last executing test programs: 54.714180153s ago: executing program 3 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701feffb81cfeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 54.55716572s ago: executing program 3 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000ec0)={0x2020}, 0x2020) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 53.944481826s ago: executing program 3 (id=1763): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000005000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0xa, 0x2400000001, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 53.364319078s ago: executing program 3 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x7c, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='minix\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000d40)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0/../file0\x00') r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x419, 0x48001001, r5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @local, {[], @dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "000108", 0x0, 0x6, 0xff, @local, @remote, [], '\x00P\x00P\x00\x00\x00\x00'}}}}}}}, 0x0) 53.244783211s ago: executing program 3 (id=1772): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) listen(0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000021401002cbd7000fddbdf25080021"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000000)={r1, 0x8, 0xffffffffffffffff, 0x101}) mkdirat(r2, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) 52.927255976s ago: executing program 3 (id=1775): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x7f82) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESOCT, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe"], 0xfdef) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000003c0)=0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./dev/sda1/file0\x00', 0x24042, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000480)=[0x0, 0x0], 0x2}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000280)=[r4], &(0x7f0000000280), &(0x7f0000000840)=[0x0, 0x0], &(0x7f00000001c0)=[0x7fffffff]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffff"], 0x27c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20800000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2504000000090003007379"], 0x20}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004) 52.798922237s ago: executing program 32 (id=1775): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x7f82) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESOCT, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe"], 0xfdef) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000003c0)=0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./dev/sda1/file0\x00', 0x24042, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000480)=[0x0, 0x0], 0x2}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x400, 0x1, &(0x7f0000000280)=[r4], &(0x7f0000000280), &(0x7f0000000840)=[0x0, 0x0], &(0x7f00000001c0)=[0x7fffffff]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffff"], 0x27c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20800000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2504000000090003007379"], 0x20}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004) 6.385564575s ago: executing program 0 (id=2047): r0 = syz_open_dev$video(0x0, 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) 6.117634643s ago: executing program 0 (id=2049): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 6.027304266s ago: executing program 0 (id=2051): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4.989371455s ago: executing program 0 (id=2061): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000019500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r0], 0x14) setitimer(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50001, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe4f) ioctl$TCXONC(r3, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.715650474s ago: executing program 0 (id=2064): syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000b576d8af5b2ad6d259bc7f205b02ace3d444553ea63ae774c846da163a437a692b225d8c7ec47d10377778e764407bb56c93aa87ea0c9979a7a305e46ecf66fd21cb5aecdb4c96fe88619db4cec094491d71b146336755588022c43d697f926cc241473058053a67af7d15e5674ef6e4f5280a6f3b3ab8043507c63d1129574181d40c78bffe85"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 2.955787879s ago: executing program 1 (id=2077): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/55, 0x325000, 0x800, 0x8}, 0x1c) r3 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000400)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, ')!Y^+\x92'}}, 0x27) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r5, 0x1, 0x4070bc2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}}, 0x20000008) 2.733907887s ago: executing program 4 (id=2080): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 2.731877575s ago: executing program 4 (id=2089): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) setfsgid(0x0) 2.187607947s ago: executing program 4 (id=2083): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000019500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r0], 0x14) setitimer(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.087505696s ago: executing program 4 (id=2084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch', 0x24) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) 1.616297689s ago: executing program 0 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x405, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) syz_usb_connect$uac2(0x2, 0xcb, &(0x7f0000000340)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x39, 0x5, 0x3, 0x20, 0xf7}, 0x44, &(0x7f0000000180)={0x5, 0xf, 0x44, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xd0, 0x1, 0x0, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x8, 0xf000, 0x4, [0xc000, 0x1fe0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xde, 0x7, 0x5, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x4, 0x4, 0xf}]}, 0x1, [{0x19, &(0x7f0000000480)=@string={0x19, 0x3, "ab5b1513b457c8d2c967daa406b69d42ecd6e5d1480e5b"}}]}) mount$9p_virtio(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000280)={'trans=virtio,', {[{@access_uid}]}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x64, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe, 0x1}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) 1.099576985s ago: executing program 2 (id=2092): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x2, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x4000000) 1.02755365s ago: executing program 2 (id=2093): mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0xa00, 0x0, 0x0, 0x8c0}, 0x0) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x156}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x3, 0xe3e}}}, &(0x7f0000000480)) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 432.447627ms ago: executing program 2 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch', 0x24) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) 422.219887ms ago: executing program 1 (id=2095): syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000b576d8af5b2ad6d259bc7f205b02ace3d444553ea63ae774c846da163a437a692b225d8c7ec47d10377778e764407bb56c93aa87ea0c9979a7a305e46ecf66fd21cb5aecdb4c96fe88619db4cec094491d71b146336755588022c43d697f926cc241473058053a67af7d15e5674ef6e4f5280a6f3b3ab8043507c63d1129574181d40c78bffe85"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 285.675949ms ago: executing program 2 (id=2096): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) close(r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0xf5ff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 285.086239ms ago: executing program 2 (id=2097): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001840)={r4, @in={{0x2, 0x4e20, @local}}}, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x4000) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff1}, {0xb, 0x7}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='i8042\x00', 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.300916ms ago: executing program 2 (id=2098): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 0s ago: executing program 4 (id=2099): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x69}) r1 = socket$inet(0x2, 0x7897ec3af89c53d5, 0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x1, {0xe2, 0x0, 0x0, '\x00', {0x0, 0x62, 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {0x0, 0x100}, {0x2}, {}, {}, 0x0, 0x0, 0x80001}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="c26d6d6d9d01954b3924fac24cf871cbb74fc116f1f834683ec78716deabfd4f2b181e32a37bc2d7534539e98cdc10af30740c67ee649f2bf879a82ca8b98914988009c7e78158bcfde8117201349b049039fc68069ffc7346731046ee351d99c01f9a3f9f1907869130ef5d7347c1d35ef2f42b7c9390df29ad4da7cd6f904f7964a58ae6d760acfbd2008e8c5a72e7d1e42549c2284faa832e768e4d9a472009674831fbabdda5ef01b74ff8e64f6b65b50a179d7f0e1e0537881c6f78f24f6b7b8bc27af8ac9dcdcfa1168fea31bab287e3608a85cd3dbf2a97ff60fcf31ddba5", 0xe2}, {&(0x7f0000000140)="c0d1ebc50df22fcd14869ad67e24d64921aaa8e0cd90c9833364716826fc91affdddf9361d25", 0xfdf0}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x4048845) recvmmsg$unix(r3, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003f00)=""/4096, 0xfed2}], 0x1}}], 0x1, 0x12102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') kernel console output (not intermixed with test programs): /0x10 [ 188.616440][T11382] sock_alloc_inode+0x26/0x2c0 [ 188.616455][T11382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 188.616469][T11382] alloc_inode+0x68/0x250 [ 188.616486][T11382] sock_alloc+0x44/0x280 [ 188.616500][T11382] ? security_socket_create+0x7f/0x250 [ 188.616515][T11382] __sock_create+0xc2/0x860 [ 188.616534][T11382] __sys_socket+0x14d/0x260 [ 188.616543][T11382] ? xfd_validate_state+0x129/0x190 [ 188.616560][T11382] ? __pfx___sys_socket+0x10/0x10 [ 188.616574][T11382] __ia32_sys_socket+0x72/0xb0 [ 188.616584][T11382] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.616600][T11382] __do_fast_syscall_32+0x13a/0x8b0 [ 188.616619][T11382] do_fast_syscall_32+0x32/0x70 [ 188.616635][T11382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.616649][T11382] RIP: 0023:0xf7fc6fec [ 188.616662][T11382] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 188.616667][T11382] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 188.616679][T11382] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 188.616686][T11382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.616692][T11382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.616698][T11382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.616705][T11382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.616719][T11382] [ 188.617944][T11382] socket: no more sockets [ 188.706567][T11387] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 188.706619][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 188.748579][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 189.296997][ T43] audit: type=1326 audit(2000000340.340:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.3.1674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58fec code=0x7fc00000 [ 189.655668][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 190.166716][T11413] FAULT_INJECTION: forcing a failure. [ 190.166716][T11413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.166783][T11413] CPU: 2 UID: 0 PID: 11413 Comm: syz.0.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.166809][T11413] Tainted: [L]=SOFTLOCKUP [ 190.166815][T11413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.166822][T11413] Call Trace: [ 190.166826][T11413] [ 190.166831][T11413] dump_stack_lvl+0x100/0x190 [ 190.166849][T11413] should_fail_ex.cold+0x5/0xa [ 190.166864][T11413] _copy_to_user+0x32/0xd0 [ 190.166878][T11413] simple_read_from_buffer+0xcb/0x170 [ 190.166892][T11413] proc_fail_nth_read+0x1af/0x230 [ 190.166911][T11413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.166930][T11413] ? rw_verify_area+0xce/0x6d0 [ 190.166945][T11413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.166963][T11413] vfs_read+0x1e4/0xb40 [ 190.166974][T11413] ? lock_acquire+0x1d1/0x380 [ 190.166989][T11413] ? __fget_files+0x34/0x3d0 [ 190.167000][T11413] ? __pfx_vfs_read+0x10/0x10 [ 190.167009][T11413] ? find_held_lock+0x2b/0x80 [ 190.167020][T11413] ? __fget_files+0x215/0x3d0 [ 190.167034][T11413] ? __fget_files+0x21f/0x3d0 [ 190.167049][T11413] ksys_read+0x12a/0x250 [ 190.167059][T11413] ? __pfx_ksys_read+0x10/0x10 [ 190.167074][T11413] do_int80_emulation+0x166/0x650 [ 190.167092][T11413] asm_int80_emulation+0x1a/0x20 [ 190.167103][T11413] RIP: 0023:0xf71c75ab [ 190.167112][T11413] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 190.167122][T11413] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 190.167134][T11413] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 190.167141][T11413] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 190.167147][T11413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.167153][T11413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.167159][T11413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.167173][T11413] [ 190.806008][T11456] fuse: fd is not a fuse device [ 190.861120][ T57] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 191.013932][ T57] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 191.015042][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.015063][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.017253][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.017270][ T57] usb 7-1: Product: syz [ 191.017281][ T57] usb 7-1: Manufacturer: syz [ 191.017292][ T57] usb 7-1: SerialNumber: syz [ 191.137474][ T5745] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 191.226660][ T57] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 191.558685][T11479] gadgetfs: bound to dummy_udc driver [ 191.582395][T11483] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.640970][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.641996][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.660589][T11485] MTRR 1 not used [ 191.811541][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 191.814145][ C0] gadgetfs: connected [ 191.814474][ T10] gadgetfs: disconnected [ 191.945668][T11498] overlayfs: missing 'lowerdir' [ 191.952873][ T1139] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 191.953266][ T1139] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 191.953288][ T1139] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 191.953307][ T1139] sr 2:0:0:0: [sr0] tag#0 CDB: opcode=0xf0 (vendor) f0 76 8e 74 58 35 d2 b6 ed f9 3d dd [ 191.971213][ C0] gadgetfs: connected [ 