.408642][T20688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.541418][T20688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1008.571806][T20688] macvlan3: entered allmulticast mode [ 1008.571824][T20688] bond0: entered allmulticast mode [ 1008.571833][T20688] bond_slave_0: entered allmulticast mode [ 1008.571844][T20688] bond_slave_1: entered allmulticast mode [ 1008.571873][T20688] bond_slave_0: entered promiscuous mode [ 1008.571891][T20688] bond_slave_1: entered promiscuous mode [ 1008.572260][T20688] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 1008.588675][T20693] ip6gretap1: entered allmulticast mode [ 1008.589149][T20693] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1008.801645][T19517] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1008.971400][T19517] usb 9-1: Using ep0 maxpacket: 8 [ 1008.971922][T19517] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1008.972731][T19517] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1008.972756][T19517] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1008.972770][T19517] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1008.972791][T19517] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1008.972803][T19517] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1008.972815][T19517] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.972835][T19517] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.187117][T19517] usb 9-1: usb_control_msg returned -32 [ 1009.187142][T19517] usbtmc 9-1:16.0: can't read capabilities [ 1009.254156][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1009.474779][T20719] netlink: 'syz.0.4152': attribute type 1 has an invalid length. [ 1009.487459][T20719] bond1: entered promiscuous mode [ 1009.487631][T20719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1009.498191][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 1009.498292][T20723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.511301][T20723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.524027][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4153'. [ 1009.551597][ C2] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1009.553025][T20724] usbtmc 9-1:16.0: Unable to send data, error -71 [ 1009.736304][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.738325][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.738707][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.739050][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.741157][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.742705][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.743048][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.743445][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.743736][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.744028][T20731] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1009.902359][ T35] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1010.061485][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 1010.062196][ T35] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1010.063280][ T35] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1010.063300][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.063318][ T35] usb 7-1: config 0 has no interface number 0 [ 1010.065231][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.065253][ T35] usb 7-1: Product: syz [ 1010.065267][ T35] usb 7-1: Manufacturer: syz [ 1010.065279][ T35] usb 7-1: SerialNumber: syz [ 1010.066668][ T35] usb 7-1: config 0 descriptor?? [ 1010.069847][ T35] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1010.275543][ T35] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1010.275612][ T35] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1010.279639][ T35] usb 7-1: USB disconnect, device number 100 [ 1010.816559][T20748] FAULT_INJECTION: forcing a failure. [ 1010.816559][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.816583][T20748] CPU: 3 UID: 0 PID: 20748 Comm: syz.2.4163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.816601][T20748] Tainted: [L]=SOFTLOCKUP [ 1010.816606][T20748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1010.816614][T20748] Call Trace: [ 1010.816620][T20748] [ 1010.816625][T20748] dump_stack_lvl+0x100/0x190 [ 1010.816646][T20748] should_fail_ex.cold+0x5/0xa [ 1010.816662][T20748] should_failslab+0xc2/0x120 [ 1010.816681][T20748] __kmalloc_noprof+0xfc/0x840 [ 1010.816697][T20748] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1010.816710][T20748] ? mpi_alloc_limb_space+0x31/0x60 [ 1010.816734][T20748] mpi_alloc_limb_space+0x31/0x60 [ 1010.816753][T20748] mpi_alloc+0x199/0x230 [ 1010.816768][T20748] ? mpi_free+0xe6/0x150 [ 1010.816785][T20748] mpi_read_raw_data+0xf5/0x430 [ 1010.816800][T20748] ? rsa_free_mpi_key+0x15a/0x3a0 [ 1010.816819][T20748] rsa_set_pub_key+0x116/0x270 [ 1010.816837][T20748] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 1010.816860][T20748] ? __asan_memcpy+0x3c/0x60 [ 1010.816876][T20748] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 1010.816891][T20748] public_key_verify_signature+0x4e5/0x910 [ 1010.816910][T20748] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1010.816932][T20748] ? asymmetric_key_generate_id+0x7e/0x180 [ 1010.816950][T20748] x509_check_for_self_signed+0x325/0x510 [ 1010.816969][T20748] x509_cert_parse+0x60c/0x910 [ 1010.816986][T20748] x509_key_preparse+0x65/0x9c0 [ 1010.817005][T20748] asymmetric_key_preparse+0xce/0x1d0 [ 1010.817019][T20748] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1010.817033][T20748] __key_create_or_update+0x463/0xe30 [ 1010.817050][T20748] ? __pfx___key_create_or_update+0x10/0x10 [ 1010.817065][T20748] ? lookup_user_key+0x3f3/0x1300 [ 1010.817084][T20748] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1010.817099][T20748] key_create_or_update+0x42/0x60 [ 1010.817115][T20748] __do_sys_add_key+0x2e8/0x460 [ 1010.817132][T20748] ? __pfx___do_sys_add_key+0x10/0x10 [ 1010.817154][T20748] __do_fast_syscall_32+0x13a/0x8b0 [ 1010.817174][T20748] do_fast_syscall_32+0x32/0x70 [ 1010.817189][T20748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1010.817204][T20748] RIP: 0023:0xf6ffefec [ 1010.817243][T20748] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1010.817250][T20748] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 1010.817263][T20748] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 1010.817272][T20748] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 1010.817279][T20748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1010.817287][T20748] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1010.817297][T20748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1010.817313][T20748] [ 1010.839621][T20748] syzkaller0: entered promiscuous mode [ 1010.839638][T20748] syzkaller0: entered allmulticast mode [ 1011.486816][T19517] usb 9-1: USB disconnect, device number 63 [ 1011.557828][T20759] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 1012.740687][T20756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.740922][T20756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.749320][T20756] bond_slave_0: left promiscuous mode [ 1012.749363][T20756] bond_slave_1: left promiscuous mode [ 1012.892662][T20756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.960951][ T43] kauditd_printk_skb: 1009 callbacks suppressed [ 1012.960963][ T43] audit: type=1800 audit(1791164367.911:6124): pid=20768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4168" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 1013.056589][ T43] audit: type=1800 audit(1791164368.001:6125): pid=20767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4169" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 1013.325867][T20756] bond1: left allmulticast mode [ 1013.325908][T20756] macvlan3: left allmulticast mode [ 1013.325917][T20756] bond0: left allmulticast mode [ 1013.325925][T20756] bond_slave_0: left allmulticast mode [ 1013.325934][T20756] bond_slave_1: left allmulticast mode [ 1013.325957][T20756] ip6gretap1: left allmulticast mode [ 1013.355877][T20759] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1013.384457][T14105] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.384483][T14105] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.384509][T14105] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.384523][T14105] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.451259][T14105] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.451973][T14105] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.452409][T14105] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.452765][T14105] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1014.576014][T20791] tc