last executing test programs: 5.971426387s ago: executing program 1 (id=1508): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES8=r6, @ANYRES8, @ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x7}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) timer_create(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.037116145s ago: executing program 1 (id=1512): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) madvise(&(0x7f000015e000/0x3000)=nil, 0x3000, 0x4) socket$inet6(0xa, 0x80002, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0xa001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xc8, &(0x7f00000004c0)=""/200, 0x41100, 0xb, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x10, 0x8, &(0x7f0000000440)={0xb, "31340a8b70ee4ce0ecc8b36bde84a66569edb7fb6e7e1b022b702da08d09539f29"}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 3.683043179s ago: executing program 0 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3f) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044844) r5 = socket$pppoe(0x18, 0x1, 0x0) write(r5, &(0x7f0000000000)="2c58af510a57b45b6c8018ac4bff2503320f015f4d06cfacf9c8165e2b0503ec92b1ab37c9836c609a2bbd4a8630b46f06ea6fb3db4ebae17467668b", 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80785659, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xff) 3.572010956s ago: executing program 1 (id=1523): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r10, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.759584212s ago: executing program 2 (id=1524): mount$afs(&(0x7f0000000e00)=ANY=[@ANYBLOB='%syz0:syzA.backup\x00'], &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x3000000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="8357b73d2891c310143d9abe84dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.674250243s ago: executing program 0 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) setns(0xc9, 0x0) r5 = socket(0x8, 0x2, 0x0) setsockopt(r5, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) poll(&(0x7f0000000080)=[{r5, 0x3201}], 0x1, 0x7) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.673806314s ago: executing program 2 (id=1527): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xadeeead5bdd79bbf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregs(0xe, r1, 0x6aae, &(0x7f00000028c0)=""/213) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.358202989s ago: executing program 1 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3f) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044844) r5 = socket$pppoe(0x18, 0x1, 0x0) write(r5, &(0x7f0000000000)="2c58af510a57b45b6c8018ac4bff2503320f015f4d06cfacf9c8165e2b0503ec92b1ab37c9836c609a2bbd4a8630b46f06ea6fb3db4ebae17467668b", 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80785659, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xff) 2.329991469s ago: executing program 3 (id=1537): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xadeeead5bdd79bbf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregs(0xe, r1, 0x6aae, &(0x7f00000028c0)=""/213) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) 1.839698297s ago: executing program 0 (id=1530): prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x2a, {0x0, 0xffff}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x9f, &(0x7f0000000140)=""/159, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x121040) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000280)={0x5, 0x6, 0x0, 0x2}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) sched_setaffinity(0x0, 0xfffffffffffffe9a, &(0x7f0000000240)=0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x67e2bbcacc708bfb}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0083080057e015000d006600000000493afffe80000000d1c652a8191e5123d7e24e1af30000000000804bff499f1273571cda97190000000012ff0200000000466bcf2d0000000000010e0090786a000000644100000008cc1353322c7f3c00fe8000000000000076ff02ef7da12b4e4d000000000000002afe80000000c7e70000000000000000aa2c0000000000"], 0x7b) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 1.839296292s ago: executing program 3 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000101010100000100000000000000000006001240"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 1.72297284s ago: executing program 3 (id=1532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "3a81c7cb9e0800b4", "dc8bc9b33eefd1c58edd832603b8852991a0e8d73d5d5bfdf85d3357fd892457", "950000ca", "5b865e1f8c6a34eb"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "a8e139e80dcce8ce", "a76eb28778a82d38104cf63fcb486480fb0228f6d732b46f5edbe7a66c7756c6", "128c1b8f", "cbcb853408f5bae2"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xe33, 0x8, 0x4, 0xb4}, {0x8, 0x8, 0x8, 0x308}, {0xe, 0x4, 0x0, 0x80}]}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="08000800000300140100000000004500002800000000008990780000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x36) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000008c0)={"0b695bce4008832d5ab9b66b019877de47f820bb6d1830729994156f3e7fa7d69a91fcb01d1fa09ba06306c717d92764f6805beaec7a656b77c28f6044a7d70c57454df5253295a055546cba9631f3c0c99529249f6bb91dc96af244dd19f76b76ac2b0da2b08e7f7f7e7b4ac0aa58cda73b1f20916e47e512a7550cea59b0ab777d60dc99d88058057870f959ffb0df384c92437af93bba6e8b42eef81c31097077cae996ad5691cc820c752196d4514bf98fe842cc9e3196845899edd865220257c6719408eedb1f2115f63a0e480d50eecd37939515f60912798ac4550365a91e5a2078f772eff2111741482139ba5e3752c8bb55dfed2159c82cc46323b2f2dda91120a00b34a77258a5667edcba48e641e447df1a8b0b669058b281f15c8c3cd308cfee1f981da8abfa39cbe2251b40e9b9021e9521aca0dcb502d39240c6fa845baec6dc98f3eda3d5d9f842ab503c8e712c0f143d2abbe12b1167bb83c559c643ab8f61ba8ca33d2332f3ac6e600057ada12e8e0de0a66c310097e1961775266ceb21f3bb93357a8ba0f368a974cfbfdade03e6385d122de95188c5929441e6dd7698390023dd34ea8c9768a8da8e7072ed8df7b1c90cba450c4215f04321f921d229357afaf16b06aad25fb4f6e87f464c465713a4f272317ace22ccdf2a70328f3fe1f3c123147ffd537d1688c1859e086c57aff3d555db52ac2d8be5fc82f9136cbb0506f6330220c6d6593c952da74b9add8332e8126749b31eddacd8a4bac1319c8efc9c824983d7645ff1fae2e1d8a0e82fe0ca49ff5dfe6a25338dfb2c87093fed47075a650d940f9658eef2c85ad75dd41b64a8be30cf9f4d15ab0bce7ab03c6ff6e126e2c38946037be515335bdc02fa4fa1127ba2d9c946ff5db175cd41ca2f70e76e840a27fbd717726013e7518c6b7e2396bf3278ffbfeec2c4e50c74a33b8dcaccc41a45498f27bd6686492fb5026b152112038402df55059b13227c0c763044567bf06510bc2b63418a8f190e47224ffe565f5b7ed63156c4191ecc9e5d8c15ebcb302bad5a19726deb2bcbf9507f04120d9b2e5ded8d52aa1b4c5efe2332004a777126fe788474e5c4c6b29d528a5e8f20da85e9d9b00207c2af3976fca448df4d7691c06fcc7a103750d627a5a07526479f863c0d7d4b1a5bd84b90da40f70c912096b9c85c8656b68167f661460f341fc83046017401001369660b0446740a0e3c0d8ae834569053ae953b48d58739d964b5e5d33f4feee4227b741fa3fb9c4b4784fee587e816b493636376cf4d9d71589d67c2d19cce0ed9c4ea805821f96fb8742450fc7c34f0f420b1cef76ef5de2cd6c80fe8ed011115abea41a5a9385406b0f263e0adb33d42b189ed1d9d755712d2fb273252cf2dac83d5a27d9ddb9f49c704f3a5f130a31c0505fc6fbaff3d54f6bd41"}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket(0x8, 0x80005, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.661846631s ago: executing program 2 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) 1.582999876s ago: executing program 2 (id=1534): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x30720a2, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1ff}}]}) 1.482994162s ago: executing program 2 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3f) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044844) r5 = socket$pppoe(0x18, 0x1, 0x0) write(r5, &(0x7f0000000000)="2c58af510a57b45b6c8018ac4bff2503320f015f4d06cfacf9c8165e2b0503ec92b1ab37c9836c609a2bbd4a8630b46f06ea6fb3db4ebae17467668b", 0x3c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80785659, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xff) 1.153838783s ago: executing program 1 (id=1536): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xadeeead5bdd79bbf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregs(0xe, r1, 0x6aae, &(0x7f00000028c0)=""/213) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 822.623514ms ago: executing program 3 (id=1538): bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4b}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf71}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1880000002000000000000000000000085000000bc00"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000000180)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b156df21", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="4c00088048000080200004000a004e2180000000000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x7b, 0x200c0000, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="76d1eef3ef91"}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000600)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f00000011c0)="0000c9540000000037302b1787e4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 572.57071ms ago: executing program 3 (id=1539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000302000000fcffffff000000002abd700004350020020001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x172) write(r1, &(0x7f0000000300)='+ 0 0 4 ', 0x8) syz_usb_connect(0x0, 0x32, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10000078, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x8d1, 0x38e9, 0xfffff7fd, 0x20e06, 0x8f, "ffff7fd30d7c00000000000000f3ff00000200", 0xffffffff, 0x49}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0x40000000}, 0x3) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000100)={0x4, r11}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r13, 0xc0086202, &(0x7f0000000540)=0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000003c0)="e28b0ca1265e07558bb33ef3b0a3a036d019d99292117f3fd811d9d558eb543afc051aa81875d17b5288aca67ac939c9e5f9f576d4830bb29d6d06cad8c0fe85444845f92f60f20e46040394380808b0f50fbef84e7a7b6e623cf823d01303d69cc2960dff53d3478c57e57416a8e27734eceb37905c9bc4347c6cb8cba2", 0x7e) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61ba, 0x2000, 0x1, 0x1c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2, 0x1, 0x20, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x27, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) 415.194032ms ago: executing program 0 (id=1540): syz_open_procfs(0x0, &(0x7f0000002180)='syscall\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x101, 0x7, 0x5, 0x3, 0xdc0c]}, &(0x7f00000003c0)=0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000200000000000000f93cfcd35dcff6c08df1ffaf10fc81ecb8b66e18c42b7ac7c0ab993716f20ba44df1a64b9c51fa9828bd49ac7f516a28bc5c06302ef50a9ccdb934db95a938be02cae9d8594ebb89ea2458fa7c3ab299090c69a0b44ca8219defa973a226df", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) 329.689371ms ago: executing program 2 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x38) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x2, 0xb2, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x3080, 0x2, 0x2ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb2, 0x9449cbafb3216c47, 0x0, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x200, 0x2, 0x21b}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240fe8010000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.920283ms ago: executing program 1 (id=1542): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xadeeead5bdd79bbf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregs(0xe, r1, 0x6aae, &(0x7f00000028c0)=""/213) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.46037ms ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) 1.008374ms ago: executing program 3 (id=1544): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8c40, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1c, 0xe0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 0s ago: executing program 0 (id=1545): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x8008, 0x1c1300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/200, 0xc8) write$binfmt_misc(r1, &(0x7f00000001c0)="1a3bf9abb1ac149414dde4028f4c6cea48c142f285ab9ea869bb7c710f2d3d27f74e32394faf312c393294577b135238aaf92cd8298d88c7d002cc348984295447bd0dde4e3f004fad269718aaca43f9280cdd3f4c08adfe672b69aaf740c2200ed2637386a3557c4cf020c73978017a4c994303fa2b50e72e60ecb3fee2e616f6dc957fe4b68fa2c1ef8321b01155d852550c3ea43845a830b93c69f9f39002dd6cca1229b126ca43ccf9d9667750de5ab7905a21d819a92d97af46bd91939bb92723dc9cd22a07b604f2", 0xcb) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0xfd, 0xffff, 0x7, 0x9, 0x13, "a211000000000000002000"}) write$UHID_INPUT(r4, &(0x7f0000001c40)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0xfffffffffffffeac}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug/ieee80211/phy0/netdev:wlan0/aqm\x00', &(0x7f0000000480)='cpuset\x00', 0x84000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000780)='\xe6*{\x00', 0xfffffffffffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x12}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) setns(0xc9, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) add_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r6) ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) sendfile(r0, r0, &(0x7f0000000080)=0x1000, 0xfffffff8) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) kernel console output (not intermixed with test programs): T8784] exFAT-fs (nbd1): failed to read boot sector [ 199.918786][ T8784] exFAT-fs (nbd1): failed to recognize exfat type [ 199.969185][ T43] audit: type=1326 audit(1790785117.089:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.2.534" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 200.071369][ T8792] kAFS: unable to lookup cell 'syz0' [ 200.583504][ T8782] orangefs_mount: mount request failed with -4 [ 201.136624][ T77] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.296690][ T77] usb 5-1: Using ep0 maxpacket: 32 [ 201.297405][ T77] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.298275][ T77] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.298288][ T77] usb 5-1: config 0 has no interfaces? [ 201.300037][ T77] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.300050][ T77] usb 5-1: Product: syz [ 201.300057][ T77] usb 5-1: Manufacturer: syz [ 201.300064][ T77] usb 5-1: SerialNumber: syz [ 201.301749][ T77] usb 5-1: config 0 descriptor?? [ 201.586148][ T6729] usb 5-1: USB disconnect, device number 21 [ 201.810018][ T8841] FAULT_INJECTION: forcing a failure. [ 201.810018][ T8841] name failslab, interval 1, probability 0, space 0, times 0 [ 201.810082][ T8841] CPU: 1 UID: 0 PID: 8841 Comm: syz.3.