last executing test programs: 8m22.499632109s ago: executing program 2 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 8m22.34261494s ago: executing program 2 (id=539): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="602200004400010029bd7000040000000200000004004880482201"], 0x2260}, 0x1, 0x0, 0x0, 0x4040994}, 0x20008814) 8m22.100048832s ago: executing program 2 (id=542): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8m21.025032445s ago: executing program 2 (id=543): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000540)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6000006, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', &(0x7f0000000400)='nfsd\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='3', 0x4e) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x4) move_pages(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000340), 0x4) 8m20.872268752s ago: executing program 2 (id=544): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000002740)={0xa690b000, &(0x7f0000000480)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) 8m20.514833249s ago: executing program 2 (id=547): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file1\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xa0242, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 8m20.46267897s ago: executing program 32 (id=547): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file1\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xa0242, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 8m2.21256503s ago: executing program 1 (id=660): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0xd) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) 8m2.044763412s ago: executing program 1 (id=661): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) write(0xffffffffffffffff, &(0x7f0000000080)='7', 0x1) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r3, 0x400c4d06, &(0x7f00000005c0)="b7") openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 8m1.074497607s ago: executing program 1 (id=669): openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x17, 0x0, 0x1, [@generic="baed90061b"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000300)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000340)=ANY=[], 0x1c) close(0x3) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x88002, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x7040, 0x0) read$FUSE(r3, 0x0, 0x0) fgetxattr(r3, 0x0, &(0x7f0000000400)=""/214, 0xd6) syz_emit_ethernet(0x36, &(0x7f0000000500)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 8m0.924855624s ago: executing program 1 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000007a00000085000000"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x1, &(0x7f0000000380)={0x14, 0x1, 0xfee9}) 7m59.694740959s ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m59.624361099s ago: executing program 1 (id=683): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 7m44.344116639s ago: executing program 33 (id=683): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 7.224115048s ago: executing program 3 (id=4139): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) syz_io_uring_setup(0x34d1, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xad}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x4, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x0, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{r4, 0x80}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)={0x14, 0x1f, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) 6.345075321s ago: executing program 3 (id=4142): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff0014040100100001"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x0) ioperm(0x3, 0x9, 0x80) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffff0}}, {{0xa, 0x0, 0x6, @private1}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000640)={0x1, {{0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}}, {{0xa, 0x4e20, 0x3, @loopback}}}, 0x108) pread64(r4, &(0x7f0000000340)=""/72, 0x48, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 5.516457678s ago: executing program 3 (id=4144): mount$tmpfs(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6e935f696e6f6465733d302c00"]) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000800)) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x6}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}}], 0x1, 0x4001) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0xff23, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r8}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast2, @loopback, @empty}, 0xc) 4.9339686s ago: executing program 3 (id=4149): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) 3.885022431s ago: executing program 0 (id=4160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="10", 0x1, 0x4044850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) close(r1) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='16', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,cache=mm`p,\x00']) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff000000000000190000000000627b00000000d5029e35004f79d0f51a9998fd082cb87c846105ebba59e833170501f5b68dee04debab165c5913cf6832e2c49ab2151ab1fd2747abab50c819a515402afa36b457ec1b1618bc5e15b296ff34abe899258703a337b5a2f2a48ffe17b67c297557e4a63fe16011439b6016242b228d68a298074149d423597133ca8c8f93bdf8bba1d93000000000000", @ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB="01000000020000000300"/28], 0x50) 3.774629122s ago: executing program 0 (id=4162): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x3, 0x6, 0x3, 0x180}, 0x50) futex(0x0, 0x5, 0x2, &(0x7f0000000a40)={0x0, 0x989680}, 0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000200)={0x0, 0x1d2d, 0x200}, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000340), 0x1) sync() r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000a80)=0x1, 0x4) poll(&(0x7f0000000ac0), 0x0, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c40), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901020301090212960001085440010904bc80690300007f"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys_mnt\x00', 0x1df) mount(0x0, &(0x7f0000000d40)='./sys_mnt\x00', &(0x7f0000000d80)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./sys_mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='tps6598x 0x3', 0xc) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x5, 0x101, 0x9, 0x8, 0x7, "710f62f18cf46ab1"}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000081, 0xffffffff, 0x6}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x17, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) 2.455127124s ago: executing program 4 (id=4170): mount$tmpfs(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6e935f696e6f6465733d302c00"]) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000800)) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x6}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}}], 0x1, 0x4001) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0xff23, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r8}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast2, @loopback, @empty}, 0xc) 2.085375246s ago: executing program 4 (id=4171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 2.084573007s ago: executing program 4 (id=4172): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000190c0)='./file0\x00', &(0x7f0000019100), 0x1000000, &(0x7f0000000000)={[{@noswap}, {@quota}]}) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, &(0x7f00000191c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000019440)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000019540)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xb, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.863868769s ago: executing program 3 (id=4174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0x0, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000e80)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f0000000f00)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000480)="96d6a67d47585994b50179c72a25ce220c109ced59f2829413493625e8bf9b8fc8ed7fcf502f979466267d5e090cf2a2dc4c1df5693f138b549b57e9e1ee37d5176e0e132cecb82911d3735040f681606585dcee85553d4f17e83261eedae5fb7bf175c1406d7fef33d2ee9102bb6eb33cbffe1d41d5f64e1f72c5e930686ee3c84ce0b609134cb092f4c4a70e72d3f35e214d57f9b6d8de5631dd1ee22ffff70ba229af34e8f1fa0a50f7b97fc72ced687422db4c74b92cc05db1de4516fa00e9b04f37cc65a81e825ecaf436fecfe920da8c82321962623ab9b97f0bf03e2d34", 0xe1}, {&(0x7f0000000580)="c875e08d63ee06183af4", 0xa}, {&(0x7f00000005c0)="22bbe1c7ec871dbeea977dc9a6c33b72bdd111", 0x13}, {&(0x7f0000000600)="173e274a819999313dac9acc6fe4ec104ae192c87974f810612ed85ec9889d118ab6ca80167d1796685905a791c9903e6daa1e1f4c635ca86b3a24d55084531fb138cbcd959f56fab51b481f21350f684eee8c7c15e6b2b8e80139dd2de7c52c39896f47ee88cfa796ea86f6a854c7bf84879c9fbdf6578785d9d10fd02907d0cc8b292dca5c8bf998186de533a8071f24822cd2611195839de4f0b65bd23d3713af1a9aaa4ace4b7c762e8d1ad32fd51a22b7351d8fcb761cb8708ed075a00c1c1fc7822f4117fc34dd21ad1a75a70379df538671fa6db5", 0xd8}, {&(0x7f0000000700)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="26361f6a594082c0952fad245e6f846a5546d7eb5c26aa05faa9cae8f964d2f7c678103c932567e2130fb99360100627811120613031f8f57c135792f6e822c0de3cb1108d4ffbe17b89842fc9c66eecf0ce87521f09ec104938d8fd7eb2dcb68dd0a66cee2b8fe4b0b297b0fbc480bed7b62dc158966ea3fb95e3cd60143c7ee270e756e6db5ed40a5c851fca1093134db5321c7b303140aceaee474057", 0x9e}, {&(0x7f00000008c0)="33b9f8d778f339cf4eb47c84536501abb1f773c2e3d7274631d3962fee865ca0c282a9d97aed4e023977379ca9855d231fa08a476ca57e88d09c0506e876deb709b030c90254f29cf7178f9011bd536f6a9521ec4015fa009f208aafe32b5831aa538ad984b117e2c89e4b16039c5668aed430f50f0a02d71347448db7752bfb1ed716590644ca515e0573543488a7474acc30eecbf13577b365b3497c592648b62089af1fbd740b62c60f7af82200edc601de4916be43cf04582cc6b44d6494449647d7a7a58cce408f60835884eb87b6d776397955bcaf0d3d9048133265f27fbd4de6dbc241040d2a676b45", 