action pedit offset must be on 32 bit boundaries [ 1014.809137][T20795] block nbd4: shutting down sockets [ 1015.165371][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4179'. [ 1015.166500][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'. [ 1015.257178][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1015.286309][T20812] syzkaller0: entered promiscuous mode [ 1015.286324][T20812] syzkaller0: entered allmulticast mode [ 1016.473549][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1017.034563][T20844] FAULT_INJECTION: forcing a failure. [ 1017.034563][T20844] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.034588][T20844] CPU: 2 UID: 0 PID: 20844 Comm: syz.3.4191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.034606][T20844] Tainted: [L]=SOFTLOCKUP [ 1017.034611][T20844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1017.034618][T20844] Call Trace: [ 1017.034623][T20844] [ 1017.034628][T20844] dump_stack_lvl+0x100/0x190 [ 1017.034649][T20844] should_fail_ex.cold+0x5/0xa [ 1017.034665][T20844] should_failslab+0xc2/0x120 [ 1017.034684][T20844] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1017.034701][T20844] ? proc_alloc_inode+0x25/0x200 [ 1017.034720][T20844] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1017.034737][T20844] proc_alloc_inode+0x25/0x200 [ 1017.034754][T20844] alloc_inode+0x68/0x250 [ 1017.034766][T20844] new_inode+0x22/0x1c0 [ 1017.034779][T20844] proc_pid_make_inode+0x22/0x160 [ 1017.034795][T20844] proc_pident_instantiate+0x85/0x310 [ 1017.034813][T20844] proc_pident_lookup+0x1e3/0x270 [ 1017.034830][T20844] ? __pfx_down_read+0x10/0x10 [ 1017.034848][T20844] __lookup_slow+0x155/0x320 [ 1017.034862][T20844] lookup_slow+0x50/0x70 [ 1017.034873][T20844] link_path_walk+0x1377/0x1cc0 [ 1017.034892][T20844] path_openat+0x1ac/0x2440 [ 1017.034909][T20844] ? __pfx_path_openat+0x10/0x10 [ 1017.034934][T20844] do_file_open+0x20e/0x430 [ 1017.034951][T20844] ? __pfx_do_file_open+0x10/0x10 [ 1017.034972][T20844] ? __pfx_kfree_link+0x10/0x10 [ 1017.034990][T20844] ? _raw_spin_unlock+0x28/0x50 [ 1017.035003][T20844] ? alloc_fd+0x471/0x7a0 [ 1017.035022][T20844] do_sys_openat2+0x10f/0x1e0 [ 1017.035042][T20844] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.035063][T20844] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1017.035078][T20844] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 1017.035094][T20844] __ia32_compat_sys_openat+0x12d/0x210 [ 1017.035106][T20844] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1017.035124][T20844] do_int80_emulation+0x166/0x650 [ 1017.035141][T20844] asm_int80_emulation+0x1a/0x20 [ 1017.035153][T20844] RIP: 0023:0xf71c75ab [ 1017.035163][T20844] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1017.035174][T20844] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1017.035186][T20844] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 1017.035194][T20844] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.035201][T20844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1017.035208][T20844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1017.035214][T20844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1017.035228][T20844] [ 1017.052738][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1017.058668][T20846] /dev/loop0: Can't open blockdev [ 1017.105266][T20847] netlink: 'syz.3.4191': attribute type 10 has an invalid length. [ 1017.105288][T20847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1017.105446][T20847] dummy0: entered promiscuous mode [ 1017.172440][T20850] overlayfs: failed to clone upperpath [ 1017.312950][T20859] tipc: Enabling of bearer rejected, already enabled [ 1017.348602][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1017.471652][T20871] /dev/loop0: Can't open blockdev [ 1017.917778][T20841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1017.917797][T20841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1017.998471][T20889] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1017.998482][T20889] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.002346][T20889] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1018.326904][T20910] fuseblk: Bad value for 'fd' [ 1018.628091][T20919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1018.918043][T20927] FAULT_INJECTION: forcing a failure. [ 1018.918043][T20927] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.918066][T20927] CPU: 0 UID: 0 PID: 20927 Comm: syz.4.4219 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.918083][T20927] Tainted: [L]=SOFTLOCKUP [ 1018.918087][T20927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1018.918094][T20927] Call Trace: [ 1018.918099][T20927] [ 1018.918104][T20927] dump_stack_lvl+0x100/0x190 [ 1018.918124][T20927] should_fail_ex.cold+0x5/0xa [ 1018.918140][T20927] should_failslab+0xc2/0x120 [ 1018.918157][T20927] __kmalloc_cache_noprof+0x91/0x6d0 [ 1018.918170][T20927] ? nbd_add_socket+0x284/0xf20 [ 1018.918185][T20927] nbd_add_socket+0x284/0xf20 [ 1018.918199][T20927] ? __pfx_nbd_add_socket+0x10/0x10 [ 1018.918212][T20927] ? __nla_parse+0x40/0x60 [ 1018.918228][T20927] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 1018.918240][T20927] ? __pfx_nbd_genl_connect_sock_cb+0x10/0x10 [ 1018.918256][T20927] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1018.918268][T20927] ? __asan_memcpy+0x3c/0x60 [ 1018.918284][T20927] nbd_genl_connect+0xd48/0x1760 [ 1018.918299][T20927] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1018.918313][T20927] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1018.918327][T20927] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1018.918342][T20927] genl_family_rcv_msg_doit+0x214/0x300 [ 1018.918355][T20927] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1018.918367][T20927] ? genl_get_cmd+0x3e7/0x760 [ 1018.918382][T20927] ? netlink_sendmsg+0x680/0xda0 [ 1018.918398][T20927] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1018.918412][T20927] ? __radix_tree_lookup+0x217/0x2b0 [ 1018.918428][T20927] genl_rcv_msg+0x560/0x800 [ 1018.918441][T20927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.918453][T20927] ? __lock_acquire+0x5c0/0x1f40 [ 1018.918470][T20927] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1018.918484][T20927] ? __lock_acquire+0x5c0/0x1f40 [ 1018.918503][T20927] netlink_rcv_skb+0x159/0x420 [ 1018.918520][T20927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.918532][T20927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1018.918555][T20927] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1018.918573][T20927] genl_rcv+0x28/0x40 [ 1018.918583][T20927] netlink_unicast+0x585/0x850 [ 1018.918602][T20927] ? __pfx_netlink_unicast+0x10/0x10 [ 1018.918618][T20927] ? aa_sk_perm+0x389/0xab0 [ 1018.918634][T20927] netlink_sendmsg+0x8b0/0xda0 [ 1018.918656][T20927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.918678][T20927] ? apparmor_socket_sendmsg+0x165/0x280 [ 1018.918699][T20927] ____sys_sendmsg+0xa4d/0xbe0 [ 1018.918712][T20927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.918731][T20927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.918756][T20927] ___sys_sendmsg+0x190/0x1e0 [ 1018.918772][T20927] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.918794][T20927] ? find_held_lock+0x2b/0x80 [ 1018.918816][T20927] __sys_sendmsg+0x160/0x210 [ 1018.918828][T20927] ? __pfx___sys_sendmsg+0x10/0x10 [ 1018.918843][T20927] ? __pfx_ksys_write+0x10/0x10 [ 1018.918859][T20927] __do_fast_syscall_32+0x13a/0x8b0 [ 1018.918874][T20927] ? lockdep_hardirqs_on+0x7d/0x110 [ 1018.918889][T20927] do_fast_syscall_32+0x32/0x70 [ 1018.918904][T20927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1018.918933][T20927] RIP: 0023:0xf702efec [ 1018.918946][T20927] Code: Unable to access opcode bytes at 0xf702efc2. [ 1018.918952][T20927] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1018.918963][T20927] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001ac0 [ 1018.918971][T20927] RDX: 000000000400400c RSI: 0000000000000000 RDI: 0000000000000000 [ 1018.918977][T20927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1018.918984][T20927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1018.918990][T20927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1018.919005][T20927] [ 1019.429634][T20936] fuse: Unknown parameter '' [ 