last executing test programs: 1m14.741664599s ago: executing program 2 (id=4058): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 1m14.644507981s ago: executing program 2 (id=4061): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1m14.589996865s ago: executing program 2 (id=4064): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m14.524948727s ago: executing program 2 (id=4068): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m14.49913612s ago: executing program 2 (id=4070): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 1m14.375324893s ago: executing program 2 (id=4071): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r2, 0x4000}, {r2, 0x4044}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x0, 0x0}) 1m14.34722981s ago: executing program 32 (id=4071): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r2, 0x4000}, {r2, 0x4044}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x0, 0x0}) 7.382849834s ago: executing program 3 (id=4804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3681}, 0xfffffc6c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de62561093836642fa7880000000000330b5541502f07b4001a0000000000000000000000000000bf2100"}, 0xd8) 6.681547319s ago: executing program 3 (id=4806): socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) getgroups(0x1, &(0x7f0000000280)=[0xee00]) setregid(r2, r2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 6.582098537s ago: executing program 3 (id=4807): syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r1, 0x0, 0x0) 6.537143063s ago: executing program 0 (id=4810): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 5.501369222s ago: executing program 3 (id=4816): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.499717257s ago: executing program 0 (id=4824): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000423) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x1000000002, 0xfffffffffffff804, 0x0, 0x0, 0xd, 0x2000000000001, 0x6, 0x2, 0x1, 0xc], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.311573047s ago: executing program 0 (id=4828): syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) ptrace(0x11, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4.272858929s ago: executing program 3 (id=4826): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @local}, 0x8) close(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000080)={0x2, 0x1, 0x102, 0x8, 'syz0\x00', 0x210002}) 2.888123372s ago: executing program 4 (id=4838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x31, 0xfffffffc, 0x7}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 2.813262466s ago: executing program 1 (id=4839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 2.483144661s ago: executing program 1 (id=4840): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0xffffffff, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x1000, 0x7ffe, 0xfffffffe, 0x400c, 0x5, "50ffffffa775cc338600", 0x70000001, 0x5}) read(r0, &(0x7f00000005c0)=""/227, 0x25) 2.424856553s ago: executing program 1 (id=4841): pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.213976433s ago: executing program 1 (id=4842): socket$nl_rdma(0x10, 0x3, 0x14) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.054829222s ago: executing program 4 (id=4843): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) 1.704106845s ago: executing program 1 (id=4844): syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r1, 0x0, 0x0) 1.512094716s ago: executing program 0 (id=4845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 1.511501419s ago: executing program 4 (id=4846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.370776079s ago: executing program 4 (id=4847): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000500)="39c394f705916c4516999da286dd", 0xe, 0x4044855, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.30418364s ago: executing program 0 (id=4848): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1.09349172s ago: executing program 4 (id=4849): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x47f, 0xf}]) dup3(r2, r0, 0x80000) 817.343466ms ago: executing program 0 (id=4850): prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 102.123677ms ago: executing program 4 (id=4851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x20002, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048c00}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 100.022787ms ago: executing program 1 (id=4859): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioperm(0x8, 0xa8, 0x9) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 3 (id=4852): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "94365e3897f9956a1f4a25101206b90155ada6bcd510f70d5223c2a6c22b8c3b2c625efa5f9ca0da7c0cee3f4d5dcb666aaaef502967f72000938911603036cf35b4510deeac535808a6acca63eb0dce3ca160d3bd6ffb1651c26b8001022aeb2330375e078f81dfa0e663c9992663cf951edd5b2e9591de5e29c1b35d7c8a222ec0fee83e64ff2a8853ed73a0ecde4ae8598ef39c2dac74471cb718df387927cd58827e3ce5cf57dcdf69a29c36ec845106a59f29c840446b2ad9aea0763b12f605e938d6682b804c183af35dbec08ad98f2ef75fdd7e270b83d9a1ee0ff884e54ea2ce610df936c1db1bbfe001c4679b27f816d6abd05d0fe83cc4f7b2d80a97c2d0713016243cfe954da350ccdaffbc90ede40b4dd3e0cda49e98ec645418cffeb60f9d3273a98ff58565a26d0218f3dc41cc3ad3f2e3cd7fbf7175ab3a7081b4289f7aba01ccf8f8109b0f1bc382818c2e06338084f5f27b649fe7dd82e810c4f0dff03ed54f968238ab1bd171eedf96698615483fc8c9fa5b4a334b497d6f4dfb83a5b9047a14897c61b153739596d7884035c976b294ab6e72c8cbd41453af7f34172b84492fe6f6d2c12865ebcfeb8748d8c26c30e2ad88f2908ffa60baffbde4b2a2b4c50c0aa07b1595d6a8d44855bbbaf145ab47cf61c4bdd0507f04f9e100dec3469dbcfd2fca530d776f0baa1e56c5bf0bee12e4f53ac328bc82f76385bd68ab1274866cbebb7a66406dfba6332b610c12fea8ae305eae869c624f218b9f8754e25f531e05c942b8ae7af16cf41b4a4740fa38b48d30473da57e6f648705b9f7caa21aa542f6f1cb32f09e302451b1aeb149abc94e89ac3c3c57b8dfc4c600c9eaa440188b77a6a0dfd795b781c6f0e74c28735829fad6a70d9e513d91c922b523bcd4b839a9a8ffb2b3275e9d24ea9dda040e9e9bdc92e722a94ae7e476ec88217f584176d15dd59910b6b4823ca31342d50c9a67f8d5eb14891c064a8fd85aa20d1646762219f45f907e975bec7a448113efcdbdfdf7a0b80569d231931fba1cceff354302b09c1b38d892ec7e2e8b388dba73160f03cc3545c78d285a3b9516e8cd7b879170b0ac0e889d03af85a8ef7e9e5f1b5f31b6783772e5df09938d8c5e16e3a18e1d6e1075f27e18eb7c057bede22dbff3d83b3c94c9943b5529447d02d553736d310ba441a6687a5eb08a54d98b566a3aa9cad5cab36ea15468d6eab0def96c9f56863cf8e8a6c3d013d3a9b748dfb078dbfab9aed64cc71ef86490db1df8becc68d9c0017a9209cb9c1599f13b9429af54e26f346850fe17deeb69d2fc1e39abf75669a43679ed18f6717e14fbbde15eaedfbeaad4a794737b7963d858444582ca46daf320868c5fd818226b077290aa6e6271cedd791a00a57ebe959c6b2f6e516b364edcf113665d966cb17a6da70bcd85b06fe758c704a9b2d46774b146d83769b804304fd6011ca8c5f995566e18216b10660d4682b5523a6efb883fdb30f5085f4d80c8a099fbd939d42e78a85f5e6dee146fd37ef7aec3a337eb12f7120150aa483fe7ea0015353390e7cb8e3795ee8d9ca52c25e309c2ffda454a12e4a0e937d070e69903607ad4925e0e581a25f2e98c1a73454a24f532fdd54da9f3318a74ab1bcb681166395fc88faa2905090d582f650197c3c266b8b3967e8b1b7b87d30d648ca1b0c59035159c4ba8e6e733ad2283fb3fede1e015bf2c873487ff8eb75461556d855ac7a1d631813f1c29d7e42b31b24faf15fbd4f724411b38a92016992d7a9e059e7f82cc333747c15674158035c168ffef7f16c4f3f13f04e0679567236a956b18ec88e102dba91bc34cf3d40a7bdeae5bbeb5dc400c79870c80fb8ffe6832fcfad34d5dc9453dd3d1ad0dc81fb15cc05318a83909717a58fb79a5c6a75c52ad82e7505eab0221fbdf369572d5674126962c1d010c6e5cfee741fc1639a8dcaa8cf9409d3a60a9449b1821aab650f02d90edd9eb76ff9c75893668db0b325fc2509fe3152a9541812e6e1e3e3f56219256e43b351c03175a10ae4fff97e05f484e1740430a01b834e65051867b06e00a86b040130e08eaff6c242c96c947cb52c18a985d9edd000f82b83c8ea0287466e9eba3bfcfef4ea7f5ead95fbe3b7decc4aeec108c4df1701b19547ee92c927df007527eeb6de23f17c0184bf923d95e716d941181d44feee49e116a0eb8dd11e47bc5e125475e73629e3f135a96dab6c77e2abc4ed0b7e7e97e4fd8081969d87bb869e9c9f8b48e3e07fceaba3317ba56bfc923a6b17d48deace88d1f6e61fc60574ec50ff1da5965973ac6c1ac695ece5b26b3577a867e69f7a70a5cbb5e2fe5faf5c9dd15919f4cfa65a17256e9ec07cac107631e5ffbe2774bd7af8a2a0e85f4d7cf2722a842d2d9b65e25295736c789742300aa3aac499e4af42cbcc3690a4df1868d1de6581e1d21c26d140941845b439e22662310f156b046090e92ef48f3886eab47d1319af7645859093adaa049b43369f8f457b54e193f6156ff40537c62838e17696cf7ef26b90b8bdc580d251ceec99453ca72c5e29c463910bb3f862dc199b65c4e7c9cf372c07b3e38d98652f6626564884b47c970c5aa45efb29b754efe6a09600700187d53a71e0758fd859d2110b90a02538832ab223206396d84bc14e6b55eb073130cf7b5d979e8e83950a1b80c9ea5586c4441a05bc41d843866c0d10193fe6486a6738fb858033257be0e1ae8624d5ac38553cf163c04af03cb78dd775b75883ef2330237adf5d65282d1491d8779674b8cc56750ed63e58a80915ca921ee46b4849d08674f624beb2be7376181713fc8d7125e429a2e5d46b99ebfdbac465a32bb7868d0e28f2c08b203edc9009fb935a3ae7a9b90bedc7ed03680530505044db11fc19e4d5794c06d84474c4fbd4975a1bfec9563094d392bf7b493c0ef9e5babe3128cd246d7e4cc9e99c5de07b92a949b34e228237c4521e6b10c5a7224a687ab43970a9e9eab029cefda25795c7f02a9e6240f0fab7c710a0450d1ca1b9f81558581a474ce7f069164d49afdc1de21c5d5c6bef4adc95e98ff2b6f3ce46bc7db1b5622424741863777b8eb114e3c8fbfdc6733116c1b20b6c3a8276a49447db86b896dfccdd2aa7cf62555075e155d6194fe9705449b6273aba2831eb32d0d382ec61f498998e2fa18da12199550113ffb374c495714c84178d6ad7cd7e13b2efc4a4964f064a9d8febbbe239231e245a37756d766fb30d5ab309bda56175bcd05b1631a33ff7e7b712d9ca44ff9796de22aa99a491a4e8a6a9f6a6dde0ce3b6c82d1abf4cec5c911ac48517a0e565ba7501d4c5ce458f1470ca5fd56b11839dd50f8271d7afaf1adb08c2a88c6307ddaa83ea8701213a1a065cd214a0158a8e863f31342b9946055ecfc397adb7e6bb6641c02aa28f18bcedb25036f0349e9d030d9f4547a42cc4fc8876b605553171210b09beb8963ff040d8c0ec2acb9036dde4c03197093d3170cdab7af27bf0a0eb72c3db808ae7903254d5c91b6b0d123b0ee6803e943d1a804948db8bf86fad93f3e3a381ef59b3fcabd977a03cc3a0f8543b7ea11523e229db23073f5c350a45394ef967bbdd8750593147618565e47d506c2c2ae8cd79f232a90325e2dcc21df21448a5b390db24931be258d39782d5318cf485740185ecec11aa35b61f41f9625c7805058a1c6dc60bdf495b5ece8b589101ce81497dde706a190b0ebffd3966ce5eefa8e6306de10ec7f63d82c87cf8db7f486fa6816656191b8a42d47624ea487f6e5790fa991fbe62f3599bf8473887980e6e2eb182ccba0a6084d0d37f2c311b8a688addd157fa9b5c8d0174092caaa76aba332fca66521c6b2c75765bedf36bad081442824198c71a74d176218fe7915a861b4b64cc5197a73d30e2d8f90393499d2d3d46ef852d4752d48b04b5352be40726d16ce8bd27b430fb9f082c65a79ac2cbe68b50456d4cbc15a094b3351bcc1138d3ada5608f5dbfe6fae21455b0c88c5c791c75515c31331b0b883c3c9de187aea9b637acb1336a1392ba227be4094eb57a5c9a68e88c71e51b8b42c74cddafde88d82bea9d102ba10145e12ff7fdfe56f4ad794ac03066dbc5ae9c80015d6d23575d09855dc16faa64f22592249996f91021d1c3f8286df99da43ea9946bcbe8abbe1e365e47591310fa1bfe56de9e829e7ce2a1251be421a5e3029d08cb3a8265e693ff86fe646bacf8f4b3abc9a4d5398b9d7af332f5bafbb58c211f05f30e731145d9457e002f37b7e2b98920724209feb50341cc46da34f0783e4a3776612ac5bda58b8278c3f5960d74eec223f867a92cd4e7f34467d984c85dfdb1d8f43bb437cb37e93c5c0113578eb5a6b3a26a28826f7cfa6ad22109c994934506a6dcc36451dc55a0e1affe6cdfbd8d3a3baa558fae4dedf60a0ce7f5a11cf92d31df5580a1a745c17b2a54d93c2f07ba362ee209734b2276101e52b20e59e0ca784927567d70a30c28f9b8c3e525b5ee4848ea79ecde3158f180967f1a18999a1ce6fd327cf9ae47aff20000b6af9af6e75571cafd7fbaa5279e698b1dccd7271b600fe6fbad34dbe25b0bb1608db1b16aef46f45bf5c3812ce7a4d473fb1a6f263b8fa4b80535076cdee6fd0c907696eea792d0a7cc9e19f876703f7ac8f84e24c4d5b8bf64c59c1a5a602193c9b3c2543281bf58021984edcc2241b5dea9f552c3cdfc493f1468bac2c677340b05c61a767d4cfee5acbab27e90fae8e83cc1fe0737791a17b92a4dab1b0c5dde317243eccc4991982f292be5653498c4c5b40ba79312b7627de99613384d9c3bdec513bc2f9bedee645b620fde89f50841408ee3d44398d00b0971f233a762d7e63c4495bf79b3aea4bf18b136f460c6ad6397fe7f972b1f4845ebaba2116323674f157880651b086a94623a35c74d935e787fc0815b670eab5ca66d8098831acb2e1cc9da5aa72b1310a090f78cb3befad409c8f9cc521c656ee61f0c37f90c921480470d539ce0732fa4101c8f92775c5e41adc6c92fee25b12af2926e9559677beda0a777dedb48e741fd5dfd2a5f0335273ac6814657668430e6c0d5ed7e827e2fde6048ef7b35ce63704fe89739ff14392cbb57917de6dbf26a604a84095b7fcafdbc3bbae65d945f3e235a569554929d08aa71d41411f21fc2f3d9235ae7bd1cb5d467faaaa6e4c31adc964a4e14d301c7f3fbd3d72bc15c75676c3f9bbbe3aab66643bf923bdd2b7abbc83ba8dd8c1907f91056084e856e171e16b1ee01e80eec8e2de418165351d2a1432e5d50982e6af8220d60c9e6beb61471f7554e95a761c9f4a78a84bb7bf81f8ef263e54377441f57cb4b383c0a5853dcb168ac431df441e6aa837457ef7c9f265092a7aefa7d7a894d4b282221a411d33f2c6d44b4b377c348ea934d50937eaf3a6d8183dcfc87a22413b62a424dafbd8bdb116e256e2e21770ad8936bd5ba34d108eea8babf82194e2582a1ac4a6d5b790dcfedbccbfd62232f97de5262a9db137c587f44a0b57c9f808278efbf5fb7240957a9c51ec80273ed98febf4103a8b7cc503a80eab21da70e1260a6899210a150142f497f13f2e07f91de40ed6f50557c5dbaeae230805a79bd8888478618a66c1a2079e5508ba98532796bd34bb6da76a30d90a2ff458f6102ac678a203d7f0d2264545e05e61072bc2bf69d400a7a3895dd787ba461c4b294f6aeafa08265d8a029d937bdd2066f0a50ed404db4a35ecc4342"}) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) kernel console output (not intermixed with test programs): n item tag 0x0 [ 408.687727][ T34] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 408.691420][ T34] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 408.695018][ T34] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 408.698032][ T34] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 408.700863][ T34] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 408.731980][ T34] hid-generic 0006:0008:0008.0017: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 408.788408][T17825] fido_id[17825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.911076][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 409.197965][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4651'. [ 409.220164][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4651'. [ 409.328094][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 410.251641][T17880] fuse: fd is not a fuse device [ 410.304947][T17884] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 410.360752][T17884] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 410.365138][T17884] bond12: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 410.373908][T17884] bond12: (slave vxcan1): making interface the new active one [ 410.378013][T17884] bond12: (slave vxcan1): Enslaving as an active interface with an up link [ 410.382649][T17888] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4666'. [ 410.398378][T17884] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.405085][T17884] bond12: (slave vxcan3): Enslaving as a backup interface with an up link [ 410.436254][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 410.440597][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 410.483283][T17892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4668'. [ 410.526410][T17892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4668'. [ 410.574858][T17901] netlink: 'syz.0.4670': attribute type 1 has an invalid length. [ 410.649038][T17901] bond13: (slave veth25): Enslaving as an active interface with a down link [ 410.680445][T17901] netlink: 'syz.0.4670': attribute type 10 has an invalid length. [ 410.682992][T17901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4670'. [ 410.718043][T17907] netlink: 'syz.0.4671': attribute type 4 has an invalid length. [ 410.725081][T17907] netlink: 'syz.0.4671': attribute type 4 has an invalid length. [ 410.781787][T17909] fuse: fd is not a fuse device [ 410.915625][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'. [ 411.015585][T17913] binder: 17912:17913 ioctl c0306201 80000040 returned -14 [ 411.036840][ T7023] Bluetooth: hci3: command 0x0406 tx timeout [ 411.121975][ T29] IPVS: starting estimator thread 0... [ 411.218921][T17916] IPVS: using max 25 ests per chain, 60000 per kthread [ 411.312093][T17931] netlink: 'syz.3.4680': attribute type 1 has an invalid length. [ 411.369391][T17935] overlayfs: failed to clone upperpath [ 411.391114][T17931] bond0: (slave veth13): Enslaving as an active interface with a down link [ 411.436490][T17931] bond0: (slave dummy0): making interface the new active one [ 411.441356][T17931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 411.483147][T17942] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 