0xed}, {&(0x7f00000009c0)="b4ad1f6995f5f97e542ad09c413e212e20e507379de8675e3bb56564f9c7389d63d3c514f63f75681166b0b06274131b2158faeca1375d99409e89b16079fd8d1ecb06d6d06667a4220b7b29864706a74fa1c76c906010a5a3248b3ab1fa5d23f5b468c651f45d901e7b81444286a2e53a0ff59a49910fcfc7e5ee368001bcc1782194be6f08de9edb3713802a1cf3821268dde76d7ea1aa9c101b98af8db7f0a3ca1b80b424733b1db4a473d692c09c901fcd1e9e4af7bbd1259c44d53e1e8dc245c4a7ff87111a46179bd4739648370d315b1ecbd753727c", 0xd9}, {&(0x7f0000000ac0)="4a1ea2ab6c30f26e81aca036982889c4564f4a6397f36a9ca15c68cb68a09ea14e3ab47712e0ee7fded13e555b9f214f8d05e22f8ac43a6e657671820384f4970b2d2fefb673041124ae32a03639341840af540843d0c2f1a3dbf02700c1627531214cc949e3b0905b4433f27d0eff9deede5b6d7475b2e235a471c32942d68cbc9a95bcd96b1cf79ed00dfb93ea65e2e37fe891dced8ce1ba8ac3ac", 0x9c}], 0xa, &(0x7f0000000c00)=[@iv={0x54, 0x117, 0x2, 0x44, "3253ddaed1d97171d840a35e14ddbcdca27e4321fb0facbe0a171512d4bc06884012239daf498ceb067147a217030f8d44c0a0d3941dd5a7c16b53ac45b63129022b31b2"}, @iv={0x44, 0x117, 0x2, 0x33, "984b97dc5bd4806f2e70c9e14c1f49581769dab9922e9e71cafff70b3e266a29ceae66b9c1b56e117619c0828289f9b34cfeff"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xf7c}], 0xb8, 0x80}, 0x404c811) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x43800, 0x0) 1.295356732s ago: executing program 5 (id=4179): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x10000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@initdev, @empty}, &(0x7f00000000c0)=0xc) r3 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1800, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xd8da}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, '/dev/hidraw#\x00'}}, {@uid_eq={'uid', 0x3d, r7}}]}}) recvfrom$unix(r2, &(0x7f00000004c0)=""/108, 0x6c, 0x140, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000005c0)=0x5) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f0000000600)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000640)=0xc) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0xcc, 0xffffffff, 0x184, 0xffffffff, 0xffffffff, 0x184, 0xffffffff, 0x3, &(0x7f0000000680), {[{{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="8682985b8f2c", 0x5, 0x3, [0x28, 0x14, 0x1e, 0x22, 0x18, 0x20, 0x22, 0xc, 0x40, 0x28, 0x6d0b, 0x26, 0x3d, 0x8, 0xa, 0x3a], 0x0, 0x81, 0xa58}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@icmp={{0x24}, {0x0, "04b1"}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000001980)={'nat\x00', 0x0, 0x3, 0x1000, [0x44bed01c, 0x4, 0x6995, 0x4463, 0x7f, 0x3], 0x3, &(0x7f0000000940)=[{}, {}, {}], &(0x7f0000000980)=""/4096}, &(0x7f0000001a00)=0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xcb04, 0x0, 0x6, 0x7fff, 0x9, 0xb41, 0x8, 0x0, 0x2, 0x0, 0xd6a, 0x3, 0x5, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001b00)={r10, 0x9}) mknod$loop(&(0x7f0000002b00)='./file0\x00', 0x8, 0x1) mount$fuse(0x0, &(0x7f0000002b40)='./file1\x00', &(0x7f0000002b80), 0x10010, &(0x7f0000002bc0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}], [{@pcr={'pcr', 0x3d, 0x18}}]}}) mkdir(&(0x7f0000002cc0)='./file0\x00', 0x81) landlock_restrict_self(r6, 0xe) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000002d00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002d40)='highspeed', 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000002e80)={r1, &(0x7f0000002d80)='highspeed', 0x40202, &(0x7f0000002dc0)={@align=0x276a44ba, {0xd88, 0x3, 0x9, 0x140}}, 0x8, &(0x7f0000002e00), &(0x7f0000002e40)=0xf05}) setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000002ec0)={@loopback, @multicast2}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000002f00)=0x3b99, 0x4) sched_setattr(0x0, &(0x7f0000002f40)={0x38, 0x6, 0x12, 0x200, 0x7, 0x8, 0x44, 0x2, 0x6, 0x5}, 0x0) ioctl$CDROMPAUSE(r6, 0x5301) ioctl$CDROMREADRAW(r6, 0x5314, 0xffffffffffffffff) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000002f80)={0xb, "7caa03f2ea606018d06ae6f22cecac1534566f1505d5b51a42d9c2f8a867ed680b09e309ce965dfaf38bdfb8278c60ae2f37caf0b7aaf3f47b77cf41fb7c60a9"}) 1.224998223s ago: executing program 5 (id=4180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) 1.208875646s ago: executing program 5 (id=4181): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) syz_io_uring_setup(0x34d1, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0xad}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x4, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x0, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{r4, 0x80}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)={0x14, 0x1f, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) 1.134374844s ago: executing program 3 (id=4182): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) 815.071527ms ago: executing program 4 (id=4183): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000880)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x8, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xd, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000100)="1000000011000000000000000000000000000000000001", 0x17) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 699.421159ms ago: executing program 0 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x800, 0x4, 0xcffe, 0xe, "0062ba85c3cd1600f70509660400"}) r2 = syz_open_pts(r1, 0xa0200) r3 = dup3(r2, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x482, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x21c004, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000380)='\rk', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f00000003c0)={0x1, 0x1, &(0x7f0000000400)=[r8], 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000580)=[r11, r10], 0x2, 0x800}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc00c64b5, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000780)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[r8, r10, r12, r13, r14, r15], 0x6}) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000280)={0x800, 0xcf, 0x1, 0xf, 0x11, "798a1e5d662a9633"}) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x1ff) 465.112745ms ago: executing program 4 (id=4185): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) pwrite64(r2, &(0x7f0000000080)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000002c0)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000300)={"0080bced01eb0100000000000000000700000000000000c900", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000340)=[{r8, 0x6}], 0x1, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x2, 0xfc, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) truncate(&(0x7f00000001c0)='./file1\x00', 0x8da6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r10, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140604011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 464.848498ms ago: executing program 0 (id=4186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) (fail_nth: 2) 364.882281ms ago: executing program 4 (id=4187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000004c0)=0x1ffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000540)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x400c4150, 0x0) socket$inet(0xa, 0x801, 0x84) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000400)=""/171, 0xab}], 0x1, 0x81, 0x7) r6 = socket(0xb, 0x2, 0x10000000000002) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='<', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 364.492442ms ago: executing program 0 (id=4188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x1, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=r1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f0000001280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x1, 0x0, &(0x7f00000012c0)=[{0x0, 0x16, 0x6, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8, 0x10, &(0x7f0000000f80), 0x10, r1}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001380)={0x0, 0x8af9, 0x80, 0x2, 0x3c2}, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x0, &(0x7f0000001480)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000014c0)=@IORING_OP_SOCKET={0x2d, 0x8, 0x0, 0x2, 0x3, 0x0, 0x96, 0x0, 0x1, {0x0, 0x0, 0x8}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000015c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000280)=""/208, 0xd0, 0x8d3d) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000380)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x9, 0x1ff, 0x40, 0xfffffff8, 0xffffff00]}, &(0x7f0000000fc0)=0x50) write$cgroup_devices(r4, 0x0, 0x8) write$cgroup_devices(r4, &(0x7f0000001340)=ANY=[@ANYBLOB="9b3169f12927a9bad18a356d3cb63eb2f2aeddf4d21820a5574f9b7883dbf4d2000000000100000055bb4eb84b"], 0x8) ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, &(0x7f0000001300)={0x4, [0x9, 0xffffffff7fffffff, 0x6, 0xfffffffffffffff2]}) r10 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) mknod$loop(&(0x7f0000001000)='./file0\x00', 0x1000, 0x1) mount(&(0x7f0000001040)=@nullb, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='gfs2meta\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r10, 0xc04c5609, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x3895c1161a66c8f8, 0xa, {}, {0x3, 0x8, 0x7, 0x4, 0x1, 0xa5, 'R:31'}, 0x1, 0x4, {}, 0x6}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400)=0x34a78, 0x4) 293.842314ms ago: executing program 5 (id=4189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x24, 0x0, 0x3, 0x6, 0x0, 0x85}, 0x20) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r5, 0x1002, 0x30}, 0xc) 197.533521ms ago: executing program 0 