191.973686][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 191.976872][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 191.979819][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.986983][ C0] gadgetfs: configuration #1 [ 192.001673][ T1139] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 192.002064][ T1139] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 192.002084][ T1139] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 192.002102][ T1139] sr 2:0:0:0: [sr0] tag#6 CDB: opcode=0xf0 (vendor) f0 76 8e 74 58 35 d2 b6 ed f9 3d dd [ 192.048398][T11510] Device name cannot be null; rc = [-22] [ 192.210652][ T5109] blk_print_req_error: 27 callbacks suppressed [ 192.210718][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.210735][ T5109] buffer_io_error: 27 callbacks suppressed [ 192.210740][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211334][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211352][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211411][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211425][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211475][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211488][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211537][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211550][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211608][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211621][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211677][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211690][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211763][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211776][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211794][T11515] ldm_validate_partition_table(): Disk read failed. [ 192.211876][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211890][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.211942][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.211955][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.212055][T11515] Dev nbd0: unable to read RDB block 0 [ 192.212280][T11515] nbd0: unable to read partition table [ 192.815689][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1729'. [ 192.821419][T11538] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 192.821447][T11538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.827811][T11538] vhci_hcd vhci_hcd.0: Device attached [ 192.850181][T11539] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 192.850580][ T13] vhci_hcd vhci_hcd.0: stop threads [ 192.850593][ T13] vhci_hcd vhci_hcd.0: release socket [ 192.850604][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 192.865039][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 193.177244][T11551] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.634207][T11479] gadgetfs: suspended from state 3 [ 193.654211][T11479] gadgetfs: disconnected [ 193.662576][ T854] usb 5-1: USB disconnect, device number 23 [ 193.664682][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 193.702743][ T1478] usb 7-1: USB disconnect, device number 22 [ 193.704946][ T1478] usblp0: removed [ 193.742480][T11566] lo speed is unknown, defaulting to 1000 [ 193.748217][T11572] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 193.748249][T11572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.752554][T11572] vhci_hcd vhci_hcd.0: Device attached [ 193.807147][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.807272][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.807516][ T1438] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 193.858310][T11574] vhci_hcd: connection closed [ 193.860547][ T8977] vhci_hcd vhci_hcd.3: stop threads [ 193.860631][ T8977] vhci_hcd vhci_hcd.3: release socket [ 193.860642][ T8977] vhci_hcd vhci_hcd.3: disconnect device [ 194.401840][T11625] fuse: fd is not a fuse device [ 194.413779][T11625] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.425479][T11625] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1745'. [ 194.448248][T11630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1746'. [ 194.448651][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 194.654842][ T5745] Bluetooth: hci1: unexpected event for opcode 0x040d [ 194.801192][T11638] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 194.801233][T11638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.808663][T11638] vhci_hcd vhci_hcd.0: Device attached [ 194.852664][T10857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.852714][T10857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.905976][ T43] audit: type=1326 audit(2000000345.950:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.2.1749" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffe0000 [ 194.920063][T11638] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 195.080989][ T1042] usb 44-1: SetAddress Request (6) to port 0 [ 195.081068][ T1042] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 195.482144][T11641] vhci_hcd: connection reset by peer [ 195.487969][ T12] vhci_hcd vhci_hcd.3: stop threads [ 195.488030][ T12] vhci_hcd vhci_hcd.3: release socket [ 195.488096][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 195.861419][T11568] Set syz1 is full, maxelem 65536 reached [ 196.405839][T11651] dlm: Unknown command passed to DLM device : 0 [ 196.405839][T11651] [ 197.252122][T11657] dlm: closing connection to node 1 [ 197.252395][T11657] dlm: io handling for node: 1 stopped [ 197.252704][T11657] dlm: closing connection to node 1 done [ 197.362670][T11668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.475369][T11675] LUN: removable file: (no medium) [ 197.492251][ T43] audit: type=1800 audit(2000000348.540:746): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1758" name="file" dev="configfs" ino=36456 res=0 errno=0 [ 197.715076][T11639] syz.1.1750 (11639) used greatest stack depth: 18600 bytes left [ 198.013924][T11687] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.016530][T11687] overlayfs: failed to set xattr on upper [ 198.018774][T11687] overlayfs: ...falling back to redirect_dir=nofollow. [ 198.022270][T11687] overlayfs: ...falling back to index=off. [ 198.024263][T11687] overlayfs: ...falling back to uuid=null. [ 198.267306][T11695] syz.3.1763 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 198.267539][T11695] CPU: 3 UID: 0 PID: 11695 Comm: syz.3.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.267570][T11695] Tainted: [L]=SOFTLOCKUP [ 198.267577][T11695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.267589][T11695] Call Trace: [ 198.267597][T11695] [ 198.267605][T11695] dump_stack_lvl+0x100/0x190 [ 198.267638][T11695] dump_header+0xfb/0x606 [ 198.267662][T11695] oom_kill_process.cold+0xd/0x380 [ 198.267687][T11695] out_of_memory+0x1256/0x14f0 [ 198.267743][T11695] ? __pfx_out_of_memory+0x10/0x10 [ 198.267775][T11695] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 198.267821][T11695] ? __pfx_stack_trace_save+0x10/0x10 [ 198.267845][T11695] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 198.267868][T11695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.267904][T11695] ? kasan_save_stack+0x3f/0x50 [ 198.267924][T11695] ? kasan_save_stack+0x30/0x50 [ 198.267945][T11695] ? kasan_save_track+0x14/0x30 [ 198.267964][T11695] ? __kasan_slab_alloc+0x89/0x90 [ 198.267985][T11695] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 198.268007][T11695] ? __get_vm_area_node+0x1ed/0x350 [ 198.268028][T11695] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 198.268053][T11695] ? __vmalloc_node_noprof+0xad/0xf0 [ 198.268078][T11695] ? bpf_prog_load+0x49e/0x2a80 [ 198.268103][T11695] ? __sys_bpf+0x1f46/0x4a30 [ 198.268120][T11695] ? __ia32_sys_bpf+0xcc/0x170 [ 198.268138][T11695] ? __do_fast_syscall_32+0x13a/0x8b0 [ 198.268182][T11695] ? do_fast_syscall_32+0x32/0x70 [ 198.268221][T11695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.268247][T11695] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 198.268278][T11695] ? policy_nodemask+0xed/0x4f0 [ 198.268311][T11695] alloc_pages_mpol+0x201/0x550 [ 198.268339][T11695] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 198.268374][T11695] alloc_pages_noprof+0x1a/0x160 [ 198.268404][T11695] get_free_pages_noprof+0x10/0xb0 [ 198.268426][T11695] __kasan_populate_vmalloc+0xa0/0x210 [ 198.268452][T11695] alloc_vmap_area+0x95d/0x2bb0 [ 198.268487][T11695] ? __pfx_alloc_vmap_area+0x10/0x10 [ 198.268517][T11695] __get_vm_area_node+0x1ed/0x350 [ 198.268546][T11695] __vmalloc_node_range_noprof+0x268/0x1420 [ 198.268572][T11695] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.268595][T11695] ? rcu_is_watching+0x13/0xc0 [ 198.268623][T11695] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.268652][T11695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.268679][T11695] ? sched_clock_cpu+0x6c/0x570 [ 198.268706][T11695] ? __pfx_sched_clock_cpu+0x10/0x10 [ 198.268732][T11695] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.268756][T11695] __vmalloc_node_noprof+0xad/0xf0 [ 198.268780][T11695] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 198.268808][T11695] __vmalloc_noprof+0xa3/0x120 [ 198.268833][T11695] ? __pfx___vmalloc_noprof+0x10/0x10 [ 198.268858][T11695] ? __schedule+0x126b/0x6920 [ 198.268881][T11695] ? rcu_is_watching+0x13/0xc0 [ 198.268899][T11695] ? apparmor_capable+0x1d7/0x4d0 [ 198.268925][T11695] bpf_prog_alloc_no_stats+0x58/0x690 [ 198.268949][T11695] ? security_capable+0x80/0x260 [ 198.268973][T11695] bpf_prog_alloc+0x3b/0x200 [ 198.268994][T11695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.269022][T11695] bpf_prog_load+0x49e/0x2a80 [ 198.269054][T11695] ? __pfx_bpf_prog_load+0x10/0x10 [ 198.269079][T11695] ? irqentry_exit+0x24d/0xa10 [ 198.269125][T11695] __sys_bpf+0x1f46/0x4a30 [ 198.269152][T11695] ? __pfx___sys_bpf+0x10/0x10 [ 198.269169][T11695] ? find_held_lock+0x2b/0x80 [ 198.269189][T11695] ? futex_wake+0x4ea/0x5e0 [ 198.269230][T11695] ? rcu_is_watching+0x13/0xc0 [ 198.269249][T11695] ? trace_sched_exit_tp+0x120/0x160 [ 198.269292][T11695] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 198.269316][T11695] ? xfd_validate_state+0x129/0x190 [ 198.269353][T11695] ? __ia32_sys_bpf+0xcc/0x170 [ 198.269372][T11695] __ia32_sys_bpf+0xcc/0x170 [ 198.269393][T11695] ? __do_fast_syscall_32+0xb3/0x8b0 [ 198.269422][T11695] __do_fast_syscall_32+0x13a/0x8b0 [ 198.269448][T11695] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.269475][T11695] do_fast_syscall_32+0x32/0x70 [ 198.269503][T11695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.269527][T11695] RIP: 0023:0xf7f58fec [ 198.269549][T11695] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 198.269558][T11695] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 198.269577][T11695] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 198.269589][T11695] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.269601][T11695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.269612][T11695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.269623][T11695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.269649][T11695] [ 198.269950][T11695] Mem-Info: [ 198.269982][T11695] active_anon:974 inactive_anon:792 isolated_anon:0 [ 198.269982][T11695] active_file:9864 inactive_file:5139 isolated_file:0 [ 198.269982][T11695] unevictable:1000 dirty:87 writeback:0 [ 198.269982][T11695] slab_reclaimable:6363 slab_unreclaimable:60471 [ 198.269982][T11695] mapped:23092 shmem:1053 pagetables:1469 [ 198.269982][T11695] sec_pagetables:306 bounce:0 [ 198.269982][T11695] kernel_misc_reclaimable:0 [ 198.269982][T11695] free:39574 free_pcp:0 free_cma:0 [ 198.270065][T11695] Node 0 active_anon:28kB inactive_anon:184kB active_file:4kB inactive_file:316kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9792kB pagetables:1608kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 198.270230][T11695] Node 0 DMA free:2496kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.270515][T11695] lowmem_reserve[]: 0 277 277 277 277 [ 198.271632][T11695] Node 0 DMA32 free:10256kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28kB inactive_anon:180kB active_file:0kB inactive_file:316kB unevictable:2000kB writepending:0kB zspages:2376kB present:1032196kB managed:284624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.271861][T11695] lowmem_reserve[]: 0 0 0 0 0 [ 198.272226][T11695] Node 0 DMA: 44*4kB (UE) 26*8kB (UE) 8*16kB (UE) 18*32kB (UE) 8*64kB (UE) 3*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2496kB [ 198.281551][T11695] Node 0 DMA32: 133*4kB (UME) 85*8kB (UME) 46*16kB (UME) 86*32kB (UME) 35*64kB (UME) 16*128kB (UME) 3*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 10268kB [ 198.283840][T11695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.283908][T11695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.283955][T11695] 16816 total pagecache pages [ 198.284072][T11695] 791 pages in swap cache [ 198.284161][T11695] Free swap = 88304kB [ 198.284250][T11695] Total swap = 124996kB [ 198.284293][T11695] 524155 pages RAM [ 198.284450][T11695] 0 pages HighMem/MovableOnly [ 198.284544][T11695] 212107 pages reserved [ 198.284880][T11695] 0 pages cma reserved [ 198.284994][T11695] Unreclaimable slab info: [ 198.285002][T11695] Name Used Total [ 198.289169][T11695] bio-184 6KB 8KB [ 198.289908][T11695] pid_3 28KB 47KB [ 198.290045][T11695] pid_2 53KB 110KB [ 198.292292][T11695] bio-464 17KB 31KB [ 198.292427][T11695] bio-528 19KB 31KB [ 198.292667][T11695] bio-544 19KB 31KB [ 198.292684][T11695] bio-552 19KB 31KB [ 198.292698][T11695] zswap_entry 624KB 660KB [ 198.292822][T11695] AF_VSOCK 50KB 183KB [ 198.292946][T11695] sw_flow_stats 29KB 36KB [ 198.292991][T11695] sw_flow 82KB 107KB [ 198.293038][T11695] batadv_tt_change_cache 12KB 16KB [ 198.293560][T11695] batadv_tl_cache 28KB 32KB [ 198.293772][T11695] ceph_osd_request 11KB 127KB [ 198.293817][T11695] ceph_msg 5KB 38KB [ 198.293867][T11695] IEEE-802.15.4-MAC 31KB 62KB [ 198.293910][T11695] IEEE-802.15.4-RAW 33KB 63KB [ 198.293956][T11695] p9_req_t 18KB 55KB [ 198.294003][T11695] INET_SMC 68KB 125KB [ 198.294046][T11695] SMC6 121KB 218KB [ 198.294090][T11695] SMC 71KB 187KB [ 198.294909][T11695] TIPC 116KB 215KB [ 198.295119][T11695] rds_tcp_incoming 21KB 39KB [ 198.295164][T11695] rds_tcp_connection 84KB 126KB [ 198.295685][T11695] RDS 35KB 123KB [ 198.296373][T11695] rds_connection 35KB 62KB [ 198.296421][T11695] SCTPv6 43KB 210KB [ 198.296560][T11695] SCTP 37KB 183KB [ 198.296665][T11695] sctp_chunk 20KB 70KB [ 198.296680][T11695] sctp_bind_bucket 10KB 16KB [ 198.296724][T11695] PNPIPE 40KB 92KB [ 198.296767][T11695] PHONET 63KB 126KB [ 198.296813][T11695] L2TP/IPv6 43KB 95KB [ 198.296857][T11695] L2TP/IP 33KB 63KB [ 198.297522][T11695] KCM 65KB 124KB [ 