411.491001][T17942] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 411.494896][T17942] bond3: left promiscuous mode [ 411.496013][T17931] netlink: 'syz.3.4680': attribute type 10 has an invalid length. [ 411.497094][T17942] bridge1: left promiscuous mode [ 411.508774][T17942] bridge1: left allmulticast mode [ 411.511280][T17942] bond4: left promiscuous mode [ 411.513127][T17942] vti0: left promiscuous mode [ 411.515469][T17942] ip6erspan0: left allmulticast mode [ 411.517847][T17942] bond5: left promiscuous mode [ 411.520326][T17942] vti1: left promiscuous mode [ 411.527735][T17942] bond8: left promiscuous mode [ 411.530180][T17942] ip6gre2: left promiscuous mode [ 411.564706][T17942] bond11: left promiscuous mode [ 411.567251][T17942] bond11: left allmulticast mode [ 411.585435][T17931] dummy0: entered promiscuous mode [ 411.597853][T17931] bond0: (slave dummy0): Releasing active interface [ 411.818615][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 411.989171][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 411.995910][ T50] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 411.999699][ T50] usb 9-1: can't read configurations, error -71 [ 412.752403][T17972] kvm: pic: non byte write [ 412.755927][T17972] kvm: pic: non byte write [ 412.764872][T17972] kvm: pic: level sensitive irq not supported [ 412.765799][T17972] kvm: pic: non byte write [ 412.771900][T17972] kvm: pic: non byte write [ 412.774896][T17972] kvm: pic: non byte write [ 412.777450][T17972] kvm: pic: non byte write [ 412.779669][T17972] kvm: pic: non byte write [ 412.783159][T17972] kvm: pic: non byte write [ 412.808975][T17972] kvm: pic: non byte write [ 412.812238][T17972] kvm: pic: non byte write [ 412.833276][T17972] kvm: pic: single mode not supported [ 412.833297][T17972] kvm: pic: level sensitive irq not supported [ 412.839336][T17972] kvm: pic: level sensitive irq not supported [ 412.844840][T17972] kvm: pic: single mode not supported [ 412.848169][T17972] kvm: pic: level sensitive irq not supported [ 412.852439][T17972] kvm: pic: single mode not supported [ 412.855078][T17972] kvm: pic: level sensitive irq not supported [ 412.860045][T17972] kvm: pic: single mode not supported [ 412.864394][T17972] kvm: pic: single mode not supported [ 412.867908][T17972] kvm: pic: single mode not supported [ 412.870299][T17972] kvm: pic: level sensitive irq not supported [ 412.873550][T17972] kvm: pic: single mode not supported [ 412.877208][T17972] kvm: pic: single mode not supported [ 412.879565][T17972] kvm: pic: level sensitive irq not supported [ 412.885470][T17972] kvm: pic: level sensitive irq not supported [ 412.888511][T17972] kvm: pic: single mode not supported [ 412.891399][T17972] kvm: pic: level sensitive irq not supported [ 412.896173][T17972] kvm: pic: single mode not supported [ 412.898855][T17972] kvm: pic: level sensitive irq not supported [ 413.801209][T18014] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 413.810656][T18014] overlayfs: failed to set xattr on upper [ 413.812579][T18014] overlayfs: ...falling back to redirect_dir=nofollow. [ 413.816071][T18014] overlayfs: ...falling back to index=off. [ 413.818411][T18014] overlayfs: ...falling back to uuid=null. [ 413.836336][T18014] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 413.879455][T18017] overlayfs: failed to clone upperpath [ 413.929376][T18019] overlayfs: failed to clone upperpath [ 414.052928][T18027] fuse: fd is not a fuse device [ 414.073588][T18028] lo speed is unknown, defaulting to 1000 [ 414.250323][T18037] __nla_validate_parse: 4 callbacks suppressed [ 414.250336][T18037] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4719'. [ 414.630067][ T5751] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 414.673784][ T5842] hid_parser_main: 7 callbacks suppressed [ 414.673803][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.680591][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.684570][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.687464][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.694768][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.698150][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.701207][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.704060][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.707143][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.710800][ T5842] hid-generic 0006:0008:0008.0018: unknown main item tag 0x0 [ 414.721752][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4729'. [ 414.736459][ T5842] hid-generic 0006:0008:0008.0018: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 414.783099][T18065] fido_id[18065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 415.021443][T18077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.026822][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.053373][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.057670][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.063833][T18077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.067270][T18077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.073916][T18077] veth1_vlan: left promiscuous mode [ 415.076193][T18077] veth0_vlan: left promiscuous mode [ 415.078260][T18077] veth0_vlan: entered promiscuous mode [ 415.081670][T18077] veth1_vlan: entered promiscuous mode [ 415.086027][T18077] veth1_macvtap: left promiscuous mode [ 415.089064][T18077] veth0_macvtap: left promiscuous mode [ 415.091406][T18077] veth0_macvtap: entered promiscuous mode [ 415.094816][T18077] veth1_macvtap: entered promiscuous mode [ 415.105032][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.109541][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.113854][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.117895][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.123660][T18077] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 415.131943][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.135170][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.140088][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.142447][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.195123][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.211570][T18084] dummy0: left promiscuous mode [ 415.257518][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.262961][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.310846][T18084] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 415.313294][T18084] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 415.322804][T18084] bond1: left promiscuous mode [ 415.324562][T18084] bond1: left allmulticast mode [ 415.335023][T18084] batadv1: left allmulticast mode [ 415.352989][T11266] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.356674][T11266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.361447][T11266] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.364376][T11266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.377507][T11266] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.382331][T11266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.385965][T11266] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.389120][T11266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.393818][T11266] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.399256][T11266] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.403012][T11266] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.405033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.407244][T11266] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.814488][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 416.108795][T18124] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4747'. [ 416.133578][T18124] bond0 (unregistering): left promiscuous mode [ 416.148571][T18124] bond_slave_0: left promiscuous mode [ 416.151132][T18124] bond_slave_1: left promiscuous mode [ 416.153584][T18124] team0: left promiscuous mode [ 416.155633][T18124] team_slave_0: left promiscuous mode [ 416.158175][T18124] team_slave_1: left promiscuous mode [ 416.172311][T18123] infiniband syz1: set down [ 416.174207][T18123] infiniband syz1: added bond0 [ 416.181760][T18124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.196434][T18123] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 416.208266][T18123] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 416.219553][T18123] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 416.224776][T18124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.234758][T18124] bond0 (unregistering): (slave team0): Releasing backup interface [ 416.250063][T18123] RDS/IB: syz1: added [ 416.251444][T18123] smc: adding ib device syz1 with port count 1 [ 416.253559][T18123] smc: ib device syz1 port 1 has no pnetid [ 416.290150][T18124] bond0 (unregistering): Released all slaves [ 416.305172][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.321007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.481636][T18127] overlayfs: failed to clone upperpath [ 416.532698][T18128] overlayfs: failed to clone upperpath [ 416.816268][T18131] fuse: fd is not a fuse device [ 416.892567][T18135] netlink: 'syz.3.4751': attribute type 4 has an invalid length. [ 417.352855][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.361054][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.947819][T18182] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.950794][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.032971][T18182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.044844][T18182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.202811][T11265] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.215978][T11265] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.224895][T11265] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.231411][T11265] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.238609][T11265] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.246298][T11265] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.254331][T11265] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.264488][T11265] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.487127][ T40] audit: type=1326 audit(1778921341.553:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.4.4768" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x0 [ 418.630870][ T7023] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 418.635881][ T7023] Bluetooth: hci1: Injecting HCI hardware error event [ 418.642541][ T7019] Bluetooth: hci1: hardware error 0x00 [ 419.322848][T18200] FAT-fs (loop1): unable to read boot sector [ 419.333411][T18202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.442949][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 419.667238][T18216] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.264610][T18239] fuse: fd is not a fuse device [ 420.659327][ T1159] smc: removing ib device syz1 [ 420.701266][ T1159] smbdirect: ib_dev[syz1] removed [ 420.729088][ T7019] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 420.877877][T18243] 8021q: adding VLAN 0 to HW filter on device bond14 [ 420.905868][T18245] bond14: (slave geneve2): Enslaving as a backup interface with an up link [ 420.909083][ T227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.913408][ T227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.917073][ T227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.920565][ T227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.990248][ T13] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.128717][T11259] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.228096][T18248] overlayfs: failed to clone upperpath [ 421.287795][T18252] sctp: [Deprecated]: syz.0.4787 (pid 18252) Use of int in max_burst socket option deprecated. [ 421.287795][T18252] Use struct sctp_assoc_value instead [ 421.626128][T18268] fuse: fd is not a fuse device [ 423.716936][T18305] netlink: 'syz.0.4809': attribute type 4 has an invalid length. [ 423.914606][T18311] lo speed is unknown, defaulting to 1000 [ 424.322900][T18318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4813'. [ 424.385613][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4813'. [ 425.250675][T18346] fuse: fd is not a fuse device [ 425.899944][ T40] audit: type=1326 audit(1778921348.973:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18352 comm="syz.1.4825" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efcc code=0x0 [ 426.089799][T18359] ubi2: attaching mtd1 [ 426.104130][T18359] ubi2: scanning is finished [ 426.105792][ T40] audit: type=1800 audit(1778921349.173:12595): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4827" name="file0" dev="overlay" ino=927 res=0 errno=0 [ 426.112898][T18359] ubi2: empty MTD device detected [ 426.115112][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 0, retry [ 426.117905][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 0, retry [ 426.121346][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 0, retry [ 426.123930][T18359] ubi2 error: do_sync_erase: cannot erase PEB 0, error -22 [ 426.126351][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.126369][T18359] Tainted: [L]=SOFTLOCKUP [ 426.126373][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.126380][T18359] Call Trace: [ 426.126385][T18359] [ 426.126391][T18359] dump_stack_lvl+0x100/0x190 [ 426.126410][T18359] do_sync_erase+0x278/0x4d0 [ 426.126431][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.126447][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.126467][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.126483][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.126514][T18359] create_vtbl+0x1f7/0xaa0 [ 426.126527][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.126540][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.126558][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.126576][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.126588][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.126607][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.126619][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.126632][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.126644][T18359] ? kfree+0x223/0x6c0 [ 426.126663][T18359] ubi_attach+0x2380/0x4d30 [ 426.126681][T18359] ? ubi_msg+0x114/0x159 [ 426.126719][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.126733][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.126750][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.126766][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.126782][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.126800][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.126822][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.126838][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.126854][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.126871][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.126887][T18359] ? __fget_files+0x21f/0x3d0 [ 426.126918][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.126934][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.126947][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.126958][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.126972][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.126984][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.127002][T18359] do_fast_syscall_32+0x32/0x70 [ 426.127014][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.127029][T18359] RIP: 0023:0xf6fcefcc [ 426.127039][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.127049][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.127060][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.127067][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.127073][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.127079][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.127085][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.127099][T18359] [ 426.127120][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 1, retry [ 