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.810101][ T8841] Tainted: [L]=SOFTLOCKUP [ 201.810106][ T8841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.810112][ T8841] Call Trace: [ 201.810118][ T8841] [ 201.810124][ T8841] dump_stack_lvl+0x100/0x190 [ 201.810144][ T8841] should_fail_ex.cold+0x5/0xa [ 201.810160][ T8841] should_failslab+0xc2/0x120 [ 201.810178][ T8841] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 201.810195][ T8841] ? __kasan_kmalloc+0xaa/0xb0 [ 201.810213][ T8841] ? fscache_lookup_cache+0x193/0x950 [ 201.810229][ T8841] kstrdup+0x51/0xe0 [ 201.810242][ T8841] fscache_lookup_cache+0x193/0x950 [ 201.810260][ T8841] fscache_acquire_cache+0x7b/0x130 [ 201.810272][ T8841] ? __pfx_fscache_acquire_cache+0x10/0x10 [ 201.810289][ T8841] cachefiles_add_cache+0xdb/0xfc0 [ 201.810306][ T8841] ? __pfx_cachefiles_add_cache+0x10/0x10 [ 201.810322][ T8841] ? rcu_is_watching+0x13/0xc0 [ 201.810342][ T8841] ? __asan_memcpy+0x3c/0x60 [ 201.810357][ T8841] cachefiles_daemon_bind+0x2ec/0x3e0 [ 201.810371][ T8841] cachefiles_daemon_write+0x3d4/0x4e0 [ 201.810387][ T8841] vfs_write+0x2aa/0x1050 [ 201.810400][ T8841] ? __pfx_cachefiles_daemon_write+0x10/0x10 [ 201.810414][ T8841] ? lock_acquire+0x1d1/0x380 [ 201.810430][ T8841] ? __fget_files+0x34/0x3d0 [ 201.810444][ T8841] ? __pfx_vfs_write+0x10/0x10 [ 201.810456][ T8841] ? find_held_lock+0x2b/0x80 [ 201.810469][ T8841] ? __fget_files+0x215/0x3d0 [ 201.810482][ T8841] ? __fget_files+0x215/0x3d0 [ 201.810498][ T8841] ? __fget_files+0x21f/0x3d0 [ 201.810516][ T8841] ksys_write+0x12a/0x250 [ 201.810529][ T8841] ? __pfx_ksys_write+0x10/0x10 [ 201.810547][ T8841] __do_fast_syscall_32+0x13a/0x8b0 [ 201.810563][ T8841] do_fast_syscall_32+0x32/0x70 [ 201.810578][ T8841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.810592][ T8841] RIP: 0023:0xf704efec [ 201.810607][ T8841] Code: Unable to access opcode bytes at 0xf704efc2. [ 201.810612][ T8841] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 201.810623][ T8841] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000700 [ 201.810630][ T8841] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.810637][ T8841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.810643][ T8841] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.810649][ T8841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.810664][ T8841] [ 201.884478][ T43] audit: type=1326 audit(1790785118.999:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.1.552" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 202.437340][ T5528] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 202.616590][ T5528] usb 7-1: Using ep0 maxpacket: 32 [ 202.618716][ T5528] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.620800][ T5528] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.620813][ T5528] usb 7-1: config 0 has no interfaces? [ 202.623218][ T5528] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.623535][ T5528] usb 7-1: Product: syz [ 202.623635][ T5528] usb 7-1: Manufacturer: syz [ 202.623643][ T5528] usb 7-1: SerialNumber: syz [ 202.648789][ T5528] usb 7-1: config 0 descriptor?? [ 202.936262][ T8871] exFAT-fs (nbd3): unable to read boot sector [ 202.936277][ T8871] exFAT-fs (nbd3): failed to read boot sector [ 202.936285][ T8871] exFAT-fs (nbd3): failed to recognize exfat type [ 203.498381][ T42] usb 7-1: USB disconnect, device number 19 [ 203.533126][ T8877] kAFS: unable to lookup cell 'syz0' [ 203.592817][ T43] audit: type=1326 audit(1790785120.709:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.0.548" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 203.628136][ T8869] orangefs_mount: mount request failed with -4 [ 204.631702][ T8896] bonding: bond0 is being deleted... [ 204.634317][ T8896] bond0 (unregistering): Released all slaves [ 204.688259][ T8907] kAFS: unable to lookup cell 'syz0' [ 204.700215][ T8905] bonding: bond0 is being created... [ 205.355890][ T8920] kAFS: unable to lookup cell 'syz0' [ 206.057119][ T854] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 206.216654][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 206.222583][ T854] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 206.223656][ T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.223674][ T854] usb 6-1: config 0 has no interfaces? [ 206.241653][ T854] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 206.241668][ T854] usb 6-1: Product: syz [ 206.241728][ T854] usb 6-1: Manufacturer: syz [ 206.241737][ T854] usb 6-1: SerialNumber: syz [ 206.301991][ T854] usb 6-1: config 0 descriptor?? [ 207.424542][ T854] usb 6-1: USB disconnect, device number 21 [ 207.578005][ T43] audit: type=1326 audit(1790785124.529:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.3.568" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 208.502813][ T43] audit: type=1326 audit(1790785125.619:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.3.580" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 208.906657][ T854] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 209.086530][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 209.088342][ T854] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.089291][ T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.089303][ T854] usb 6-1: config 0 has no interfaces? [ 209.106779][ T854] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.106795][ T854] usb 6-1: Product: syz [ 209.106803][ T854] usb 6-1: Manufacturer: syz [ 209.106811][ T854] usb 6-1: SerialNumber: syz [ 209.108081][ T854] usb 6-1: config 0 descriptor?? [ 209.351782][ T854] usb 6-1: USB disconnect, device number 22 [ 210.078680][ T9015] kAFS: unable to lookup cell 'syz0' [ 211.519948][ T5743] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 211.668680][ T5743] usb 8-1: Using ep0 maxpacket: 32 [ 211.669187][ T5743] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 211.670065][ T5743] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.670077][ T5743] usb 8-1: config 0 has no interfaces? [ 211.671728][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 211.671740][ T5743] usb 8-1: Product: syz [ 211.671747][ T5743] usb 8-1: Manufacturer: syz [ 211.671754][ T5743] usb 8-1: SerialNumber: syz [ 211.675387][ T5743] usb 8-1: config 0 descriptor?? [ 211.720656][ T43] audit: type=1326 audit(1790785128.839:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.1.587" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 211.888151][ T854] usb 8-1: USB disconnect, device number 18 [ 212.344298][ T9068] kAFS: unable to lookup cell 'syz0' [ 213.926860][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 214.086856][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 214.089848][ T42] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.102857][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.102873][ T42] usb 5-1: config 0 has no interfaces? [ 214.108852][ T42] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.108868][ T42] usb 5-1: Product: syz [ 214.109083][ T42] usb 5-1: Manufacturer: syz [ 214.109863][ T42] usb 5-1: SerialNumber: syz [ 214.172975][ T42] usb 5-1: config 0 descriptor?? [ 214.770911][ T43] audit: type=1326 audit(1790785131.889:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.602" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 215.308271][ T42] usb 5-1: USB disconnect, device number 22 [ 216.056791][ T5815] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 216.226637][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 216.227128][ T5815] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.228067][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.228079][ T5815] usb 6-1: config 0 has no interfaces? [ 216.233367][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.233382][ T5815] usb 6-1: Product: syz [ 216.233390][ T5815] usb 6-1: Manufacturer: syz [ 216.233397][ T5815] usb 6-1: SerialNumber: syz [ 216.235592][ T5815] usb 6-1: config 0 descriptor?? [ 216.504275][ T77] usb 6-1: USB disconnect, device number 23 [ 217.030304][ T9181] kAFS: unable to lookup cell 'syz0' [ 217.170605][ T9185] exFAT-fs (nbd2): unable to read boot sector [ 217.170615][ T9185] exFAT-fs (nbd2): failed to read boot sector [ 217.170620][ T9185] exFAT-fs (nbd2): failed to recognize exfat type [ 217.637085][ T42] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 217.786795][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 217.789550][ T42] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.793074][ T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.793097][ T42] usb 8-1: config 0 has no interfaces? [ 217.822645][ T42] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.824807][ T42] usb 8-1: Product: syz [ 217.825174][ T42] usb 8-1: Manufacturer: syz [ 217.825188][ T42] usb 8-1: SerialNumber: syz [ 217.860024][ T9179] orangefs_mount: mount request failed with -4 [ 217.873177][ T42] usb 8-1: config 0 descriptor?? [ 219.005881][ T9221] exFAT-fs (nbd0): unable to read boot sector [ 219.005982][ T9221] exFAT-fs (nbd0): failed to read boot sector [ 219.005988][ T9221] exFAT-fs (nbd0): failed to recognize exfat type [ 219.066628][ T42] usb 8-1: USB disconnect, device number 19 [ 219.237548][ T9211] orangefs_mount: mount request failed with -4 [ 219.551726][ T43] audit: type=1326 audit(1790785136.669:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.1.621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 219.734423][ T43] audit: type=1326 audit(1790785136.849:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.0.625" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 219.874355][ T9247] bonding: bond0 is being deleted... [ 219.875431][ T9247] bond0 (unregistering): Released all slaves [ 219.929568][ T9252] bonding: bond0 is being created... [ 221.116755][ T9270] kAFS: unable to lookup cell 'syz0' [ 221.578562][ T5743] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 221.728606][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 221.733170][ T5743] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.753847][ T5743] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.758433][ T5743] usb 6-1: config 0 has no interfaces? [ 221.875682][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.875701][ T5743] usb 6-1: Product: syz [ 221.875708][ T5743] usb 6-1: Manufacturer: syz [ 221.875715][ T5743] usb 6-1: SerialNumber: syz [ 222.218163][ T5743] usb 6-1: config 0 descriptor?? [ 222.507224][ T5743] usb 6-1: USB disconnect, device number 24 [ 223.910788][ T9321] exFAT-fs (nbd1): unable to read boot sector [ 223.910799][ T9321] exFAT-fs (nbd1): failed to read boot sector [ 223.910804][ T9321] exFAT-fs (nbd1): failed to recognize exfat type [ 224.048789][ T9329] bonding: bond0 is being deleted... [ 224.050282][ T9329] bond0 (unregistering): Released all slaves [ 224.121967][ T9332] bonding: bond0 is being created... [ 224.590357][ T9319] orangefs_mount: mount request failed with -4 [ 225.159347][ T9349] bonding: bond0 is being deleted... [ 225.160557][ T9349] bond0 (unregistering): Released all slaves [ 225.222601][ T9353] bonding: bond0 is being created... [ 225.819047][ T9375] exFAT-fs (nbd2): unable to read boot sector [ 225.819058][ T9375] exFAT-fs (nbd2): failed to read boot sector [ 225.819063][ T9375] exFAT-fs (nbd2): failed to recognize exfat type [ 226.500520][ T9368] orangefs_mount: mount request failed with -4 [ 228.606573][ T854] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 228.756548][ T854] usb 5-1: Using ep0 maxpacket: 32 [ 228.757689][ T854] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.761157][ T854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.761501][ T854] usb 5-1: config 0 has no interfaces? [ 228.769224][ T854] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.769238][ T854] usb 5-1: Product: syz [ 228.769248][ T854] usb 5-1: Manufacturer: syz [ 228.769258][ T854] usb 5-1: SerialNumber: syz [ 228.774458][ T854] usb 5-1: config 0 descriptor?? [ 229.750268][ T854] usb 5-1: USB disconnect, device number 23 [ 229.964868][ T9455] exFAT-fs (nbd3): unable to read boot sector [ 229.964883][ T9455] exFAT-fs (nbd3): failed to read boot sector [ 229.964941][ T9455] exFAT-fs (nbd3): failed to recognize exfat type [ 230.631240][ T9447] orangefs_mount: mount request failed with -4 [ 231.336686][ T5815] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 231.368482][ T77] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 231.486974][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 231.489033][ T5815] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.494783][ T5815] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.494827][ T5815] usb 8-1: config 0 has no interfaces? [ 231.517751][ T77] usb 7-1: Using ep0 maxpacket: 32 [ 231.518759][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.519832][ T5815] usb 8-1: Product: syz [ 231.521416][ T5815] usb 8-1: Manufacturer: syz [ 231.521980][ T5815] usb 8-1: SerialNumber: syz [ 231.526451][ T77] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.597567][ T77] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.598387][ T77] usb 7-1: config 0 has no interfaces? [ 231.637025][ T77] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.649494][ T77] usb 7-1: Product: syz [ 231.652339][ T77] usb 7-1: Manufacturer: syz [ 231.655846][ T77] usb 7-1: SerialNumber: syz [ 231.757201][ T5815] usb 8-1: config 0 descriptor?? [ 231.791826][ T77] usb 7-1: config 0 descriptor?? [ 232.001387][ T5815] usb 8-1: USB disconnect, device number 20 [ 232.009249][ T9470] 9pnet_virtio: no channels available for device syz [ 232.026393][ T77] usb 7-1: USB disconnect, device number 20 [ 233.118350][ T9520] kAFS: unable to lookup cell 'syz0' [ 233.464829][ T9533] exFAT-fs (nbd0): unable to read boot sector [ 233.464840][ T9533] exFAT-fs (nbd0): failed to read boot sector [ 233.464845][ T9533] exFAT-fs (nbd0): failed to recognize exfat type [ 233.476551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 233.995621][ T9551] ubi0: attaching mtd0 [ 233.997528][ T9551] ubi0: scanning is finished [ 234.087708][ T9526] orangefs_mount: mount request failed with -4 [ 234.127433][ T9551] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 234.127459][ T9551] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 234.127476][ T9551] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 234.127492][ T9551] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 234.127507][ T9551] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 234.127521][ T9551] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 234.127534][ T9551] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 234.127551][ T9551] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 234.127625][ T9558] ubi0: background thread "ubi_bgt0d" started, PID 9558 [ 234.127696][ T9556] ubi0: detaching mtd0 [ 234.133844][ T9556] ubi0: mtd0 is detached [ 234.847538][ T43] audit: type=1326 audit(1790785151.969:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.693" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 235.065286][ T9569] kAFS: unable to lookup cell 'syz0' [ 235.479438][ T9591] exFAT-fs (nbd1): unable to read boot sector [ 235.479452][ T9591] exFAT-fs (nbd1): failed to read boot sector [ 235.479458][ T9591] exFAT-fs (nbd1): failed to recognize exfat type [ 235.755064][ T43] audit: type=1326 audit(1790785152.869:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.709" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 235.801293][ T9599] bonding: bond0 is being deleted... [ 235.802187][ T9599] bond0 (unregistering): Released all slaves [ 235.859478][ T9603] bonding: bond0 is being created... [ 236.160822][ T9587] orangefs_mount: mount request failed with -4 [ 236.685807][ T9616] kAFS: unable to lookup cell 'syz0' [ 237.323900][ T9640] ubi0: attaching mtd0 [ 237.329660][ T9640] ubi0: scanning is finished [ 237.440453][ T9640] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 237.440471][ T9640] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 237.440481][ T9640] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 237.440490][ T9640] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 237.440500][ T9640] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 237.440508][ T9640] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 237.440519][ T9640] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 237.440603][ T9640] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 237.440674][ T9644] ubi0: background thread "ubi_bgt0d" started, PID 9644 [ 237.440725][ T9642] ubi0: detaching mtd0 [ 237.445444][ T9642] ubi0: mtd0 is detached [ 238.069133][ T9655] exFAT-fs (nbd2): unable to read boot sector [ 238.069151][ T9655] exFAT-fs (nbd2): failed to read boot sector [ 238.069160][ T9655] exFAT-fs (nbd2): failed to recognize exfat type [ 238.096118][ T43] audit: type=1326 audit(1790785155.209:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.1.714" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 238.276406][ T9666] kAFS: unable to lookup cell 'syz0' [ 238.724299][ T9650] orangefs_mount: mount request failed with -4 [ 239.213056][ T9676] exFAT-fs (nbd3): unable to read boot sector [ 239.213071][ T9676] exFAT-fs (nbd3): failed to read boot sector [ 239.213078][ T9676] exFAT-fs (nbd3): failed to recognize exfat type [ 239.275988][ T9680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.883864][ T9674] orangefs_mount: mount request failed with -4 [ 240.578218][ T5747] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 240.726640][ T5747] usb 5-1: Using ep0 maxpacket: 32 [ 240.727736][ T5747] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 240.730035][ T5747] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.730095][ T5747] usb 5-1: config 0 has no interfaces? [ 240.735392][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 240.735406][ T5747] usb 5-1: Product: syz [ 240.735413][ T5747] usb 5-1: Manufacturer: syz [ 240.735421][ T5747] usb 5-1: SerialNumber: syz [ 240.787561][ T5747] usb 5-1: config 0 descriptor?? [ 241.742012][ T9705] kAFS: unable to lookup cell 'syz0' [ 242.255728][ T5747] usb 5-1: USB disconnect, device number 24 [ 242.280817][ T43] audit: type=1326 audit(1790785159.399:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.2.730" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 243.484175][ T9738] exFAT-fs (nbd0): unable to read boot sector [ 243.484223][ T9738] exFAT-fs (nbd0): failed to read boot sector [ 243.484284][ T9738] exFAT-fs (nbd0): failed to recognize exfat type [ 244.046803][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 244.119703][ T9729] orangefs_mount: mount request failed with -4 [ 244.197334][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 244.202305][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.213374][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.213531][ T9] usb 7-1: config 0 has no interfaces? [ 244.234073][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.234131][ T9] usb 7-1: Product: syz [ 244.234139][ T9] usb 7-1: Manufacturer: syz [ 244.234146][ T9] usb 7-1: SerialNumber: syz [ 244.254401][ T9] usb 7-1: config 0 descriptor?? [ 245.396288][ T9767] kAFS: unable to lookup cell 'syz0' [ 245.521222][ T9770] bonding: bond0 is being deleted... [ 245.522867][ T9770] bond0 (unregistering): Released all slaves [ 245.587285][ T9776] bonding: bond0 is being created... [ 245.618948][ T5528] usb 7-1: USB disconnect, device number 21 [ 245.702120][ T43] audit: type=1326 audit(1790785162.819:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.1.742" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 246.957069][ T5528] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 247.118430][ T5528] usb 8-1: Using ep0 maxpacket: 32 [ 247.123555][ T5528] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 247.139016][ T5528] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.139569][ T5528] usb 8-1: config 0 has no interfaces? [ 247.163816][ T9818] bonding: bond0 is being deleted... [ 247.165571][ T9818] bond0 (unregistering): Released all slaves [ 247.173123][ T5528] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 247.173339][ T5528] usb 8-1: Product: syz [ 247.173386][ T5528] usb 8-1: Manufacturer: syz [ 247.173433][ T5528] usb 8-1: SerialNumber: syz [ 247.256245][ T9820] bonding: bond0 is being created... [ 247.259359][ T5528] usb 8-1: config 0 descriptor?? [ 247.478072][ T9824] kAFS: unable to lookup cell 'syz0' [ 248.587011][ T68] usb 8-1: USB disconnect, device number 21 [ 249.078222][ T43] audit: type=1326 audit(1790785166.199:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.754" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 249.829824][ T9854] kAFS: unable to lookup cell 'syz0' [ 249.968731][ T9858] kAFS: unable to lookup cell 'syz0' [ 251.478482][ T68] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 251.646549][ T68] usb 5-1: Using ep0 maxpacket: 32 [ 251.652451][ T68] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.666926][ T68] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.667025][ T68] usb 5-1: config 0 has no interfaces? [ 251.684077][ T68] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.684124][ T68] usb 5-1: Product: syz [ 251.684230][ T68] usb 5-1: Manufacturer: syz [ 251.684769][ T68] usb 5-1: SerialNumber: syz [ 251.709329][ T68] usb 5-1: config 0 descriptor?? [ 252.140764][ T5815] usb 5-1: USB disconnect, device number 25 [ 252.240897][ T9906] kAFS: unable to lookup cell 'syz0' [ 254.968960][ T9945] kAFS: unable to lookup cell 'syz0' [ 255.045138][ T9947] bonding: bond0 is being deleted... [ 255.046201][ T9947] bond0 (unregistering): Released all slaves [ 255.103965][ T9950] bonding: bond0 is being created... [ 255.190763][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.190817][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937078][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 256.136665][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 256.176020][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.207960][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.207977][ T9] usb 7-1: config 0 has no interfaces? [ 256.246919][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.247124][ T9] usb 7-1: Product: syz [ 256.247136][ T9] usb 7-1: Manufacturer: syz [ 256.247148][ T9] usb 7-1: SerialNumber: syz [ 256.290433][ T9] usb 7-1: config 0 descriptor?? [ 256.406948][ T854] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 256.556763][ T854] usb 8-1: Using ep0 maxpacket: 32 [ 256.557771][ T854] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.581873][ T854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.581897][ T854] usb 8-1: config 0 has no interfaces? [ 256.599122][ T854] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.599161][ T854] usb 8-1: Product: syz [ 256.599211][ T854] usb 8-1: Manufacturer: syz [ 256.599219][ T854] usb 8-1: SerialNumber: syz [ 256.652226][ T854] usb 8-1: config 0 descriptor?? [ 256.868238][ T9975] 9pnet_virtio: no channels available for device syz [ 257.581164][ T854] usb 8-1: USB disconnect, device number 22 [ 257.781550][ T5528] usb 7-1: USB disconnect, device number 22 [ 257.828563][ T9997] kAFS: unable to lookup cell 'syz0' [ 257.905367][T10001] bonding: bond0 is being deleted... [ 257.906412][T10001] bond0 (unregistering): Released all slaves [ 257.944681][T10001] bonding: bond0 is being created... [ 258.969916][T10030] kAFS: unable to lookup cell 'syz0' [ 259.054342][T10033] bonding: bond0 is being deleted... [ 259.056834][T10033] bond0 (unregistering): Released all slaves [ 260.617453][T10050] exFAT-fs (nbd1): unable to read boot sector [ 260.617464][T10050] exFAT-fs (nbd1): failed to read boot sector [ 260.617469][T10050] exFAT-fs (nbd1): failed to recognize exfat type [ 260.887210][T10047] orangefs_mount: mount request failed with -4 [ 261.618250][ T854] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 261.807303][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 261.808902][ T854] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 261.813448][ T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.813497][ T854] usb 6-1: config 0 has no interfaces? [ 261.825730][ T854] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 261.825746][ T854] usb 6-1: Product: syz [ 261.825754][ T854] usb 6-1: Manufacturer: syz [ 261.827166][ T854] usb 6-1: SerialNumber: syz [ 261.987384][ T854] usb 6-1: config 0 descriptor?? [ 262.877454][ T5528] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 263.027263][ T5528] usb 7-1: Using ep0 maxpacket: 32 [ 263.027944][ T5528] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.028802][ T5528] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.028815][ T5528] usb 7-1: config 0 has no interfaces? [ 263.030487][ T5528] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.030499][ T5528] usb 7-1: Product: syz [ 263.030507][ T5528] usb 7-1: Manufacturer: syz [ 263.030514][ T5528] usb 7-1: SerialNumber: syz [ 263.032626][ T5528] usb 7-1: config 0 descriptor?? [ 263.122325][ T42] usb 6-1: USB disconnect, device number 25 [ 263.187856][T10084] bonding: unable to delete non-existent bond0 [ 263.295417][T10069] 9pnet_virtio: no channels available for device syz [ 263.595455][ T42] usb 7-1: USB disconnect, device number 23 [ 264.312453][T10112] bonding: bond0 is being created... [ 264.374166][T10117] kAFS: unable to lookup cell 'syz0' [ 264.636561][ T42] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 264.798249][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 264.798571][T10134] bonding: bond0 is being deleted... [ 264.799204][ T42] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 264.799787][T10134] bond0 (unregistering): Released all slaves [ 264.802229][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.802296][ T42] usb 6-1: config 0 has no interfaces? [ 264.809357][ T42] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 264.809456][ T42] usb 6-1: Product: syz [ 264.809488][ T42] usb 6-1: Manufacturer: syz [ 264.809518][ T42] usb 6-1: SerialNumber: syz [ 264.824047][ T42] usb 6-1: config 0 descriptor?? [ 265.367344][ T5963] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 265.516864][ T5963] usb 8-1: Using ep0 maxpacket: 32 [ 265.545397][ T5963] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.569038][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.569351][ T5963] usb 8-1: config 0 has no interfaces? [ 265.592168][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.592237][ T5963] usb 8-1: Product: syz [ 265.592249][ T5963] usb 8-1: Manufacturer: syz [ 265.592282][ T5963] usb 8-1: SerialNumber: syz [ 265.658454][ T5963] usb 8-1: config 0 descriptor?? [ 265.890654][T10145] 9pnet_virtio: no channels available for device syz [ 266.207641][ T5747] usb 6-1: USB disconnect, device number 26 [ 266.749173][ T68] usb 8-1: USB disconnect, device number 23 [ 267.256727][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 267.420755][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 267.423188][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.425232][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.425487][ T9] usb 7-1: config 0 has no interfaces? [ 267.460580][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.460598][ T9] usb 7-1: Product: syz [ 267.461559][ T9] usb 7-1: Manufacturer: syz [ 267.461568][ T9] usb 7-1: SerialNumber: syz [ 267.541549][ T9] usb 7-1: config 0 descriptor?? [ 268.376425][T10192] bonding: bond0 is being created... [ 268.376975][T10192] bonding: bond0 already exists [ 269.096896][ T5815] usb 7-1: USB disconnect, device number 24 [ 270.085159][T10219] exFAT-fs (nbd3): unable to read boot sector [ 270.085176][T10219] exFAT-fs (nbd3): failed to read boot sector [ 270.085246][T10219] exFAT-fs (nbd3): failed to recognize exfat type [ 270.527237][ T42] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 270.588329][T10210] orangefs_mount: mount request failed with -4 [ 270.686585][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 270.691180][ T42] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 270.701585][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.702102][ T42] usb 7-1: config 0 has no interfaces? [ 270.708943][ T42] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 270.709049][ T42] usb 7-1: Product: syz [ 270.709220][ T42] usb 7-1: Manufacturer: syz [ 270.709228][ T42] usb 7-1: SerialNumber: syz [ 270.766580][ T42] usb 7-1: config 0 descriptor?? [ 270.944312][T10255] exFAT-fs (nbd0): unable to read boot sector [ 270.944323][T10255] exFAT-fs (nbd0): failed to read boot sector [ 270.944328][T10255] exFAT-fs (nbd0): failed to recognize exfat type [ 271.254251][T10261] bonding: bond0 is being created... [ 271.613683][T10240] orangefs_mount: mount request failed with -4 [ 271.702909][ T42] usb 7-1: USB disconnect, device number 25 [ 273.546577][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 273.916642][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 273.917188][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.918220][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.918232][ T9] usb 8-1: config 0 has no interfaces? [ 273.920190][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.920202][ T9] usb 8-1: Product: syz [ 273.920209][ T9] usb 8-1: Manufacturer: syz [ 273.920216][ T9] usb 8-1: SerialNumber: syz [ 274.041834][ T9] usb 8-1: config 0 descriptor?? [ 274.049706][T10319] exFAT-fs (nbd2): unable to read boot sector [ 274.049720][T10319] exFAT-fs (nbd2): failed to read boot sector [ 274.049728][T10319] exFAT-fs (nbd2): failed to recognize exfat type [ 274.356619][ T68] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 274.506601][ T68] usb 6-1: Using ep0 maxpacket: 32 [ 274.507121][ T68] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.508024][ T68] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.508036][ T68] usb 6-1: config 0 has no interfaces? [ 274.509810][ T68] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.509822][ T68] usb 6-1: Product: syz [ 274.509830][ T68] usb 6-1: Manufacturer: syz [ 274.509837][ T68] usb 6-1: SerialNumber: syz [ 274.515219][ T68] usb 6-1: config 0 descriptor?? [ 274.666951][ T854] usb 8-1: USB disconnect, device number 24 [ 274.682308][T10304] orangefs_mount: mount request failed with -4 [ 274.743635][T10302] 9pnet_virtio: no channels available for device syz [ 274.746986][ T5815] usb 6-1: USB disconnect, device number 27 [ 274.808823][T10335] bonding: bond0 is being created... [ 274.809122][T10335] bonding: bond0 already exists [ 275.333501][T10341] bonding: unable to delete non-existent bon [ 275.333712][T10341] bonding: bond0 is being created... [ 275.334153][T10341] bonding: bond0 already exists [ 276.816926][T10366] exFAT-fs (nbd1): unable to read boot sector [ 276.816937][T10366] exFAT-fs (nbd1): failed to read boot sector [ 276.816943][T10366] exFAT-fs (nbd1): failed to recognize exfat type [ 277.376804][ T854] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 277.490103][T10362] orangefs_mount: mount request failed with -4 [ 277.527550][ T854] usb 5-1: Using ep0 maxpacket: 32 [ 277.530601][ T854] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 277.534104][ T854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.534126][ T854] usb 5-1: config 0 has no interfaces? [ 277.536144][ T854] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 277.536160][ T854] usb 5-1: Product: syz [ 277.536172][ T854] usb 5-1: Manufacturer: syz [ 277.536183][ T854] usb 5-1: SerialNumber: syz [ 277.537959][ T854] usb 5-1: config 0 descriptor?? [ 277.805320][ T5844] usb 5-1: USB disconnect, device number 26 [ 278.856458][T10407] exFAT-fs (nbd2): unable to read boot sector [ 278.856862][T10407] exFAT-fs (nbd2): failed to read boot sector [ 278.857606][T10407] exFAT-fs (nbd2): failed to recognize exfat type [ 279.459450][T10404] orangefs_mount: mount request failed with -4 [ 281.534033][T10438] Cannot find add_set index 3 as target [ 281.786624][ T5963] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 281.949552][ T5963] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.954946][ T5963] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.954966][ T5963] usb 7-1: config 0 has no interfaces? [ 281.954989][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.961154][ T5963] usb 7-1: config 0 descriptor?? [ 282.351910][T10445] exFAT-fs (nbd3): unable to read boot sector [ 282.351927][T10445] exFAT-fs (nbd3): failed to read boot sector [ 282.351937][T10445] exFAT-fs (nbd3): failed to recognize exfat type [ 283.032940][T10441] orangefs_mount: mount request failed with -4 [ 283.508209][ T42] usb 7-1: USB disconnect, device number 26 [ 283.741856][ T43] audit: type=1326 audit(1790785200.859:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.1.892" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 283.767558][T10464] exFAT-fs (nbd0): unable to read boot sector [ 283.767573][T10464] exFAT-fs (nbd0): failed to read boot sector [ 283.767580][T10464] exFAT-fs (nbd0): failed to recognize exfat type [ 284.088629][T10455] orangefs_mount: mount request failed with -4 [ 285.430476][ T6729] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 285.720010][ T6729] usb 6-1: Using ep0 maxpacket: 32 [ 285.763596][ T6729] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 285.805371][ T6729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.805388][ T6729] usb 6-1: config 0 has no interfaces? [ 285.881362][ T6729] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 285.881381][ T6729] usb 6-1: Product: syz [ 285.881389][ T6729] usb 6-1: Manufacturer: syz [ 285.881396][ T6729] usb 6-1: SerialNumber: syz [ 286.092726][ T6729] usb 6-1: config 0 descriptor?? [ 286.964398][T10513] Cannot find add_set index 3 as target [ 287.105903][T10515] exFAT-fs (nbd2): unable to read boot sector [ 287.105914][T10515] exFAT-fs (nbd2): failed to read boot sector [ 287.105919][T10515] exFAT-fs (nbd2): failed to recognize exfat type [ 287.129997][ T5844] usb 6-1: USB disconnect, device number 28 [ 287.216749][ T5815] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 287.367321][ T5815] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.368405][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.368426][ T5815] usb 5-1: config 0 has no interfaces? [ 287.368450][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.370693][ T5815] usb 5-1: config 0 descriptor?? [ 287.790480][T10512] orangefs_mount: mount request failed with -4 [ 288.016683][ T6729] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 288.166774][ T6729] usb 8-1: Using ep0 maxpacket: 32 [ 288.167625][ T6729] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.168767][ T6729] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.168786][ T6729] usb 8-1: config 0 has no interfaces? [ 288.171331][ T6729] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 288.171352][ T6729] usb 8-1: Product: syz [ 288.171365][ T6729] usb 8-1: Manufacturer: syz [ 288.171377][ T6729] usb 8-1: SerialNumber: syz [ 288.174356][ T6729] usb 8-1: config 0 descriptor?? [ 288.285886][ T854] usb 5-1: USB disconnect, device number 27 [ 288.405283][ T5815] usb 8-1: USB disconnect, device number 25 [ 289.874730][T10568] ubi0: attaching mtd0 [ 289.877645][T10568] ubi0: scanning is finished [ 290.115278][T10576] exFAT-fs (nbd0): unable to read boot sector [ 290.115295][T10576] exFAT-fs (nbd0): failed to read boot sector [ 290.115303][T10576] exFAT-fs (nbd0): failed to recognize exfat type [ 290.195635][T10578] kAFS: unable to lookup cell 'syz0' [ 290.301485][T10568] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 290.301510][T10568] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 290.301527][T10568] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 290.301542][T10568] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 290.301557][T10568] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 290.301573][T10568] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 290.301587][T10568] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 290.301605][T10568] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 290.301668][T10583] ubi0: background thread "ubi_bgt0d" started, PID 10583 [ 290.765729][T10571] orangefs_mount: mount request failed with -4 [ 292.304607][T10620] kAFS: unable to lookup cell 'syz0' [ 292.551613][T10639] kAFS: unable to lookup cell 'syz0' [ 292.898351][T10648] bonding: bond0 is being deleted... [ 292.901743][T10648] bond0 (unregistering): Released all slaves [ 293.904701][T10665] ubi: mtd0 is already attached to ubi0 [ 293.905247][T10665] ubi0: detaching mtd0 [ 293.935837][T10668] kAFS: unable to lookup cell 'syz0' [ 293.966041][T10665] ubi0: mtd0 is detached [ 294.178338][T10674] exFAT-fs (nbd1): unable to read boot sector [ 294.178354][T10674] exFAT-fs (nbd1): failed to read boot sector [ 294.178364][T10674] exFAT-fs (nbd1): failed to recognize exfat type [ 294.406223][ T43] audit: type=1326 audit(1790785211.519:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.0.951" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 294.857990][T10670] orangefs_mount: mount request failed with -4 [ 296.193128][T10709] bonding: bond0 is being deleted... [ 296.195767][T10709] bond0 (unregistering): Released all slaves [ 296.272991][T10722] exFAT-fs (nbd1): unable to read boot sector [ 296.273002][T10722] exFAT-fs (nbd1): failed to read boot sector [ 296.273007][T10722] exFAT-fs (nbd1): failed to recognize exfat type [ 296.934962][T10704] orangefs_mount: mount request failed with -4 [ 296.983790][T10733] exFAT-fs (nbd0): unable to read boot sector [ 296.983806][T10733] exFAT-fs (nbd0): failed to read boot sector [ 296.983813][T10733] exFAT-fs (nbd0): failed to recognize exfat type [ 297.692175][T10731] orangefs_mount: mount request failed with -4 [ 298.099899][T10758] bonding: unable to delete non-existent bond0 [ 298.100124][T10758] bonding: bon is being created... [ 298.171127][ T43] audit: type=1326 audit(1790785215.289:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.3.970" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 298.179549][T10768] kAFS: unable to lookup cell 'syz0' [ 298.247479][T10775] ubi0: attaching mtd0 [ 298.248572][T10775] ubi0: scanning is finished [ 298.270337][T10778] bonding: bond0 is being deleted... [ 298.274511][T10778] bond0 (unregistering): Released all slaves [ 298.373500][T10771] bonding: bon is being created... [ 298.559907][T10775] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 298.560408][T10775] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 298.560419][T10775] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 298.560427][T10775] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 298.561437][T10775] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 298.561540][T10775] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 298.562032][T10775] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 298.562159][T10775] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 298.562375][T10795] ubi0: background thread "ubi_bgt0d" started, PID 10795 [ 298.562652][T10782] ubi0: detaching mtd0 [ 298.597975][T10782] ubi0: mtd0 is detached [ 298.666643][ T5747] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 298.816590][ T5747] usb 6-1: Using ep0 maxpacket: 32 [ 298.819036][ T5747] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 298.821386][ T5747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.821399][ T5747] usb 6-1: config 0 has no interfaces? [ 298.845399][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 298.845414][ T5747] usb 6-1: Product: syz [ 298.845644][ T5747] usb 6-1: Manufacturer: syz [ 298.845653][ T5747] usb 6-1: SerialNumber: syz [ 298.923372][ T5747] usb 6-1: config 0 descriptor?? [ 301.482896][ T5885] usb 6-1: USB disconnect, device number 29 [ 301.483885][T10825] kAFS: unable to lookup cell 'syz0' [ 301.531579][T10831] ubi0: attaching mtd0 [ 301.532555][T10831] ubi0: scanning is finished [ 301.542842][T10827] bonding: bond0 is being deleted... [ 301.550476][T10827] bond0 (unregistering): Released all slaves [ 301.683428][T10833] bonding: bon is being created... [ 301.794160][T10831] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 301.794185][T10831] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 301.794201][T10831] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 301.794216][T10831] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 301.794233][T10831] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 301.794248][T10831] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 301.794264][T10831] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 301.794281][T10831] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 301.794875][T10841] ubi0: background thread "ubi_bgt0d" started, PID 10841 [ 301.794960][T10832] ubi0: detaching mtd0 [ 301.799468][T10832] ubi0: mtd0 is detached [ 303.436937][T10868] bonding: unable to delete non-existent bond0 [ 303.437420][T10868] bonding: bond0 is being created... [ 305.468090][ T854] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 305.517818][T10903] exFAT-fs (nbd3): unable to read boot sector [ 305.517829][T10903] exFAT-fs (nbd3): failed to read boot sector [ 305.517834][T10903] exFAT-fs (nbd3): failed to recognize exfat type [ 305.562674][T10912] kAFS: unable to lookup cell 'syz0' [ 305.646767][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 305.647444][ T854] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.648412][ T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.648425][ T854] usb 6-1: config 0 has no interfaces? [ 305.650153][ T854] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.650167][ T854] usb 6-1: Product: syz [ 305.650174][ T854] usb 6-1: Manufacturer: syz [ 305.650181][ T854] usb 6-1: SerialNumber: syz [ 305.651708][ T854] usb 6-1: config 0 descriptor?? [ 306.145721][ T854] usb 6-1: USB disconnect, device number 30 [ 307.225143][T10943] exFAT-fs (nbd1): unable to read boot sector [ 307.225158][T10943] exFAT-fs (nbd1): failed to read boot sector [ 307.225166][T10943] exFAT-fs (nbd1): failed to recognize exfat type [ 307.310903][T10945] exFAT-fs (nbd0): unable to read boot sector [ 307.310914][T10945] exFAT-fs (nbd0): failed to read boot sector [ 307.310919][T10945] exFAT-fs (nbd0): failed to recognize exfat type [ 307.535782][T10956] kAFS: unable to lookup cell 'syz0' [ 307.878860][T10937] orangefs_mount: mount request failed with -4 [ 308.244306][ T43] audit: type=1326 audit(1790785225.359:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.3.1021" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 309.281758][T10983] exFAT-fs (nbd2): unable to read boot sector [ 309.281773][T10983] exFAT-fs (nbd2): failed to read boot sector [ 309.281781][T10983] exFAT-fs (nbd2): failed to recognize exfat type [ 309.293299][T10987] ubi0: attaching mtd0 [ 309.294561][T10987] ubi0: scanning is finished [ 309.317084][T10989] kAFS: unable to lookup cell 'syz0' [ 309.429700][T10996] kAFS: unable to lookup cell 'syz0' [ 309.469705][T10998] kAFS: unable to lookup cell 'syz0' [ 309.497526][T10987] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 309.497552][T10987] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 309.497568][T10987] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 309.497584][T10987] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 309.497599][T10987] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 309.497613][T10987] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 309.497629][T10987] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 309.497650][T10987] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 309.499969][T11001] ubi0: background thread "ubi_bgt0d" started, PID 11001 [ 309.500112][T10990] ubi0: detaching mtd0 [ 309.502599][T10990] ubi0: mtd0 is detached [ 309.557846][ T43] audit: type=1326 audit(1790785226.679:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1034" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 309.953195][T10979] orangefs_mount: mount request failed with -4 [ 309.990599][T11017] kAFS: unable to lookup cell 'syz0' [ 311.126806][T11031] kAFS: unable to lookup cell 'syz0' [ 311.585862][T11041] exFAT-fs (nbd3): unable to read boot sector [ 311.585878][T11041] exFAT-fs (nbd3): failed to read boot sector [ 311.585886][T11041] exFAT-fs (nbd3): failed to recognize exfat type [ 311.637730][T11045] kAFS: unable to lookup cell 'syz0' [ 311.909138][ T43] audit: type=1326 audit(1790785229.029:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11047 comm="syz.2.1049" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 312.229068][T11034] orangefs_mount: mount request failed with -4 [ 312.302769][T11052] ubi0: attaching mtd0 [ 312.317354][T11052] ubi0: scanning is finished [ 312.490969][T11052] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 312.490995][T11052] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 312.491011][T11052] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 312.491026][T11052] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 312.491041][T11052] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 312.491057][T11052] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 312.491072][T11052] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 312.491090][T11052] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 312.491160][T11054] ubi0: background thread "ubi_bgt0d" started, PID 11054 [ 312.494393][T11053] ubi0: detaching mtd0 [ 312.531970][T11053] ubi0: mtd0 is detached [ 312.659371][T11058] ubi0: attaching mtd0 [ 312.661119][T11058] ubi0: scanning is finished [ 312.791431][T11058] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 312.791449][T11058] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 312.791459][T11058] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 312.791468][T11058] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 312.791481][T11058] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 312.791494][T11058] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 312.791507][T11058] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 312.791524][T11058] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 312.792840][T11064] ubi0: background thread "ubi_bgt0d" started, PID 11064 [ 312.794523][T11061] ubi: mtd0 is already attached to ubi0 [ 312.794685][T11062] ubi0: detaching mtd0 [ 312.798218][T11062] ubi0: mtd0 is detached [ 312.935853][T11069] exFAT-fs (nbd1): unable to read boot sector [ 312.935868][T11069] exFAT-fs (nbd1): failed to read boot sector [ 312.935876][T11069] exFAT-fs (nbd1): failed to recognize exfat type [ 313.140178][T11082] exFAT-fs (nbd2): unable to read boot sector [ 313.140189][T11082] exFAT-fs (nbd2): failed to read boot sector [ 313.140194][T11082] exFAT-fs (nbd2): failed to recognize exfat type [ 313.374977][T11090] exFAT-fs (nbd1): unable to read boot sector [ 313.374990][T11090] exFAT-fs (nbd1): failed to read boot sector [ 313.374995][T11090] exFAT-fs (nbd1): failed to recognize exfat type [ 313.718408][T11073] orangefs_mount: mount request failed with -4 [ 313.769303][T11096] ubi0: attaching mtd0 [ 313.770200][T11096] ubi0: scanning is finished [ 313.831002][T11100] smc: net device vlan1 applied user defined pnetid SYZ2 [ 313.933512][T11096] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 313.933538][T11096] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 313.933554][T11096] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 313.933570][T11096] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 313.933588][T11096] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 313.933604][T11096] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 313.933619][T11096] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 313.933638][T11096] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 313.933862][T11099] ubi0: detaching mtd0 [ 313.969958][T11099] ubi0: mtd0 