1019.461155][T20940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4223'. [ 1020.105261][T19845] IPVS: starting estimator thread 0... [ 1020.106654][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1020.201383][T20971] IPVS: using max 43 ests per chain, 103200 per kthread [ 1020.580851][T20982] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4233'. [ 1022.964205][ T43] audit: type=1326 audit(1791164377.921:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1022.964518][ T43] audit: type=1326 audit(1791164377.921:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1022.964563][ T43] audit: type=1326 audit(1791164377.921:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.965868][ T43] audit: type=1326 audit(1791164377.921:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.967065][ T43] audit: type=1326 audit(1791164377.921:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.968274][ T43] audit: type=1326 audit(1791164377.921:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.969510][ T43] audit: type=1326 audit(1791164377.921:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.970811][ T43] audit: type=1326 audit(1791164377.921:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.973992][ T43] audit: type=1326 audit(1791164377.921:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1022.975134][ T43] audit: type=1326 audit(1791164377.921:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21020 comm="syz.3.4239" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 1023.864591][T21013] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1023.864604][T21013] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.864620][T21013] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1023.937292][T21035] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 1023.940369][T21035] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1023.940394][T21035] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1024.106364][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1024.182595][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'. [ 1024.976372][T21070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4251'. [ 1025.155898][T21076] svc: failed to register lockdv1 RPC service (errno 111). [ 1025.156033][T21076] lockd_up: makesock failed, error=-111 [ 1025.260509][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1025.260525][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1025.260535][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe944 instead [ 1025.260545][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9b7a instead [ 1025.260554][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1025.260562][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1025.260571][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1025.260582][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1025.260601][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1025.260620][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1025.260629][T21084] jffs2: Further such events for this erase block will not be printed [ 1025.260838][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1025.260847][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1025.260864][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe944 instead [ 1025.260875][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9b7a instead [ 1025.260884][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1025.260894][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1025.260903][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1025.260915][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1025.260934][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1025.260952][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1025.260961][T21084] jffs2: Further such events for this erase block will not be printed [ 1025.267942][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1025.267957][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1025.267968][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe944 instead [ 1025.267979][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9b7a instead [ 1025.268004][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1025.268014][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1025.268024][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe944 instead [ 1025.268036][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9b7a instead [ 1025.268061][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1025.268071][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1025.268081][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xe944 instead [ 1025.268093][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9b7a instead [ 1025.268117][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1025.268127][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1025.268136][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xe944 instead [ 1025.268146][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9b7a instead [ 1025.268214][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1025.268226][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1025.268236][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xe944 instead [ 1025.268247][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9b7a instead [ 1025.268272][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1025.268281][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1025.268291][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xe944 instead [ 1025.268303][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9b7a instead [ 1025.268328][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1025.268338][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1025.268349][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xe944 instead [ 1025.268360][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9b7a instead [ 1025.268384][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1025.268393][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1025.268403][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xe944 instead [ 1025.268413][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9b7a instead [ 1025.268437][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1025.268446][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1025.268456][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xe944 instead [ 1025.268466][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9b7a instead [ 1025.268490][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1025.268499][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1025.268509][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xe944 instead [ 1025.268519][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9b7a instead [ 1025.268543][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1025.268552][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1025.268562][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xe944 instead [ 1025.268572][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9b7a instead [ 1025.268596][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1025.268605][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1025.268614][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xe944 instead [ 1025.268625][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9b7a instead [ 1025.268649][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1025.268658][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1025.268682][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xe944 instead [ 1025.268693][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9b7a instead [ 1025.268717][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1025.268725][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1025.268735][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xe944 instead [ 1025.268745][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9b7a instead [ 1025.268769][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1025.268778][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1025.268788][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xe944 instead [ 1025.268798][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9b7a instead [ 1025.268847][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1025.268862][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1025.268872][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xe944 instead [ 1025.268883][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9b7a