426.241253][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 1, retry [ 426.244692][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 1, retry [ 426.248033][T18359] ubi2 error: do_sync_erase: cannot erase PEB 1, error -22 [ 426.251279][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.251308][T18359] Tainted: [L]=SOFTLOCKUP [ 426.251314][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.251325][T18359] Call Trace: [ 426.251332][T18359] [ 426.251340][T18359] dump_stack_lvl+0x100/0x190 [ 426.251366][T18359] do_sync_erase+0x278/0x4d0 [ 426.251389][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.251412][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.251436][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.251460][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.251487][T18359] create_vtbl+0x1f7/0xaa0 [ 426.251507][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.251527][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.251556][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.251582][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.251599][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.251625][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.251643][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.251662][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.251681][T18359] ? kfree+0x223/0x6c0 [ 426.251709][T18359] ubi_attach+0x2380/0x4d30 [ 426.251739][T18359] ? ubi_msg+0x114/0x159 [ 426.251758][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.251778][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.251798][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.251847][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.251867][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.251889][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.251921][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.251941][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.251962][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.251982][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.252003][T18359] ? __fget_files+0x21f/0x3d0 [ 426.252022][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.252039][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.252053][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.252066][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.252083][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.252096][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.252118][T18359] do_fast_syscall_32+0x32/0x70 [ 426.252131][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.252150][T18359] RIP: 0023:0xf6fcefcc [ 426.252162][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.252174][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.252189][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.252199][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.252209][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.252217][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.252226][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.252247][T18359] [ 426.252277][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 2, retry [ 426.361932][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 2, retry [ 426.364666][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 2, retry [ 426.367475][T18359] ubi2 error: do_sync_erase: cannot erase PEB 2, error -22 [ 426.370531][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.370559][T18359] Tainted: [L]=SOFTLOCKUP [ 426.370565][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.370577][T18359] Call Trace: [ 426.370584][T18359] [ 426.370591][T18359] dump_stack_lvl+0x100/0x190 [ 426.370611][T18359] do_sync_erase+0x278/0x4d0 [ 426.370634][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.370659][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.370686][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.370707][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.370735][T18359] create_vtbl+0x1f7/0xaa0 [ 426.370771][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.370790][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.370816][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.370844][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.370861][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.370884][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.370902][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.370922][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.370943][T18359] ? kfree+0x223/0x6c0 [ 426.370978][T18359] ubi_attach+0x2380/0x4d30 [ 426.371005][T18359] ? ubi_msg+0x114/0x159 [ 426.371027][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.371049][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.371069][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.371085][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.371101][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.371119][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.371140][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.371154][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.371169][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.371184][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.371201][T18359] ? __fget_files+0x21f/0x3d0 [ 426.371216][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.371231][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.371242][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.371252][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.371265][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.371275][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.371293][T18359] do_fast_syscall_32+0x32/0x70 [ 426.371304][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.371319][T18359] RIP: 0023:0xf6fcefcc [ 426.371328][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.371339][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.371350][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.371357][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.371363][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.371369][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.371376][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.371390][T18359] [ 426.371428][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 3, retry [ 426.486557][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 3, retry [ 426.489818][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 3, retry [ 426.492453][T18359] ubi2 error: do_sync_erase: cannot erase PEB 3, error -22 [ 426.494902][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.494920][T18359] Tainted: [L]=SOFTLOCKUP [ 426.494924][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.494932][T18359] Call Trace: [ 426.494939][T18359] [ 426.494945][T18359] dump_stack_lvl+0x100/0x190 [ 426.494963][T18359] do_sync_erase+0x278/0x4d0 [ 426.494977][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.494991][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.495008][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.495023][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.495042][T18359] create_vtbl+0x1f7/0xaa0 [ 426.495055][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.495068][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.495087][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.495104][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.495116][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.495135][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.495148][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.495162][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.495176][T18359] ? kfree+0x223/0x6c0 [ 426.495195][T18359] ubi_attach+0x2380/0x4d30 [ 426.495214][T18359] ? ubi_msg+0x114/0x159 [ 426.495227][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.495241][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.495255][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.495270][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.495285][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.495302][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.495323][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.495338][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.495354][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.495369][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.495386][T18359] ? __fget_files+0x21f/0x3d0 [ 426.495402][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.495417][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.495429][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.495440][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.495453][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.495464][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.495482][T18359] do_fast_syscall_32+0x32/0x70 [ 426.495493][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.495509][T18359] RIP: 0023:0xf6fcefcc [ 426.495519][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.495531][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.495543][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.495550][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.495557][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.495563][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.495570][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.495583][T18359] [ 426.495613][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 4, retry [ 426.605008][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 4, retry [ 426.608588][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 4, retry [ 426.612211][T18359] ubi2 error: do_sync_erase: cannot erase PEB 4, error -22 [ 426.615426][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.615457][T18359] Tainted: [L]=SOFTLOCKUP [ 426.615463][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.615474][T18359] Call Trace: [ 426.615482][T18359] [ 426.615491][T18359] dump_stack_lvl+0x100/0x190 [ 426.615518][T18359] do_sync_erase+0x278/0x4d0 [ 426.615542][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.615566][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.615592][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.615617][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.615647][T18359] create_vtbl+0x1f7/0xaa0 [ 426.615668][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.615689][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.615720][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.615749][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.615767][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.615795][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.615845][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.615866][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.615892][T18359] ? kfree+0x223/0x6c0 [ 426.615923][T18359] ubi_attach+0x2380/0x4d30 [ 426.615953][T18359] ? ubi_msg+0x114/0x159 [ 426.615976][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.615997][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.616021][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.616043][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.616066][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.616091][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.616128][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.616151][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.616177][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.616201][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.616227][T18359] ? __fget_files+0x21f/0x3d0 [ 426.616253][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.616276][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.616294][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.616311][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.616333][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.616350][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.616378][T18359] do_fast_syscall_32+0x32/0x70 [ 426.616396][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.616420][T18359] RIP: 0023:0xf6fcefcc [ 426.616435][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.616452][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.616471][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.616482][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.616493][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.616503][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.616513][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.616537][T18359] [ 426.616576][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 5, retry [ 426.729324][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 5, retry [ 426.732385][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 5, retry [ 426.735105][T18359] ubi2 error: do_sync_erase: cannot erase PEB 5, error -22 [ 426.737597][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.737615][T18359] Tainted: [L]=SOFTLOCKUP [ 426.737619][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.737627][T18359] Call Trace: [ 426.737634][T18359] [ 426.737643][T18359] dump_stack_lvl+0x100/0x190 [ 426.737667][T18359] do_sync_erase+0x278/0x4d0 [ 426.737691][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.737714][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.737741][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.737763][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.737781][T18359] create_vtbl+0x1f7/0xaa0 [ 426.737795][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.737808][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.737827][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.737845][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.737856][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.737875][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.737888][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.737900][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.737914][T18359] ? kfree+0x223/0x6c0 [ 426.737932][T18359] ubi_attach+0x2380/0x4d30 [ 426.737951][T18359] ? ubi_msg+0x114/0x159 [ 426.737964][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.737978][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.737993][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.738009][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.738024][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.738041][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.738062][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.738077][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.738093][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.738109][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.738125][T18359] ? __fget_files+0x21f/0x3d0 [ 426.738141][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.738157][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.738169][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.738179][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.738193][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.738204][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.738222][T18359] do_fast_syscall_32+0x32/0x70 [ 426.738234][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.738249][T18359] RIP: 0023:0xf6fcefcc [ 426.738260][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.738271][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.738283][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.738290][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.738297][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.738304][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.738310][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.738324][T18359] [ 426.738352][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 6, retry [ 426.844450][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 6, retry [ 