is detached [ 314.057647][T11088] orangefs_mount: mount request failed with -4 [ 314.387529][T11109] TC_ACT_REPEAT abuse ? [ 314.397224][T11110] TC_ACT_REPEAT abuse ? [ 314.600369][T11107] syzkaller0: entered promiscuous mode [ 314.602774][T11107] syzkaller0: entered allmulticast mode [ 314.845174][T11122] exFAT-fs (nbd3): unable to read boot sector [ 314.845186][T11122] exFAT-fs (nbd3): failed to read boot sector [ 314.845191][T11122] exFAT-fs (nbd3): failed to recognize exfat type [ 315.224658][T11134] exFAT-fs (nbd1): unable to read boot sector [ 315.224673][T11134] exFAT-fs (nbd1): failed to read boot sector [ 315.224681][T11134] exFAT-fs (nbd1): failed to recognize exfat type [ 316.081834][T11141] bonding: bond0 is being created... [ 316.174445][T11148] ubi0: attaching mtd0 [ 316.175330][T11148] ubi0: scanning is finished [ 316.270497][T11148] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 316.270515][T11148] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 316.270525][T11148] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 316.270534][T11148] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 316.270543][T11148] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 316.270553][T11148] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 316.270562][T11148] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 316.270573][T11148] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 316.270646][T11150] ubi0: background thread "ubi_bgt0d" started, PID 11150 [ 316.270661][T11149] ubi0: detaching mtd0 [ 316.272311][T11149] ubi0: mtd0 is detached [ 316.628179][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.628213][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.352096][T11160] 9pnet_fd: p9_fd_create_tcp (11160): problem connecting socket to 127.0.0.1 [ 317.667293][T11184] kAFS: unable to lookup cell 'syz0' [ 317.714889][T11181] bonding: bond0 is being created... [ 317.715454][T11181] bonding: bond0 already exists [ 317.778206][ T43] audit: type=1326 audit(1790785234.899:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.0.1089" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 318.687245][T11204] team0: entered allmulticast mode [ 318.687261][T11204] team_slave_0: entered allmulticast mode [ 318.687272][T11204] team_slave_1: entered allmulticast mode [ 318.725814][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1091'. [ 319.049389][T11220] FAULT_INJECTION: forcing a failure. [ 319.049389][T11220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.049411][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.0.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.049439][T11220] Tainted: [L]=SOFTLOCKUP [ 319.049444][T11220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.049451][T11220] Call Trace: [ 319.049455][T11220] [ 319.049460][T11220] dump_stack_lvl+0x100/0x190 [ 319.049479][T11220] should_fail_ex.cold+0x5/0xa [ 319.049494][T11220] _copy_from_user+0x2e/0xd0 [ 319.049511][T11220] drm_ioctl+0x520/0xc60 [ 319.049525][T11220] ? __pfx_drm_setversion+0x10/0x10 [ 319.049536][T11220] ? __pfx_drm_ioctl+0x10/0x10 [ 319.049557][T11220] drm_compat_ioctl+0x386/0x4c0 [ 319.049572][T11220] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 319.049586][T11220] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 319.049606][T11220] __do_fast_syscall_32+0x13a/0x8b0 [ 319.049620][T11220] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.049634][T11220] do_fast_syscall_32+0x32/0x70 [ 319.049648][T11220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.049662][T11220] RIP: 0023:0xf7f24fec [ 319.049675][T11220] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 319.049680][T11220] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 319.049691][T11220] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0106407 [ 319.049698][T11220] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.049704][T11220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.049711][T11220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.049717][T11220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.049731][T11220] [ 319.276948][ T5844] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 319.300912][ T7028] IPVS: starting estimator thread 0... [ 319.386595][T11231] IPVS: using max 39 ests per chain, 93600 per kthread [ 319.427295][ T5844] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 319.428458][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.673879][ T5844] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 2a:54:c5:18:64:3b [ 320.289032][T11253] exFAT-fs (nbd1): unable to read boot sector [ 320.289042][T11253] exFAT-fs (nbd1): failed to read boot sector [ 320.289047][T11253] exFAT-fs (nbd1): failed to recognize exfat type [ 320.481628][ T6729] usb 7-1: USB disconnect, device number 27 [ 320.489420][ T6729] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 320.887182][ T43] audit: type=1326 audit(1790785238.009:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.0.1113" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 320.978791][T11249] orangefs_mount: mount request failed with -4 [ 321.089373][T11287] batman_adv: batadv0: Adding interface: syzkaller0 [ 321.089385][T11287] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.089400][T11287] batman_adv: batadv0: Interface activated: syzkaller0 [ 321.113269][T11285] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 321.124123][T11285] batman_adv: batadv0: Removing interface: syzkaller0 [ 321.160500][T11293] sit1: entered promiscuous mode [ 321.202283][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1121'. [ 321.274267][T11301] exFAT-fs (nbd3): unable to read boot sector [ 321.274278][T11301] exFAT-fs (nbd3): failed to read boot sector [ 321.274283][T11301] exFAT-fs (nbd3): failed to recognize exfat type [ 321.280699][T11305] kAFS: unable to lookup cell 'syz0' [ 321.357537][T11311] mmap: syz.2.1127 (11311) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 321.457036][T11318] FAULT_INJECTION: forcing a failure. [ 321.457036][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 321.457060][T11318] CPU: 0 UID: 0 PID: 11318 Comm: syz.3.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.457078][T11318] Tainted: [L]=SOFTLOCKUP [ 321.457082][T11318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.457089][T11318] Call Trace: [ 321.457093][T11318] [ 321.457098][T11318] dump_stack_lvl+0x100/0x190 [ 321.457117][T11318] should_fail_ex.cold+0x5/0xa [ 321.457135][T11318] should_failslab+0xc2/0x120 [ 321.457153][T11318] __kmalloc_noprof+0xfc/0x840 [ 321.457167][T11318] ? rcu_is_watching+0x13/0xc0 [ 321.457181][T11318] ? tomoyo_realpath_from_path+0xb6/0x690 [ 321.457199][T11318] tomoyo_realpath_from_path+0xb6/0x690 [ 321.457217][T11318] tomoyo_path_number_perm+0x23c/0x580 [ 321.457228][T11318] ? tomoyo_path_number_perm+0x22e/0x580 [ 321.457240][T11318] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.457252][T11318] ? futex_wait+0x11e/0x370 [ 321.457270][T11318] ? __lock_acquire+0x5c0/0x1f40 [ 321.457293][T11318] ? __fget_files+0x34/0x3d0 [ 321.457308][T11318] ? find_held_lock+0x2b/0x80 [ 321.457322][T11318] ? __fget_files+0x215/0x3d0 [ 321.457335][T11318] ? hook_file_ioctl_common+0x140/0x440 [ 321.457348][T11318] ? __fget_files+0x215/0x3d0 [ 321.457364][T11318] ? __fget_files+0x21f/0x3d0 [ 321.457380][T11318] security_file_ioctl_compat+0xd3/0x230 [ 321.457393][T11318] __ia32_compat_sys_ioctl+0xc2/0x360 [ 321.457408][T11318] __do_fast_syscall_32+0x13a/0x8b0 [ 321.457425][T11318] do_fast_syscall_32+0x32/0x70 [ 321.457440][T11318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.457454][T11318] RIP: 0023:0xf704efec [ 321.457467][T11318] Code: Unable to access opcode bytes at 0xf704efc2. [ 321.457473][T11318] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 321.457485][T11318] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080186e84 [ 321.457493][T11318] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.457501][T11318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.457507][T11318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.457514][T11318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.457528][T11318] [ 321.457533][T11318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.506996][T11344] kAFS: unable to lookup cell 'syz0' [ 323.463013][T11367] kAFS: unable to lookup cell 'syz0' [ 324.874184][T11393] kAFS: unable to lookup cell 'syz0' [ 325.276812][T11400] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 325.277253][T11400] ALSA: mixer_oss: invalid index 137438 [ 325.906162][T11428] kAFS: unable to lookup cell 'syz0' [ 326.240495][T11439] ubi0: attaching mtd0 [ 326.241534][T11439] ubi0: scanning is finished [ 327.031570][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 327.031594][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 327.070596][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 327.070621][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 327.070637][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x10e9 instead [ 327.070653][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd504 instead [ 327.070668][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 327.070683][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 327.070697][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 327.070717][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 327.070746][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 327.070777][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 327.070792][T11447] jffs2: Further such events for this erase block will not be printed [ 327.071135][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 327.071153][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 327.071171][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x10e9 instead [ 327.071192][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd504 instead [ 327.071208][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 327.071223][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 327.071237][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 327.071256][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 327.071286][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 327.071315][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 327.071329][T11447] jffs2: Further such events for this erase block will not be printed [ 327.071695][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 327.071715][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 327.071733][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x10e9 instead [ 327.071754][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd504 instead [ 327.071802][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 327.071817][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 327.071835][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x10e9 instead [ 327.071852][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd504 instead [ 327.071945][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 327.071961][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 327.071976][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x10e9 instead [ 327.071994][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd504 instead [ 327.072045][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 327.072059][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 327.072075][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x10e9 instead [ 327.072092][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd504 instead [ 327.072139][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 327.072154][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 327.072170][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x10e9 instead [ 327.072187][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd504 instead [ 327.072226][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 327.072242][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 327.072258][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x10e9 instead [ 327.072275][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd504 instead [ 327.073767][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 327.073795][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 327.073816][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x10e9 instead [ 327.073836][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd504 instead [ 327.073883][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 327.073898][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 327.073913][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x10e9 instead [ 327.073931][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd504 instead [ 327.073978][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 327.073993][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 327.074099][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x10e9 instead [ 327.074193][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd504 instead [ 327.074261][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 327.074282][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 327.074300][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x10e9 instead [ 327.074318][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd504 instead [ 327.074364][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 327.074379][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 327.074396][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x10e9 instead [ 327.074414][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd504 instead [ 327.074454][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 327.074467][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 327.074480][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x10e9 instead [ 327.074494][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd504 instead [ 327.074529][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 327.074542][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 327.074557][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x10e9 instead [ 327.074572][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd504 instead [ 327.074616][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 327.074630][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 327.074644][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x10e9 instead [ 327.074660][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd504 instead [ 327.074705][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 327.074719][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 327.074734][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x10e9 instead [ 327.074751][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd504 instead [ 327.074791][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 327.074805][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 327.074821][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x10e9 instead [ 327.074837][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd504 instead [ 327.074897][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 327.074909][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 327.074923][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x10e9 instead [ 327.074938][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd504 instead [ 327.074982][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 327.074996][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 327.075012][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x10e9 instead [ 327.075027][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd504 