instead [ 1025.268909][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1025.268918][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1025.268928][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xe944 instead [ 1025.268939][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9b7a instead [ 1025.268965][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1025.268974][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1025.268984][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xe944 instead [ 1025.268995][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9b7a instead [ 1025.269021][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1025.269030][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1025.269040][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xe944 instead [ 1025.269051][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9b7a instead [ 1025.393000][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1025.393015][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1025.393025][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xe944 instead [ 1025.393037][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9b7a instead [ 1025.393062][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1025.393073][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1025.393083][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xe944 instead [ 1025.393094][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9b7a instead [ 1025.393119][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1025.393129][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1025.393139][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xe944 instead [ 1025.393175][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9b7a instead [ 1025.393206][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1025.393215][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1025.393225][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xe944 instead [ 1025.393237][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9b7a instead [ 1025.393262][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1025.393273][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1025.393283][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xe944 instead [ 1025.393295][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9b7a instead [ 1025.393320][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1025.393330][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1025.393340][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe944 instead [ 1025.393351][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9b7a instead [ 1025.393375][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1025.393384][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1025.393393][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xe944 instead [ 1025.393404][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9b7a instead [ 1025.393495][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1025.393506][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1025.393516][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe944 instead [ 1025.393528][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9b7a instead [ 1025.393553][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1025.393563][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1025.393573][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe944 instead [ 1025.393585][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9b7a instead [ 1025.393610][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1025.393619][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1025.393630][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xe944 instead [ 1025.393640][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9b7a instead [ 1025.393663][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1025.393672][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1025.393682][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xe944 instead [ 1025.393692][T21084] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9b7a instead [ 1025.393711][T21084] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1025.393716][T21084] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1025.674690][T21096] fuse: fd is not a fuse device [ 1026.123238][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1026.163629][T21076] svc: failed to register nfsdv3 RPC service (errno 512). [ 1026.165089][T21076] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1026.165103][T21076] failed to unregister udp with rpcbind [ 1026.166942][T21076] svc: failed to register nfsdv3 RPC service (errno 97). [ 1026.166954][T21076] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1026.166961][T21076] failed to unregister udp with rpcbind [ 1026.289731][T21120] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 1026.291078][T21120] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1026.291111][T21120] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1026.363315][T21124] overlayfs: failed to clone upperpath [ 1026.385009][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4270'. [ 1026.567230][T21117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4267'. [ 1027.113627][T21157] 9p: Bad value for 'rfdno' [ 1027.168310][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1027.169749][T21161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4280'. [ 1027.169882][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1027.170662][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1027.171356][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1027.171874][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1027.295080][T21165] i2c i2c-0: new_device: Missing parameters [ 1027.852560][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4283'. [ 1028.664779][T21199] FAULT_INJECTION: forcing a failure. [ 1028.664779][T21199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1028.664802][T21199] CPU: 3 UID: 0 PID: 21199 Comm: syz.4.4293 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.664819][T21199] Tainted: [L]=SOFTLOCKUP [ 1028.664823][T21199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1028.664831][T21199] Call Trace: [ 1028.664835][T21199] [ 1028.664841][T21199] dump_stack_lvl+0x100/0x190 [ 1028.664863][T21199] should_fail_ex.cold+0x5/0xa [ 1028.664879][T21199] get_futex_key+0x1d0/0x14f0 [ 1028.664894][T21199] ? __pfx_get_futex_key+0x10/0x10 [ 1028.664908][T21199] ? ___sys_sendmsg+0x127/0x1e0 [ 1028.664926][T21199] futex_wake+0xf4/0x5e0 [ 1028.664940][T21199] ? futex_wait+0x11e/0x370 [ 1028.664956][T21199] ? __pfx_futex_wake+0x10/0x10 [ 1028.664974][T21199] ? find_held_lock+0x2b/0x80 [ 1028.664991][T21199] do_futex+0x2b2/0x440 [ 1028.665004][T21199] ? __pfx_do_futex+0x10/0x10 [ 1028.665019][T21199] ? fput+0x7c/0x100 [ 1028.665036][T21199] __ia32_sys_futex_time32+0x2f4/0x470 [ 1028.665053][T21199] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1028.665073][T21199] __do_fast_syscall_32+0x13a/0x8b0 [ 1028.665091][T21199] do_fast_syscall_32+0x32/0x70 [ 1028.665106][T21199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.665121][T21199] RIP: 0023:0xf702efec [ 1028.665163][T21199] Code: Unable to access opcode bytes at 0xf702efc2. [ 1028.665170][T21199] RSP: 002b:00000000f541d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1028.665183][T21199] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 1028.665192][T21199] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 1028.665200][T21199] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 1028.665208][T21199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1028.665215][T21199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.665231][T21199] [ 1029.768308][T21241] 9p: Bad value for 'wfdno' [ 1030.961403][T19517] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1031.091131][T19517] usb 9-1: device descriptor read/64, error -71 [ 1031.331044][T19517] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1031.471067][T19517] usb 9-1: device descriptor read/64, error -71 [ 1031.582102][T19517] usb usb9-port1: attempt power cycle [ 1031.895332][T21295] __nla_validate_parse: 5 callbacks suppressed [ 1031.895347][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1031.921022][T19517] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1031.941715][T19517] usb 9-1: device descriptor read/8, error -71 [ 1032.181009][T19517] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1032.202500][T19517] usb 