426.847195][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 6, retry [ 426.850335][T18359] ubi2 error: do_sync_erase: cannot erase PEB 6, error -22 [ 426.853085][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.853103][T18359] Tainted: [L]=SOFTLOCKUP [ 426.853108][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.853114][T18359] Call Trace: [ 426.853121][T18359] [ 426.853127][T18359] dump_stack_lvl+0x100/0x190 [ 426.853145][T18359] do_sync_erase+0x278/0x4d0 [ 426.853160][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.853175][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.853195][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.853218][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.853249][T18359] create_vtbl+0x1f7/0xaa0 [ 426.853270][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.853307][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.853326][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.853344][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.853355][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.853374][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.853387][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.853400][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.853413][T18359] ? kfree+0x223/0x6c0 [ 426.853431][T18359] ubi_attach+0x2380/0x4d30 [ 426.853451][T18359] ? ubi_msg+0x114/0x159 [ 426.853465][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.853478][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.853492][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.853507][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.853521][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.853538][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.853564][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.853579][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.853595][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.853610][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.853627][T18359] ? __fget_files+0x21f/0x3d0 [ 426.853643][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.853658][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.853669][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.853680][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.853693][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.853704][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.853722][T18359] do_fast_syscall_32+0x32/0x70 [ 426.853733][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.853749][T18359] RIP: 0023:0xf6fcefcc [ 426.853760][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.853772][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.853784][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.853791][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.853798][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.853804][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.853810][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.853825][T18359] [ 426.853865][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 7, retry [ 426.959583][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 7, retry [ 426.962208][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 7, retry [ 426.964947][T18359] ubi2 error: do_sync_erase: cannot erase PEB 7, error -22 [ 426.967571][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.967590][T18359] Tainted: [L]=SOFTLOCKUP [ 426.967594][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.967602][T18359] Call Trace: [ 426.967608][T18359] [ 426.967614][T18359] dump_stack_lvl+0x100/0x190 [ 426.967632][T18359] do_sync_erase+0x278/0x4d0 [ 426.967648][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 426.967665][T18359] ? rcu_is_watching+0x12/0xc0 [ 426.967684][T18359] ubi_io_sync_erase+0x58d/0x920 [ 426.967701][T18359] ubi_early_get_peb+0x1c8/0x870 [ 426.967722][T18359] create_vtbl+0x1f7/0xaa0 [ 426.967736][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 426.967751][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.967773][T18359] ubi_read_volume_table+0x80f/0x2860 [ 426.967793][T18359] ? kasan_quarantine_put+0x104/0x240 [ 426.967826][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.967849][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 426.967864][T18359] ? ubi_attach+0x20f0/0x4d30 [ 426.967879][T18359] ? ubi_attach+0x2135/0x4d30 [ 426.967893][T18359] ? kfree+0x223/0x6c0 [ 426.967914][T18359] ubi_attach+0x2380/0x4d30 [ 426.967936][T18359] ? ubi_msg+0x114/0x159 [ 426.967951][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 426.967966][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 426.967982][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.967999][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 426.968016][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 426.968034][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 426.968059][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 426.968075][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 426.968092][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 426.968110][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.968129][T18359] ? __fget_files+0x21f/0x3d0 [ 426.968147][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 426.968165][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 426.968178][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 426.968190][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 426.968205][T18359] __do_fast_syscall_32+0xe7/0x950 [ 426.968217][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 426.968238][T18359] do_fast_syscall_32+0x32/0x70 [ 426.968250][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.968268][T18359] RIP: 0023:0xf6fcefcc [ 426.968279][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 426.968291][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 426.968303][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 426.968311][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.968318][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.968325][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.968332][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.968347][T18359] [ 426.968372][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 8, retry [ 427.070735][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 8, retry [ 427.073373][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 8, retry [ 427.076175][T18359] ubi2 error: do_sync_erase: cannot erase PEB 8, error -22 [ 427.078853][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.078872][T18359] Tainted: [L]=SOFTLOCKUP [ 427.078876][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.078883][T18359] Call Trace: [ 427.078888][T18359] [ 427.078894][T18359] dump_stack_lvl+0x100/0x190 [ 427.078911][T18359] do_sync_erase+0x278/0x4d0 [ 427.078926][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.078942][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.078960][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.078977][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.078997][T18359] create_vtbl+0x1f7/0xaa0 [ 427.079011][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.079025][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.079047][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.079066][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.079078][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.079098][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.079113][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.079127][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.079141][T18359] ? kfree+0x223/0x6c0 [ 427.079161][T18359] ubi_attach+0x2380/0x4d30 [ 427.079182][T18359] ? ubi_msg+0x114/0x159 [ 427.079197][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.079212][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.079227][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.079243][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.079259][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.079278][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.079307][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.079323][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.079339][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.079356][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.079374][T18359] ? __fget_files+0x21f/0x3d0 [ 427.079391][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.079407][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.079420][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.079432][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.079447][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.079458][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.079478][T18359] do_fast_syscall_32+0x32/0x70 [ 427.079490][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.079506][T18359] RIP: 0023:0xf6fcefcc [ 427.079517][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.079529][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.079541][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.079548][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.079555][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.079562][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.079569][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.079583][T18359] [ 427.079605][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 9, retry [ 427.183837][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 9, retry [ 427.186379][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 9, retry [ 427.189093][T18359] ubi2 error: do_sync_erase: cannot erase PEB 9, error -22 [ 427.192200][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.192224][T18359] Tainted: [L]=SOFTLOCKUP [ 427.192228][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.192236][T18359] Call Trace: [ 427.192242][T18359] [ 427.192247][T18359] dump_stack_lvl+0x100/0x190 [ 427.192266][T18359] do_sync_erase+0x278/0x4d0 [ 427.192282][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.192297][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.192316][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.192337][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.192357][T18359] create_vtbl+0x1f7/0xaa0 [ 427.192371][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.192385][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.192405][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.192424][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.192436][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.192456][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.192470][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.192487][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.192501][T18359] ? kfree+0x223/0x6c0 [ 427.192521][T18359] ubi_attach+0x2380/0x4d30 [ 427.192542][T18359] ? ubi_msg+0x114/0x159 [ 427.192557][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.192572][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.192587][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.192604][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.192620][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.192638][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.192661][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.192678][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.192694][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.192711][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.192729][T18359] ? __fget_files+0x21f/0x3d0 [ 427.192747][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.192763][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.192776][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.192787][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.192803][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.192814][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.192836][T18359] do_fast_syscall_32+0x32/0x70 [ 427.192848][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.192865][T18359] RIP: 0023:0xf6fcefcc [ 427.192875][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.192887][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.192899][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.192907][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.192914][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.192920][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.192927][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.192942][T18359] [ 427.192967][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 10, retry [ 427.209645][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4834'. [ 427.209859][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 10, retry [ 427.312299][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 10, retry [ 427.315911][T18359] ubi2 error: do_sync_erase: cannot erase PEB 10, error -22 [ 427.319166][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.319195][T18359] Tainted: [L]=SOFTLOCKUP [ 427.319202][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.319213][T18359] Call Trace: [ 427.319220][T18359] [ 427.319229][T18359] dump_stack_lvl+0x100/0x190 [ 427.319256][T18359] do_sync_erase+0x278/0x4d0 [ 427.319279][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.319301][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.319327][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.319353][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.319382][T18359] create_vtbl+0x1f7/0xaa0 [ 427.319406][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.319428][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.319459][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.319489][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.319507][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.319537][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.319558][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.319579][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.319599][T18359] ? kfree+0x223/0x6c0 [ 427.319626][T18359] ubi_attach+0x2380/0x4d30 [ 427.319661][T18359] ? ubi_msg+0x114/0x159 [ 427.319682][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.319703][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.319724][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.319746][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.319766][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.319825][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.319862][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.319885][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.319910][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.319936][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.319965][T18359] ? __fget_files+0x21f/0x3d0 [ 427.319990][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.320013][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.320031][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.320048][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.320071][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.320088][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.320117][T18359] do_fast_syscall_32+0x32/0x70 [ 427.320136][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.320159][T18359] RIP: 0023:0xf6fcefcc [ 427.320174][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.320192][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.320213][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.320224][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.320235][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.320243][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.320253][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.320278][T18359] [ 427.320310][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 11, retry [ 427.323683][T18385] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4835'. [ 