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x80000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000280)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000004c0)=@usbdevfs_connect) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000280000000000069078640101ac1414aa00b94e22cb1a85eab8077ab0c1cf18b44490a071050c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='ex\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') 115.325445ms ago: executing program 5 (id=4191): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000240), 0xfeb5, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {0x3ff, 0x282, 0xc, 0x6}, 0x33, [0x2, 0x5, 0xfffffffe, 0x9, 0x5, 0x4, 0x3, 0x7, 0x1, 0x800, 0xc, 0xe, 0x4, 0x814e, 0xffffcb12, 0x40, 0x5, 0x5, 0x40, 0x6, 0x9, 0xdd28, 0x2, 0xffffffff, 0x3, 0xd9, 0x5, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x7, 0x10000, 0x1, 0x800, 0x7, 0xb, 0x20000000, 0x5, 0x4, 0x72, 0x9ae, 0x200, 0x5, 0x3, 0x5, 0x4, 0x458, 0xd17, 0x5, 0x0, 0x1000, 0x0, 0x3, 0x4, 0xfffffff5, 0x4, 0x10040, 0x0, 0x40000ed, 0x985, 0x9, 0x7], [0x2, 0x2, 0x2c, 0x5, 0xfff, 0x9, 0x8, 0x7f, 0x3, 0xfbb, 0x8, 0x7fff, 0x9, 0x3, 0x9, 0x17, 0x7, 0x40ff, 0x9, 0x80000000, 0xfffff1e9, 0x7, 0x7, 0x100, 0x7f, 0x7fff, 0xfffffffd, 0x7f, 0xb, 0x9, 0x8, 0x2, 0xe, 0x8, 0x8000, 0x3, 0x6, 0x3, 0x3d, 0x3, 0x5, 0x2, 0x1, 0x25c9, 0x2, 0x2a, 0x1, 0x310f6bfa, 0x7, 0x1ff, 0xad6, 0xfffffff9, 0x1, 0x3, 0x7fffffff, 0x3, 0x3, 0x7, 0x4, 0x0, 0x1b6, 0x100fff, 0x5, 0x9], [0x3562, 0x7fff, 0x4, 0x10000005, 0x200, 0x3, 0x2, 0x4, 0x3, 0x8, 0x8, 0x14, 0xde, 0x2, 0x9, 0xdb, 0x6, 0xffff7fff, 0x9, 0x5, 0xa3b, 0x6f, 0xffff0daf, 0xd, 0x8, 0x6, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x4, 0xfffffc01, 0xd, 0x689, 0x40, 0x5, 0xfffffb61, 0x8, 0x8e, 0x9, 0x7, 0x9, 0x6, 0x12a, 0x200, 0x1000, 0xfffffff6, 0x3, 0x5, 0x4, 0x0, 0x10000, 0x18e7, 0xff, 0x1, 0x2, 0x4, 0x4, 0x9, 0x6, 0x1, 0x1000, 0x55, 0x1], [0x40b, 0xfffffff8, 0x5, 0xfffffff1, 0x9, 0x7f, 0xa7e4, 0x8a4, 0xa, 0x10000, 0x7, 0x9, 0x0, 0xff, 0x1, 0xb7, 0xf5e, 0xd, 0xf5, 0x8, 0x1, 0x4, 0x3, 0x6, 0x7, 0x4, 0x5, 0x1a, 0xc, 0x5, 0x9, 0x6f3, 0x80000000, 0x7, 0x21cc, 0xfc, 0x3, 0x5, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x800, 0x2, 0xb, 0x4, 0xd3, 0x8, 0x8002, 0x6, 0xfffffffe, 0x5, 0x9, 0x7fffffff, 0x9, 0x8000, 0x4c659235, 0x100, 0x5, 0x7f, 0x33, 0x2d788b59, 0x4]}, 0x45c) 0s ago: executing program 5 (id=4192): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x80000001, 0x10002) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001700)=@svm={0x0, 0x1, 0x1080, {0x41000, 0x7}, {"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"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000540)=""/10, 0x5b) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000001c0)={0x32, 0x2, 0x2, 0x8, 0x0, [@mcast2]}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="380200007d02000005f300020000000005830000000008080000000000000000404100000000e0e5000005000000000000001800046e6f6465767b65766f6fc60005f1ffffffffffffff00003300704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb1403f196a51cd5157adc8103b494e13700cfc36d07c500f04cd85f2a70f5e9930e5e989cd5ef4d51f60da7582c4a05c8f828f68dc1774d5de2e820862381f6686dd1bb8fd70000003e00f8f669fb716dcf315ecaf385409ac65b9408678c3c3b9e1d52c36cde7ba4a400b4b077dc74000000000000000007ec21cabff20f9c0089f906000000000030016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1372d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e9cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a700485399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a79c596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00000000000000000000000000000000003bc200c5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x238) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2800000010001fffb51dfe1c1d1d6d0000000000000000a8b9f1", @ANYRES32=0x0, @ANYBLOB="000000008d020600080004006d352b18"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x1, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x45) write(r8, &(0x7f0000000400)='1', 0x1) r9 = openat(r8, &(0x7f0000000480)='./sys\x00', 0x10000, 0x0) write(r9, &(0x7f0000000600)='1', 0x1) kernel console output (not intermixed with test programs): stead [ 511.880459][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 511.880475][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd37c instead [ 511.880493][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa4fb instead [ 511.880528][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 511.880542][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 511.880559][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd37c instead [ 511.880577][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa4fb instead [ 511.880620][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 511.880637][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 511.880653][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd37c instead [ 511.880671][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa4fb instead [ 511.880713][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 511.880728][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 511.880742][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd37c instead [ 511.880759][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa4fb instead [ 511.880802][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 511.880817][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 511.880834][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd37c instead [ 511.880850][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa4fb instead [ 511.880891][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 511.880907][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 511.880923][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd37c instead [ 511.880937][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa4fb instead [ 511.880981][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 511.880995][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 511.881009][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd37c instead [ 511.881028][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa4fb instead [ 511.881058][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 511.881068][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 511.881078][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd37c instead [ 511.881088][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa4fb instead [ 511.881114][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 511.881124][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 511.881133][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd37c instead [ 511.881144][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa4fb instead [ 511.881170][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 511.881179][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 511.881189][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd37c instead [ 511.881200][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa4fb instead [ 511.881226][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 511.881235][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 511.881245][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd37c instead [ 511.881255][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa4fb instead [ 511.881281][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 511.881291][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 511.881300][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd37c instead [ 511.881311][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa4fb instead [ 511.881340][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 511.881350][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 511.881359][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd37c instead [ 511.881370][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa4fb instead [ 511.881426][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 511.881436][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 511.881446][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd37c instead [ 511.881456][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa4fb instead [ 511.881483][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 511.881492][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 511.881502][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd37c instead [ 511.881513][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa4fb instead [ 511.881539][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 511.881548][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 511.881558][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd37c instead [ 511.881569][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa4fb instead [ 511.881596][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 511.881606][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 511.881616][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd37c instead [ 511.881626][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa4fb instead [ 511.881654][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 511.881663][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 511.881673][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd37c instead [ 511.881684][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa4fb instead [ 511.881711][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 511.881720][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 511.881730][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd37c instead [ 511.881741][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa4fb instead [ 511.881768][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 511.881778][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 