9-1: device descriptor read/8, error -71 [ 1032.311231][T19517] usb usb9-port1: unable to enumerate USB device [ 1033.516194][T21330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1033.725830][T21336] tmpfs: Using encoding : utf8-12.1.0 [ 1034.250165][T21348] ./dev/sda1: Can't lookup blockdev [ 1034.317227][T21350] binder: 21349:21350 ioctl c0306201 80000040 returned -22 [ 1034.362926][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1035.094992][T21370] ip6gre1: entered promiscuous mode [ 1035.095013][T21370] ip6gre1: entered allmulticast mode [ 1036.190218][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1036.449333][T21406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1036.655568][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1036.860506][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1036.860524][T21424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1037.636422][T21432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1037.671054][T21434] netlink: 'syz.0.4370': attribute type 6 has an invalid length. [ 1037.869558][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1038.860350][ T43] kauditd_printk_skb: 423 callbacks suppressed [ 1038.860368][ T43] audit: type=1326 audit(1791164393.802:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21480 comm="syz.3.4379" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 1038.915614][T21483] openvswitch: netlink: IP tunnel dst address not specified [ 1038.980831][T21486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4379'. [ 1038.981028][T21486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4379'. [ 1039.420113][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1040.467193][T21520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1040.670828][T21530] lo: entered allmulticast mode [ 1040.671388][T21530] sctp: [Deprecated]: syz.3.4395 (pid 21530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1040.671388][T21530] Use struct sctp_sack_info instead [ 1040.707517][T21528] lo: left allmulticast mode [ 1040.732808][T21540] 9pnet_virtio: no channels available for device syz [ 1040.735370][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 1040.748315][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1040.754560][ T43] audit: type=1326 audit(1791164395.702:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.754752][ T43] audit: type=1326 audit(1791164395.702:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.757224][ T43] audit: type=1326 audit(1791164395.702:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.757553][ T43] audit: type=1326 audit(1791164395.702:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.757753][ T43] audit: type=1326 audit(1791164395.702:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.763301][ T43] audit: type=1326 audit(1791164395.712:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.763327][ T43] audit: type=1326 audit(1791164395.712:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.763347][ T43] audit: type=1326 audit(1791164395.712:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1040.764309][ T43] audit: type=1326 audit(1791164395.712:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21537 comm="syz.2.4397" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1041.752516][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1041.778812][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1042.910357][ T5829] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1043.061139][ T5829] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1043.061974][ T5829] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1043.061991][ T5829] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1043.062003][ T5829] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1043.062015][ T5829] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1043.062032][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.066271][T21600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.066295][T21600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.068725][ T5829] pl2303 9-1:1.0: pl2303 converter detected [ 1043.070993][ T5829] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 1043.372917][T21600] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1043.373167][T21600] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1043.373194][T21600] FAULT_INJECTION: forcing a failure. [ 1043.373194][T21600] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.373211][T21600] CPU: 1 UID: 0 PID: 21600 Comm: syz.4.4419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.373226][T21600] Tainted: [L]=SOFTLOCKUP [ 1043.373231][T21600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1043.373238][T21600] Call Trace: [ 1043.373242][T21600] [ 1043.373247][T21600] dump_stack_lvl+0x100/0x190 [ 1043.373266][T21600] should_fail_ex.cold+0x5/0xa [ 1043.373282][T21600] should_failslab+0xc2/0x120 [ 1043.373299][T21600] __kmalloc_cache_noprof+0x91/0x6d0 [ 1043.373312][T21600] ? kasan_save_stack+0x3f/0x50 [ 1043.373326][T21600] ? dummy_urb_enqueue+0xa3/0x880 [ 1043.373346][T21600] dummy_urb_enqueue+0xa3/0x880 [ 1043.373361][T21600] ? vfs_open+0x82/0x3f0 [ 1043.373377][T21600] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 1043.373392][T21600] ? do_file_open+0x20e/0x430 [ 1043.373408][T21600] ? do_sys_openat2+0x10f/0x1e0 [ 1043.373424][T21600] ? __ia32_compat_sys_openat+0x12d/0x210 [ 1043.373437][T21600] usb_hcd_submit_urb+0x268/0x2150 [ 1043.373457][T21600] usb_submit_urb+0x827/0x19b0 [ 1043.373476][T21600] ? __init_swait_queue_head+0xca/0x150 [ 1043.373490][T21600] usb_start_wait_urb+0x10e/0x580 [ 1043.373508][T21600] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1043.373531][T21600] ? __asan_memset+0x23/0x50 [ 1043.373546][T21600] usb_control_msg+0x328/0x4b0 [ 1043.373564][T21600] ? __pfx_usb_control_msg+0x10/0x10 [ 1043.373582][T21600] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1043.373593][T21600] ? tty_termios_encode_baud_rate+0x4af/0x690 [ 1043.373612][T21600] pl2303_set_termios+0xb46/0x1f50 [ 1043.373636][T21600] ? pl2303_vendor_write.isra.0+0x148/0x1f0 [ 1043.373660][T21600] pl2303_open+0x11e/0x490 [ 1043.373684][T21600] serial_port_activate+0x181/0x290 [ 1043.373704][T21600] ? __pfx_serial_port_activate+0x10/0x10 [ 1043.373719][T21600] tty_port_open+0x161/0x220 [ 1043.373732][T21600] ? __pfx_serial_open+0x10/0x10 [ 1043.373744][T21600] tty_open+0x2cc/0xe20 [ 1043.373758][T21600] ? __pfx_tty_open+0x10/0x10 [ 1043.373768][T21600] ? chrdev_open+0x589/0x6a0 [ 1043.373783][T21600] ? chrdev_open+0x589/0x6a0 [ 1043.373800][T21600] ? __pfx_tty_open+0x10/0x10 [ 1043.373811][T21600] chrdev_open+0x234/0x6a0 [ 1043.373827][T21600] ? __pfx_chrdev_open+0x10/0x10 [ 1043.373843][T21600] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1043.373873][T21600] do_dentry_open+0x6ab/0x14d0 [ 1043.373894][T21600] ? __pfx_chrdev_open+0x10/0x10 [ 1043.373913][T21600] vfs_open+0x82/0x3f0 [ 1043.373932][T21600] path_openat+0x19fa/0x2440 [ 1043.373949][T21600] ? __pfx_path_openat+0x10/0x10 [ 1043.373969][T21600] do_file_open+0x20e/0x430 [ 1043.373985][T21600] ? __pfx_do_file_open+0x10/0x10 [ 1043.374010][T21600] ? _raw_spin_unlock+0x28/0x50 [ 1043.374022][T21600] ? alloc_fd+0x471/0x7a0 [ 1043.374041][T21600] do_sys_openat2+0x10f/0x1e0 [ 1043.374059][T21600] ? __pfx_do_sys_openat2+0x10/0x10 [ 1043.374082][T21600] __ia32_compat_sys_openat+0x12d/0x210 [ 1043.374094][T21600] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1043.374116][T21600] __do_fast_syscall_32+0x13a/0x8b0 [ 1043.374132][T21600] ? lockdep_hardirqs_on+0x7d/0x110 [ 1043.374147][T21600] do_fast_syscall_32+0x32/0x70 [ 1043.374166][T21600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1043.374187][T21600] RIP: 0023:0xf702efec [ 1043.374207][T21600] Code: Unable to access opcode bytes at 0xf702efc2. [ 1043.374215][T21600] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1043.374229][T21600] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 1043.374236][T21600] RDX: 0000000000028d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.374243][T21600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1043.374250][T21600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1043.374256][T21600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1043.374271][T21600] [ 1043.374292][T21600] pl2303 ttyUSB0: pl2303_set_line_request - failed: -12 [ 1043.374532][T21600] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1043.374556][T21600] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 