427.325039][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 11, retry [ 427.325078][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 11, retry [ 427.325104][T18359] ubi2 error: do_sync_erase: cannot erase PEB 11, error -22 [ 427.387015][T18389] fuse: fd is not a fuse device [ 427.394708][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.394730][T18359] Tainted: [L]=SOFTLOCKUP [ 427.394734][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.394742][T18359] Call Trace: [ 427.394747][T18359] [ 427.394752][T18359] dump_stack_lvl+0x100/0x190 [ 427.394773][T18359] do_sync_erase+0x278/0x4d0 [ 427.394789][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.394805][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.394824][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.394840][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.394860][T18359] create_vtbl+0x1f7/0xaa0 [ 427.394874][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.394888][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.394909][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.394928][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.394940][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.394960][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.394974][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.394988][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.395002][T18359] ? kfree+0x223/0x6c0 [ 427.395022][T18359] ubi_attach+0x2380/0x4d30 [ 427.395044][T18359] ? ubi_msg+0x114/0x159 [ 427.395059][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.395073][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.395088][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.395105][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.395121][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.395139][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.395162][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.395178][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.395197][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.395214][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.395233][T18359] ? __fget_files+0x21f/0x3d0 [ 427.395250][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.395266][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.395279][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.395291][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.395306][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.395322][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.395342][T18359] do_fast_syscall_32+0x32/0x70 [ 427.395354][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.395371][T18359] RIP: 0023:0xf6fcefcc [ 427.395382][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.395394][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.395407][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.395414][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.395422][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.395428][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.395435][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.395451][T18359] [ 427.396089][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 12, retry [ 427.576311][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 12, retry [ 427.584172][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 12, retry [ 427.588193][T18359] ubi2 error: do_sync_erase: cannot erase PEB 12, error -22 [ 427.592089][T18359] CPU: 2 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.592108][T18359] Tainted: [L]=SOFTLOCKUP [ 427.592112][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.592118][T18359] Call Trace: [ 427.592123][T18359] [ 427.592128][T18359] dump_stack_lvl+0x100/0x190 [ 427.592145][T18359] do_sync_erase+0x278/0x4d0 [ 427.592159][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.592174][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.592190][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.592205][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.592223][T18359] create_vtbl+0x1f7/0xaa0 [ 427.592236][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.592249][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.592268][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.592285][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.592296][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.592319][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.592332][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.592345][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.592358][T18359] ? kfree+0x223/0x6c0 [ 427.592377][T18359] ubi_attach+0x2380/0x4d30 [ 427.592396][T18359] ? ubi_msg+0x114/0x159 [ 427.592409][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.592423][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.592437][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.592451][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.592466][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.592483][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.592504][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.592519][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.592535][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.592550][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.592567][T18359] ? __fget_files+0x21f/0x3d0 [ 427.592583][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.592598][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.592610][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.592620][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.592634][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.592644][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.592662][T18359] do_fast_syscall_32+0x32/0x70 [ 427.592673][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.592689][T18359] RIP: 0023:0xf6fcefcc [ 427.592698][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.592709][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.592720][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.592727][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.592733][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.592739][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.592746][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.592759][T18359] [ 427.592778][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 13, retry [ 427.706258][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 13, retry [ 427.709682][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 13, retry [ 427.713222][T18359] ubi2 error: do_sync_erase: cannot erase PEB 13, error -22 [ 427.716402][T18359] CPU: 2 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.716432][T18359] Tainted: [L]=SOFTLOCKUP [ 427.716439][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.716450][T18359] Call Trace: [ 427.716460][T18359] [ 427.716469][T18359] dump_stack_lvl+0x100/0x190 [ 427.716496][T18359] do_sync_erase+0x278/0x4d0 [ 427.716520][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.716546][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.716573][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.716599][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.716628][T18359] create_vtbl+0x1f7/0xaa0 [ 427.716648][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.716669][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.716700][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.716731][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.716750][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.716780][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.716801][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.716821][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.716843][T18359] ? kfree+0x223/0x6c0 [ 427.716873][T18359] ubi_attach+0x2380/0x4d30 [ 427.716906][T18359] ? ubi_msg+0x114/0x159 [ 427.716928][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.716949][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.716976][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.716999][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.717024][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.717050][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.717088][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.717111][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.717138][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.717164][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.717192][T18359] ? __fget_files+0x21f/0x3d0 [ 427.717219][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.717243][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.717262][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.717279][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.717300][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.717318][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.717348][T18359] do_fast_syscall_32+0x32/0x70 [ 427.717365][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.717390][T18359] RIP: 0023:0xf6fcefcc [ 427.717407][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.717424][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.717441][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.717453][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.717463][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.717474][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.717484][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.717509][T18359] [ 427.717549][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 14, retry [ 427.838307][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 14, retry [ 427.842781][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 14, retry [ 427.846629][T18359] ubi2 error: do_sync_erase: cannot erase PEB 14, error -22 [ 427.850144][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.850170][T18359] Tainted: [L]=SOFTLOCKUP [ 427.850176][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.850186][T18359] Call Trace: [ 427.850193][T18359] [ 427.850201][T18359] dump_stack_lvl+0x100/0x190 [ 427.850228][T18359] do_sync_erase+0x278/0x4d0 [ 427.850252][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.850275][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.850297][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.850320][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.850349][T18359] create_vtbl+0x1f7/0xaa0 [ 427.850369][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.850389][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.850417][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.850443][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.850460][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.850488][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.850507][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.850528][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.850546][T18359] ? kfree+0x223/0x6c0 [ 427.850573][T18359] ubi_attach+0x2380/0x4d30 [ 427.850605][T18359] ? ubi_msg+0x114/0x159 [ 427.850628][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.850649][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.850669][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.850690][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.850713][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.850739][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.850774][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.850800][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.850825][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.850849][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.850875][T18359] ? __fget_files+0x21f/0x3d0 [ 427.850900][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.850921][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.850936][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.850952][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.850973][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.850990][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.851018][T18359] do_fast_syscall_32+0x32/0x70 [ 427.851036][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.851056][T18359] RIP: 0023:0xf6fcefcc [ 427.851068][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.851085][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.851104][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.851115][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.851125][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.851135][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.851146][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.851172][T18359] [ 427.851217][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 15, retry [ 427.978822][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 15, retry [ 427.981502][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 15, retry [ 427.984297][T18359] ubi2 error: do_sync_erase: cannot erase PEB 15, error -22 [ 427.986741][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.986759][T18359] Tainted: [L]=SOFTLOCKUP [ 427.986763][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.986770][T18359] Call Trace: [ 427.986775][T18359] [ 427.986795][T18359] dump_stack_lvl+0x100/0x190 [ 427.986813][T18359] do_sync_erase+0x278/0x4d0 [ 427.986828][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 427.986843][T18359] ? rcu_is_watching+0x12/0xc0 [ 427.986861][T18359] ubi_io_sync_erase+0x58d/0x920 [ 427.986877][T18359] ubi_early_get_peb+0x1c8/0x870 [ 427.986896][T18359] create_vtbl+0x1f7/0xaa0 [ 427.986911][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 427.986924][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.986944][T18359] ubi_read_volume_table+0x80f/0x2860 [ 427.986962][T18359] ? kasan_quarantine_put+0x104/0x240 [ 427.986974][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.986994][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 427.987007][T18359] ? ubi_attach+0x20f0/0x4d30 [ 427.987021][T18359] ? ubi_attach+0x2135/0x4d30 [ 427.987035][T18359] ? kfree+0x223/0x6c0 [ 427.987054][T18359] ubi_attach+0x2380/0x4d30 [ 427.987075][T18359] ? ubi_msg+0x114/0x159 [ 427.987089][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 427.987103][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 427.987118][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.987133][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 427.987149][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 427.987166][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 427.987189][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 427.987205][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 427.987222][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 427.987238][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.987256][T18359] ? __fget_files+0x21f/0x3d0 [ 427.987272][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 427.987288][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 427.987300][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 427.987311][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 427.987326][T18359] __do_fast_syscall_32+0xe7/0x950 [ 427.987337][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 427.987356][T18359] do_fast_syscall_32+0x32/0x70 [ 427.987368][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.987384][T18359] RIP: 0023:0xf6fcefcc [ 427.987395][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 427.987406][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 427.987417][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 427.987424][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.987431][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.987437][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 427.987444][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.987458][T18359] [ 427.987937][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 16, retry [ 