511.881788][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd37c instead [ 511.881798][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa4fb instead [ 511.881826][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 511.881835][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 511.881845][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd37c instead [ 511.881856][T17095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa4fb instead [ 511.881878][T17095] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 511.881883][T17095] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 512.130627][T17078] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 512.278564][T17078] usb 5-1: device descriptor read/64, error -71 [ 512.588017][T17078] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 512.615942][T17078] usb 5-1: device descriptor read/8, error -71 [ 512.927905][T17078] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 512.959842][T17078] usb 5-1: device descriptor read/8, error -71 [ 513.016118][T17113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.016134][T17113] block device autoloading is deprecated and will be removed. [ 513.064856][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 513.082185][ T5841] usb 5-1: USB disconnect, device number 97 [ 513.297472][ T5841] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 513.438116][ T5841] usb 5-1: device descriptor read/64, error -71 [ 513.777544][ T5890] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 513.947728][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 513.948777][ T5890] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 513.950341][ T5890] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 513.950361][ T5890] usb 9-1: config 0 has no interface number 0 [ 513.950390][ T5890] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.950409][ T5890] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.951193][ T5890] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 513.951214][ T5890] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 513.951235][ T5890] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.957872][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.957892][ T5890] usb 9-1: Product: syz [ 513.957904][ T5890] usb 9-1: Manufacturer: syz [ 513.957916][ T5890] usb 9-1: SerialNumber: syz [ 513.962056][ T5890] usb 9-1: config 0 descriptor?? [ 514.100231][T17134] veth1_to_hsr: entered allmulticast mode [ 514.315473][T17124] FAULT_INJECTION: forcing a failure. [ 514.315473][T17124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.315496][T17124] CPU: 2 UID: 0 PID: 17124 Comm: syz.4.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.315512][T17124] Tainted: [L]=SOFTLOCKUP [ 514.315516][T17124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.315523][T17124] Call Trace: [ 514.315527][T17124] [ 514.315533][T17124] dump_stack_lvl+0x100/0x190 [ 514.315566][T17124] should_fail_ex.cold+0x5/0xa [ 514.315582][T17124] _copy_to_user+0x32/0xd0 [ 514.315597][T17124] simple_read_from_buffer+0xcb/0x170 [ 514.315615][T17124] proc_fail_nth_read+0x1af/0x230 [ 514.315633][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.315651][T17124] ? rw_verify_area+0xce/0x6d0 [ 514.315664][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.315681][T17124] vfs_read+0x1e4/0xb40 [ 514.315697][T17124] ? lock_acquire+0x1d1/0x380 [ 514.315714][T17124] ? __fget_files+0x34/0x3d0 [ 514.315731][T17124] ? __pfx_vfs_read+0x10/0x10 [ 514.315745][T17124] ? find_held_lock+0x2b/0x80 [ 514.315760][T17124] ? __fget_files+0x215/0x3d0 [ 514.315798][T17124] ? __fget_files+0x21f/0x3d0 [ 514.315818][T17124] ksys_read+0x12a/0x250 [ 514.315834][T17124] ? __pfx_ksys_read+0x10/0x10 [ 514.315857][T17124] do_int80_emulation+0x166/0x650 [ 514.315875][T17124] asm_int80_emulation+0x1a/0x20 [ 514.315887][T17124] RIP: 0023:0xf71777eb [ 514.315897][T17124] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 514.315908][T17124] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 514.315921][T17124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 514.315928][T17124] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 514.315935][T17124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.315942][T17124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.315949][T17124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.315964][T17124] [ 514.606149][ T5890] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 514.616044][ T5890] usb 9-1: USB disconnect, device number 45 [ 516.566603][T17130] syz.0.3785 (17130) used greatest stack depth: 18440 bytes left [ 517.850330][T17158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.850357][T17158] block device autoloading is deprecated and will be removed. [ 519.435414][T17181] syzkaller0: entered promiscuous mode [ 519.435436][T17181] syzkaller0: entered allmulticast mode [ 520.006618][T17178] FAULT_INJECTION: forcing a failure. [ 520.006618][T17178] name failslab, interval 1, probability 0, space 0, times 0 [ 520.006649][T17178] CPU: 0 UID: 0 PID: 17178 Comm: syz.5.3801 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.006672][T17178] Tainted: [L]=SOFTLOCKUP [ 520.006679][T17178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.006689][T17178] Call Trace: [ 520.006695][T17178] [ 520.006703][T17178] dump_stack_lvl+0x100/0x190 [ 520.006731][T17178] should_fail_ex.cold+0x5/0xa [ 520.006754][T17178] should_failslab+0xc2/0x120 [ 520.006772][T17178] __kmalloc_noprof+0xfc/0x840 [ 520.006794][T17178] ? rcu_is_watching+0x13/0xc0 [ 520.006814][T17178] ? tomoyo_realpath_from_path+0xb6/0x690 [ 520.006846][T17178] tomoyo_realpath_from_path+0xb6/0x690 [ 520.006876][T17178] tomoyo_path_number_perm+0x23c/0x580 [ 520.006898][T17178] ? tomoyo_path_number_perm+0x22e/0x580 [ 520.006921][T17178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 520.006944][T17178] ? get_pid_task+0x106/0x250 [ 520.006970][T17178] ? __lock_acquire+0x5c0/0x1f40 [ 520.007006][T17178] ? __fget_files+0x34/0x3d0 [ 520.007030][T17178] ? find_held_lock+0x2b/0x80 [ 520.007049][T17178] ? __fget_files+0x215/0x3d0 [ 520.007071][T17178] ? hook_file_ioctl_common+0x140/0x440 [ 520.007094][T17178] ? __fget_files+0x215/0x3d0 [ 520.007120][T17178] ? __fget_files+0x21f/0x3d0 [ 520.007147][T17178] security_file_ioctl_compat+0xd3/0x230 [ 520.007171][T17178] __ia32_compat_sys_ioctl+0xc2/0x360 [ 520.007216][T17178] __do_fast_syscall_32+0x13a/0x8b0 [ 520.007238][T17178] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.007258][T17178] do_fast_syscall_32+0x32/0x70 [ 520.007291][T17178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.007316][T17178] RIP: 0023:0xf7f66fec [ 520.007335][T17178] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 520.007343][T17178] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 520.007360][T17178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0404807 [ 520.007371][T17178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.007381][T17178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.007391][T17178] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 520.007401][T17178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.007424][T17178] [ 520.053194][T17178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.211926][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4221 instead [ 522.211959][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 522.211970][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd37c instead [ 522.211982][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xa4fb instead [ 522.211991][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 522.212001][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 522.212010][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 522.212023][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 522.212042][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 522.212060][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 522.212070][T17212] jffs2: Further such events for this erase block will not be printed [ 522.212281][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 522.212290][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 522.212302][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd37c instead [ 522.212312][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xa4fb instead [ 522.212321][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 522.212329][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 522.212338][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 522.212349][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 522.212366][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 522.212384][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 522.212392][T17212] jffs2: Further such events for this erase block will not be printed [ 522.212587][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 522.212596][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 522.212605][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd37c instead [ 522.212616][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa4fb instead [ 522.212640][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 522.212648][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 522.212658][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd37c instead [ 522.212668][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa4fb instead [ 522.212692][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 522.212701][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 522.212710][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd37c instead [ 522.212721][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa4fb instead [ 522.212745][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 