198.297569][T11695] kcm_mux 68KB 110KB [ 198.297613][T11695] RXRPC 64KB 160KB [ 198.297656][T11695] rxrpc_call_jar 133KB 255KB [ 198.297672][T11695] can_receiver 24KB 27KB [ 198.297684][T11695] net_bridge_fdb_entry 39KB 47KB [ 198.297779][T11695] MPTCPv6 57KB 223KB [ 198.297825][T11695] ip6-frags 18KB 31KB [ 198.297870][T11695] fib6_node 114KB 144KB [ 198.297919][T11695] ip6_dst_cache 134KB 398KB [ 198.298017][T11695] mfc6_cache 6KB 8KB [ 198.298060][T11695] PINGv6 41KB 61KB [ 198.298104][T11695] RAWv6 154KB 278KB [ 198.298149][T11695] UDPv6 105KB 220KB [ 198.298193][T11695] tw_sock_TCPv6 39KB 55KB [ 198.298236][T11695] request_sock_TCPv6 41KB 61KB [ 198.298374][T11695] TCPv6 340KB 455KB [ 198.298765][T11695] nf_conntrack 32KB 70KB [ 198.299438][T11695] wg_peer 89KB 89KB [ 198.300041][T11695] allowedips_node 18KB 19KB [ 198.300219][T11695] t10_alua_lu_gp_cache 8KB 15KB [ 198.301478][T11695] scsi_sense_cache 52KB 56KB [ 198.301654][T11695] virtio_scsi_cmd 21KB 24KB [ 198.302394][T11695] bio-136 49KB 68KB [ 198.302695][T11695] io_kiocb 0KB 62KB [ 198.302713][T11695] bio-264 10KB 15KB [ 198.303144][T11695] mqueue_inode_cache 39KB 123KB [ 198.303797][T11695] f2fs_evict_inode_work 7KB 7KB [ 198.303844][T11695] bio-272 10KB 15KB [ 198.303889][T11695] f2fs_bio_post_read_ctx 30KB 31KB [ 198.306687][T11695] jfs_mp 14KB 15KB [ 198.306704][T11695] orangefs_op_cache 51KB 68KB [ 198.307529][T11695] fuse_request 19KB 54KB [ 198.307936][T11695] jffs2_inode_cache 12KB 16KB [ 198.308138][T11695] jffs2_node_frag 3KB 3KB [ 198.308181][T11695] jffs2_refblock 20KB 61KB [ 198.308224][T11695] jffs2_tmp_dnode_info 9KB 15KB [ 198.308860][T11695] jffs2_raw_inode 14KB 16KB [ 198.309288][T11695] jffs2_raw_dirent 7KB 8KB [ 198.309333][T11695] jffs2_full_dnode 4KB 7KB [ 198.309381][T11695] cifs_small_rq 28KB 32KB [ 198.310426][T11695] cifs_request 67KB 67KB [ 198.310472][T11695] cifs_mpx_ids 8KB 15KB [ 198.310517][T11695] cifs_io_subrequest 42KB 47KB [ 198.310562][T11695] cifs_io_request 105KB 111KB [ 198.312642][T11695] nfs_commit_data 24KB 31KB [ 198.312655][T11695] nfs_write_data 40KB 63KB [ 198.315613][T11695] ecryptfs_sb_cache 20KB 31KB [ 198.315632][T11695] jbd2_inode 22KB 27KB [ 198.315641][T11695] ext4_system_zone 1KB 3KB [ 198.315765][T11695] ext4_io_end_vec 7KB 15KB [ 198.315919][T11695] kioctx 27KB 63KB [ 198.315973][T11695] aio_kiocb 25KB 46KB [ 198.316304][T11695] fanotify_fid_event 5KB 7KB [ 198.316402][T11695] fanotify_mark 22KB 23KB [ 198.316433][T11695] dnotify_mark 11KB 11KB [ 198.316465][T11695] dnotify_struct 2KB 3KB [ 198.316496][T11695] fasync_cache 37KB 43KB [ 198.316529][T11695] userfaultfd_ctx_cache 43KB 110KB [ 198.316641][T11695] zspage 197KB 208KB [ 198.316802][T11695] zs_handle 222KB 228KB [ 198.316944][T11695] pid_namespace 64KB 123KB [ 198.317040][T11695] kvm_gmem_inode_cache 28KB 30KB [ 198.317074][T11695] kvm_vcpu 81KB 212KB [ 198.317106][T11695] kvm_mmu_page_header 24KB 42KB [ 198.317297][T11695] pte_list_desc 18KB 35KB [ 198.317330][T11695] x86_emulator 69KB 223KB [ 198.317363][T11695] rpc_buffers 82KB 127KB [ 198.317394][T11695] rpc_tasks 32KB 54KB [ 198.317425][T11695] UNIX-STREAM 95KB 255KB [ 198.317457][T11695] UNIX 110KB 286KB [ 198.317489][T11695] ip4-frags 9KB 15KB [ 198.317519][T11695] mfc_cache 6KB 8KB [ 198.317550][T11695] MPTCP 91KB 214KB [ 198.317581][T11695] request_sock_subflow_v4 38KB 45KB [ 198.317613][T11695] tcp_bind2_bucket 18KB 36KB [ 198.317645][T11695] tcp_bind_bucket 24KB 36KB [ 198.317756][T11695] inet_peer 14KB 16KB [ 198.317999][T11695] xfrm_dst 10KB 15KB [ 198.318139][T11695] xfrm_state 34KB 159KB [ 198.318171][T11695] ip_fib_trie 24KB 32KB [ 198.318449][T11695] ip_fib_alias 65KB 83KB [ 198.318517][T11695] rtable 29KB 92KB [ 198.318583][T11695] PING 33KB 63KB [ 198.318614][T11695] RAW 78KB 223KB [ 198.318646][T11695] UDP 104KB 286KB [ 198.318726][T11695] tw_sock_TCP 36KB 63KB [ 198.318757][T11695] request_sock_TCP 41KB 54KB [ 198.318826][T11695] TCP 334KB 471KB [ 198.318858][T11695] fs_bio_integrity 7KB 8KB [ 198.318889][T11695] hugetlbfs_inode_cache 34KB 62KB [ 198.322304][T11695] netfs_subrequest 57KB 70KB [ 198.322406][T11695] netfs_request 172KB 191KB [ 198.322544][T11695] bio-288 31KB 31KB [ 198.322785][T11695] bio-328 12KB 15KB [ 198.322856][T11695] ep_head 5KB 23KB [ 198.322925][T11695] eventpoll_pwq 12KB 35KB [ 198.323035][T11695] eventpoll_epi 49KB 74KB [ 198.323068][T11695] inotify_inode_mark 32KB 54KB [ 198.323100][T11695] bpf_fs_inode_cache 35KB 62KB [ 198.323134][T11695] sgpool-128 42KB 238KB [ 198.323166][T11695] sgpool-64 14KB 191KB [ 198.323197][T11695] sgpool-32 27KB 94KB [ 198.323376][T11695] sgpool-16 37KB 93KB [ 198.323408][T11695] sgpool-8 20KB 39KB [ 198.323438][T11695] bio_crypt_ctx 9KB 11KB [ 198.323470][T11695] bio_integrity_data 7KB 8KB [ 198.323502][T11695] request_queue 209KB 242KB [ 198.323533][T11695] blkdev_ioc 23KB 47KB [ 198.323564][T11695] bio-200 105KB 125KB [ 198.323595][T11695] biovec-max 582KB 743KB [ 198.323627][T11695] biovec-128 59KB 127KB [ 198.323664][T11695] biovec-64 40KB 189KB [ 198.323673][T11695] biovec-16 18KB 54KB [ 198.323681][T11695] mm_slot 11KB 15KB [ 198.323687][T11695] ksm_mm_slot 7KB 8KB [ 198.323714][T11695] ksm_rmap_item 3KB 19KB [ 198.323880][T11695] user_namespace 40KB 92KB [ 198.323925][T11695] uid_cache 20KB 54KB [ 198.323994][T11695] iommu_iova_magazine 40KB 189KB [ 198.324062][T11695] iommu_iova 168KB 172KB [ 198.324094][T11695] dmaengine-unmap-256 26KB 30KB [ 198.324126][T11695] dmaengine-unmap-128 14KB 30KB [ 198.324209][T11695] dmaengine-unmap-16 7KB 8KB [ 198.324633][T11695] dmaengine-unmap-2 3KB 4KB [ 198.324747][T11695] QIPCRTR 51KB 93KB [ 198.324820][T11695] audit_buffer 18KB 31KB [ 198.324854][T11695] skbuff_ext_cache 7KB 40KB [ 198.324936][T11695] skbuff_small_head 1555KB 1620KB [ 198.325002][T11695] skbuff_fclone_cache 753KB 773KB [ 198.325111][T11695] skbuff_head_cache 696KB 804KB [ 198.325142][T11695] configfs_dir_cache 67KB 72KB [ 198.325323][T11695] file_lease_cache 9KB 63KB [ 198.325356][T11695] file_lock_cache 21KB 71KB [ 198.325464][T11695] file_lock_ctx 38KB 47KB [ 198.325532][T11695] fsnotify_inode_mark_connector 26KB 55KB [ 198.325848][T11695] posix_timers_cache 42KB 56KB [ 198.325889][T11695] taskstats 54KB 127KB [ 198.325898][T11695] mem_cgroup_per_node 96KB 122KB [ 198.325905][T11695] mem_cgroup 123KB 123KB [ 198.325916][T11695] proc_dir_entry 609KB 703KB [ 198.326122][T11695] pde_opener 9KB 11KB [ 198.326133][T11695] seq_file 36KB 78KB [ 198.326336][T11695] sigqueue 14KB 35KB [ 198.326371][T11695] shmem_inode_cache 7257KB 7631KB [ 198.326493][T11695] kernfs_iattrs_cache 26KB 31KB [ 198.326681][T11695] kernfs_node_cache 29183KB 29209KB [ 198.326691][T11695] mnt_cache 89KB 118KB [ 198.326699][T11695] bfilp 11KB 15KB [ 198.327291][T11695] filp 602KB 693KB [ 198.327513][T11695] names_cache 589KB 604KB [ 198.327610][T11695] net_namespace 108KB 237KB [ 198.327714][ T43] audit: type=1326 audit(2000000349.370:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.2.1768" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 198.327779][T11695] ima_iint_cache 33KB 63KB [ 198.327857][T11695] lsm_inode_cache 1467KB 1771KB [ 198.327890][T11695] lsm_file_cache 234KB 272KB [ 198.327922][T11695] key_jar 25KB 63KB [ 198.327954][T11695] uts_namespace 80KB 123KB [ 198.327987][T11695] nsproxy 13KB 31KB [ 198.328306][T11695] vm_area_struct 1338KB 1351KB [ 198.328405][T11695] fs_cache 39KB 56KB [ 198.328565][T11695] files_cache 148KB 207KB [ 198.328672][T11695] task_exec_state 17KB 36KB [ 198.328685][T11695] signal_cache 937KB 1817KB [ 198.328697][T11695] sighand_cache 1221KB 2134KB [ 198.328728][T11695] task_struct 4996KB 5175KB [ 198.328859][T11695] cred 151KB 336KB [ 198.328948][T11695] anon_vma_chain 393KB 401KB [ 198.329112][T11695] anon_vma 423KB 511KB [ 198.329438][T11695] pid 152KB 382KB [ 198.329540][T11695] Acpi-Operand 195KB 324KB [ 198.329637][T11695] Acpi-ParseExt 31KB 47KB [ 198.329732][T11695] Acpi-Parse 12KB 19KB [ 198.329746][T11695] Acpi-State 16KB 39KB [ 198.329781][T11695] Acpi-Namespace 31KB 44KB [ 198.329815][T11695] shared_policy_node 3KB 4KB [ 198.329825][T11695] numa_policy 14KB 16KB [ 198.330034][T11695] perf_event 15KB 31KB [ 198.330067][T11695] trace_event_file 1154KB 1160KB [ 198.330167][T11695] ftrace_event_field 1124KB 1126KB [ 198.330560][T11695] pool_workqueue 2193KB 2256KB [ 198.330660][T11695] task_group 23KB 32KB [ 198.330676][T11695] maple_node 1098KB 1544KB [ 198.330685][T11695] mm_struct 388KB 541KB [ 198.331027][T11695] vmap_area 620KB 1037KB [ 198.331200][T11695] debug_objects_cache 2388KB 6966KB [ 198.331233][T11695] page->ptl 159KB 169KB [ 198.331269][T11695] kmalloc-cg-8k 1680KB 1760KB [ 198.331280][T11695] kmalloc-cg-4k 12048KB 12288KB [ 198.331290][T11695] kmalloc-cg-2k 7464KB 7744KB [ 198.331437][T11695] kmalloc-cg-1k 2268KB 2560KB [ 198.331683][T11695] kmalloc-cg-512 945KB 1200KB [ 198.331694][T11695] kmalloc-cg-256 338KB 384KB [ 198.331722][T11695] kmalloc-cg-128 218KB 236KB [ 198.331740][T11695] kmalloc-cg-64 60KB 80KB [ 198.331765][T11695] kmalloc-cg-32 59KB 172KB [ 198.331855][T11695] kmalloc-cg-16 8KB 28KB [ 198.331864][T11695] kmalloc-cg-8 18KB 40KB [ 198.331872][T11695] kmalloc-cg-192 55KB 84KB [ 198.331881][T11695] kmalloc-cg-96 52KB 84KB [ 198.331941][T11695] kmalloc-8k 4912KB 5024KB [ 198.332010][T11695] kmalloc-4k 26912KB 27824KB [ 198.332050][T11695] kmalloc-2k 12240KB 13568KB [ 198.332066][T11695] kmalloc-1k 6188KB 7232KB [ 198.332283][T11695] kmalloc-512 11119KB 11412KB [ 198.332372][T11695] kmalloc-256 4793KB 5016KB [ 198.332979][T11695] kmalloc-128 1999KB 2504KB [ 198.333367][T11695] kmalloc-64 9187KB 13392KB [ 198.333440][T11695] kmalloc-32 1802KB 2108KB [ 198.333474][T11695] kmalloc-16 444KB 464KB [ 198.333629][T11695] kmalloc-8 918KB 972KB [ 198.333674][T11695] kmalloc-192 1434KB 1720KB [ 198.333935][T11695] kmalloc-96 3689KB 4896KB [ 198.333965][T11695] kmem_cache_node 216KB 220KB [ 198.334141][T11695] kmem_cache 180KB 218KB [ 198.334319][T11695] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz.3.1763,pid=11695,uid=0 [ 198.339651][T11695] Out of memory (oom_kill_allocating_task): Killed process 11690 (syz.3.1763) total-vm:102168kB, anon-rss:320kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 198.552268][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 198.572044][T11705] raw_sendmsg: syz.1.1766 forgot to set AF_INET. Fix it! [ 198.623592][T11707] FAULT_INJECTION: forcing a failure. [ 198.623592][T11707] name failslab, interval 1, probability 0, space 0, times 0 [ 198.623624][T11707] CPU: 2 UID: 0 PID: 11707 Comm: syz.0.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.623647][T11707] Tainted: [L]=SOFTLOCKUP [ 198.623653][T11707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.623665][T11707] Call Trace: [ 198.623672][T11707] [ 198.623679][T11707] dump_stack_lvl+0x100/0x190 [ 198.623731][T11707] should_fail_ex.cold+0x5/0xa [ 198.623755][T11707] should_failslab+0xc2/0x120 [ 198.623779][T11707] __kmalloc_noprof+0xfc/0x840 [ 198.623799][T11707] ? bpf_ctx_init+0xf8/0x1e0 [ 198.623830][T11707] bpf_ctx_init+0xf8/0x1e0 [ 198.623858][T11707] bpf_prog_test_run_skb+0x2b5/0x3530 [ 198.623879][T11707] ? lock_acquire+0x1d1/0x380 [ 198.623903][T11707] ? __fget_files+0x34/0x3d0 [ 198.623923][T11707] ? find_held_lock+0x2b/0x80 [ 198.623942][T11707] ? __fget_files+0x171/0x3d0 [ 198.623966][T11707] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 198.623988][T11707] ? fput+0x7c/0x100 [ 198.624012][T11707] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 198.624030][T11707] __sys_bpf+0x2265/0x4a30 [ 198.624055][T11707] ? __pfx___sys_bpf+0x10/0x10 [ 198.624071][T11707] ? lock_acquire+0x1d1/0x380 [ 198.624093][T11707] ? get_pid_task+0x2a/0x250 [ 198.624112][T11707] ? find_held_lock+0x2b/0x80 [ 198.624132][T11707] ? get_pid_task+0xfc/0x250 [ 198.624149][T11707] ? get_pid_task+0xfc/0x250 [ 198.624173][T11707] ? proc_fail_nth_write+0x9f/0x220 [ 198.624193][T11707] ? find_held_lock+0x2b/0x80 [ 198.624215][T11707] ? rcu_read_lock_any_held+0x6a/0x90 [ 198.624234][T11707] ? find_held_lock+0x2b/0x80 [ 198.624251][T11707] ? ksys_write+0x190/0x250 [ 198.624267][T11707] ? ksys_write+0x190/0x250 [ 198.624283][T11707] ? lock_acquire+0x1d1/0x380 [ 198.624321][T11707] ? fput+0x7c/0x100 [ 198.624345][T11707] ? __ia32_sys_bpf+0xcc/0x170 [ 198.624362][T11707] __ia32_sys_bpf+0xcc/0x170 [ 198.624382][T11707] ? __do_fast_syscall_32+0xb3/0x8b0 [ 198.624409][T11707] __do_fast_syscall_32+0x13a/0x8b0 [ 198.624434][T11707] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.624460][T11707] do_fast_syscall_32+0x32/0x70 [ 198.624492][T11707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.624515][T11707] RIP: 0023:0xf7fc6fec [ 198.624536][T11707] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 198.624544][T11707] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 198.624563][T11707] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 198.624580][T11707] RDX: 000000000000003b RSI: 0000000000000000 RDI: 0000000000000000 [ 198.624591][T11707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.624602][T11707] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.624613][T11707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.624637][T11707] [ 198.816637][T11713] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 198.907745][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.921287][T11714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.939023][T11714] bond0: (slave bond3): Enslaving as an active interface with a down link [ 198.945873][T11715] gretap1: entered promiscuous mode [ 198.954808][T11715] bond0: (slave gretap1): making interface the new active one [ 198.989284][T11715] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 199.240770][T11725] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 199.245800][T11725] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.258600][T11727] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1779'. [ 199.323281][T11727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.333863][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.339970][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.344267][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.349463][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.349967][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.357847][T11727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.496003][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 199.639867][T11731] netdevsim0 speed is unknown, defaulting to 1000 [ 199.646422][T11731] lo speed is unknown, defaulting to 1000 [ 200.120807][ T1042] usb 44-1: device descriptor read/8, error -110 [ 200.135304][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.135436][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.135496][T11731] bridge_slave_0: entered allmulticast mode [ 200.136311][T11731] bridge_slave_0: entered promiscuous mode [ 200.139910][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.139987][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.140047][T11731] bridge_slave_1: entered allmulticast mode [ 200.140911][T11731] bridge_slave_1: entered promiscuous mode [ 200.155973][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.160261][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.172553][T11731] team0: Port device team_slave_0 added [ 200.174377][T11731] team0: Port device team_slave_1 added [ 200.185874][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.185914][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.185958][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.186746][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.186754][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.186767][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.207124][T11731] hsr_slave_0: entered promiscuous mode [ 200.207604][T11731] hsr_slave_1: entered promiscuous mode [ 200.207967][T11731] debugfs: 'hsr0' already exists in 'hsr' [ 200.207982][T11731] Cannot create hsr debugfs directory [ 200.406507][T11731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.413123][T11731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.413885][T11731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.419900][T11731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.421037][T11731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.425476][T11731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.426295][T11731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.437085][T11731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.457879][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.457961][T11731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.458100][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.458163][T11731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.527825][ T1042] usb usb44-port1: attempt power cycle [ 200.538895][T11731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.563840][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.571237][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.594774][T11731] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.612020][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.612128][T10857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.618910][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.619078][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.772735][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 200.776311][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 200.786804][T11784] 9p: Bad value for 'wfdno' [ 200.887121][T11800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1791'. [ 200.899968][T11803] random: crng reseeded on system resumption [ 200.908452][T11803] Unrecognized hibernate image header format! [ 200.908513][T11803] PM: hibernation: Image mismatch: architecture specific data [ 200.913981][T11803] batadv_slave_1: entered promiscuous mode [ 200.916720][T11802] batadv_slave_1: left promiscuous mode [ 201.001309][T11811] syz.2.1797 (11811): attempted to duplicate a private mapping with mremap. This is not supported. [ 201.017316][T11731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.091289][ T1042] usb usb44-port1: unable to enumerate USB device [ 201.213617][T11731] veth0_vlan: entered promiscuous mode [ 201.222519][T11731] veth1_vlan: entered promiscuous mode [ 201.245508][T11731] veth0_macvtap: entered promiscuous mode [ 201.253485][T11731] veth1_macvtap: entered promiscuous mode [ 201.264114][T11731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.272608][T11731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.312814][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.313143][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.313401][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.313444][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.392828][T10857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.392879][T10857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.403193][ T5738] Bluetooth: hci0: command tx timeout [ 201.421368][T10857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.421416][T10857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.492350][T11834] ªªªªªª: renamed from vlan0 (while UP) [ 201.770868][ T5810] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 201.825135][T11848] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 201.825172][T11848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.827406][T11847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 201.827426][T11847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.827484][T11847] vhci_hcd vhci_hcd.0: Device attached [ 201.842489][T11848] vhci_hcd vhci_hcd.0: Device attached [ 201.844941][T11850] usbip_core: unknown command [ 201.845010][T11850] vhci_hcd: unknown pdu 0 [ 201.847009][T11849] vhci_hcd: connection closed [ 201.847497][T11850] usbip_core: unknown command [ 201.851449][ T8975] vhci_hcd vhci_hcd.2: stop threads [ 201.856214][ T8975] vhci_hcd vhci_hcd.2: release socket [ 201.856230][ T8975] vhci_hcd vhci_hcd.2: disconnect device [ 201.859911][ T8975] vhci_hcd vhci_hcd.2: stop threads [ 201.861683][ T8975] vhci_hcd vhci_hcd.2: release socket [ 201.863750][ T8975] vhci_hcd vhci_hcd.2: disconnect device [ 201.910789][ T5810] usb 9-1: device descriptor read/64, error -71 [ 201.953129][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 201.999141][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1810'. [ 202.047996][T11864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1812'. [ 202.075540][T11866] FAULT_INJECTION: forcing a failure. [ 202.075540][T11866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.075599][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.0.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.075625][T11866] Tainted: [L]=SOFTLOCKUP [ 202.075631][T11866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.075638][T11866] Call Trace: [ 202.075642][T11866] [ 202.075647][T11866] dump_stack_lvl+0x100/0x190 [ 202.075665][T11866] should_fail_ex.cold+0x5/0xa [ 202.075699][T11866] _copy_from_user+0x2e/0xd0 [ 202.075714][T11866] get_compat_msghdr+0xb3/0x480 [ 202.075732][T11866] ? __pfx_get_compat_msghdr+0x10/0x10 [ 202.075753][T11866] ___sys_sendmsg+0x1b6/0x1e0 [ 202.075771][T11866] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.075795][T11866] ? find_held_lock+0x2b/0x80 [ 202.075816][T11866] __sys_sendmsg+0x160/0x210 [ 202.075845][T11866] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.075871][T11866] ? __pfx_ksys_write+0x10/0x10 [ 202.075892][T11866] __do_fast_syscall_32+0x13a/0x8b0 [ 202.075916][T11866] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.075938][T11866] do_fast_syscall_32+0x32/0x70 [ 202.075957][T11866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.075978][T11866] RIP: 0023:0xf7fc6fec [ 202.075996][T11866] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 202.076004][T11866] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 202.076021][T11866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 202.076032][T11866] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.076042][T11866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.076051][T11866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.076057][T11866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.076080][T11866] [ 202.170975][ T5810] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 202.292975][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1816'. [ 202.310975][ T5810] usb 9-1: device descriptor read/64, error -71 [ 202.422798][ T5810] usb usb9-port1: attempt power cycle [ 202.567351][T11883] input: syz1 as /devices/virtual/input/input26 [ 202.684545][T11889] netlink: 'syz.2.1819': attribute type 10 has an invalid length. [ 202.697252][T11889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.710880][T11889] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 202.715862][T11889] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 202.800795][ T5810] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 202.824301][ T5810] usb 9-1: device descriptor read/8, error -71 [ 203.070820][ T5810] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 203.118751][ T5810] usb 9-1: device descriptor read/8, error -71 [ 203.230257][ T5810] usb usb9-port1: unable to enumerate USB device [ 203.239299][T11897] overlayfs: failed to clone upperpath [ 203.491038][ T5738] Bluetooth: hci0: command tx timeout [ 204.323426][T11902] __nla_validate_parse: 1 callbacks suppressed [ 204.323507][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1826'. [ 204.449485][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 204.588113][T11916] jffs2: notice: (11916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.651311][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1831'. [ 204.651396][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1831'. [ 204.702011][ T43] audit: type=1326 audit(2000000355.750:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.4.1832" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x0 [ 205.560789][ T5738] Bluetooth: hci0: command tx timeout [ 207.230694][ T43] audit: type=1800 audit(2000000358.270:749): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1833" name="file" dev="configfs" ino=37226 res=0 errno=0 [ 207.266540][T11932] mass_storage.0/lun.0: unable to open backing file: f [ 207.455305][T11939] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 207.455346][T11939] overlayfs: failed to set xattr on upper [ 207.455525][T11939] overlayfs: ...falling back to redirect_dir=nofollow. [ 207.455531][T11939] overlayfs: ...falling back to index=off. [ 207.455535][T11939] overlayfs: ...falling back to uuid=null. [ 207.537876][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.538192][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.640700][ T5738] Bluetooth: hci0: command tx timeout [ 207.699561][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.706127][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.648387][T11952] overlayfs: missing 'lowerdir' [ 209.437237][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.448592][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.456191][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.459580][T11956] jffs2: notice: (11956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.473741][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.473847][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.473907][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.473936][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.490143][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.502066][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.945493][T11969] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1844'. [ 209.988556][T11968] Process accounting paused [ 210.088778][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.221380][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.227788][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1846'. [ 210.290383][T11987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1847'. [ 210.316086][ T43] audit: type=1800 audit(2000000361.360:750): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1848" name="device_path" dev="configfs" ino=37364 res=0 errno=0 [ 210.317104][ T43] audit: type=1800 audit(2000000361.360:751): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1848" name="enable" dev="configfs" ino=37365 res=0 errno=0 [ 210.318094][ T43] audit: type=1800 audit(2000000361.360:752): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1848" name="addr_trtype" dev="configfs" ino=37366 res=0 errno=0 [ 210.337120][ T1042] logitech-hidpp-device 0005:046D:B012.0007: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 210.426514][T11993] fido_id[11993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.456293][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.464669][T11957] netdevsim0 speed is unknown, defaulting to 1000 [ 210.465640][T11957] lo speed is unknown, defaulting to 1000 [ 210.551945][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.662646][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 210.665622][T12004] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 210.759037][T12008] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 210.801643][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.801809][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.801878][T11957] bridge_slave_0: entered allmulticast mode [ 210.803238][T11957] bridge_slave_0: entered promiscuous mode [ 210.805816][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.805884][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.806167][T11957] bridge_slave_1: entered allmulticast mode [ 210.807365][T11957] bridge_slave_1: entered promiscuous mode [ 210.827344][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.829939][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.848644][T11957] team0: Port device team_slave_0 added [ 210.851933][T11957] team0: Port device team_slave_1 added [ 210.865468][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.865551][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.865844][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.867217][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.867228][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.867249][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.902666][T11957] hsr_slave_0: entered promiscuous mode [ 210.903476][T11957] hsr_slave_1: entered promiscuous mode [ 210.904384][T11957] debugfs: 'hsr0' already exists in 'hsr' [ 210.904403][T11957] Cannot create hsr debugfs directory [ 211.560863][ T5745] Bluetooth: hci4: command tx timeout [ 213.312929][T12027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1856'. [ 213.316444][T12027] openvswitch: netlink: Flow key attr not present in new flow. [ 213.325718][T12027] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 213.441832][ T13] bond1 (unregistering): Released all slaves [ 213.452207][ T13] bond0 (unregistering): (slave wlan1): Releasing active interface [ 213.477968][ T13] bond0 (unregistering): Released all slaves [ 213.495463][T12021] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 213.650721][ T5745] Bluetooth: hci4: command tx timeout [ 213.682236][ T13] ovs-system: left promiscuous mode [ 213.735892][ T43] audit: type=1800 audit(2000000364.780:753): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1857" name="device_path" dev="configfs" ino=38864 res=0 errno=0 [ 213.748278][ T43] audit: type=1800 audit(2000000364.790:754): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1857" name="enable" dev="configfs" ino=38865 res=0 errno=0 [ 213.751416][ T43] audit: type=1800 audit(2000000364.800:755): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1857" name="addr_trtype" dev="configfs" ino=38866 res=0 errno=0 [ 213.948740][T12034] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.948849][T12034] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 213.949011][T12034] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 213.949033][T12034] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 214.031446][T12044] CacheFiles: No cache directory specified [ 214.094556][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 214.246134][T12050] loop5: detected capacity change from 0 to 6 [ 214.262108][T12050] Dev loop5: unable to read RDB block 6 [ 214.263025][T12050] loop5: unable to read partition table [ 214.264470][T12050] loop5: partition table beyond EOD, truncated [ 214.264505][T12050] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.458855][ T13] IPVS: stopping master sync thread 7707 ... [ 214.901183][T12061] Bluetooth: MGMT ver 1.23 [ 215.720670][ T5745] Bluetooth: hci4: command tx timeout [ 215.736743][T11957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.751607][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.752098][T11957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.754689][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.755287][T11957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.761189][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.761794][T11957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.768122][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.956115][T11957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.970381][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.981223][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.981337][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.995193][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.995285][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.155532][ T13] hsr_slave_0: left promiscuous mode [ 216.160685][ T13] hsr_slave_1: left promiscuous mode [ 216.178843][ T13] veth1_macvtap: left promiscuous mode [ 216.178994][ T13] veth0_macvtap: left promiscuous mode [ 216.179322][ T13] veth1_vlan: left promiscuous mode [ 216.179385][ T13] veth0_vlan: left promiscuous mode [ 216.497748][T10865] smc: removing ib device syz1 [ 216.531341][ T5819] lo speed is unknown, defaulting to 1000 [ 216.537718][ T5819] syz1: Port: 1 Link DOWN [ 216.554827][T10865] smbdirect: ib_dev[syz1] removed [ 216.785508][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.848574][T11957] veth0_vlan: entered promiscuous mode [ 216.857558][T11957] veth1_vlan: entered promiscuous mode [ 216.872993][T11957] veth0_macvtap: entered promiscuous mode [ 216.880313][T11957] veth1_macvtap: entered promiscuous mode [ 216.900788][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.905806][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.913058][ T8974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.913167][ T8974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.913239][ T8974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.020753][T12112] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.020827][T12112] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 217.020950][T12112] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.020961][T12112] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 217.098384][T12116] CacheFiles: No cache directory specified [ 217.807810][ T5745] Bluetooth: hci4: command tx timeout [ 217.831594][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.888678][ T13] IPVS: stop unused estimator thread 0... [ 217.909937][T10865] nvmet: Created discovery controller 1 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:cca40d09-0e4f-4e4d-86aa-161b95ab60b4. [ 217.929303][T12126] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 217.938316][T12122] nvme nvme0: new ctrl: "nqn.2014-08.org.nvmexpress.discovery" [ 217.939933][T10865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.939946][T10865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.995042][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.995105][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.126009][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 218.129461][T12139] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.203138][T12135] netdevsim0 speed is unknown, defaulting to 1000 [ 218.426046][T12152] loop5: detected capacity change from 0 to 6 [ 218.431696][T12152] Dev loop5: unable to read RDB block 6 [ 218.431794][T12152] loop5: unable to read partition table [ 218.432155][T12152] loop5: partition table beyond EOD, truncated [ 218.432244][T12152] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.915317][T12141] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.915595][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.940529][T12141] bridge0: entered allmulticast mode [ 220.400594][ T2416] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 220.550605][ T2416] usb 9-1: Using ep0 maxpacket: 8 [ 220.554563][ T2416] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.559793][ T2416] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 220.562658][ T2416] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.566639][ T2416] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.570162][ T2416] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.573634][ T2416] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.578280][ T2416] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.794398][ T2416] usb 9-1: GET_CAPABILITIES returned 0 [ 220.796237][ T2416] usbtmc 9-1:16.0: can't read capabilities [ 221.000077][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.000141][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.000178][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.012622][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.012676][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.012708][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.012736][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.012769][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031049][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031112][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031151][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031186][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031486][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031536][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031572][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.031632][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.155922][ T5810] usb 9-1: USB disconnect, device number 6 [ 221.215865][ T37] nvmet: Created discovery controller 2 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:cca40d09-0e4f-4e4d-86aa-161b95ab60b4. [ 221.227493][T12188] nvme nvme1: new ctrl: "nqn.2014-08.org.nvmexpress.discovery" [ 221.294324][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 221.352830][T12193] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 221.398690][ T1172] nvmet: connect request for invalid subsystem testnqn! [ 221.400234][T12193] nvme nvme2: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 221.712667][T12210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'. [ 221.716007][T12210] openvswitch: netlink: Flow key attr not present in new flow. [ 221.719243][T12210] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 221.852516][T12219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.325323][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 222.353000][T12246] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 222.605726][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 222.694444][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.694975][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.753152][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.756561][ T25] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 222.762359][ T25] usb 6-1: config 12 has an invalid interface number: 99 but max is 0 [ 222.766193][ T25] usb 6-1: config 12 has no interface number 0 [ 222.766257][ T25] usb 6-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 222.766280][ T25] usb 6-1: config 12 interface 99 has no altsetting 0 [ 222.778860][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.782749][ T25] usb 6-1: Product: syz [ 222.782970][ T25] usb 6-1: Manufacturer: syz [ 222.782984][ T25] usb 6-1: SerialNumber: syz [ 223.242607][ T25] usb 6-1: no audio or video endpoints found [ 223.274236][ T25] usb 6-1: USB disconnect, device number 6 [ 223.292446][T12244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.304544][T12244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.540988][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.541041][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.541095][ T13] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.541120][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.541150][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.611720][T12267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.800499][T12258] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.952879][T12258] usb 5-1: Using ep0 maxpacket: 8 [ 223.953354][T12258] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.954140][T12258] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 223.954167][T12258] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.954180][T12258] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.954194][T12258] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.954207][T12258] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.954228][T12258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.170764][T12258] usb 5-1: GET_CAPABILITIES returned 0 [ 224.170835][T12258] usbtmc 5-1:16.0: can't read capabilities [ 224.375548][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.375635][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.376769][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.376814][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.376850][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377051][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377089][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377123][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377353][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377392][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377425][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377461][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377671][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377709][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377745][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377948][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 224.480257][T12258] usb 5-1: USB disconnect, device number 24 [ 224.523607][T12292] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 224.527128][T12287] netdevsim0 speed is unknown, defaulting to 1000 [ 225.522875][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 226.023911][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 226.172604][ T35] usb 9-1: unable to get BOS descriptor or descriptor too short [ 226.173031][ T35] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 226.174005][ T35] usb 9-1: config 12 has an invalid interface number: 99 but max is 0 [ 226.174025][ T35] usb 9-1: config 12 has no interface number 0 [ 226.174057][ T35] usb 9-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 226.174078][ T35] usb 9-1: config 12 interface 99 has no altsetting 0 [ 226.176974][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.176988][ T35] usb 9-1: Product: syz [ 226.176995][ T35] usb 9-1: Manufacturer: syz [ 226.177002][ T35] usb 9-1: SerialNumber: syz [ 226.205455][T12307] siw: device registration error -23 [ 226.356275][T12318] netdevsim0 speed is unknown, defaulting to 1000 [ 226.482604][T12319] bridge0: entered allmulticast mode [ 226.490491][T12258] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 226.533925][ T35] usb 9-1: no audio or video endpoints found [ 226.557928][ T35] usb 9-1: USB disconnect, device number 7 [ 226.662781][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1919'. [ 226.712545][T12258] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 226.713604][T12258] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.713682][T12258] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 226.713727][T12258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.726740][T12258] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 226.767273][T12258] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 226.943266][ T43] audit: type=1800 audit(2000000377.990:756): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1917" name="file" dev="configfs" ino=40129 res=0 errno=0 [ 228.107606][T12338] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 228.865208][T12341] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 228.892140][T12341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.953506][T12341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.957132][T12341] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 228.960880][T12341] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 228.971737][T12344] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 228.975507][T12344] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 229.001914][ T5745] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 229.004224][ T5738] Bluetooth: hci2: command 0x1003 tx timeout [ 229.175039][T12349] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 229.175081][T12349] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 229.175089][T12349] PKCS7: Unsupported data type 106 [ 229.175757][T12349] bridge_slave_0: left allmulticast mode [ 229.175772][T12349] bridge_slave_0: left promiscuous mode [ 229.175903][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.182342][T12349] bridge_slave_1: left allmulticast mode [ 229.182363][T12349] bridge_slave_1: left promiscuous mode [ 229.182555][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.201251][T12349] bond0: (slave bond_slave_0): Releasing backup interface [ 229.213911][T12349] bond0: (slave bond_slave_1): Releasing backup interface [ 229.218967][T12349] team0: Port device team_slave_0 removed [ 229.221683][T12349] team0: Port device team_slave_1 removed [ 229.221995][T12349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.224433][T12349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.227649][T12349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.275047][T12349] team0: Port device xfrm0 added [ 229.291019][T12257] usb 7-1: USB disconnect, device number 23 [ 229.329270][T12257] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 229.336094][T12257] spcp8x5 7-1:1.0: device disconnected [ 229.653257][T12365] siw: device registration error -23 [ 229.918706][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 229.929555][T12369] hsr_slave_1 (unregistering): left promiscuous mode [ 230.668416][T12372] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 230.668819][T12372] overlayfs: failed to set xattr on upper [ 230.668825][T12372] overlayfs: ...falling back to redirect_dir=nofollow. [ 230.668829][T12372] overlayfs: ...falling back to index=off. [ 230.668833][T12372] overlayfs: ...falling back to uuid=null. [ 231.029779][T12386] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 231.064498][T12389] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 231.067805][T12389] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 231.075173][T12389] PKCS7: Unsupported data type 106 [ 231.079922][T12386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.087686][T12389] bridge_slave_0: left allmulticast mode [ 231.087753][T12389] bridge_slave_0: left promiscuous mode [ 231.087883][T12389] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.102517][T12391] xt_connbytes: Forcing CT accounting to be enabled [ 231.102955][T12391] Cannot find del_set index 0 as target [ 231.121065][T12389] bridge_slave_1: left allmulticast mode [ 231.121821][T12389] bridge_slave_1: left promiscuous mode [ 231.123250][T12389] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.134815][T12389] team0: Port device team_slave_0 removed [ 231.143361][T12389] team0: Port device team_slave_1 removed [ 231.148233][T12389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.153134][T12389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.157285][T12389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.283961][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 231.284081][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 231.303266][T12390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.303635][T12390] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 231.304007][T12390] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 231.386681][T12386] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 231.390148][T12386] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 231.417870][T12389] team0: Port device xfrm0 added [ 231.541149][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 231.541268][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 231.738869][T12391] ceph: No mds server is up or the cluster is laggy [ 233.075305][T12424] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 233.078351][T12424] overlayfs: failed to set xattr on upper [ 233.081159][T12424] overlayfs: ...falling back to redirect_dir=nofollow. [ 233.084427][T12424] overlayfs: ...falling back to index=off. [ 233.087264][T12424] overlayfs: ...falling back to uuid=null. [ 233.332224][T12432] siw: device registration error -23 [ 233.594855][T12438] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 233.594917][T12438] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 233.594949][T12438] PKCS7: Unsupported data type 106 [ 233.598761][T12438] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.608508][T12438] xfrm0: entered promiscuous mode [ 233.608590][T12438] team0: Device xfrm0 is of different type [ 234.590339][ T5810] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 234.730308][ T5810] usb 6-1: device descriptor read/64, error -71 [ 234.980349][ T5810] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 235.112340][ T5810] usb 6-1: device descriptor read/64, error -71 [ 235.221173][ T5810] usb usb6-port1: attempt power cycle [ 235.251596][ T8980] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 235.284944][T12474] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.287443][T12470] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1968'. [ 235.404621][ T8980] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 235.405694][ T8980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.405717][ T8980] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.407830][ T8980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.407850][ T8980] usb 5-1: Product: syz [ 235.407863][ T8980] usb 5-1: Manufacturer: syz [ 235.407875][ T8980] usb 5-1: SerialNumber: syz [ 235.570407][ T5810] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 235.590849][ T5810] usb 6-1: device descriptor read/8, error -71 [ 235.621840][ T8980] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 235.830300][ T5810] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 235.851018][ T5810] usb 6-1: device descriptor read/8, error -71 [ 235.963958][ T5810] usb usb6-port1: unable to enumerate USB device [ 235.968197][T12483] gadgetfs: bound to dummy_udc driver [ 236.220227][ T5810] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 236.222867][ C0] gadgetfs: connected [ 236.224500][ T5810] gadgetfs: disconnected [ 236.390373][ C0] gadgetfs: connected [ 236.394114][ T5810] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 236.397326][ T5810] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 236.397380][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.402053][ C0] gadgetfs: configuration #1 [ 236.430400][T12494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 236.430435][T12494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.431170][T12494] vhci_hcd vhci_hcd.0: Device attached [ 236.437379][T10865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.437398][T10865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.452494][T12494] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 236.710431][ T8980] usb 46-1: SetAddress Request (2) to port 0 [ 236.710556][ T8980] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 237.221522][T12495] vhci_hcd: connection reset by peer [ 237.224157][ T13] vhci_hcd vhci_hcd.4: stop threads [ 237.226670][ T13] vhci_hcd vhci_hcd.4: release socket [ 237.229026][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 237.986578][T12459] gadgetfs: suspended from state 3 [ 237.986651][T12459] gadgetfs: disconnected [ 237.988920][ T1042] usb 7-1: USB disconnect, device number 24 [ 238.011075][T12257] usb 5-1: USB disconnect, device number 25 [ 238.030370][T12257] usblp0: removed [ 238.140461][ T2416] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 238.270355][ T2416] usb 9-1: device descriptor read/64, error -71 [ 238.509212][T12529] dlm: closing connection to node 1 [ 238.511846][ T2416] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 238.514537][T12529] dlm: io handling for node: 1 stopped [ 238.521289][T12529] dlm: closing connection to node 1 done [ 238.661455][ T2416] usb 9-1: device descriptor read/64, error -71 [ 238.770614][ T2416] usb usb9-port1: attempt power cycle [ 239.110182][ T2416] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 239.140852][ T2416] usb 9-1: device descriptor read/8, error -71 [ 239.305369][T12556] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.314344][T12554] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1997'. [ 239.460808][ T1042] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 239.469564][T12555] syz.2.2006 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 239.469827][T12555] CPU: 3 UID: 0 PID: 12555 Comm: syz.2.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.469866][T12555] Tainted: [L]=SOFTLOCKUP [ 239.469873][T12555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.469884][T12555] Call Trace: [ 239.469891][T12555] [ 239.469898][T12555] dump_stack_lvl+0x100/0x190 [ 239.469927][T12555] dump_header+0xfb/0x606 [ 239.469947][T12555] oom_kill_process.cold+0xd/0x380 [ 239.469967][T12555] out_of_memory+0x1256/0x14f0 [ 239.469995][T12555] ? __pfx_out_of_memory+0x10/0x10 [ 239.470025][T12555] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 239.470064][T12555] ? __pfx_stack_trace_save+0x10/0x10 [ 239.470101][T12555] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.470124][T12555] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 239.470152][T12555] ? is_bpf_text_address+0x94/0x1a0 [ 239.470178][T12555] ? kasan_save_stack+0x3f/0x50 [ 239.470197][T12555] ? kasan_save_stack+0x30/0x50 [ 239.470215][T12555] ? kasan_save_track+0x14/0x30 [ 239.470234][T12555] ? __kasan_slab_alloc+0x89/0x90 [ 239.470260][T12555] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 239.470275][T12555] ? __get_vm_area_node+0x1ed/0x350 [ 239.470294][T12555] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 239.470317][T12555] ? __vmalloc_node_noprof+0xad/0xf0 [ 239.470340][T12555] ? bpf_prog_load+0x49e/0x2a80 [ 239.470362][T12555] ? __sys_bpf+0x1f46/0x4a30 [ 239.470374][T12555] ? __ia32_sys_bpf+0xcc/0x170 [ 239.470389][T12555] ? __do_fast_syscall_32+0x13a/0x8b0 [ 239.470413][T12555] ? do_fast_syscall_32+0x32/0x70 [ 239.470447][T12555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.470470][T12555] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 239.470490][T12555] ? policy_nodemask+0xed/0x4f0 [ 239.470515][T12555] alloc_pages_mpol+0x201/0x550 [ 239.470540][T12555] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 239.470568][T12555] alloc_pages_noprof+0x1a/0x160 [ 239.470591][T12555] get_free_pages_noprof+0x10/0xb0 [ 239.470611][T12555] __kasan_populate_vmalloc+0xa0/0x210 [ 239.470635][T12555] alloc_vmap_area+0x95d/0x2bb0 [ 239.470665][T12555] ? kasan_save_track+0x14/0x30 [ 239.470683][T12555] ? __kasan_kmalloc+0xaa/0xb0 [ 239.470697][T12555] ? __pfx_alloc_vmap_area+0x10/0x10 [ 239.470719][T12555] ? __get_vm_area_node+0x124/0x350 [ 239.470744][T12555] __get_vm_area_node+0x1ed/0x350 [ 239.470770][T12555] __vmalloc_node_range_noprof+0x268/0x1420 [ 239.470791][T12555] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 239.470816][T12555] ? do_raw_spin_lock+0x128/0x260 [ 239.470847][T12555] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 239.470874][T12555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.470894][T12555] ? rcu_is_watching+0x13/0xc0 [ 239.470911][T12555] ? trace_hrtimer_start+0x77/0x220 [ 239.470933][T12555] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 239.470955][T12555] __vmalloc_node_noprof+0xad/0xf0 [ 239.470978][T12555] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 239.470997][T12555] __vmalloc_noprof+0xa3/0x120 [ 239.471019][T12555] ? __pfx___vmalloc_noprof+0x10/0x10 [ 239.471040][T12555] ? rcu_is_watching+0x13/0xc0 [ 239.471059][T12555] ? rcu_is_watching+0x13/0xc0 [ 239.471076][T12555] ? apparmor_capable+0x1d7/0x4d0 [ 239.471100][T12555] bpf_prog_alloc_no_stats+0x58/0x690 [ 239.471116][T12555] ? security_capable+0x80/0x260 [ 239.471137][T12555] bpf_prog_alloc+0x3b/0x200 [ 239.471159][T12555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.471186][T12555] bpf_prog_load+0x49e/0x2a80 [ 239.471205][T12555] ? __lock_acquire+0x4c5/0x1ec0 [ 239.471231][T12555] ? __pfx_bpf_prog_load+0x10/0x10 [ 239.471262][T12555] ? lock_acquire+0x1d1/0x380 [ 239.471305][T12555] __sys_bpf+0x1f46/0x4a30 [ 239.471328][T12555] ? __pfx___sys_bpf+0x10/0x10 [ 239.471344][T12555] ? __pfx_futex_hash+0x10/0x10 [ 239.471389][T12555] ? percpu_counter_add_batch+0xb9/0x230 [ 239.471405][T12555] ? errseq_sample+0x51/0x70 [ 239.471423][T12555] ? file_init_path+0x48e/0x670 [ 239.471461][T12555] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 239.471483][T12555] ? xfd_validate_state+0x129/0x190 [ 239.471542][T12555] ? __ia32_sys_bpf+0xcc/0x170 [ 239.471561][T12555] __ia32_sys_bpf+0xcc/0x170 [ 239.471582][T12555] ? __do_fast_syscall_32+0xb3/0x8b0 [ 239.471610][T12555] __do_fast_syscall_32+0x13a/0x8b0 [ 239.471628][T12555] ? lockdep_hardirqs_on+0x7d/0x110 [ 239.471646][T12555] do_fast_syscall_32+0x32/0x70 [ 239.471664][T12555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.471681][T12555] RIP: 0023:0xf702efec [ 239.471698][T12555] Code: Unable to access opcode bytes at 0xf702efc2. [ 239.471703][T12555] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 239.471716][T12555] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 239.471724][T12555] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.471731][T12555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.471741][T12555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 239.471748][T12555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.471764][T12555] [ 239.472029][T12555] Mem-Info: [ 239.472036][T12555] active_anon:720 inactive_anon:10559 isolated_anon:0 [ 239.472036][T12555] active_file:614 inactive_file:14639 isolated_file:0 [ 239.472036][T12555] unevictable:1000 dirty:426 writeback:0 [ 239.472036][T12555] slab_reclaimable:6525 slab_unreclaimable:62014 [ 239.472036][T12555] mapped:22928 shmem:1006 pagetables:1346 [ 239.472036][T12555] sec_pagetables:314 bounce:0 [ 239.472036][T12555] kernel_misc_reclaimable:0 [ 239.472036][T12555] free:27266 free_pcp:0 free_cma:0 [ 239.474213][T12555] Node 0 active_anon:24kB inactive_anon:116kB active_file:4kB inactive_file:180kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9568kB pagetables:1548kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.474283][T12555] Node 0 DMA free:2868kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.475040][T12555] lowmem_reserve[]: 0 277 277 277 277 [ 239.475602][T12555] Node 0 DMA32 free:15456kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:116kB active_file:0kB inactive_file:180kB unevictable:2000kB writepending:0kB zspages:1720kB present:1032196kB managed:284624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.475795][T12555] lowmem_reserve[]: 0 0 0 0 0 [ 239.475936][T12555] Node 0 DMA: 85*4kB (UM) 32*8kB (UM) 10*16kB (UM) 22*32kB (UM) 8*64kB (UM) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2868kB [ 239.477468][T12555] Node 0 DMA32: 562*4kB (UME) 145*8kB (UME) 43*16kB (UME) 130*32kB (UME) 49*64kB (UME) 20*128kB (UME) 4*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 15488kB [ 239.479208][T12555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.479414][T12555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.479641][T12555] 17174 total pagecache pages [ 239.479661][T12555] 917 pages in swap cache [ 239.479906][T12555] Free swap = 93844kB [ 239.479914][T12555] Total swap = 124996kB [ 239.480625][T12555] 524155 pages RAM [ 239.480739][T12555] 0 pages HighMem/MovableOnly [ 239.480747][T12555] 212107 pages reserved [ 239.480782][T12555] 0 pages cma reserved [ 239.480789][T12555] Unreclaimable slab info: [ 239.480792][T12555] Name Used Total [ 239.480830][T12555] bio-184 6KB 8KB [ 239.480873][T12555] pid_3 28KB 47KB [ 239.480915][T12555] pid_2 33KB 