428.090272][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 16, retry [ 428.093173][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 16, retry [ 428.095696][T18359] ubi2 error: do_sync_erase: cannot erase PEB 16, error -22 [ 428.097965][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.097981][T18359] Tainted: [L]=SOFTLOCKUP [ 428.097985][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.097991][T18359] Call Trace: [ 428.097997][T18359] [ 428.098003][T18359] dump_stack_lvl+0x100/0x190 [ 428.098018][T18359] do_sync_erase+0x278/0x4d0 [ 428.098032][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.098047][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.098064][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.098078][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.098096][T18359] create_vtbl+0x1f7/0xaa0 [ 428.098109][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.098122][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.098141][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.098159][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.098170][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.098188][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.098201][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.098214][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.098227][T18359] ? kfree+0x223/0x6c0 [ 428.098245][T18359] ubi_attach+0x2380/0x4d30 [ 428.098265][T18359] ? ubi_msg+0x114/0x159 [ 428.098278][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.098295][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.098309][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.098324][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.098339][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.098355][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.098376][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.098391][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.098406][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.098422][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.098439][T18359] ? __fget_files+0x21f/0x3d0 [ 428.098455][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.098470][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.098494][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.098505][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.098519][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.098530][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.098548][T18359] do_fast_syscall_32+0x32/0x70 [ 428.098559][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.098575][T18359] RIP: 0023:0xf6fcefcc [ 428.098585][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.098596][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.098606][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.098613][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.098619][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.098626][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.098632][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.098646][T18359] [ 428.197567][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 17, retry [ 428.200981][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 17, retry [ 428.203550][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 17, retry [ 428.206158][T18359] ubi2 error: do_sync_erase: cannot erase PEB 17, error -22 [ 428.208728][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.208747][T18359] Tainted: [L]=SOFTLOCKUP [ 428.208752][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.208759][T18359] Call Trace: [ 428.208765][T18359] [ 428.208770][T18359] dump_stack_lvl+0x100/0x190 [ 428.208787][T18359] do_sync_erase+0x278/0x4d0 [ 428.208802][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.208818][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.208836][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.208853][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.208872][T18359] create_vtbl+0x1f7/0xaa0 [ 428.208887][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.208901][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.208922][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.208941][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.208953][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.208973][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.208987][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.209001][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.209015][T18359] ? kfree+0x223/0x6c0 [ 428.209035][T18359] ubi_attach+0x2380/0x4d30 [ 428.209056][T18359] ? ubi_msg+0x114/0x159 [ 428.209070][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.209086][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.209101][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.209118][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.209134][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.209151][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.209174][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.209191][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.209207][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.209224][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.209242][T18359] ? __fget_files+0x21f/0x3d0 [ 428.209260][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.209276][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.209294][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.209305][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.209320][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.209332][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.209352][T18359] do_fast_syscall_32+0x32/0x70 [ 428.209363][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.209380][T18359] RIP: 0023:0xf6fcefcc [ 428.209391][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.209403][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.209414][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.209422][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.209429][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.209436][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.209443][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.209458][T18359] [ 428.209480][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 18, retry [ 428.313377][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 18, retry [ 428.316880][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 18, retry [ 428.322853][T18359] ubi2 error: do_sync_erase: cannot erase PEB 18, error -22 [ 428.326108][T18359] CPU: 2 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.326136][T18359] Tainted: [L]=SOFTLOCKUP [ 428.326142][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.326154][T18359] Call Trace: [ 428.326162][T18359] [ 428.326170][T18359] dump_stack_lvl+0x100/0x190 [ 428.326195][T18359] do_sync_erase+0x278/0x4d0 [ 428.326218][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.326244][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.326272][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.326299][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.326330][T18359] create_vtbl+0x1f7/0xaa0 [ 428.326351][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.326373][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.326405][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.326434][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.326453][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.326499][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.326520][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.326541][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.326562][T18359] ? kfree+0x223/0x6c0 [ 428.326591][T18359] ubi_attach+0x2380/0x4d30 [ 428.326623][T18359] ? ubi_msg+0x114/0x159 [ 428.326646][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.326669][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.326692][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.326716][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.326741][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.326769][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.326807][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.326831][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.326858][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.326884][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.326912][T18359] ? __fget_files+0x21f/0x3d0 [ 428.326944][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.326968][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.326986][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.327002][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.327025][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.327043][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.327073][T18359] do_fast_syscall_32+0x32/0x70 [ 428.327091][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.327115][T18359] RIP: 0023:0xf6fcefcc [ 428.327131][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.327148][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.327166][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.327178][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.327188][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.327199][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.327210][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.327236][T18359] [ 428.327274][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 19, retry [ 428.465198][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 19, retry [ 428.471812][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 19, retry [ 428.475250][T18359] ubi2 error: do_sync_erase: cannot erase PEB 19, error -22 [ 428.478330][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.478358][T18359] Tainted: [L]=SOFTLOCKUP [ 428.478364][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.478375][T18359] Call Trace: [ 428.478383][T18359] [ 428.478391][T18359] dump_stack_lvl+0x100/0x190 [ 428.478413][T18359] do_sync_erase+0x278/0x4d0 [ 428.478434][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.478458][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.478499][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.478525][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.478555][T18359] create_vtbl+0x1f7/0xaa0 [ 428.478574][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.478593][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.478622][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.478651][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.478670][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.478699][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.478719][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.478738][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.478756][T18359] ? kfree+0x223/0x6c0 [ 428.478786][T18359] ubi_attach+0x2380/0x4d30 [ 428.478819][T18359] ? ubi_msg+0x114/0x159 [ 428.478843][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.478862][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.478883][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.478906][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.478930][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.478963][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.478998][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.479020][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.479043][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.479067][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.479095][T18359] ? __fget_files+0x21f/0x3d0 [ 428.479122][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.479146][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.479163][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.479178][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.479198][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.479213][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.479240][T18359] do_fast_syscall_32+0x32/0x70 [ 428.479257][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.479282][T18359] RIP: 0023:0xf6fcefcc [ 428.479297][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.479313][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.479329][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.479339][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.479354][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.479363][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.479372][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.479395][T18359] [ 428.609117][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 20, retry [ 428.611697][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 20, retry [ 428.615291][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 20, retry [ 428.619467][T18359] ubi2 error: do_sync_erase: cannot erase PEB 20, error -22 [ 428.622597][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.622639][T18359] Tainted: [L]=SOFTLOCKUP [ 428.622647][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.622657][T18359] Call Trace: [ 428.622666][T18359] [ 428.622673][T18359] dump_stack_lvl+0x100/0x190 [ 428.622699][T18359] do_sync_erase+0x278/0x4d0 [ 428.622724][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.622748][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.622776][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.622801][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.622832][T18359] create_vtbl+0x1f7/0xaa0 [ 428.622852][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.622872][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.622903][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.622931][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.622948][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.622977][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.623000][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.623020][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.623040][T18359] ? kfree+0x223/0x6c0 [ 428.623070][T18359] ubi_attach+0x2380/0x4d30 [ 428.623103][T18359] ? ubi_msg+0x114/0x159 [ 428.623124][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.623145][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.623169][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.623194][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.623217][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.623244][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.623279][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.623303][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.623329][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.623359][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.623386][T18359] ? __fget_files+0x21f/0x3d0 [ 428.623413][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.623436][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.623456][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.623473][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.623496][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.623513][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.623542][T18359] do_fast_syscall_32+0x32/0x70 [ 428.623560][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.623585][T18359] RIP: 0023:0xf6fcefcc [ 428.623601][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.623618][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.623637][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.623648][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.623660][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.623669][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.623680][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.623704][T18359] [ 428.623754][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 21, retry [ 428.744927][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 