522.212754][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 522.212771][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd37c instead [ 522.212782][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa4fb instead [ 522.212808][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 522.212818][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 522.212828][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd37c instead [ 522.212839][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa4fb instead [ 522.212864][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 522.212874][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 522.212884][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd37c instead [ 522.212895][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa4fb instead [ 522.212919][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 522.212929][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 522.212939][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd37c instead [ 522.212950][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa4fb instead [ 522.212973][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 522.212982][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 522.212992][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd37c instead [ 522.213002][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa4fb instead [ 522.213025][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 522.213034][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 522.213043][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd37c instead [ 522.213054][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa4fb instead [ 522.213077][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 522.213086][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 522.213096][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd37c instead [ 522.213106][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa4fb instead [ 522.213129][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 522.213139][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 522.213148][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd37c instead [ 522.213158][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa4fb instead [ 522.213182][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 522.213191][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 522.213200][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd37c instead [ 522.213211][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa4fb instead [ 522.213235][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 522.213244][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 522.213253][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd37c instead [ 522.213264][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa4fb instead [ 522.213287][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 522.213296][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 522.213305][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd37c instead [ 522.213316][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa4fb instead [ 522.213339][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 522.213348][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 522.213357][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd37c instead [ 522.213367][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa4fb instead [ 522.213391][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 522.213400][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 522.213410][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd37c instead [ 522.213421][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa4fb instead [ 522.213444][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 522.213454][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 522.213464][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd37c instead [ 522.213474][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa4fb instead [ 522.213499][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 522.213508][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 522.213517][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd37c instead [ 522.213527][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa4fb instead [ 522.213550][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 522.213558][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 522.213568][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd37c instead [ 522.213578][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa4fb instead [ 522.213602][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 522.213611][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 522.213621][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd37c instead [ 522.213631][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa4fb instead [ 522.213654][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 522.213663][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 522.213672][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd37c instead [ 522.213682][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa4fb instead [ 522.213706][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 522.213715][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 522.213724][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd37c instead [ 522.213734][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa4fb instead [ 522.213812][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 522.213822][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 522.213832][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd37c instead [ 522.213843][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa4fb instead [ 522.213868][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 522.213878][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 522.213889][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd37c instead [ 522.213900][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa4fb instead [ 522.213925][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 522.213935][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 522.213946][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd37c instead [ 522.213956][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa4fb instead [ 522.213981][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 522.213991][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 522.214000][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd37c instead [ 522.214010][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa4fb instead [ 522.214033][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 522.214042][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 522.214051][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd37c instead [ 522.214061][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa4fb instead [ 522.214084][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 522.214093][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 522.214102][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd37c instead [ 522.214112][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa4fb instead [ 522.214136][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 522.214145][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 522.214154][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd37c instead [ 522.214164][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa4fb instead [ 522.214189][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 522.214197][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 522.214207][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd37c instead [ 522.214217][T17212] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa4fb instead [ 522.214236][T17212] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 522.214241][T17212] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 522.410394][ T5841] wiimote 0005:057E:0306.000E: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 522.410578][ T5841] wiimote 0005:057E:0306.000E: New device registered [ 522.411075][T17216] FAULT_INJECTION: forcing a failure. [ 522.411075][T17216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.411096][T17216] CPU: 1 UID: 0 PID: 17216 Comm: syz.3.3812 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.411112][T17216] Tainted: [L]=SOFTLOCKUP [ 522.411116][T17216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.411123][T17216] Call Trace: [ 522.411127][T17216] [ 522.411132][T17216] dump_stack_lvl+0x100/0x190 [ 522.411196][T17216] should_fail_ex.cold+0x5/0xa [ 522.411220][T17216] _copy_from_user+0x2e/0xd0 [ 522.411252][T17216] uhid_char_write+0x16d/0xfe0 [ 522.411316][T17216] vfs_write+0x2aa/0x1050 [ 522.411346][T17216] ? __pfx_uhid_char_write+0x10/0x10 [ 522.411363][T17216] ? lock_acquire+0x1d1/0x380 [ 522.411389][T17216] ? __fget_files+0x34/0x3d0 [ 522.411406][T17216] ? __pfx_vfs_write+0x10/0x10 [ 522.411420][T17216] ? find_held_lock+0x2b/0x80 [ 522.411434][T17216] ? __fget_files+0x215/0x3d0 [ 522.411450][T17216] ? __fget_files+0x215/0x3d0 [ 522.411468][T17216] ? __fget_files+0x21f/0x3d0 [ 522.411489][T17216] ksys_write+0x1f8/0x250 [ 522.411509][T17216] ? __pfx_ksys_write+0x10/0x10 [ 522.411529][T17216] ? ksys_write+0x1ac/0x250 [ 522.411550][T17216] ? __pfx_ksys_write+0x10/0x10 [ 522.411578][T17216] __do_fast_syscall_32+0x13a/0x8b0 [ 522.411649][T17216] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.411664][T17216] do_fast_syscall_32+0x32/0x70 [ 522.411678][T17216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.411693][T17216] RIP: 0023:0xf748efec [ 522.411707][T17216] Code: Unable to access opcode bytes at 0xf748efc2. [ 522.411712][T17216] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 