instead [ 327.075071][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 327.075085][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 327.075100][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x10e9 instead [ 327.075117][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd504 instead [ 327.075159][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 327.075173][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 327.075188][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x10e9 instead [ 327.075205][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd504 instead [ 327.075249][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 327.075263][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 327.075278][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x10e9 instead [ 327.075295][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd504 instead [ 327.075339][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 327.075353][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 327.075368][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x10e9 instead [ 327.075435][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd504 instead [ 327.075486][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 327.075499][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 327.075513][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x10e9 instead [ 327.075527][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd504 instead [ 327.075564][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 327.075577][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 327.075591][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x10e9 instead [ 327.075606][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd504 instead [ 327.075651][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 327.075666][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 327.075685][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x10e9 instead [ 327.075700][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd504 instead [ 327.075740][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 327.075757][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 327.075773][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x10e9 instead [ 327.075791][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd504 instead [ 327.075848][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 327.075927][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 327.075945][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x10e9 instead [ 327.075963][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd504 instead [ 327.076014][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 327.076033][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 327.076049][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x10e9 instead [ 327.076066][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd504 instead [ 327.076171][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 327.076196][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 327.076212][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x10e9 instead [ 327.076228][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd504 instead [ 327.076270][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 327.076284][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 327.076299][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x10e9 instead [ 327.076315][T11447] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd504 instead [ 327.076347][T11447] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 327.076354][T11447] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 327.094666][T11449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 327.094687][T11449] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 327.095400][T11449] vhci_hcd vhci_hcd.0: Device attached [ 327.112305][T11439] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 327.276706][ T5885] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 327.324258][T11450] vhci_hcd: connection closed [ 327.331382][ T12] vhci_hcd vhci_hcd.1: stop threads [ 327.332628][ T12] vhci_hcd vhci_hcd.1: release socket [ 327.335611][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 327.336645][ T5885] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 327.336722][ T5885] usb 39-1: enqueue for inactive port 0 [ 327.407888][ T5885] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 327.417619][T11473] exFAT-fs (nbd0): unable to read boot sector [ 327.417633][T11473] exFAT-fs (nbd0): failed to read boot sector [ 327.417641][T11473] exFAT-fs (nbd0): failed to recognize exfat type [ 328.061157][T11459] orangefs_mount: mount request failed with -4 [ 328.206098][ T43] audit: type=1326 audit(1790785245.319:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.210892][ T43] audit: type=1326 audit(1790785245.319:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.211554][ T43] audit: type=1326 audit(1790785245.319:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.212948][ T43] audit: type=1326 audit(1790785245.319:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.213479][ T43] audit: type=1326 audit(1790785245.329:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.214609][ T43] audit: type=1326 audit(1790785245.329:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.216104][ T43] audit: type=1326 audit(1790785245.329:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.224043][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.224346][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.232927][ T43] audit: type=1326 audit(1790785245.329:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.249056][ T43] audit: type=1326 audit(1790785245.329:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.257074][ T43] audit: type=1326 audit(1790785245.329:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 328.496719][ T5963] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 328.658226][ T5963] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 328.661144][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 328.661160][ T5963] usb 5-1: Product: syz [ 328.661167][ T5963] usb 5-1: Manufacturer: syz [ 328.661174][ T5963] usb 5-1: SerialNumber: syz [ 328.665024][ T5963] usb 5-1: config 0 descriptor?? [ 328.682780][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.682964][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.757850][T11496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.760235][T11496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.878575][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.878771][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.878837][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.879029][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.885823][ T68] usb 5-1: USB disconnect, device number 28 [ 328.916737][ T5788] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.916779][ T5788] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.916806][ T5788] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.916832][ T5788] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.974272][T11503] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 328.975049][T11503] ALSA: mixer_oss: invalid index 137438 [ 329.099881][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 329.113693][T11507] FAULT_INJECTION: forcing a failure. [ 329.113693][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 329.113727][T11507] CPU: 0 UID: 0 PID: 11507 Comm: syz.1.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.113751][T11507] Tainted: [L]=SOFTLOCKUP [ 329.113757][T11507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.113768][T11507] Call Trace: [ 329.113774][T11507] [ 329.113781][T11507] dump_stack_lvl+0x100/0x190 [ 329.113811][T11507] should_fail_ex.cold+0x5/0xa [ 329.113833][T11507] should_failslab+0xc2/0x120 [ 329.113872][T11507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 329.113899][T11507] ? audit_log_start+0x29d/0x930 [ 329.113938][T11507] audit_log_start+0x29d/0x930 [ 329.113963][T11507] ? __pfx_audit_log_start+0x10/0x10 [ 329.113989][T11507] ? rcu_read_lock_any_held+0x6a/0x90 [ 329.114011][T11507] ? find_held_lock+0x2b/0x80 [ 329.114037][T11507] audit_seccomp+0x60/0x190 [ 329.114059][T11507] __seccomp_filter+0x88c/0x1130 [ 329.114084][T11507] ? __pfx___seccomp_filter+0x10/0x10 [ 329.114109][T11507] ? fput+0x7c/0x100 [ 329.114135][T11507] ? ksys_write+0x1ac/0x250 [ 329.114158][T11507] __seccomp_permit_syscall+0x207/0x2d0 [ 329.114182][T11507] __do_fast_syscall_32+0x420/0x8b0 [ 329.114214][T11507] ? lockdep_hardirqs_on+0x7d/0x110 [ 329.114236][T11507] do_fast_syscall_32+0x32/0x70 [ 329.114258][T11507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.114281][T11507] RIP: 0023:0xf708efec [ 329.114302][T11507] Code: Unable to access opcode bytes at 0xf708efc2. [ 329.114309][T11507] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 329.114327][T11507] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000c80 [ 329.114338][T11507] RDX: 0000000000006200 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.114349][T11507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.114360][T11507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.114371][T11507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.114394][T11507] [ 329.170339][ T5752] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 329.479074][T11513] ubi0: attaching mtd0 [ 329.480788][T11513] ubi0: scanning is finished [ 329.640128][T11513] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 329.640145][T11513] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 329.640155][T11513] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 329.640164][T11513] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 329.640175][T11513] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 329.640184][T11513] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 329.640193][T11513] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3910149034 [ 329.640204][T11513] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 329.641803][T11521] ubi0: background thread "ubi_bgt0d" started, PID 11521 [ 329.781372][T11533] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 329.790739][ T5752] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 329.791092][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 330.454182][T11541] fuse: Bad value for 'fd' [ 330.767227][T11558] IPv6: A: Disabled Multicast RS [ 331.859456][ T5815] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 331.896750][ T854] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 331.909307][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 332.056558][ T854] usb 5-1: Using ep0 maxpacket: 32 [ 332.060110][ T854] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.082035][ T854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.083923][ T854] usb 5-1: config 0 has no interfaces? [ 332.086591][ T5815] usb 7-1: Using ep0 maxpacket: 32 [ 332.093052][ T5815] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.138466][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.138546][ T5815] usb 7-1: config 0 has no interfaces? [ 332.155587][ T854] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.155627][ T854] usb 5-1: Product: syz [ 332.155963][ T854] usb 5-1: Manufacturer: syz [ 332.163106][ T854] usb 5-1: SerialNumber: syz [ 332.259805][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.259822][ T5815] usb 7-1: Product: syz [ 332.259830][ T5815] usb 7-1: Manufacturer: syz [ 332.259888][ T5815] usb 7-1: SerialNumber: syz [ 332.287577][ T854] usb 5-1: config 0 descriptor?? [ 332.479019][ T5815] usb 7-1: config 0 descriptor?? [ 332.689102][T11575] 9pnet_virtio: no channels available for device syz [ 333.416144][ T5815] usb 7-1: USB disconnect, device number 28 [ 333.457555][ T6487] usb 5-1: USB disconnect, device number 29 [ 333.525420][T11620] fuse: Bad value for 'fd' [ 335.443034][ T6487] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.598034][ T6487] usb 5-1: Using ep0 maxpacket: 32 [ 335.598624][ T6487] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.599620][ T6487] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.599634][ T6487] usb 5-1: config 0 has no interfaces? [ 335.602597][ T6487] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.602621][ T6487] usb 5-1: Product: syz [ 335.602635][ T6487] usb 5-1: Manufacturer: syz [ 335.602648][ T6487] usb 5-1: SerialNumber: syz [ 335.605404][ T6487] usb 5-1: config 0 descriptor?? [ 335.664160][T11700] comedi comedi1: Minor 45750 is invalid! [ 335.708309][ T43] kauditd_printk_skb: 162 callbacks suppressed [ 335.708323][ T43] audit: type=1326 audit(1790785252.829:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.3.1248" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 335.748661][ T43] audit: type=1804 audit(1790785252.869:212): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1250" name="/newroot/292/file0" dev="tmpfs" ino=1694 res=1 errno=0 [ 335.816913][ T6487] usb 5-1: USB disconnect, device number 30 [ 336.591542][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 336.766739][T11732] comedi comedi3: pcl816: I/O base address or length out of range [ 337.533396][ T43] audit: type=1326 audit(1790785254.649:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.2.1264" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 337.849469][T11779] fuse: Bad value for 'fd' [ 337.856688][ T854] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 338.026628][ T854] usb 5-1: Using ep0 maxpacket: 32 [ 338.027678][ T854] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 338.028625][ T854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.028637][ T854] usb 5-1: config 0 has no interfaces? [ 338.030528][ T854] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 338.030544][ T854] usb 5-1: Product: syz [ 338.030555][ T854] usb 5-1: Manufacturer: syz [ 338.030567][ T854] usb 5-1: SerialNumber: syz [ 338.033340][ T854] usb 5-1: config 0 descriptor?? [ 338.112404][ T43] audit: type=1800 audit(1790785255.229:214): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1269" name="file1" dev="tmpfs" ino=1888 res=0 errno=0 [ 338.247498][ T6487] usb 5-1: USB disconnect, device number 31 [ 338.642736][T11807] sctp: [Deprecated]: syz.1.1272 (pid 11807) Use of int in max_burst socket option. [ 338.642736][T11807] Use struct sctp_assoc_value instead [ 338.695077][T11807] sctp: [Deprecated]: syz.1.1272 (pid 11807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.695077][T11807] Use struct sctp_sack_info instead [ 338.854559][T11819] 9p: Bad value for 'rfdno' [ 339.056620][ T6487] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 339.184206][ T43] audit: type=1326 audit(1790785256.299:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11829 comm="syz.1.1278" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 339.206625][ T6487] usb 7-1: Using ep0 maxpacket: 32 [ 339.208971][ T6487] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.216751][ T6487] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.216792][ T6487] usb 7-1: config 0 has no interfaces? [ 339.227283][ T6487] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.227322][ T6487] usb 7-1: Product: syz [ 339.227340][ T6487] usb 7-1: Manufacturer: syz [ 339.227375][ T6487] usb 7-1: SerialNumber: syz [ 339.253448][ T6487] usb 7-1: config 0 descriptor?? [ 339.444624][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 340.250885][ T43] audit: type=1800 audit(1790785257.369:216): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1284" name="file1" dev="tmpfs" ino=1759 