86KB [ 239.481133][T12555] bio-464 17KB 31KB [ 239.481247][T12555] bio-528 19KB 31KB [ 239.481435][T12555] bio-544 19KB 31KB [ 239.481559][T12555] bio-552 19KB 31KB [ 239.481767][T12555] zswap_entry 471KB 585KB [ 239.482056][T12555] AF_VSOCK 54KB 214KB [ 239.482098][T12555] sw_flow_stats 29KB 36KB [ 239.482220][T12555] sw_flow 78KB 107KB [ 239.482347][T12555] batadv_tt_change_cache 10KB 16KB [ 239.482550][T12555] batadv_tl_cache 27KB 32KB [ 239.482589][T12555] ceph_osd_request 13KB 127KB [ 239.482719][T12555] ceph_msg 6KB 38KB [ 239.482762][T12555] IEEE-802.15.4-MAC 48KB 93KB [ 239.482802][T12555] IEEE-802.15.4-RAW 33KB 63KB [ 239.482985][T12555] p9_req_t 17KB 55KB [ 239.483029][T12555] INET_SMC 68KB 125KB [ 239.483151][T12555] SMC6 118KB 218KB [ 239.483276][T12555] SMC 96KB 218KB [ 239.483408][T12555] TIPC 58KB 184KB [ 239.483613][T12555] rds_tcp_incoming 21KB 39KB [ 239.483801][T12555] rds_tcp_connection 135KB 173KB [ 239.483926][T12555] RDS 18KB 123KB [ 239.484101][T12555] rds_connection 34KB 62KB [ 239.484241][T12555] SCTPv6 41KB 180KB [ 239.484284][T12555] SCTP 39KB 153KB [ 239.484432][T12555] sctp_chunk 19KB 70KB [ 239.484566][T12555] sctp_bind_bucket 10KB 16KB [ 239.484607][T12555] PNPIPE 40KB 92KB [ 239.484725][T12555] PHONET 63KB 126KB [ 239.484768][T12555] L2TP/IPv6 60KB 127KB [ 239.484807][T12555] L2TP/IP 33KB 63KB [ 239.484849][T12555] KCM 56KB 124KB [ 239.484891][T12555] kcm_mux 65KB 110KB [ 239.484931][T12555] RXRPC 54KB 160KB [ 239.485223][T12555] rxrpc_call_jar 148KB 255KB [ 239.485444][T12555] can_receiver 18KB 39KB [ 239.485579][T12555] net_bridge_fdb_entry 38KB 47KB [ 239.485715][T12555] MPTCPv6 35KB 223KB [ 239.485847][T12555] ip6-frags 18KB 31KB [ 239.485978][T12555] fib6_node 77KB 144KB [ 239.485996][T12555] ip6_dst_cache 71KB 351KB [ 239.486136][T12555] mfc6_cache 6KB 8KB [ 239.486273][T12555] PINGv6 41KB 61KB [ 239.486392][T12555] RAWv6 158KB 247KB [ 239.486434][T12555] UDPv6 85KB 220KB [ 239.486476][T12555] tw_sock_TCPv6 37KB 55KB [ 239.486598][T12555] request_sock_TCPv6 41KB 61KB [ 239.486722][T12555] TCPv6 276KB 394KB [ 239.486769][T12555] nf_conntrack 26KB 70KB [ 239.486930][T12555] wg_peer 104KB 118KB [ 239.487067][T12555] allowedips_node 16KB 19KB [ 239.487192][T12555] t10_alua_lu_gp_cache 8KB 15KB [ 239.487446][T12555] scsi_sense_cache 52KB 56KB [ 239.487456][T12555] virtio_scsi_cmd 21KB 24KB [ 239.487465][T12555] bio-136 53KB 76KB [ 239.487478][T12555] io_kiocb 0KB 62KB [ 239.487678][T12555] bio-264 10KB 15KB [ 239.487800][T12555] mqueue_inode_cache 22KB 123KB [ 239.487849][T12555] f2fs_evict_inode_work 7KB 7KB [ 239.488101][T12555] bio-272 10KB 15KB [ 239.488226][T12555] f2fs_bio_post_read_ctx 30KB 31KB [ 239.488502][T12555] jfs_mp 14KB 15KB [ 239.488635][T12555] orangefs_op_cache 51KB 68KB [ 239.488677][T12555] fuse_request 21KB 54KB [ 239.488720][T12555] jffs2_inode_cache 12KB 16KB [ 239.488856][T12555] jffs2_node_frag 6KB 7KB [ 239.488898][T12555] jffs2_refblock 17KB 54KB [ 239.488939][T12555] jffs2_tmp_dnode_info 9KB 15KB [ 239.488951][T12555] jffs2_raw_inode 13KB 16KB [ 239.488962][T12555] jffs2_raw_dirent 7KB 8KB [ 239.488974][T12555] jffs2_full_dnode 4KB 7KB [ 239.489017][T12555] cifs_small_rq 28KB 32KB [ 239.489150][T12555] cifs_request 67KB 67KB [ 239.489190][T12555] cifs_mpx_ids 8KB 15KB [ 239.489231][T12555] cifs_io_subrequest 42KB 47KB [ 239.489450][T12555] cifs_io_request 105KB 111KB [ 239.489511][T12555] nfs_commit_data 24KB 31KB [ 239.489542][T12555] nfs_write_data 40KB 63KB [ 239.489673][T12555] ecryptfs_sb_cache 20KB 31KB [ 239.489896][T12555] jbd2_inode 21KB 27KB [ 239.489936][T12555] ext4_system_zone 1KB 3KB [ 239.489950][T12555] ext4_io_end_vec 6KB 15KB [ 239.489968][T12555] kioctx 21KB 63KB [ 239.489981][T12555] aio_kiocb 24KB 46KB [ 239.490031][T12555] fanotify_fid_event 5KB 7KB [ 239.490040][T12555] fanotify_mark 22KB 23KB [ 239.490338][T12555] dnotify_mark 11KB 11KB [ 239.490497][T12555] dnotify_struct 2KB 3KB [ 239.490539][T12555] fasync_cache 36KB 43KB [ 239.490578][T12555] userfaultfd_ctx_cache 39KB 110KB [ 239.490622][T12555] zspage 151KB 196KB [ 239.490748][T12555] zs_handle 167KB 228KB [ 239.490871][T12555] pid_namespace 56KB 108KB [ 239.490991][T12555] kvm_gmem_inode_cache 28KB 30KB [ 239.491034][T12555] kvm_vcpu 40KB 212KB [ 239.491153][T12555] kvm_mmu_page_header 14KB 34KB [ 239.491194][T12555] pte_list_desc 11KB 27KB [ 239.491239][T12555] x86_emulator 46KB 159KB [ 239.491280][T12555] rpc_buffers 82KB 127KB [ 239.491405][T12555] rpc_tasks 32KB 54KB [ 239.491618][T12555] UNIX-STREAM 74KB 255KB [ 239.491743][T12555] UNIX 121KB 286KB [ 239.491785][T12555] ip4-frags 9KB 15KB [ 239.491903][T12555] mfc_cache 6KB 8KB [ 239.491945][T12555] MPTCP 39KB 214KB [ 239.491958][T12555] request_sock_subflow_v4 38KB 45KB [ 239.491971][T12555] tcp_bind2_bucket 14KB 32KB [ 239.491982][T12555] tcp_bind_bucket 26KB 48KB [ 239.492101][T12555] inet_peer 21KB 24KB [ 239.492306][T12555] xfrm_dst 10KB 15KB [ 239.492347][T12555] xfrm_state 227KB 286KB [ 239.492532][T12555] ip_fib_trie 27KB 32KB [ 239.492656][T12555] ip_fib_alias 71KB 90KB [ 239.492781][T12555] rtable 24KB 148KB [ 239.492994][T12555] PING 31KB 63KB [ 239.493039][T12555] RAW 80KB 223KB [ 239.493438][T12555] UDP 95KB 286KB [ 239.493664][T12555] tw_sock_TCP 36KB 63KB [ 239.493708][T12555] request_sock_TCP 40KB 54KB [ 239.493849][T12555] TCP 328KB 438KB [ 239.494065][T12555] fs_bio_integrity 7KB 8KB [ 239.494387][T12555] hugetlbfs_inode_cache 42KB 62KB [ 239.494541][T12555] netfs_subrequest 57KB 70KB [ 239.494694][T12555] netfs_request 172KB 191KB [ 239.494848][T12555] bio-288 31KB 31KB [ 239.494895][T12555] bio-328 12KB 15KB [ 239.494944][T12555] ep_head 5KB 23KB [ 239.494958][T12555] eventpoll_pwq 12KB 35KB [ 239.494970][T12555] eventpoll_epi 49KB 74KB [ 239.494982][T12555] inotify_inode_mark 25KB 46KB [ 239.494995][T12555] bpf_fs_inode_cache 35KB 62KB [ 239.495147][T12555] sgpool-128 55KB 208KB [ 239.495306][T12555] sgpool-64 53KB 191KB [ 239.495351][T12555] sgpool-32 31KB 126KB [ 239.495398][T12555] sgpool-16 24KB 93KB [ 239.495595][T12555] sgpool-8 25KB 39KB [ 239.495631][T12555] bio_crypt_ctx 9KB 11KB [ 239.495645][T12555] bio_integrity_data 7KB 8KB [ 239.495854][T12555] request_queue 204KB 242KB [ 239.495990][T12555] blkdev_ioc 22KB 39KB [ 239.496115][T12555] bio-200 55KB 85KB [ 239.496162][T12555] biovec-max 505KB 654KB [ 239.496207][T12555] biovec-128 76KB 159KB [ 239.496350][T12555] biovec-64 39KB 189KB [ 239.496397][T12555] biovec-16 20KB 54KB [ 239.496446][T12555] mm_slot 11KB 15KB [ 239.496674][T12555] ksm_mm_slot 7KB 8KB [ 239.496819][T12555] ksm_rmap_item 3KB 19KB [ 239.497084][T12555] user_namespace 39KB 92KB [ 239.497131][T12555] uid_cache 18KB 54KB [ 239.497602][T12555] iommu_iova_magazine 56KB 189KB [ 239.497811][T12555] iommu_iova 181KB 184KB [ 239.498021][T12555] dmaengine-unmap-256 26KB 30KB [ 239.498064][T12555] dmaengine-unmap-128 14KB 30KB [ 239.498108][T12555] dmaengine-unmap-16 7KB 8KB [ 239.498151][T12555] dmaengine-unmap-2 3KB 4KB [ 239.498194][T12555] QIPCRTR 51KB 93KB [ 239.498241][T12555] audit_buffer 16KB 31KB [ 239.498286][T12555] skbuff_ext_cache 7KB 36KB [ 239.498332][T12555] skbuff_small_head 2050KB 2130KB [ 239.498477][T12555] skbuff_fclone_cache 769KB 859KB [ 239.498690][T12555] skbuff_head_cache 866KB 921KB [ 239.498834][T12555] configfs_dir_cache 66KB 72KB [ 239.498879][T12555] file_lease_cache 9KB 63KB [ 239.499136][T12555] file_lock_cache 19KB 71KB [ 239.499277][T12555] file_lock_ctx 38KB 47KB [ 239.499416][T12555] fsnotify_inode_mark_connector 20KB 43KB [ 239.499574][T12555] posix_timers_cache 40KB 56KB [ 239.499712][T12555] taskstats 60KB 143KB [ 239.499910][T12555] mem_cgroup_per_node 126KB 183KB [ 239.500385][T12555] mem_cgroup 165KB 185KB [ 239.500429][T12555] proc_dir_entry 679KB 750KB [ 239.500549][T12555] pde_opener 8KB 11KB [ 239.500592][T12555] seq_file 47KB 78KB [ 239.500633][T12555] sigqueue 21KB 39KB [ 239.500755][T12555] shmem_inode_cache 7245KB 7472KB [ 239.500875][T12555] kernfs_iattrs_cache 26KB 31KB [ 239.501041][T12555] kernfs_node_cache 26928KB 27352KB [ 239.501219][T12555] mnt_cache 94KB 133KB [ 239.501228][T12555] bfilp 11KB 15KB [ 239.501270][T12555] filp 609KB 661KB [ 239.501404][T12555] names_cache 701KB 748KB [ 239.501524][T12555] net_namespace 108KB 207KB [ 239.501662][T12555] ima_iint_cache 38KB 63KB [ 239.501851][T12555] lsm_inode_cache 1501KB 1767KB [ 239.501892][T12555] lsm_file_cache 252KB 272KB [ 239.502098][T12555] key_jar 33KB 63KB [ 239.502138][T12555] uts_namespace 78KB 123KB [ 239.502179][T12555] nsproxy 13KB 35KB [ 239.502337][T12555] vm_area_struct 823KB 1109KB [ 239.502455][T12555] fs_cache 33KB 56KB [ 239.502498][T12555] files_cache 124KB 223KB [ 239.502538][T12555] task_exec_state 11KB 36KB [ 239.502837][T12555] signal_cache 911KB 1817KB [ 239.502967][T12555] sighand_cache 1163KB 2134KB [ 239.502983][T12555] task_struct 4856KB 5118KB [ 239.503211][T12555] cred 143KB 336KB [ 239.503400][T12555] anon_vma_chain 271KB 374KB [ 239.503553][T12555] anon_vma 285KB 503KB [ 239.503690][T12555] pid 152KB 382KB [ 239.503892][T12555] Acpi-Operand 195KB 324KB [ 239.504071][T12555] Acpi-ParseExt 31KB 47KB [ 239.504111][T12555] Acpi-Parse 12KB 19KB [ 239.504250][T12555] Acpi-State 16KB 39KB [ 239.504290][T12555] Acpi-Namespace 31KB 44KB [ 239.504435][T12555] shared_policy_node 3KB 4KB [ 239.504475][T12555] numa_policy 14KB 16KB [ 239.504517][T12555] perf_event 9KB 31KB [ 239.504741][T12555] trace_event_file 1162KB 1168KB [ 239.504898][T12555] ftrace_event_field 1124KB 1126KB [ 239.504940][T12555] pool_workqueue 2331KB 2368KB [ 239.504953][T12555] task_group 35KB 48KB [ 239.504979][T12555] maple_node 627KB 1512KB [ 239.505097][T12555] mm_struct 328KB 541KB [ 239.505146][T12555] vmap_area 893KB 986KB [ 239.505545][T12555] debug_objects_cache 2542KB 8710KB [ 239.505590][T12555] page->ptl 135KB 153KB [ 239.505632][T12555] kmalloc-cg-8k 2032KB 2176KB [ 239.505767][T12555] kmalloc-cg-4k 14680KB 15328KB [ 239.505817][T12555] kmalloc-cg-2k 8748KB 9824KB [ 239.505860][T12555] kmalloc-cg-1k 2538KB 3264KB [ 239.505976][T12555] kmalloc-cg-512 1150KB 1312KB [ 239.506096][T12555] kmalloc-cg-256 400KB 456KB [ 239.506107][T12555] kmalloc-cg-128 254KB 280KB [ 239.506214][T12555] kmalloc-cg-64 47KB 76KB [ 239.506262][T12555] kmalloc-cg-32 48KB 172KB [ 239.506301][T12555] kmalloc-cg-16 8KB 28KB [ 239.506334][T12555] kmalloc-cg-8 19KB 40KB [ 239.506345][T12555] kmalloc-cg-192 62KB 72KB [ 239.506376][T12555] kmalloc-cg-96 62KB 84KB [ 239.506623][T12555] kmalloc-8k 6240KB 6464KB [ 239.506702][T12555] kmalloc-4k 29128KB 30528KB [ 239.506743][T12555] kmalloc-2k 12472KB 13600KB [ 239.506781][T12555] kmalloc-1k 6584KB 7360KB [ 239.506860][T12555] kmalloc-512 10643KB 12068KB [ 239.506904][T12555] kmalloc-256 4849KB 5088KB [ 239.506959][T12555] kmalloc-128 1948KB 2164KB [ 239.507129][T12555] kmalloc-64 5779KB 8776KB [ 239.507214][T12555] kmalloc-32 1781KB 2376KB [ 239.507252][T12555] kmalloc-16 451KB 508KB [ 239.507269][T12555] kmalloc-8 439KB 596KB [ 239.507445][T12555] kmalloc-192 1530KB 1872KB [ 239.507526][T12555] kmalloc-96 3382KB 4008KB [ 239.507559][T12555] kmem_cache_node 216KB 220KB [ 239.507569][T12555] kmem_cache 180KB 218KB [ 239.509601][T12555] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.2006,pid=12555,uid=0 [ 239.510343][T12555] Out of memory (oom_kill_allocating_task): Killed process 12547 (syz.2.2006) total-vm:104216kB, anon-rss:320kB, file-rss:23352kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 239.520253][ T2416] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 239.543360][ T2416] usb 9-1: device descriptor read/8, error -71 [ 239.626966][ T1042] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 239.632424][ T1042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.632452][ T1042] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.634552][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.634569][ T1042] usb 6-1: Product: syz [ 239.634581][ T1042] usb 6-1: Manufacturer: syz [ 239.634593][ T1042] usb 6-1: SerialNumber: syz [ 239.650554][ T2416] usb usb9-port1: unable to enumerate USB device [ 239.858072][ T1042] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 240.233553][T12571] gadgetfs: bound to dummy_udc driver [ 240.470229][ T35] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 240.470950][ C3] gadgetfs: connected [ 240.471114][ T35] gadgetfs: disconnected [ 240.620479][ C3] gadgetfs: connected [ 240.621490][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 240.621809][ T35] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 240.621834][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.624292][ C3] gadgetfs: configuration #1 [ 241.005949][T12573] dlm: closing connection to node 1 [ 241.011227][T12573] dlm: io handling for node: 1 stopped [ 241.026612][T12573] dlm: closing connection to node 1 done [ 241.245694][T12580] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2007'. [ 241.810274][ T8980] usb 46-1: device descriptor read/8, error -110 [ 242.211015][ T8980] usb usb46-port1: attempt power cycle [ 242.213243][T12571] gadgetfs: suspended from state 3 [ 242.214839][T12257] usb 5-1: USB disconnect, device number 26 [ 242.221814][T12571] gadgetfs: disconnected [ 242.247355][ T2416] usb 6-1: USB disconnect, device number 11 [ 242.265555][ T2416] usblp0: removed [ 242.401112][T12553] Process accounting resumed [ 242.521105][T12614] dlm: closing connection to node 1 [ 242.521144][T12614] dlm: io handling for node: 1 stopped [ 242.521204][T12614] dlm: closing connection to node 1 done [ 242.634348][T12626] netlink: 468 bytes leftover after parsing attributes in process `syz.0.2024'. [ 242.780995][ T8980] usb usb46-port1: unable to enumerate USB device [ 242.930209][ T5810] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 243.080359][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 243.081673][ T5810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.083766][ T5810] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 243.083790][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.083802][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.083814][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.083826][ T5810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.083847][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.293554][ T5810] usb 6-1: GET_CAPABILITIES returned 0 [ 243.293633][ T5810] usbtmc 6-1:16.0: can't read capabilities [ 243.482441][T12638] overlay: ./file0 is not a directory [ 243.500972][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 