522.411725][T17216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001340 [ 522.411752][T17216] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 522.411758][T17216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.411765][T17216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 522.411772][T17216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.411787][T17216] [ 522.413845][T17215] wiimote 0005:057E:0306.000E: Device removed [ 522.517766][ T5862] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 522.598153][T17217] fido_id[17217]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 522.782059][ T5862] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 522.836837][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.836880][ T5862] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.870622][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 522.870650][ T5862] usb 5-1: Product: syz [ 522.870664][ T5862] usb 5-1: Manufacturer: syz [ 522.878329][ T5862] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 522.882513][ T5862] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 523.152220][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 523.152233][ T42] audit: type=1326 audit(1792580893.231:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.0.3811" exe="/syz-executor" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x0 [ 523.444920][T17231] FAULT_INJECTION: forcing a failure. [ 523.444920][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 523.444944][T17231] CPU: 3 UID: 0 PID: 17231 Comm: syz.4.3816 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.444960][T17231] Tainted: [L]=SOFTLOCKUP [ 523.444964][T17231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.444971][T17231] Call Trace: [ 523.444976][T17231] [ 523.444981][T17231] dump_stack_lvl+0x100/0x190 [ 523.445000][T17231] should_fail_ex.cold+0x5/0xa [ 523.445020][T17231] should_failslab+0xc2/0x120 [ 523.445038][T17231] kmem_cache_alloc_noprof+0x92/0x6a0 [ 523.445063][T17231] ? do_getname+0x35/0x390 [ 523.445089][T17231] do_getname+0x35/0x390 [ 523.445106][T17231] do_sys_openat2+0xc3/0x1d0 [ 523.445119][T17231] ? __pfx_do_sys_openat2+0x10/0x10 [ 523.445133][T17231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 523.445151][T17231] __ia32_compat_sys_openat+0x12d/0x210 [ 523.445165][T17231] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 523.445178][T17231] ? fput+0x7c/0x100 [ 523.445188][T17231] ? ksys_write+0x1ac/0x250 [ 523.445203][T17231] ? __pfx_ksys_write+0x10/0x10 [ 523.445221][T17231] __do_fast_syscall_32+0x13a/0x8b0 [ 523.445235][T17231] ? lockdep_hardirqs_on+0x7d/0x110 [ 523.445248][T17231] do_fast_syscall_32+0x32/0x70 [ 523.445271][T17231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.445292][T17231] RIP: 0023:0xf7f84fec [ 523.445314][T17231] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 523.445322][T17231] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 523.445342][T17231] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 523.445354][T17231] RDX: 0000000000020400 RSI: 0000000000000020 RDI: 0000000000000000 [ 523.445364][T17231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.445376][T17231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.445389][T17231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.445413][T17231] [ 523.491813][ T5841] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 523.879703][ T5841] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input31 [ 523.881091][ T5841] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input32 [ 523.882595][ T5841] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input30 [ 525.208469][ T61] usb 5-1: USB disconnect, device number 100 [ 525.248140][ T61] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 525.248766][ T61] iuu_phoenix 5-1:1.0: device disconnected [ 526.668399][ T5817] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 526.767449][ T61] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 526.817507][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 526.818670][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 526.820846][ T5817] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 526.820868][ T5817] usb 5-1: config 0 has no interface number 0 [ 526.820898][ T5817] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 526.820917][ T5817] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.820936][ T5817] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 526.820955][ T5817] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 526.820974][ T5817] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.825149][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.825169][ T5817] usb 5-1: Product: syz [ 526.825181][ T5817] usb 5-1: Manufacturer: syz [ 526.825193][ T5817] usb 5-1: SerialNumber: syz [ 526.833273][ T5817] usb 5-1: config 0 descriptor?? [ 526.917485][ T61] usb 10-1: Using ep0 maxpacket: 32 [ 526.918542][ T61] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 526.920294][ T61] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.920308][ T61] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.920328][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.922857][ T61] usb 10-1: config 0 descriptor?? [ 527.097866][ T5817] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 527.127811][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3824'. [ 527.552268][ T1346] usb 10-1: USB disconnect, device number 43 [ 527.767458][ T5817] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 527.917646][ T5817] usb 9-1: Using ep0 maxpacket: 8 [ 527.918350][ T5817] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 527.920211][ T5817] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 527.920225][ T5817] usb 9-1: config 0 has no interface number 0 [ 527.920265][ T5817] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.920283][ T5817] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.920303][ T5817] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 527.920323][ T5817] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 527.920345][ T5817] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.923110][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.923123][ T5817] usb 9-1: Product: syz [ 527.923130][ T5817] usb 9-1: Manufacturer: syz [ 527.923138][ T5817] usb 9-1: SerialNumber: syz [ 527.924865][ T5817] usb 9-1: config 0 descriptor?? [ 528.132345][ T5817] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 528.333201][T17271] FAULT_INJECTION: forcing a failure. [ 528.333201][T17271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.333226][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.4.3827 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.333242][T17271] Tainted: [L]=SOFTLOCKUP [ 528.333247][T17271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 528.333253][T17271] Call Trace: [ 528.333258][T17271] [ 528.333263][T17271] dump_stack_lvl+0x100/0x190 [ 528.333283][T17271] should_fail_ex.cold+0x5/0xa [ 528.333306][T17271] _copy_to_user+0x32/0xd0 [ 528.333322][T17271] simple_read_from_buffer+0xcb/0x170 [ 528.333341][T17271] proc_fail_nth_read+0x1af/0x230 [ 528.333360][T17271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.333378][T17271] ? rw_verify_area+0xce/0x6d0 [ 528.333392][T17271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.333409][T17271] vfs_read+0x1e4/0xb40 [ 528.333425][T17271] ? lock_acquire+0x1d1/0x380 [ 528.333443][T17271] ? __fget_files+0x34/0x3d0 [ 528.333459][T17271] ? __pfx_vfs_read+0x10/0x10 [ 528.333474][T17271] ? find_held_lock+0x2b/0x80 [ 528.333488][T17271] ? __fget_files+0x215/0x3d0 [ 528.333507][T17271] ? __fget_files+0x21f/0x3d0 [ 528.333528][T17271] ksys_read+0x12a/0x250 [ 528.333543][T17271] ? __pfx_ksys_read+0x10/0x10 [ 528.333563][T17271] do_int80_emulation+0x166/0x650 [ 528.333580][T17271] asm_int80_emulation+0x1a/0x20 [ 528.333592][T17271] RIP: 0023:0xf71777eb [ 528.333602][T17271] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 528.333613][T17271] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 528.333625][T17271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54365d0 [ 528.333633][T17271] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 528.333639][T17271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.333646][T17271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 528.333653][T17271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 528.333668][T17271] [ 528.346678][ T5817] usb 9-1: USB disconnect, device number 46 [ 528.348139][ T5841] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 528.427804][T17275] netlink: 'syz.4.3829': attribute type 3 has an invalid length. [ 528.427837][T17275] netlink: 'syz.4.3829': attribute type 3 has an invalid length. [ 528.497720][ T5841] usb 10-1: Using ep0 maxpacket: 8 [ 528.501750][ T5841] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 528.504152][ T5841] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 528.504168][ T5841] usb 10-1: config 0 has no interface number 0 [ 528.504187][ T5841] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.504387][ T5841] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.504401][ T5841] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 528.504414][ T5841] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 528.504427][ T5841] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.510305][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.510320][ T5841] usb 10-1: Product: syz [ 528.510328][ T5841] usb 10-1: Manufacturer: syz [ 528.510335][ T5841] usb 10-1: SerialNumber: syz [ 528.514444][ T5841] usb 10-1: config 0 descriptor?? [ 528.742954][ T5841] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 529.380233][ T1346] usb 5-1: USB disconnect, device number 