res=0 errno=0 [ 340.292245][T11860] exFAT-fs (nbd0): unable to read boot sector [ 340.292257][T11860] exFAT-fs (nbd0): failed to read boot sector [ 340.292261][T11860] exFAT-fs (nbd0): failed to recognize exfat type [ 340.333063][ T68] usb 7-1: USB disconnect, device number 29 [ 340.374911][T11863] 9pnet_virtio: no channels available for device syz [ 340.936556][T11849] orangefs_mount: mount request failed with -4 [ 341.166709][ T43] audit: type=1326 audit(1790785258.289:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.3.1293" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 342.127760][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 342.987478][T11905] orangefs_mount: mount request failed with -4 [ 343.076841][ T68] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 343.227084][ T68] usb 6-1: Using ep0 maxpacket: 32 [ 343.228976][ T68] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.232852][ T68] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.233074][ T68] usb 6-1: config 0 has no interfaces? [ 343.266950][ T68] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.267729][ T68] usb 6-1: Product: syz [ 343.268261][ T68] usb 6-1: Manufacturer: syz [ 343.268295][ T68] usb 6-1: SerialNumber: syz [ 343.358410][ T68] usb 6-1: config 0 descriptor?? [ 343.780759][ T43] audit: type=1326 audit(1790785260.899:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1305" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 343.841543][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841688][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841725][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841754][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841783][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841811][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841839][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 343.841880][ T7028] Bluetooth: hci4: Frame reassembly failed (-84) [ 344.549314][T11964] kAFS: unable to lookup cell 'syz0' [ 344.618002][ T42] usb 6-1: USB disconnect, device number 31 [ 345.846995][T11996] kAFS: unable to lookup cell 'syz0' [ 345.897248][ T43] audit: type=1326 audit(1790785263.019:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.0.1319" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24fec code=0x0 [ 345.909080][ T5095] Bluetooth: hci4: command 0xfc11 tx timeout [ 345.909116][ T5752] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 346.465728][T11982] orangefs_mount: mount request failed with -4 [ 346.957553][T12012] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1324'. [ 346.964809][T12012] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.1324'. [ 346.975273][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 346.975293][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1324'. [ 347.384061][T12044] kAFS: unable to lookup cell 'syz0' [ 347.468864][T12049] nvme_fabrics: missing parameter 'nqn=%s' [ 347.473928][T12046] exFAT-fs (nbd1): unable to read boot sector [ 347.473953][T12046] exFAT-fs (nbd1): failed to read boot sector [ 347.473961][T12046] exFAT-fs (nbd1): failed to recognize exfat type [ 347.496803][T12049] FAULT_INJECTION: forcing a failure. [ 347.496803][T12049] name failslab, interval 1, probability 0, space 0, times 0 [ 347.496836][T12049] CPU: 3 UID: 0 PID: 12049 Comm: syz.2.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.496861][T12049] Tainted: [L]=SOFTLOCKUP [ 347.496874][T12049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.496886][T12049] Call Trace: [ 347.496892][T12049] [ 347.496900][T12049] dump_stack_lvl+0x100/0x190 [ 347.496929][T12049] should_fail_ex.cold+0x5/0xa [ 347.496954][T12049] should_failslab+0xc2/0x120 [ 347.496981][T12049] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 347.497007][T12049] ? __d_alloc+0x35/0xa50 [ 347.497037][T12049] __d_alloc+0x35/0xa50 [ 347.497063][T12049] d_alloc+0x4a/0x1e0 [ 347.497089][T12049] lookup_one_qstr_excl+0x171/0x250 [ 347.497106][T12049] ? mnt_want_write+0x164/0x420 [ 347.497129][T12049] filename_create+0x1cf/0x400 [ 347.497151][T12049] ? __pfx_filename_create+0x10/0x10 [ 347.497173][T12049] ? lock_acquire+0x1d1/0x380 [ 347.497201][T12049] ? find_held_lock+0x2b/0x80 [ 347.497225][T12049] filename_mkdirat+0xb9/0x5e0 [ 347.497253][T12049] ? __pfx_filename_mkdirat+0x10/0x10 [ 347.497278][T12049] ? strncpy_from_user+0x19d/0x2d0 [ 347.497306][T12049] ? do_getname+0x191/0x390 [ 347.497326][T12049] __ia32_sys_mkdirat+0x88/0xc0 [ 347.497352][T12049] __do_fast_syscall_32+0x13a/0x8b0 [ 347.497374][T12049] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.497398][T12049] do_fast_syscall_32+0x32/0x70 [ 347.497421][T12049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.497444][T12049] RIP: 0023:0xf7ff7fec [ 347.497464][T12049] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 347.497472][T12049] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 347.497491][T12049] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 347.497503][T12049] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 347.497515][T12049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.497525][T12049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.497536][T12049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.497559][T12049] [ 347.500270][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 347.501023][T12049] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1336'. [ 347.626102][ T6729] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 347.777484][ T6729] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 347.778462][ T6729] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 347.778483][ T6729] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.779382][ T6729] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 347.779401][ T6729] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.780192][ T6729] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 347.780723][ T6729] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.783126][ T6729] usb 5-1: string descriptor 0 read error: -22 [ 347.783179][ T6729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.788379][ T6729] adutux 5-1:168.0: interrupt endpoints not found [ 347.987115][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.987435][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.988241][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.989396][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.137793][T12033] orangefs_mount: mount request failed with -4 [ 348.185077][T12041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 348.205498][T12040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 348.432495][ T42] usb 5-1: USB disconnect, device number 32 [ 348.438710][ T43] audit: type=1804 audit(1790785265.549:220): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1346" name="/newroot/319/file0" dev="tmpfs" ino=1758 res=1 errno=0 [ 348.841123][T12102] Bluetooth: MGMT ver 1.23 [ 349.086297][T12110] FAULT_INJECTION: forcing a failure. [ 349.086297][T12110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.086335][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.0.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.086361][T12110] Tainted: [L]=SOFTLOCKUP [ 349.086368][T12110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.086379][T12110] Call Trace: [ 349.086386][T12110] [ 349.086394][T12110] dump_stack_lvl+0x100/0x190 [ 349.086424][T12110] should_fail_ex.cold+0x5/0xa [ 349.086450][T12110] _copy_from_user+0x2e/0xd0 [ 349.086496][T12110] io_register_resize_rings+0x13b/0x15d0 [ 349.086517][T12110] ? __lock_acquire+0x5c0/0x1f40 [ 349.086545][T12110] ? __might_fault+0xc5/0x140 [ 349.086569][T12110] ? __pfx_io_register_resize_rings+0x10/0x10 [ 349.086625][T12110] ? __fget_files+0x21f/0x3d0 [ 349.086657][T12110] __do_sys_io_uring_register+0xb8f/0x1bc0 [ 349.086683][T12110] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 349.086703][T12110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.086727][T12110] ? __fget_files+0x21f/0x3d0 [ 349.086754][T12110] ? fput+0x7c/0x100 [ 349.086779][T12110] ? ksys_write+0x1ac/0x250 [ 349.086800][T12110] ? __pfx_ksys_write+0x10/0x10 [ 349.086826][T12110] __do_fast_syscall_32+0x13a/0x8b0 [ 349.086848][T12110] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.086872][T12110] do_fast_syscall_32+0x32/0x70 [ 349.086895][T12110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.086918][T12110] RIP: 0023:0xf7f24fec [ 349.086938][T12110] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 349.086946][T12110] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 349.086965][T12110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000021 [ 349.086976][T12110] RDX: 0000000080000440 RSI: 0000000000000001 RDI: 0000000000000000 [ 349.086987][T12110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.086996][T12110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 349.087007][T12110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.087031][T12110] [ 349.413717][T12093] orangefs_mount: mount request failed with -4 [ 350.222192][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2087 [ 350.224139][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 350.253236][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 350.289928][ T7026] Bluetooth: hci4: Frame reassembly failed (-84) [ 350.436188][ T7029] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.442787][ T7028] Bluetooth: hci5: Frame reassembly failed (-84) [ 351.069873][T12171] kAFS: unable to lookup cell 'syz0' [ 351.611470][T12197] kAFS: unable to lookup cell 'syz0' [ 352.306811][ T5738] Bluetooth: hci4: command 0x1003 tx timeout [ 352.307410][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 352.467825][ T5752] Bluetooth: hci5: command 0xfc11 tx timeout [ 352.467913][ T5095] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 352.538867][T12218] FAULT_INJECTION: forcing a failure. [ 352.538867][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 352.538902][T12218] CPU: 3 UID: 0 PID: 12218 Comm: syz.0.1389 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.538929][T12218] Tainted: [L]=SOFTLOCKUP [ 352.538936][T12218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.538948][T12218] Call Trace: [ 352.538955][T12218] [ 352.538963][T12218] dump_stack_lvl+0x100/0x190 [ 352.538993][T12218] should_fail_ex.cold+0x5/0xa [ 352.539019][T12218] should_failslab+0xc2/0x120 [ 352.539048][T12218] kmem_cache_alloc_noprof+0x92/0x6a0 [ 352.539074][T12218] ? do_getname+0x35/0x390 [ 352.539097][T12218] do_getname+0x35/0x390 [ 352.539120][T12218] do_sys_openat2+0xc7/0x1e0 [ 352.539151][T12218] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.539180][T12218] ? __sys_connect+0xe4/0x170 [ 352.539214][T12218] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 352.539242][T12218] __ia32_compat_sys_openat+0x12d/0x210 [ 352.539262][T12218] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 352.539298][T12218] do_int80_emulation+0x166/0x650 [ 352.539327][T12218] asm_int80_emulation+0x1a/0x20 [ 352.539347][T12218] RIP: 0023:0xf71275ab [ 352.539363][T12218] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 352.539382][T12218] RSP: 002b:00000000f53e642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 352.539402][T12218] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f71f19a5 [ 352.539415][T12218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.539425][T12218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.539437][T12218] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.539448][T12218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.539473][T12218] [ 352.649808][T12224] kAFS: unable to lookup cell 'syz0' [ 352.734723][ T43] audit: type=1804 audit(1790785269.849:221): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1394" name="/newroot/356/file0" dev="tmpfs" ino=1957 res=1 errno=0 [ 352.948877][T12246] kAFS: unable to lookup cell 'syz0' [ 352.964108][T12247] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 352.964151][T12247] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1402'. [ 352.964868][T12243] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 353.034600][ T12] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 353.070182][T12256] kAFS: unable to lookup cell 'syz0' [ 353.081555][T12243] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 353.158487][T12258] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 353.509663][T12281] kAFS: unable to lookup cell 'syz0' [ 353.696636][ T68] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 353.856567][ T68] usb 5-1: Using ep0 maxpacket: 32 [ 353.857240][ T68] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 353.858398][ T68] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 353.858429][ T68] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 353.858459][ T68] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 353.858482][ T68] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 353.858504][ T68] usb 5-1: config 0 interface 0 has no altsetting 0 [ 353.861510][ T68] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 353.861532][ T68] usb 5-1: Product: syz [ 353.861545][ T68] usb 5-1: Manufacturer: syz [ 353.861557][ T68] usb 5-1: SerialNumber: syz [ 353.865290][ T68] usb 5-1: config 0 descriptor?? [ 353.880636][ T68] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 353.909706][ T68] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 353.996402][T12290] fuse: blksize only supported for fuseblk [ 353.998559][T12290] overlayfs: failed to resolve './file1/file0': -2 [ 354.090070][T12293] bonding: bon is being created... [ 354.090459][T12293] bonding: bon already exists [ 354.195660][T12299] sctp: [Deprecated]: syz.2.1423 (pid 12299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.195660][T12299] Use struct sctp_sack_info instead [ 354.239526][ T42] usb 5-1: USB disconnect, device number 33 [ 354.244596][T12277] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 354.244747][T12298] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 354.248330][ T42] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 354.654194][T12327] bond0: entered promiscuous mode [ 354.654235][T12327] bond0: entered allmulticast mode [ 354.654492][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.666570][ T68] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 354.847559][ T68] usb 6-1: Using ep0 maxpacket: 32 [ 354.848178][ T68] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.848957][ T68] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.848969][ T68] usb 6-1: config 0 has no interfaces? [ 354.856335][ T68] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.856352][ T68] usb 6-1: Product: syz [ 354.856361][ T68] usb 6-1: Manufacturer: syz [ 354.856368][ T68] usb 6-1: SerialNumber: syz [ 354.859220][ T68] usb 6-1: config 0 descriptor?? [ 354.986997][T12336] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1429'. [ 355.109817][ T42] usb 6-1: USB disconnect, device number 32 [ 355.296621][ T68] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 355.457447][ T68] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 355.457485][ T68] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 355.458906][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.458948][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.458970][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.460345][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.460388][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.460410][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.461688][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.461724][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.461745][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.462843][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.462877][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.462898][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.465115][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.465154][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.465177][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.466595][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.466634][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.466656][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.468295][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.468331][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.468353][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.469886][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.469922][ T68] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.469943][ T68] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.472683][ T68] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 355.472703][ T68] usb 7-1: Product: syz [ 355.472716][ T68] usb 7-1: Manufacturer: syz [ 355.472728][ T68] usb 7-1: SerialNumber: syz [ 355.481132][ T68] usb 7-1: config 0 descriptor?? [ 355.517649][ T68] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 355.989097][T12375] FAULT_INJECTION: forcing a failure. [ 355.989097][T12375] name failslab, interval 1, probability 0, space 0, times 0 [ 355.989132][T12375] CPU: 3 UID: 0 PID: 12375 Comm: syz.0.