21, retry [ 428.748306][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 21, retry [ 428.751923][T18359] ubi2 error: do_sync_erase: cannot erase PEB 21, error -22 [ 428.755135][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.755163][T18359] Tainted: [L]=SOFTLOCKUP [ 428.755170][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.755179][T18359] Call Trace: [ 428.755187][T18359] [ 428.755194][T18359] dump_stack_lvl+0x100/0x190 [ 428.755220][T18359] do_sync_erase+0x278/0x4d0 [ 428.755241][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.755263][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.755288][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.755310][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.755337][T18359] create_vtbl+0x1f7/0xaa0 [ 428.755357][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.755377][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.755407][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.755437][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.755455][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.755475][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.755489][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.755504][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.755518][T18359] ? kfree+0x223/0x6c0 [ 428.755538][T18359] ubi_attach+0x2380/0x4d30 [ 428.755559][T18359] ? ubi_msg+0x114/0x159 [ 428.755574][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.755589][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.755609][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.755626][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.755642][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.755660][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.755684][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.755700][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.755717][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.755734][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.755758][T18359] ? __fget_files+0x21f/0x3d0 [ 428.755807][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.755833][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.755853][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.755865][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.755881][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.755892][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.755912][T18359] do_fast_syscall_32+0x32/0x70 [ 428.755924][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.755942][T18359] RIP: 0023:0xf6fcefcc [ 428.755953][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.755965][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.755977][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.755984][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.755991][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.755998][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.756005][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.756020][T18359] [ 428.756043][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 22, retry [ 428.876315][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 22, retry [ 428.879203][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 22, retry [ 428.882814][T18359] ubi2 error: do_sync_erase: cannot erase PEB 22, error -22 [ 428.886216][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.886247][T18359] Tainted: [L]=SOFTLOCKUP [ 428.886252][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.886262][T18359] Call Trace: [ 428.886272][T18359] [ 428.886281][T18359] dump_stack_lvl+0x100/0x190 [ 428.886306][T18359] do_sync_erase+0x278/0x4d0 [ 428.886328][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 428.886350][T18359] ? rcu_is_watching+0x12/0xc0 [ 428.886374][T18359] ubi_io_sync_erase+0x58d/0x920 [ 428.886396][T18359] ubi_early_get_peb+0x1c8/0x870 [ 428.886423][T18359] create_vtbl+0x1f7/0xaa0 [ 428.886442][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 428.886477][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.886504][T18359] ubi_read_volume_table+0x80f/0x2860 [ 428.886561][T18359] ? kasan_quarantine_put+0x104/0x240 [ 428.886579][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.886611][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 428.886632][T18359] ? ubi_attach+0x20f0/0x4d30 [ 428.886651][T18359] ? ubi_attach+0x2135/0x4d30 [ 428.886670][T18359] ? kfree+0x223/0x6c0 [ 428.886697][T18359] ubi_attach+0x2380/0x4d30 [ 428.886726][T18359] ? ubi_msg+0x114/0x159 [ 428.886747][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 428.886766][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 428.886788][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.886808][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 428.886829][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 428.886853][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 428.886885][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 428.886906][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 428.886930][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 428.886951][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.886976][T18359] ? __fget_files+0x21f/0x3d0 [ 428.886998][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 428.887019][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 428.887036][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 428.887052][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 428.887071][T18359] __do_fast_syscall_32+0xe7/0x950 [ 428.887087][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 428.887113][T18359] do_fast_syscall_32+0x32/0x70 [ 428.887128][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.887149][T18359] RIP: 0023:0xf6fcefcc [ 428.887164][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 428.887179][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 428.887197][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 428.887208][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.887217][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.887227][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.887237][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.887258][T18359] [ 428.887328][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 23, retry [ 429.020269][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 23, retry [ 429.023416][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 23, retry [ 429.026058][T18359] ubi2 error: do_sync_erase: cannot erase PEB 23, error -22 [ 429.028679][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.028698][T18359] Tainted: [L]=SOFTLOCKUP [ 429.028702][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.028709][T18359] Call Trace: [ 429.028713][T18359] [ 429.028718][T18359] dump_stack_lvl+0x100/0x190 [ 429.028734][T18359] do_sync_erase+0x278/0x4d0 [ 429.028748][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.028777][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.028794][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.028814][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.028832][T18359] create_vtbl+0x1f7/0xaa0 [ 429.028844][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.028857][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.028877][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.028895][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.028906][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.028925][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.028937][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.028950][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.028963][T18359] ? kfree+0x223/0x6c0 [ 429.028982][T18359] ubi_attach+0x2380/0x4d30 [ 429.029001][T18359] ? ubi_msg+0x114/0x159 [ 429.029015][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.029028][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.029042][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.029057][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.029071][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.029093][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.029115][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.029130][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.029146][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.029161][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.029178][T18359] ? __fget_files+0x21f/0x3d0 [ 429.029194][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.029209][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.029220][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.029231][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.029244][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.029255][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.029274][T18359] do_fast_syscall_32+0x32/0x70 [ 429.029285][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.029301][T18359] RIP: 0023:0xf6fcefcc [ 429.029311][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.029322][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.029333][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.029341][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.029347][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.029353][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.029359][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.029373][T18359] [ 429.029408][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 24, retry [ 429.143056][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 24, retry [ 429.146937][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 24, retry [ 429.151106][T18359] ubi2 error: do_sync_erase: cannot erase PEB 24, error -22 [ 429.154031][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.154057][T18359] Tainted: [L]=SOFTLOCKUP [ 429.154062][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.154072][T18359] Call Trace: [ 429.154079][T18359] [ 429.154086][T18359] dump_stack_lvl+0x100/0x190 [ 429.154109][T18359] do_sync_erase+0x278/0x4d0 [ 429.154131][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.154154][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.154178][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.154201][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.154228][T18359] create_vtbl+0x1f7/0xaa0 [ 429.154247][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.154266][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.154293][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.154321][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.154337][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.154364][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.154382][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.154401][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.154420][T18359] ? kfree+0x223/0x6c0 [ 429.154448][T18359] ubi_attach+0x2380/0x4d30 [ 429.154478][T18359] ? ubi_msg+0x114/0x159 [ 429.154498][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.154518][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.154540][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.154561][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.154582][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.154607][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.154641][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.154663][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.154686][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.154709][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.154734][T18359] ? __fget_files+0x21f/0x3d0 [ 429.154758][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.154779][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.154801][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.154817][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.154838][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.154853][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.154880][T18359] do_fast_syscall_32+0x32/0x70 [ 429.154896][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.154918][T18359] RIP: 0023:0xf6fcefcc [ 429.154932][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.154948][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.154964][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.154974][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.154983][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.154993][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.155002][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.155024][T18359] [ 429.155054][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 25, retry [ 429.278603][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 25, retry [ 429.282492][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 25, retry [ 429.286065][T18359] ubi2 error: do_sync_erase: cannot erase PEB 25, error -22 [ 429.291950][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.291979][T18359] Tainted: [L]=SOFTLOCKUP [ 429.291986][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.291997][T18359] Call Trace: [ 429.292005][T18359] [ 429.292012][T18359] dump_stack_lvl+0x100/0x190 [ 429.292043][T18359] do_sync_erase+0x278/0x4d0 [ 429.292073][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.292099][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.292125][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.292150][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.292182][T18359] create_vtbl+0x1f7/0xaa0 [ 429.292205][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.292227][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.292259][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.292288][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.292305][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.292338][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.292359][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.292381][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.292403][T18359] ? kfree+0x223/0x6c0 [ 429.292441][T18359] ubi_attach+0x2380/0x4d30 [ 429.292473][T18359] ? ubi_msg+0x114/0x159 [ 429.292493][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.292516][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.292541][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.292571][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.292595][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.292624][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.292657][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.292681][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.292707][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.292734][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.292763][T18359] ? __fget_files+0x21f/0x3d0 [ 429.292791][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.292813][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.292834][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.292852][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.292877][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.292896][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.292925][T18359] do_fast_syscall_32+0x32/0x70 [ 429.292945][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.292972][T18359] RIP: 0023:0xf6fcefcc [ 429.292987][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.293006][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.293025][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.293038][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.293048][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.293057][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.293069][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.293098][T18359] [ 429.293132][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 26, retry [ 429.436641][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 26, retry [ 429.440073][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 