1043.377733][T21601] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -32 [ 1043.378009][T21601] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1043.378274][T21601] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1043.378564][T21601] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1043.378696][T21601] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 1043.453797][T21617] 9pnet_virtio: no channels available for device syz [ 1043.462426][T21617] __nla_validate_parse: 1 callbacks suppressed [ 1043.462440][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'. [ 1043.506795][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1044.465167][T21649] netlink: 'syz.0.4435': attribute type 1 has an invalid length. [ 1044.484061][T21649] bond2: option mode: invalid value (7) [ 1044.485636][T21649] bond2 (unregistering): Released all slaves [ 1044.618021][T21649] netlink: 'syz.0.4435': attribute type 10 has an invalid length. [ 1044.618038][T21649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4435'. [ 1044.618147][T21649] dummy0: entered promiscuous mode [ 1044.781196][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1045.255754][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1045.636234][ T5829] usb 9-1: USB disconnect, device number 68 [ 1045.642822][ T5829] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1045.644527][ T5829] pl2303 9-1:1.0: device disconnected [ 1045.658360][T21681] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1045.666072][T21681] 9p: Bad value for 'rfdno' [ 1045.712997][T21683] syzkaller0: entered promiscuous mode [ 1045.713020][T21683] syzkaller0: entered allmulticast mode [ 1045.835928][T21689] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1046.401920][T21700] Invalid ELF header type: 3 != 1 [ 1046.407727][T21700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.421127][T21700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.494344][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1047.745418][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4462'. [ 1047.745490][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4462'. [ 1048.733732][T21783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.812380][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 1048.812393][ T43] audit: type=1326 audit(1791164403.763:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.4.4480" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 1049.022516][T21794] __nla_validate_parse: 1 callbacks suppressed [ 1049.022541][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1049.917377][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4488'. [ 1050.251960][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1050.327323][T21830] 9p: Bad value for 'rfdno' [ 1050.328447][T21830] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 1050.334491][T21830] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 1050.613312][T21839] fuse: Bad value for 'fd' [ 1050.947879][ T43] audit: type=1326 audit(1791164405.893:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948009][ T43] audit: type=1326 audit(1791164405.893:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948263][ T43] audit: type=1326 audit(1791164405.893:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948355][ T43] audit: type=1326 audit(1791164405.893:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948592][ T43] audit: type=1326 audit(1791164405.893:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948685][ T43] audit: type=1326 audit(1791164405.893:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948807][ T43] audit: type=1326 audit(1791164405.893:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.948917][ T43] audit: type=1326 audit(1791164405.893:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1050.949053][ T43] audit: type=1326 audit(1791164405.893:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.3.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1051.160832][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.160844][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.160844][T21855] [ 1051.160852][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.160918][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.160924][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.160924][T21855] [ 1051.160931][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.160989][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.160994][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.160994][T21855] [ 1051.161001][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161085][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161091][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161091][T21855] [ 1051.161098][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161157][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161163][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161163][T21855] [ 1051.161169][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161227][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161233][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161233][T21855] [ 1051.161239][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161303][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161308][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161308][T21855] [ 1051.161315][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161377][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161383][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161383][T21855] [ 1051.161389][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161447][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161452][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161452][T21855] [ 1051.161459][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161516][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161521][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161521][T21855] [ 1051.161528][T21855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.161585][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161591][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161591][T21855] [ 1051.161652][T21855] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1051.161657][T21855] CIFS mount error: No usable UNC path provided in device string! [ 1051.161657][T21855] [ 1051.568635][T21873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.568887][T21873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.624939][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4510'. [ 1051.641486][T21873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.643818][T21873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.699346][T21887] syz_tun: entered allmulticast mode [ 1051.789006][T21885] syz_tun: left allmulticast mode [ 1051.799945][T14105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.799972][T14105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.799991][T14105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.800008][T14105] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.125128][T21921] CIFS: VFS: bad security option: ke>Iڏrq^oVm [ 1052.192423][T21924] 9p: Bad value for 'rfdno' [ 1052.265432][T21931] Invalid ELF header type: 3 != 1 [ 1052.490768][T21944] netlink: 'syz.4.4526': attribute type 12 has an invalid length. [ 1052.496935][T21946] bpf: Bad value for 'mode' [ 1052.804843][T21956] [ 1052.805660][T21956] ====================================================== [ 1052.807856][T21956] WARNING: possible circular locking dependency detected [ 1052.810020][T21956] syzkaller #0 Tainted: G L [ 1052.811937][T21956] ------------------------------------------------------ [ 1052.814101][T21956] syz.4.4529/21956 is trying to acquire lock: [ 1052.815986][T21956] ffffffff90401c68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 1052.819055][T21956] [ 1052.819055][T21956] but task is already holding lock: [ 1052.821332][T21956] ffff88802ad76500 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 1052.824306][T21956] [ 1052.824306][T21956] which lock already depends on the new lock. [ 1052.824306][T21956] [ 1052.827514][T21956] [ 1052.827514][T21956] the existing dependency chain (in reverse order) is: [ 1052.830366][T21956] [ 1052.830366][T21956] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 1052.833075][T21956] lock_acquire+0x1d1/0x380 [ 1052.834663][T21956] down_write+0x8b/0x1f0 [ 1052.836193][T21956] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1052.838251][T21956] usbg_make_tpg+0x251/0x610 [ 1052.839850][T21956] target_fabric_make_tpg+0xab/0x8c0 [ 1052.841684][T21956] configfs_mkdir+0x525/0xd40 [ 1052.843324][T21956] vfs_mkdir+0x364/0x850 [ 1052.844830][T21956] filename_mkdirat+0x48b/0x5e0 [ 1052.846582][T21956] __ia32_sys_mkdirat+0x88/0xc0 [ 1052.848384][T21956] __do_fast_syscall_32+0x13a/0x8b0 [ 1052.850201][T21956] do_fast_syscall_32+0x32/0x70 [ 1052.851873][T21956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.854269][T21956] [ 1052.854269][T21956] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1052.856996][T21956] lock_acquire+0x1d1/0x380 [ 1052.858613][T21956] __mutex_lock+0x1a4/0x1bd0 [ 1052.860251][T21956] tcm_alloc_inst+0x5f/0x1e0 [ 1052.861893][T21956] try_get_usb_function_instance+0x136/0x1f0 [ 1052.863925][T21956] usb_get_function_instance+0x16/0x70 [ 1052.865807][T21956] function_make+0x18c/0x3f0 [ 1052.867474][T21956] configfs_mkdir+0x525/0xd40 [ 1052.869156][T21956] vfs_mkdir+0x364/0x850 [ 1052.870669][T21956] filename_mkdirat+0x48b/0x5e0 [ 1052.872353][T21956] __ia32_sys_mkdirat+0x88/0xc0 [ 1052.874038][T21956] __do_fast_syscall_32+0x13a/0x8b0 [ 1052.875824][T21956] do_fast_syscall_32+0x32/0x70 [ 1052.877592][T21956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.879842][T21956] [ 1052.879842][T21956] -> #1 (func_lock){+.+.}-{4:4}: [ 1052.882160][T21956] lock_acquire+0x1d1/0x380 [ 1052.883735][T21956] __mutex_lock+0x1a4/0x1bd0 [ 1052.885359][T21956] try_get_usb_function_instance+0x26/0x1f0 [ 1052.887408][T21956] usb_get_function_instance+0x16/0x70 [ 1052.889309][T21956] function_make+0x18c/0x3f0 [ 1052.890916][T21956] configfs_mkdir+0x525/0xd40 [ 1052.892620][T21956] vfs_mkdir+0x364/0x850 [ 1052.894128][T21956] filename_mkdirat+0x48b/0x5e0 [ 1052.895799][T21956] __ia32_sys_mkdirat+0x88/0xc0 [ 1052.897512][T21956] __do_fast_syscall_32+0x13a/0x8b0 [ 1052.899314][T21956] do_fast_syscall_32+0x32/0x70 [ 1052.901029][T21956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.903164][T21956] [ 1052.903164][T21956] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1052.905729][T21956] check_prev_add+0xeb/0xe60 [ 1052.907458][T21956] __lock_acquire+0x1528/0x1f40 [ 1052.909221][T21956] lock_acquire+0x1d1/0x380 [ 1052.910810][T21956] __mutex_lock+0x1a4/0x1bd0 [ 1052.912412][T21956] configfs_rmdir+0x5ae/0x950 [ 1052.914042][T21956] vfs_rmdir+0x328/0x8a0 [ 1052.915541][T21956] filename_rmdir+0x31a/0x5c0 [ 1052.917218][T21956] __ia32_sys_rmdir+0x45/0x60 [ 1052.918867][T21956] __do_fast_syscall_32+0x13a/0x8b0 [ 1052.920642][T21956] do_fast_syscall_32+0x32/0x70 [ 1052.922587][T21956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.924740][T21956] [ 1052.924740][T21956] other info that might help us debug this: [ 1052.924740][T21956] [ 1052.927914][T21956] Chain exists of: [ 1052.927914][T21956] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 1052.927914][T21956] [ 1052.932838][T21956] Possible unsafe locking scenario: [ 1052.932838][T21956] [ 1052.935170][T21956] CPU0 CPU1 [ 1052.936911][T21956] ---- ---- [ 1052.938606][T21956] lock(&sb->s_type->i_mutex_key#27); [ 1052.940344][T21956] lock(tpg_instances_lock); [ 1052.942614][T21956] lock(&sb->s_type->i_mutex_key#27); [ 1052.945075][T21956] lock(gadget_subsys.su_mutex); [ 1052.946661][T21956] [ 1052.946661][T21956] *** DEADLOCK *** [ 1052.946661][T21956] [ 1052.949199][T21956] locks held by syz.4.4529/21956: 3, last CPU#2: [ 1052.951173][T21956] #0: ffff888022c36460 (sb_writers#14){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 1052.954088][T21956] #1: ffff88801e8f6e80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 1052.957344][T21956] #2: ffff88802ad76500 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 1052.960459][T21956] [ 1052.960459][T21956] stack backtrace: [ 1052.962320][T21956] CPU: 2 UID: 0 PID: 21956 Comm: syz.4.4529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.965705][T21956] Tainted: [L]=SOFTLOCKUP [ 1052.967058][T21956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1052.970193][T21956] Call Trace: [ 1052.971250][T21956] [ 1052.972196][T21956] dump_stack_lvl+0x100/0x190 [ 1052.972740][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1052.972764][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1052.972780][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe944 instead [ 1052.972799][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9b7a instead [ 1052.972814][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1052.972830][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1052.972846][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1052.972863][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1052.972888][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1052.972914][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1052.972929][T21962] jffs2: Further such events for this erase block will not be printed [ 1052.973200][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1052.973220][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1052.973243][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe944 instead [ 1052.973261][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9b7a instead [ 1052.973277][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1052.973293][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1052.973309][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1052.973329][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1052.973357][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1052.973381][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1052.973396][T21962] jffs2: Further such events for this erase block will not be printed [ 1052.973639][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1052.973655][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1052.973671][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe944 instead [ 1052.973688][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9b7a instead [ 1052.973752][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1052.973770][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1052.973787][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe944 instead [ 1052.973804][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9b7a instead [ 1052.973843][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1052.973858][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1052.973874][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xe944 instead [ 1052.973891][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9b7a instead [ 1052.973931][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1052.973947][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1052.973960][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xe944 instead [ 1052.973978][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9b7a instead [ 1052.974012][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1052.974028][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1052.974044][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xe944 instead [ 1052.974060][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9b7a instead [ 1052.974110][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1052.974125][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1052.974142][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xe944 instead [ 1052.974160][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9b7a instead [ 1052.974198][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1052.974211][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1052.974237][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xe944 instead [ 1052.974253][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9b7a instead [ 1052.974291][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1052.974309][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1052.974325][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xe944 instead [ 1052.974342][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9b7a instead [ 1052.974379][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1052.974397][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1052.974413][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xe944 instead [ 1052.974429][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9b7a instead [ 1052.974467][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1052.974481][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1052.974497][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xe944 instead [ 