243.504721][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.504775][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.504808][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.504837][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.504866][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505472][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505519][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505552][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505582][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505618][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505879][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505926][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505957][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.505988][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.506019][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.506243][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 243.560122][ T5810] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 243.590801][T10566] usb 6-1: USB disconnect, device number 12 [ 243.650833][ T10] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 243.651758][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.651774][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.653306][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.653318][ T10] usb 9-1: Product: syz [ 243.653325][ T10] usb 9-1: Manufacturer: syz [ 243.653333][ T10] usb 9-1: SerialNumber: syz [ 243.720542][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 243.721308][ T5810] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.722279][ T5810] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 243.722303][ T5810] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.722354][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.722370][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.722384][ T5810] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.722407][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.863098][ T10] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 243.932562][ T5810] usb 5-1: GET_CAPABILITIES returned 0 [ 243.932628][ T5810] usbtmc 5-1:16.0: can't read capabilities [ 244.170265][ T5810] usb 5-1: USB disconnect, device number 27 [ 244.246301][T12653] gadgetfs: bound to dummy_udc driver [ 244.560143][ T5810] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 244.560472][ C0] gadgetfs: connected [ 244.560617][ T5810] gadgetfs: disconnected [ 244.721669][ C0] gadgetfs: connected [ 244.722859][ T5810] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 244.723175][ T5810] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 244.723204][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.728389][ C0] gadgetfs: configuration #1 [ 245.578400][T12667] overlay: ./file0 is not a directory [ 246.181955][ T5810] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 246.243553][T12631] gadgetfs: suspended from state 3 [ 246.244323][ T1042] usb 5-1: USB disconnect, device number 28 [ 246.246114][T12631] gadgetfs: disconnected [ 246.261745][ T10] usb 9-1: USB disconnect, device number 12 [ 246.264660][ T10] usblp0: removed [ 246.320095][ T5810] usb 6-1: device descriptor read/64, error -71 [ 246.542366][T12700] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2056'. [ 246.561315][ T5810] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 246.690166][ T5810] usb 6-1: device descriptor read/64, error -71 [ 246.810316][ T5810] usb usb6-port1: attempt power cycle [ 247.150890][ T5810] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 247.171068][ T5810] usb 6-1: device descriptor read/8, error -71 [ 247.420165][ T5810] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 247.440510][ T5810] usb 6-1: device descriptor read/8, error -71 [ 247.550205][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 247.550359][ T5810] usb usb6-port1: unable to enumerate USB device [ 247.700928][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 247.702298][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.702325][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.705512][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.705531][ T10] usb 5-1: Product: syz [ 247.705544][ T10] usb 5-1: Manufacturer: syz [ 247.705556][ T10] usb 5-1: SerialNumber: syz [ 247.776294][T12735] dlm: closing connection to node 1 [ 247.778035][T12735] dlm: io handling for node: 1 stopped [ 247.781412][T12735] dlm: closing connection to node 1 done [ 247.915999][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 248.877164][T12748] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2073'. [ 249.043678][T12758] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 249.078622][T12758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.197123][T12765] dlm: closing connection to node 1 [ 249.197829][T12765] dlm: io handling for node: 1 stopped [ 249.198541][T12765] dlm: closing connection to node 1 done [ 250.316439][T12258] usb 5-1: USB disconnect, device number 29 [ 250.321355][T12258] usblp0: removed [ 250.452126][T12787] dlm: closing connection to node 1 [ 250.452181][T12787] dlm: io handling for node: 1 stopped [ 250.452280][T12787] dlm: closing connection to node 1 done [ 250.650236][ T5819] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 250.700064][T12258] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 250.810073][ T5819] usb 9-1: Using ep0 maxpacket: 8 [ 250.810883][ T5819] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.811947][ T5819] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 250.811986][ T5819] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.812007][ T5819] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.812025][ T5819] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.812054][ T5819] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.812086][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.838630][T12258] usb 5-1: device descriptor read/64, error -71 [ 251.030087][ T5819] usb 9-1: GET_CAPABILITIES returned 0 [ 251.030143][ T5819] usbtmc 9-1:16.0: can't read capabilities [ 251.071965][T12258] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 251.200767][T12258] usb 5-1: device descriptor read/64, error -71 [ 251.236540][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236585][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236606][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236624][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236642][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236660][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.236678][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237000][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237026][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237043][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237059][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237075][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237091][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237273][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237291][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.237308][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 251.310220][T12258] usb usb5-port1: attempt power cycle [ 251.380924][ T5819] usb 9-1: USB disconnect, device number 13 [ 251.469715][T12794] netlink: 'syz.2.2093': attribute type 15 has an invalid length. [ 251.469764][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2093'. [ 251.650155][T12258] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 251.670972][T12258] usb 5-1: device descriptor read/8, error -71 [ 251.850093][ T5819] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 251.910044][T12258] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 251.930469][T12258] usb 5-1: device descriptor read/8, error -71 [ 252.001155][ T5819] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 252.003899][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.003916][ T5819] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.005515][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.005529][ T5819] usb 6-1: Product: syz [ 252.005536][ T5819] usb 6-1: Manufacturer: syz [ 252.005544][ T5819] usb 6-1: SerialNumber: syz [ 252.040456][T12258] usb usb5-port1: unable to enumerate USB device [ 252.065696][T12808] dlm: closing connection to node 1 [ 252.066170][T12808] ------------[ cut here ]------------ [ 252.066208][T12808] !con [ 252.066231][T12808] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x3d/0x21b, CPU#0: syz.4.2099/12808 [ 252.076631][T12808] Modules linked in: [ 252.078413][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.4.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.082291][T12808] Tainted: [L]=SOFTLOCKUP [ 252.083893][T12808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.088297][T12808] RIP: 0010:dlm_lowcomms_close+0x3d/0x21b [ 252.090871][T12808] Code: 89 ee 48 c7 c7 c0 40 0d 8c e8 6f 67 fc ff e8 da f8 ff ff 31 f6 89 ef 41 89 c4 e8 fe b2 a4 01 48 85 c0 75 1b e8 14 5a e5 00 90 <0f> 0b 90 44 89 e7 bb fe ff ff ff e8 43 f8 ff ff e9 b5 01 00 00 48 [ 252.097740][T12808] RSP: 0018:ffffc90004bb7bc0 EFLAGS: 00010287 [ 252.100030][T12808] RAX: 0000000000000d6f RBX: 0000000000000000 RCX: ffffc9003b013000 [ 252.103151][T12808] RDX: 0000000000080000 RSI: ffffffff8125e21c RDI: ffff888023640000 [ 252.105773][T12808] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 252.108626][T12808] R10: 0000000000000000 R11: 000000000000001f R12: 0000000000000001 [ 252.111774][T12808] R13: 0000000000000001 R14: ffffed100bff4630 R15: 0000000000000000 [ 252.115297][T12808] FS: 0000000000000000(0000) GS:ffff888096963000(0063) knlGS:00000000f5456b40 [ 252.119611][T12808] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc [ 252.123187][T12808] CR2: 00000000f73d0610 CR3: 0000000071282000 CR4: 0000000000352ef0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.127192][T12808] Call Trace: [ 252.128794][T12808] [ 252.130178][T12808] dlm_midcomms_close+0x312/0x590 [ 252.132463][T12808] ? __pfx_drop_comm+0x10/0x10 [ 252.134716][T12808] drop_comm+0x62/0x1a0 [ 252.136829][T12808] ? __pfx_drop_comm+0x10/0x10 [ 252.139306][T12808] client_drop_item+0xa6/0x100 [ 252.141445][T12808] configfs_rmdir+0x5d3/0x950 [ 252.143414][T12808] ? __pfx_configfs_rmdir+0x10/0x10 [ 252.145187][T12808] ? __pfx_down_write+0x10/0x10 [ 252.146757][T12808] vfs_rmdir+0x328/0x8a0 [ 252.148128][T12808] filename_rmdir+0x31a/0x5c0 [ 252.149618][T12808] ? __pfx_filename_rmdir+0x10/0x10 [ 252.151800][T12808] ? do_getname+0x191/0x390 [ 252.153462][T12808] __ia32_sys_rmdir+0x45/0x60 [ 252.155196][T12808] __do_fast_syscall_32+0x13a/0x8b0 [ 252.157052][T12808] do_fast_syscall_32+0x32/0x70 [ 252.158662][T12808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.160854][T12808] RIP: 0023:0xf7f93fec [ 252.162397][T12808] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 252.164649][T12808] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 252.167626][T12808] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 252.170783][T12808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.173460][T12808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.175953][T12808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.178658][T12808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.181445][T12808] [ 252.182632][T12808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.185139][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.4.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.188576][T12808] Tainted: [L]=SOFTLOCKUP [ 252.189933][T12808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.193153][T12808] Call Trace: [ 252.194221][T12808] [ 252.195192][T12808] dump_stack_lvl+0x100/0x190 [ 252.196686][T12808] vpanic+0x553/0x970 [ 252.197960][T12808] ? __pfx_vpanic+0x10/0x10 [ 252.199549][T12808] panic+0xd1/0xe0 [ 252.200940][T12808] ? __pfx_panic+0x10/0x10 [ 252.202507][T12808] check_panic_on_warn.cold+0x19/0x34 [ 252.204263][T12808] ? dlm_lowcomms_close+0x3d/0x21b [ 252.205900][T12808] __warn.cold+0x191/0x318 [ 252.207327][T12808] __report_bug+0x30f/0x440 [ 252.208770][T12808] ? dlm_lowcomms_close+0x3d/0x21b [ 252.210381][T12808] ? __pfx___report_bug+0x10/0x10 [ 252.212206][T12808] ? check_prev_add+0x354/0xe60 [ 252.214274][T12808] ? __wake_up_klogd+0xe5/0x140 [ 252.215856][T12808] ? __lock_acquire+0xe15/0x1ec0 [ 252.217462][T12808] ? dlm_lowcomms_close+0x3d/0x21b [ 252.219223][T12808] report_bug+0xb3/0x220 [ 252.220744][T12808] ? dlm_lowcomms_close+0x3d/0x21b [ 252.222521][T12808] handle_bug+0x16a/0x2a0 [ 252.224023][T12808] exc_invalid_op+0x17/0x50 [ 252.225518][T12808] asm_exc_invalid_op+0x1a/0x20 [ 252.227047][T12808] RIP: 0010:dlm_lowcomms_close+0x3d/0x21b [ 252.228731][T12808] Code: 89 ee 48 c7 c7 c0 40 0d 8c e8 6f 67 fc ff e8 da f8 ff ff 31 f6 89 ef 41 89 c4 e8 fe b2 a4 01 48 85 c0 75 1b e8 14 5a e5 00 90 <0f> 0b 90 44 89 e7 bb fe ff ff ff e8 43 f8 ff ff e9 b5 01 00 00 48 [ 252.234562][T12808] RSP: 0018:ffffc90004bb7bc0 EFLAGS: 00010287 [ 252.236410][T12808] RAX: 0000000000000d6f RBX: 0000000000000000 RCX: ffffc9003b013000 [ 252.238843][T12808] RDX: 0000000000080000 RSI: ffffffff8125e21c RDI: ffff888023640000 [ 252.241485][T12808] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 252.243999][T12808] R10: 0000000000000000 R11: 000000000000001f R12: 0000000000000001 [ 252.246448][T12808] R13: 0000000000000001 R14: ffffed100bff4630 R15: 0000000000000000 [ 252.248925][T12808] ? dlm_lowcomms_close+0x3c/0x21b [ 252.250506][T12808] dlm_midcomms_close+0x312/0x590 [ 252.252072][T12808] ? __pfx_drop_comm+0x10/0x10 [ 252.253613][T12808] drop_comm+0x62/0x1a0 [ 252.254931][T12808] ? __pfx_drop_comm+0x10/0x10 [ 252.256505][T12808] client_drop_item+0xa6/0x100 [ 252.258037][T12808] configfs_rmdir+0x5d3/0x950 [ 252.259663][T12808] ? __pfx_configfs_rmdir+0x10/0x10 [ 252.261337][T12808] ? __pfx_down_write+0x10/0x10 [ 252.262924][T12808] vfs_rmdir+0x328/0x8a0 [ 252.264553][T12808] filename_rmdir+0x31a/0x5c0 [ 252.266072][T12808] ? __pfx_filename_rmdir+0x10/0x10 [ 252.267696][T12808] ? do_getname+0x191/0x390 [ 252.269216][T12808] __ia32_sys_rmdir+0x45/0x60 [ 252.270779][T12808] __do_fast_syscall_32+0x13a/0x8b0 [ 252.272483][T12808] do_fast_syscall_32+0x32/0x70 [ 252.274053][T12808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.276046][T12808] RIP: 0023:0xf7f93fec [ 252.277455][T12808] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 252.279847][T12808] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 252.282874][T12808] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 252.285702][T12808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.288262][T12808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.290762][T12808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.293348][T12808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.295862][T12808] [ 252.297523][T12808] Kernel Offset: disabled [ 252.298939][T12808] Rebooting in 86400 seconds..