101 [ 529.616778][ T74] Bluetooth: hci0: Frame reassembly failed (-90) [ 529.676501][T17294] ubi: mtd0 is already attached to ubi0 [ 529.755432][T17295] syz.0.3833 (17295): drop_caches: 2 [ 529.756126][T17294] syz.0.3833 (17294): drop_caches: 2 [ 529.757088][T17294] syz.0.3833 (17294): drop_caches: 2 [ 531.288129][ T1346] usb 10-1: USB disconnect, device number 44 [ 531.671348][ T66] Bluetooth: hci0: command 0x1003 tx timeout [ 531.671577][ T5745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 533.203847][T17339] netlink: set zone limit has 4 unknown bytes [ 533.465577][T17345] syzkaller0: entered promiscuous mode [ 533.465592][T17345] syzkaller0: entered allmulticast mode [ 536.630745][T17356] Process accounting paused [ 536.917853][T17390] syzkaller0: entered promiscuous mode [ 536.917869][T17390] syzkaller0: entered allmulticast mode [ 537.341323][T17395] fuse: Unknown parameter 'fd0x0000000000000003' [ 541.890977][ T42] audit: type=1326 audit(1792580911.971:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.891010][ T42] audit: type=1326 audit(1792580911.971:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.891031][ T42] audit: type=1326 audit(1792580911.971:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.895886][ T42] audit: type=1326 audit(1792580911.971:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.895931][ T42] audit: type=1326 audit(1792580911.971:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.895970][ T42] audit: type=1326 audit(1792580911.971:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.896006][ T42] audit: type=1326 audit(1792580911.971:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.896042][ T42] audit: type=1326 audit(1792580911.971:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.902261][T17439] syzkaller0: entered promiscuous mode [ 541.902275][T17439] syzkaller0: entered allmulticast mode [ 541.971834][ T42] audit: type=1326 audit(1792580911.971:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 541.974564][ T42] audit: type=1326 audit(1792580912.051:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.0.3870" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 542.341846][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 543.207299][T13595] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 543.362736][T13595] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.365539][T13595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.365573][T13595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.365595][T13595] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.365630][T13595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.372399][T13595] usb 5-1: config 0 descriptor?? [ 543.393119][T17457] ubi: mtd0 is already attached to ubi0 [ 543.879554][T17463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 543.879569][T17463] block device autoloading is deprecated and will be removed. [ 544.363908][T13595] usbhid 5-1:0.0: can't add hid device: -71 [ 544.364027][T13595] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.365510][T13595] usb 5-1: USB disconnect, device number 102 [ 544.875718][T17477] ubi: mtd0 is already attached to ubi0 [ 544.889598][T17477] syz.5.3882 (17477): drop_caches: 2 [ 544.890252][T17477] syz.5.3882 (17477): drop_caches: 2 [ 544.905315][T17477] syz.5.3882 (17477): drop_caches: 2 [ 545.775846][T17494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3886'. [ 547.006272][T17520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3891'. [ 547.222113][T17525] bond0: option slaves: interface -b Ruon does not exist! [ 547.380023][T17530] syzkaller1: entered promiscuous mode [ 547.380044][T17530] syzkaller1: entered allmulticast mode [ 549.152213][T17550] ipvlan2: entered allmulticast mode [ 549.152229][T17550] team0: entered allmulticast mode [ 549.152236][T17550] team_slave_0: entered allmulticast mode [ 549.152246][T17550] team_slave_1: entered allmulticast mode [ 549.155865][T17550] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 549.183952][T17554] ipvlan3: entered allmulticast mode [ 549.184690][T17554] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 549.239483][T17556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.915752][T17591] tipc: Enabled bearer , priority 0 [ 551.925265][T17591] tipc: Resetting bearer [ 551.961318][T17590] tipc: Disabling bearer [ 551.992042][T17594] loop5: detected capacity change from 0 to 7 [ 551.998139][T17594] Dev loop5: unable to read RDB block 7 [ 551.998170][T17594] loop5: unable to read partition table [ 551.998327][T17594] loop5: partition table beyond EOD, truncated [ 551.998342][T17594] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 552.786460][T17616] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 553.738021][T17631] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3916'. [ 553.772092][T17631] ALSA: mixer_oss: invalid OSS volume '' [ 553.803603][T17634] Invalid ELF header type: 3 != 1 [ 553.823007][T17634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.853310][T17634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.561971][T17648] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 554.561988][T17648] Error validating options; rc = [-22] [ 555.187250][ T5816] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 555.320935][ T5816] usb 10-1: device descriptor read/64, error -71 [ 555.558692][ T5816] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 555.687416][ T5816] usb 10-1: device descriptor read/64, error -71 [ 555.804298][ T5816] usb usb10-port1: attempt power cycle [ 556.138310][ T5816] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 556.213434][ T5816] usb 10-1: device descriptor read/8, error -71 [ 556.460704][ T5816] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 556.478870][ T5816] usb 10-1: device descriptor read/8, error -71 [ 556.595291][ T5816] usb usb10-port1: unable to enumerate USB device [ 557.048982][T17667] device-mapper: ioctl: Invalid ioctl structure: name m, dev f805 [ 557.164413][ T5745] bt_err_ratelimited: 80 callbacks suppressed [ 557.164428][ T5745] Bluetooth: hci3: adv larger than maximum supported [ 557.774977][T17680] loop9: detected capacity change from 0 to 16384 [ 557.949398][T17678] FAULT_INJECTION: forcing a failure. [ 557.949398][T17678] name fail_futex, interval 1, probability 0, space 0, times 0 [ 557.949423][T17678] CPU: 3 UID: 0 PID: 17678 Comm: syz.5.3929 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.949440][T17678] Tainted: [L]=SOFTLOCKUP [ 557.949445][T17678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.949452][T17678] Call Trace: [ 557.949457][T17678] [ 557.949463][T17678] dump_stack_lvl+0x100/0x190 [ 557.949483][T17678] should_fail_ex.cold+0x5/0xa [ 557.949498][T17678] get_futex_key+0x1c9/0x13e0 [ 557.949533][T17678] ? __pfx_get_futex_key+0x10/0x10 [ 557.949551][T17678] futex_wake+0xf4/0x5e0 [ 557.949567][T17678] ? futex_wait+0x11e/0x370 [ 557.949585][T17678] ? __pfx_futex_wake+0x10/0x10 [ 557.949603][T17678] ? __might_fault+0xc5/0x140 [ 557.949632][T17678] ? find_held_lock+0x2b/0x80 [ 557.949647][T17678] ? __might_fault+0xc5/0x140 [ 557.949663][T17678] do_futex+0x2b2/0x440 [ 557.949679][T17678] ? __pfx_do_futex+0x10/0x10 [ 557.949692][T17678] ? _copy_to_user+0xaf/0xd0 [ 557.949709][T17678] __ia32_sys_futex_time32+0x2f4/0x470 [ 557.949726][T17678] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 557.949742][T17678] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 557.949764][T17678] __do_fast_syscall_32+0x13a/0x8b0 [ 557.949781][T17678] do_fast_syscall_32+0x32/0x70 [ 557.949795][T17678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.949809][T17678] RIP: 0023:0xf7f66fec [ 557.949823][T17678] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 557.949828][T17678] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 557.949839][T17678] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 557.949846][T17678] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 557.949853][T17678] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 557.949860][T17678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 557.949870][T17678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.949891][T17678] [ 557.983419][T17682] loop9: detected capacity change from 16384 to 16383 [ 558.109146][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 559.295948][T17709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.296153][T17709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 559.296306][T17709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.296462][T17709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.296513][T17709] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 559.644065][T17716] device-mapper: ioctl: device name cannot contain '/' [ 559.644762][T17716] device-mapper: ioctl: Invalid ioctl structure: uuid 0baseSR/Full, name , dev 656e6f4e00000000 [ 560.169363][T17727] overlay: filesystem on ./file0 not supported as upperdir [ 560.274808][T17733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3943'. [ 561.107321][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.347671][T17711] Bluetooth: hci4: command 0x0406 tx timeout [ 561.347709][T17711] Bluetooth: hci2: command 0x0406 tx timeout [ 561.347780][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 562.472454][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.472487][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.572129][T17791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3956'. [ 563.664145][T17793] syz_tun: entered allmulticast mode [ 563.672892][T17793] syz_tun: left allmulticast mode [ 566.113403][T17805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 566.711224][T17804] Process accounting resumed [ 