1052.974515][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9b7a instead [ 1052.974554][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1052.974569][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1052.974585][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xe944 instead [ 1052.974601][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9b7a instead [ 1052.974636][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1052.974652][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1052.974668][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xe944 instead [ 1052.974685][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9b7a instead [ 1052.974721][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1052.974737][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1052.974753][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xe944 instead [ 1052.974770][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9b7a instead [ 1052.974807][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1052.974823][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1052.974839][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xe944 instead [ 1052.974852][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9b7a instead [ 1052.974890][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1052.974903][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1052.974915][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xe944 instead [ 1052.974931][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9b7a instead [ 1052.974970][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1052.974985][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1052.974999][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xe944 instead [ 1052.975016][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9b7a instead [ 1052.975053][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1052.975069][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1052.975085][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xe944 instead [ 1052.975098][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9b7a instead [ 1052.975137][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1052.975149][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1052.975162][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xe944 instead [ 1052.975180][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9b7a instead [ 1052.975219][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1052.975241][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1052.975258][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xe944 instead [ 1052.975274][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9b7a instead [ 1052.975316][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1052.975331][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1052.975345][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xe944 instead [ 1052.975362][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9b7a instead [ 1052.975452][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1052.975470][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1052.975485][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xe944 instead [ 1052.975505][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9b7a instead [ 1052.975546][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1052.975562][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1052.975579][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xe944 instead [ 1052.975596][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9b7a instead [ 1052.975633][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1052.975648][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1052.975664][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xe944 instead [ 1052.975682][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9b7a instead [ 1052.975722][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1052.975737][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1052.975753][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xe944 instead [ 1052.975770][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9b7a instead [ 1052.975807][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1052.975822][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1052.975837][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe944 instead [ 1052.975853][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9b7a instead [ 1052.975890][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1052.975904][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1052.975921][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xe944 instead [ 1052.975938][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9b7a instead [ 1052.975976][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1052.975990][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1052.976005][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe944 instead [ 1052.976020][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9b7a instead [ 1052.976057][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1052.976071][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1052.976085][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe944 instead [ 1052.976101][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9b7a instead [ 1052.976138][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1052.976152][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1052.976169][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xe944 instead [ 1052.976185][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9b7a instead [ 1052.976236][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1052.976252][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1052.976270][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xe944 instead [ 1052.976289][T21962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9b7a instead [ 1052.976322][T21962] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1052.976329][T21962] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1053.431701][T21956] print_circular_bug.cold+0x178/0x1be [ 1053.433456][T21956] check_noncircular+0x146/0x160 [ 1053.435031][T21956] check_prev_add+0xeb/0xe60 [ 1053.436507][T21956] __lock_acquire+0x1528/0x1f40 [ 1053.438061][T21956] ? lockdep_hardirqs_on+0x7d/0x110 [ 1053.439703][T21956] lock_acquire+0x1d1/0x380 [ 1053.441156][T21956] ? configfs_rmdir+0x5ae/0x950 [ 1053.442670][T21956] ? __pfx___might_resched+0x10/0x10 [ 1053.444326][T21956] ? __lock_acquire+0x5c0/0x1f40 [ 1053.445897][T21956] __mutex_lock+0x1a4/0x1bd0 [ 1053.447361][T21956] ? configfs_rmdir+0x5ae/0x950 [ 1053.448937][T21956] ? configfs_rmdir+0x5ae/0x950 [ 1053.450475][T21956] ? reacquire_held_locks+0xdd/0x1f0 [ 1053.452133][T21956] ? __pfx___mutex_lock+0x10/0x10 [ 1053.453723][T21956] ? do_raw_spin_lock+0x128/0x260 [ 1053.455302][T21956] ? find_held_lock+0x2b/0x80 [ 1053.456813][T21956] ? fast_dput+0x2fe/0x6f0 [ 1053.458243][T21956] ? do_raw_spin_unlock+0x145/0x1e0 [ 1053.459980][T21956] ? _raw_spin_unlock+0x28/0x50 [ 1053.461560][T21956] ? fast_dput+0x168/0x6f0 [ 1053.462989][T21956] ? configfs_rmdir+0x5ae/0x950 [ 1053.464538][T21956] configfs_rmdir+0x5ae/0x950 [ 1053.466046][T21956] ? __pfx_configfs_rmdir+0x10/0x10 [ 1053.467691][T21956] ? __pfx_down_write+0x10/0x10 [ 1053.469261][T21956] vfs_rmdir+0x328/0x8a0 [ 1053.470567][T21956] filename_rmdir+0x31a/0x5c0 [ 1053.472059][T21956] ? __pfx_filename_rmdir+0x10/0x10 [ 1053.473702][T21956] ? do_getname+0x191/0x390 [ 1053.475138][T21956] __ia32_sys_rmdir+0x45/0x60 [ 1053.476649][T21956] __do_fast_syscall_32+0x13a/0x8b0 [ 1053.478321][T21956] ? lockdep_hardirqs_on+0x7d/0x110 [ 1053.479958][T21956] do_fast_syscall_32+0x32/0x70 [ 1053.481505][T21956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.483484][T21956] RIP: 0023:0xf702efec [ 1053.484783][T21956] Code: Unable to access opcode bytes at 0xf702efc2. [ 1053.486855][T21956] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 1053.489480][T21956] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 0000000000000000 [ 1053.492158][T21956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.494631][T21956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.497095][T21956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1053.499567][T21956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.502035][T21956] [ 1053.600043][T21965] fuse: Bad value for 'fd' [ 1053.902569][ T1435] ieee802154 phy0 wpan0: encryption failed: -22