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.989152][T12375] Tainted: [L]=SOFTLOCKUP [ 355.989156][T12375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.989163][T12375] Call Trace: [ 355.989168][T12375] [ 355.989173][T12375] dump_stack_lvl+0x100/0x190 [ 355.989193][T12375] should_fail_ex.cold+0x5/0xa [ 355.989209][T12375] should_failslab+0xc2/0x120 [ 355.989229][T12375] __kmalloc_cache_noprof+0x91/0x6d0 [ 355.989243][T12375] ? fcloop_alloc_nport.isra.0+0x6c/0x9f0 [ 355.989265][T12375] fcloop_alloc_nport.isra.0+0x6c/0x9f0 [ 355.989282][T12375] ? __lock_acquire+0x5c0/0x1f40 [ 355.989305][T12375] fcloop_create_remote_port+0xb3/0x6c0 [ 355.989324][T12375] ? __pfx_fcloop_create_remote_port+0x10/0x10 [ 355.989345][T12375] ? find_held_lock+0x2b/0x80 [ 355.989359][T12375] ? sysfs_file_kobj+0xe4/0x290 [ 355.989373][T12375] ? sysfs_file_kobj+0xe4/0x290 [ 355.989388][T12375] ? __pfx_fcloop_create_remote_port+0x10/0x10 [ 355.989406][T12375] dev_attr_store+0x58/0x80 [ 355.989421][T12375] ? __pfx_dev_attr_store+0x10/0x10 [ 355.989440][T12375] sysfs_kf_write+0xf2/0x150 [ 355.989457][T12375] kernfs_fop_write_iter+0x3e0/0x5f0 [ 355.989471][T12375] ? __pfx_sysfs_kf_write+0x10/0x10 [ 355.989489][T12375] vfs_write+0x6af/0x1050 [ 355.989504][T12375] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 355.989519][T12375] ? __pfx_vfs_write+0x10/0x10 [ 355.989531][T12375] ? find_held_lock+0x2b/0x80 [ 355.989556][T12375] ksys_write+0x12a/0x250 [ 355.989570][T12375] ? __pfx_ksys_write+0x10/0x10 [ 355.989583][T12375] ? __might_fault+0x111/0x140 [ 355.989600][T12375] __do_fast_syscall_32+0x13a/0x8b0 [ 355.989618][T12375] do_fast_syscall_32+0x32/0x70 [ 355.989634][T12375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.989651][T12375] RIP: 0023:0xf7f24fec [ 355.989663][T12375] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 355.989669][T12375] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 355.989681][T12375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 355.989689][T12375] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.989696][T12375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.989703][T12375] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.989710][T12375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.989728][T12375] [ 356.127036][T12381] syzkaller0: entered promiscuous mode [ 356.127051][T12381] syzkaller0: entered allmulticast mode [ 356.276539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 356.526799][ T43] audit: type=1326 audit(1790785273.649:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1450" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x80000000 [ 356.640642][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1451'. [ 356.676596][ T43] audit: type=1326 audit(1790785273.789:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1452" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 357.351572][T12406] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 357.358680][T12406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.590476][T12412] kAFS: unable to lookup cell 'syz0' [ 357.756059][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 357.756840][ C3] usb 7-1: yurex_control_callback - control failed: -32 [ 357.758940][ T68] usb 7-1: USB disconnect, device number 30 [ 357.773168][ T5095] Bluetooth: hci1: unexpected event for opcode 0x2087 [ 357.773653][ T68] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 357.794133][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 357.811142][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 358.256623][ T68] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 358.277230][ T5844] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 358.426566][ T68] usb 6-1: Using ep0 maxpacket: 32 [ 358.427058][ T68] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 358.428390][ T68] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.428408][ T68] usb 6-1: config 0 has no interfaces? [ 358.429964][ T68] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 358.429976][ T68] usb 6-1: Product: syz [ 358.429983][ T68] usb 6-1: Manufacturer: syz [ 358.429990][ T68] usb 6-1: SerialNumber: syz [ 358.431593][ T68] usb 6-1: config 0 descriptor?? [ 358.456799][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 358.459187][ T5844] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 358.463015][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.463746][ T5844] usb 5-1: config 0 has no interfaces? [ 358.477317][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 358.477370][ T5844] usb 5-1: Product: syz [ 358.477414][ T5844] usb 5-1: Manufacturer: syz [ 358.477456][ T5844] usb 5-1: SerialNumber: syz [ 358.521802][ T5844] usb 5-1: config 0 descriptor?? [ 358.665148][ T5815] usb 6-1: USB disconnect, device number 33 [ 358.689223][ T43] audit: type=1326 audit(1790785275.809:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.3.1465" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 358.731704][T12428] 9pnet_virtio: no channels available for device syz [ 358.855062][T12464] kAFS: unable to lookup cell 'syz0' [ 359.273019][ T5844] usb 5-1: USB disconnect, device number 34 [ 359.396729][ T5815] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 359.547111][ T5815] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 359.547677][ T5815] usb 7-1: config 0 has no interfaces? [ 359.547696][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.549551][ T5815] usb 7-1: config 0 descriptor?? [ 359.804641][ T5815] usb 7-1: USB disconnect, device number 31 [ 360.524732][ T43] audit: type=1326 audit(1790785277.639:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.2.1484" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 362.128866][T12552] MTDSB: Device #1 doesn't appear to exist [ 362.128866][T12552] [ 362.215944][T12554] syzkaller0: entered promiscuous mode [ 362.215965][T12554] syzkaller0: entered allmulticast mode [ 362.479910][T12562] bonding: bond0 is being created... [ 362.480360][T12562] bonding: bond0 already exists [ 362.480412][T12564] bonding: bond0 is being created... [ 362.483378][T12564] bonding: bond0 already exists [ 363.460550][T12570] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1498'. [ 363.820828][T12586] input: syz1 as /devices/virtual/input/input15 [ 363.845118][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 363.845162][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 363.948117][T12595] kAFS: unable to lookup cell 'syz0' [ 364.178515][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 365.106737][ T5095] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 365.519954][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1511'. [ 365.520914][T12618] overlayfs: failed to clone upperpath [ 365.791960][T12635] kAFS: unable to lookup cell 'syz0' [ 366.258035][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.263083][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.301067][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.303854][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.313218][T12647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.313234][T12647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.327095][T12647] veth1_vlan: left promiscuous mode [ 366.329463][T12647] veth0_vlan: left promiscuous mode [ 366.333940][T12647] veth0_vlan: entered promiscuous mode [ 366.336074][T12647] veth1_vlan: entered promiscuous mode [ 366.349766][T12647] veth1_macvtap: left promiscuous mode [ 366.350329][T12647] veth0_macvtap: left promiscuous mode [ 366.351050][T12647] veth0_macvtap: entered promiscuous mode [ 366.351520][T12647] veth1_macvtap: entered promiscuous mode [ 366.376038][T12647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.382460][T12647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.383606][T12647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.402187][T12647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.485950][T12647] 8021q: adding VLAN 0 to HW filter on device bon [ 366.560090][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.560144][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.592308][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.592410][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.712695][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.712969][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.713005][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.713033][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.866974][ T43] audit: type=1326 audit(1790785283.979:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.2.1519" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fec code=0x0 [ 366.947638][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 367.807528][T12673] kAFS: unable to lookup cell 'syz0' [ 368.870515][ T43] audit: type=1326 audit(1790785285.989:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.3.1532" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 369.298069][T12707] 8021q: adding VLAN 0 to HW filter on device bon [ 369.302271][T12707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.190480][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 370.190904][T12721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.191876][T12721] netlink: 'syz.0.1540': attribute type 1 has an invalid length. [ 370.219750][T12721] bond1: option mode: invalid value (9) [ 370.244855][T12721] bond1 (unregistering): Released all slaves [ 370.250187][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'. [ 370.592675][T12745] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 370.596726][T12745] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 370.600839][T12745] CPU: 1 UID: 0 PID: 12745 Comm: syz.0.1545 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.604898][T12745] Tainted: [L]=SOFTLOCKUP [ 370.606430][T12745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.609983][T12745] RIP: 0010:dvb_device_open+0x111/0x3b0 [ 370.611871][T12745] Code: 00 0f 85 4c 02 00 00 4c 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 e0 ad e0 f9 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 75 02 00 00 49 8b 7d 00 e8 3c df c8 f9 31 ff 89 [ 370.618392][T12745] RSP: 0000:ffffc90004ff7938 EFLAGS: 00010206 [ 370.620627][T12745] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900077a2000 [ 370.623332][T12745] RDX: 0000000000000003 RSI: ffffffff882ae310 RDI: ffff888025c0c218 [ 370.625753][T12745] RBP: ffff888025c0c200 R08: 0000000000000001 R09: fffffbfff20b48c5 [ 370.628200][T12745] R10: ffffffff905a462f R11: 0000000000000001 R12: ffff888014410e00 [ 370.630842][T12745] R13: 0000000000000018 R14: ffff888025849360 R15: ffff888014410e48 [ 370.633847][T12745] FS: 0000000000000000(0000) GS:ffff888096a55000(0063) knlGS:00000000f53e6b40 [ 370.636820][T12745] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 370.638846][T12745] CR2: 00000000f739ff64 CR3: 0000000029214000 CR4: 0000000000352ef0 [ 370.641228][T12745] Call Trace: [ 370.642316][T12745] [ 370.643232][T12745] ? __pfx_dvb_device_open+0x10/0x10 [ 370.644862][T12745] chrdev_open+0x234/0x6a0 [ 370.646282][T12745] ? __pfx_apparmor_file_open+0x10/0x10 [ 370.648394][T12745] ? __pfx_chrdev_open+0x10/0x10 [ 370.650267][T12745] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 370.652533][T12745] do_dentry_open+0x6ab/0x14d0 [ 370.654327][T12745] ? __pfx_chrdev_open+0x10/0x10 [ 370.656207][T12745] vfs_open+0x82/0x3f0 [ 370.657797][T12745] path_openat+0x19fa/0x2440 [ 370.659412][T12745] ? __pfx_path_openat+0x10/0x10 [ 370.660925][T12745] do_file_open+0x20e/0x430 [ 370.662446][T12745] ? __pfx_do_file_open+0x10/0x10 [ 370.664232][T12745] ? _raw_spin_unlock+0x28/0x50 [ 370.666094][T12745] ? alloc_fd+0x471/0x7a0 [ 370.667700][T12745] do_sys_openat2+0x10f/0x1e0 [ 370.669620][T12745] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.671559][T12745] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 370.673650][T12745] __ia32_compat_sys_openat+0x12d/0x210 [ 370.675670][T12745] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 370.677523][T12745] do_int80_emulation+0x166/0x650 [ 370.679088][T12745] asm_int80_emulation+0x1a/0x20 [ 370.680896][T12745] RIP: 0023:0xf71275ab [ 370.682414][T12745] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 370.689655][T12745] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 370.692653][T12745] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 370.695753][T12745] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.699172][T12745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.702416][T12745] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.704883][T12745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.707281][T12745] [ 370.708261][T12745] Modules linked in: [ 370.709844][T12745] ---[ end trace 0000000000000000 ]--- [ 370.713923][T12745] RIP: 0010:dvb_device_open+0x111/0x3b0 [ 370.713947][T12745] Code: 00 0f 85 4c 02 00 00 4c 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 e0 ad e0 f9 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 75 02 00 00 49 8b 7d 00 e8 3c df c8 f9 31 ff 89 [ 370.713959][T12745] RSP: 0000:ffffc90004ff7938 EFLAGS: 00010206 [ 370.713970][T12745] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900077a2000 [ 370.713979][T12745] RDX: 0000000000000003 RSI: ffffffff882ae310 RDI: ffff888025c0c218 [ 370.713986][T12745] RBP: ffff888025c0c200 R08: 0000000000000001 R09: fffffbfff20b48c5 [ 370.713994][T12745] R10: ffffffff905a462f R11: 0000000000000001 R12: ffff888014410e00 [ 370.714002][T12745] R13: 0000000000000018 R14: ffff888025849360 R15: ffff888014410e48 [ 370.714010][T12745] FS: 0000000000000000(0000) GS:ffff888096a55000(0063) knlGS:00000000f53e6b40 [ 370.714036][T12745] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 370.714045][T12745] CR2: 00007f56d883ead0 CR3: 0000000029214000 CR4: 0000000000352ef0 [ 370.714054][T12745] Kernel panic - not syncing: Fatal exception [ 370.745563][T12745] Kernel Offset: disabled [ 370.746875][T12745] Rebooting in 86400 seconds..