26, retry [ 429.442622][T18359] ubi2 error: do_sync_erase: cannot erase PEB 26, error -22 [ 429.444996][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.445014][T18359] Tainted: [L]=SOFTLOCKUP [ 429.445018][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.445025][T18359] Call Trace: [ 429.445030][T18359] [ 429.445036][T18359] dump_stack_lvl+0x100/0x190 [ 429.445052][T18359] do_sync_erase+0x278/0x4d0 [ 429.445067][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.445082][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.445100][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.445115][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.445134][T18359] create_vtbl+0x1f7/0xaa0 [ 429.445148][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.445162][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.445181][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.445200][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.445212][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.445232][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.445246][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.445259][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.445273][T18359] ? kfree+0x223/0x6c0 [ 429.445296][T18359] ubi_attach+0x2380/0x4d30 [ 429.445317][T18359] ? ubi_msg+0x114/0x159 [ 429.445331][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.445345][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.445360][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.445376][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.445392][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.445410][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.445433][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.445448][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.445465][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.445481][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.445499][T18359] ? __fget_files+0x21f/0x3d0 [ 429.445516][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.445532][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.445544][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.445555][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.445570][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.445582][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.445601][T18359] do_fast_syscall_32+0x32/0x70 [ 429.445615][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.445637][T18359] RIP: 0023:0xf6fcefcc [ 429.445654][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.445670][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.445683][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.445690][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.445697][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.445704][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.445711][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.445725][T18359] [ 429.445747][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 27, retry [ 429.575704][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 27, retry [ 429.579332][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 27, retry [ 429.582652][T18359] ubi2 error: do_sync_erase: cannot erase PEB 27, error -22 [ 429.586001][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.586030][T18359] Tainted: [L]=SOFTLOCKUP [ 429.586036][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.586045][T18359] Call Trace: [ 429.586052][T18359] [ 429.586059][T18359] dump_stack_lvl+0x100/0x190 [ 429.586084][T18359] do_sync_erase+0x278/0x4d0 [ 429.586107][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.586130][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.586155][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.586178][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.586207][T18359] create_vtbl+0x1f7/0xaa0 [ 429.586225][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.586244][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.586271][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.586298][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.586315][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.586342][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.586360][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.586379][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.586397][T18359] ? kfree+0x223/0x6c0 [ 429.586429][T18359] ubi_attach+0x2380/0x4d30 [ 429.586474][T18359] ? ubi_msg+0x114/0x159 [ 429.586495][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.586516][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.586538][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.586559][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.586580][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.586604][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.586638][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.586659][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.586683][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.586705][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.586729][T18359] ? __fget_files+0x21f/0x3d0 [ 429.586753][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.586773][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.586790][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.586806][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.586828][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.586845][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.586872][T18359] do_fast_syscall_32+0x32/0x70 [ 429.586888][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.586918][T18359] RIP: 0023:0xf6fcefcc [ 429.586933][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.586949][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.586966][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.586976][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.586986][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.586995][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.587005][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.587027][T18359] [ 429.587062][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 28, retry [ 429.720700][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 28, retry [ 429.724807][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 28, retry [ 429.728095][T18359] ubi2 error: do_sync_erase: cannot erase PEB 28, error -22 [ 429.731193][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.731220][T18359] Tainted: [L]=SOFTLOCKUP [ 429.731226][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.731235][T18359] Call Trace: [ 429.731241][T18359] [ 429.731249][T18359] dump_stack_lvl+0x100/0x190 [ 429.731273][T18359] do_sync_erase+0x278/0x4d0 [ 429.731294][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.731316][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.731340][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.731365][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.731391][T18359] create_vtbl+0x1f7/0xaa0 [ 429.731410][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.731428][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.731456][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.731482][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.731498][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.731524][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.731542][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.731560][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.731578][T18359] ? kfree+0x223/0x6c0 [ 429.731604][T18359] ubi_attach+0x2380/0x4d30 [ 429.731634][T18359] ? ubi_msg+0x114/0x159 [ 429.731653][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.731672][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.731692][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.731713][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.731744][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.731805][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.731838][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.731858][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.731882][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.731903][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.731927][T18359] ? __fget_files+0x21f/0x3d0 [ 429.731949][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.731970][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.731987][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.732002][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.732022][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.732037][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.732062][T18359] do_fast_syscall_32+0x32/0x70 [ 429.732078][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.732099][T18359] RIP: 0023:0xf6fcefcc [ 429.732114][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.732129][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.732145][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.732156][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.732165][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.732174][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.732184][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.732206][T18359] [ 429.732241][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 29, retry [ 429.840639][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 29, retry [ 429.843285][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 29, retry [ 429.845843][T18359] ubi2 error: do_sync_erase: cannot erase PEB 29, error -22 [ 429.848149][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.848165][T18359] Tainted: [L]=SOFTLOCKUP [ 429.848169][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.848177][T18359] Call Trace: [ 429.848182][T18359] [ 429.848188][T18359] dump_stack_lvl+0x100/0x190 [ 429.848205][T18359] do_sync_erase+0x278/0x4d0 [ 429.848219][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.848234][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.848250][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.848265][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.848284][T18359] create_vtbl+0x1f7/0xaa0 [ 429.848296][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.848309][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.848328][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.848345][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.848356][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.848375][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.848389][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.848407][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.848421][T18359] ? kfree+0x223/0x6c0 [ 429.848440][T18359] ubi_attach+0x2380/0x4d30 [ 429.848461][T18359] ? ubi_msg+0x114/0x159 [ 429.848488][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.848504][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.848519][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.848535][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.848551][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.848568][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.848591][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.848607][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.848623][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.848640][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.848658][T18359] ? __fget_files+0x21f/0x3d0 [ 429.848674][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.848690][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.848706][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.848717][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.848732][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.848743][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.848762][T18359] do_fast_syscall_32+0x32/0x70 [ 429.848774][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.848790][T18359] RIP: 0023:0xf6fcefcc [ 429.848801][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.848812][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.848824][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.848831][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.848839][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.848845][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.848852][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.848867][T18359] [ 429.949897][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 30, retry [ 429.952617][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 30, retry [ 429.955471][T18359] ubi2 warning: do_sync_erase: error -22 while erasing PEB 30, retry [ 429.958571][T18359] ubi2 error: do_sync_erase: cannot erase PEB 30, error -22 [ 429.961002][T18359] CPU: 3 UID: 0 PID: 18359 Comm: syz.3.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.961020][T18359] Tainted: [L]=SOFTLOCKUP [ 429.961023][T18359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.961030][T18359] Call Trace: [ 429.961035][T18359] [ 429.961039][T18359] dump_stack_lvl+0x100/0x190 [ 429.961055][T18359] do_sync_erase+0x278/0x4d0 [ 429.961068][T18359] ? __pfx_do_sync_erase+0x10/0x10 [ 429.961083][T18359] ? rcu_is_watching+0x12/0xc0 [ 429.961100][T18359] ubi_io_sync_erase+0x58d/0x920 [ 429.961115][T18359] ubi_early_get_peb+0x1c8/0x870 [ 429.961133][T18359] create_vtbl+0x1f7/0xaa0 [ 429.961146][T18359] ? ubi_read_volume_table+0x6d5/0x2860 [ 429.961159][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.961178][T18359] ubi_read_volume_table+0x80f/0x2860 [ 429.961195][T18359] ? kasan_quarantine_put+0x104/0x240 [ 429.961206][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.961225][T18359] ? __pfx_ubi_read_volume_table+0x10/0x10 [ 429.961238][T18359] ? ubi_attach+0x20f0/0x4d30 [ 429.961251][T18359] ? ubi_attach+0x2135/0x4d30 [ 429.961264][T18359] ? kfree+0x223/0x6c0 [ 429.961282][T18359] ubi_attach+0x2380/0x4d30 [ 429.961301][T18359] ? ubi_msg+0x114/0x159 [ 429.961314][T18359] ? __pfx_ubi_attach+0x10/0x10 [ 429.961328][T18359] ? lockdep_init_map_type+0x5c/0x250 [ 429.961341][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.961356][T18359] ? __vmalloc_node_noprof+0xad/0xf0 [ 429.961371][T18359] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 429.961388][T18359] ubi_attach_mtd_dev+0x139f/0x32a0 [ 429.961413][T18359] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 429.961428][T18359] ? __pfx_get_mtd_device+0x10/0x10 [ 429.961443][T18359] ctrl_cdev_ioctl+0x36a/0x400 [ 429.961459][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.961475][T18359] ? __fget_files+0x21f/0x3d0 [ 429.961491][T18359] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 429.961506][T18359] compat_ptr_ioctl+0x6e/0xa0 [ 429.961521][T18359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 429.961531][T18359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.961545][T18359] __do_fast_syscall_32+0xe7/0x950 [ 429.961555][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 429.961573][T18359] do_fast_syscall_32+0x32/0x70 [ 429.961584][T18359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.961600][T18359] RIP: 0023:0xf6fcefcc [ 429.961610][T18359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 429.961621][T18359] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.961632][T18359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040186f40 [ 429.961639][T18359] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.961646][T18359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.961652][T18359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.961658][T18359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.961672][T18359] [ 429.961683][T18359] ubi2 error: ubi_early_get_peb: no free eraseblocks [ 430.271305][T18359] ubi2 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 430.388998][ T1161] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)