567.004738][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.007618][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.008844][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.010163][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.010938][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.097312][ T5817] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 567.267307][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 567.272300][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.272328][ T5817] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 567.276687][ T5817] usb 5-1: config 4 interface 0 has no altsetting 0 [ 567.298863][ T5817] usb 5-1: string descriptor 0 read error: -22 [ 567.298907][ T5817] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 567.324910][ T5817] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 567.360552][ T5810] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.360666][ T5817] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 567.361132][ T5817] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 567.361170][ T5817] usb 5-1: media controller created [ 567.387713][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.476101][ T5810] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.583646][ T5810] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.624523][ T5817] zl10353_read_register: readreg error (reg=127, ret==0) [ 567.658779][ T5810] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.673862][ T5817] usb 5-1: USB disconnect, device number 103 [ 567.860917][ T5810] bridge_slave_1: left allmulticast mode [ 567.860936][ T5810] bridge_slave_1: left promiscuous mode [ 567.861047][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.864434][ T5810] bridge_slave_0: left allmulticast mode [ 567.864449][ T5810] bridge_slave_0: left promiscuous mode [ 567.864546][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.938593][T17853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 567.938615][T17853] block device autoloading is deprecated and will be removed. [ 568.014128][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.016782][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.023362][ T5810] bond0 (unregistering): Released all slaves [ 568.040811][T17830] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.090161][ T5810] U: left promiscuous mode [ 568.208888][ T5810] tipc: Disabling bearer [ 568.234243][ T5810] tipc: Left network mode [ 568.626844][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 569.111775][ T5745] Bluetooth: hci0: command tx timeout [ 569.794010][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 570.541268][T17830] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.542133][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.544410][T17830] bridge_slave_0: entered allmulticast mode [ 570.595265][T17830] bridge_slave_0: entered promiscuous mode [ 570.607536][T17830] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.607781][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.607862][T17830] bridge_slave_1: entered allmulticast mode [ 570.627727][T17830] bridge_slave_1: entered promiscuous mode [ 570.723881][ T5810] hsr_slave_0: left promiscuous mode [ 570.724736][ T5810] hsr_slave_1: left promiscuous mode [ 570.725346][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.725361][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.733134][ T5810] veth1_macvtap: left promiscuous mode [ 570.733171][ T5810] veth0_macvtap: left promiscuous mode [ 570.733297][ T5810] veth1_vlan: left promiscuous mode [ 570.733386][ T5810] veth0_vlan: left promiscuous mode [ 570.916107][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 570.922287][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 570.959361][ T5812] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 571.034304][T17830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.036689][T17830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.067843][T17830] team0: Port device team_slave_0 added [ 571.070332][T17830] team0: Port device team_slave_1 added [ 571.094225][T17830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.094241][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.094263][T17830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.096140][T17830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.096156][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.096178][T17830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.159727][T17830] hsr_slave_0: entered promiscuous mode [ 571.160664][T17830] hsr_slave_1: entered promiscuous mode [ 571.161319][T17830] debugfs: 'hsr0' already exists in 'hsr' [ 571.161335][T17830] Cannot create hsr debugfs directory [ 571.187294][ T5745] Bluetooth: hci0: command tx timeout [ 571.541846][T17922] usb usb9: usbfs: process 17922 (syz.4.3984) did not claim interface 20 before use [ 573.267228][ T5745] Bluetooth: hci0: command tx timeout [ 573.716632][T17907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.731839][T17830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.748944][T17830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.749787][T17830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.755084][T17830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.756052][T17830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.772210][T17830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.775130][T17830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.796350][T17830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.877373][T17830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.894717][T17830] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.899243][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.899324][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.908009][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.908099][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.919777][T17949] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 573.919791][T17949] Error validating options; rc = [-22] [ 574.038554][ T5891] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 574.188807][ T5891] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.195677][ T5891] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 574.195718][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.195738][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.195758][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.195779][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.195809][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.228354][ T5891] usb 9-1: config 0 descriptor?? [ 574.229781][T17932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 574.420561][T17830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.762375][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762407][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762424][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762443][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762462][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762482][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762502][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762520][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762538][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.762557][ T5891] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 574.821761][ T5891] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 574.994017][T17830] veth0_vlan: entered promiscuous mode [ 575.000355][T17830] veth1_vlan: entered promiscuous mode [ 575.026778][T17830] veth0_macvtap: entered promiscuous mode [ 575.036414][ T5891] usb 9-1: USB disconnect, device number 47 [ 575.043017][T17830] veth1_macvtap: entered promiscuous mode [ 575.085423][T17830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.092152][T17830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.152074][ T444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.152104][ T444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.197376][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.197403][ T5810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.197421][ T5810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.197439][ T5810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.200658][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.200670][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.357497][ T5745] Bluetooth: hci0: command tx timeout [ 575.864098][T18011] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 576.175196][T18026] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 576.182799][T18026] input: syz0 as /devices/virtual/input/input33 [ 576.185126][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 576.185151][ T5745] CPU: 1 UID: 0 PID: 5745 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.185180][ T5745] Tainted: [L]=SOFTLOCKUP [ 576.185188][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.185202][ T5745] Workqueue: hci0 hci_rx_work [ 576.185280][ T5745] Call Trace: [ 576.185288][ T5745] [ 576.185297][ T5745] dump_stack_lvl+0x100/0x190 [ 576.185341][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 576.185387][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 576.185431][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 576.185473][ T5745] ? find_held_lock+0x2b/0x80 [ 576.185500][ T5745] ? kobject_add_internal+0x25f/0x930 [ 576.185538][ T5745] ? kobject_add_internal+0x25f/0x930 [ 576.185576][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 576.185602][ T5745] kobject_add_internal+0x2c8/0x930 [ 576.185649][ T5745] kobject_add+0x16a/0x1e0 [ 576.185687][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 576.185714][ T5745] ? class_to_subsys+0x10f/0x150 [ 576.185789][ T5745] ? kobject_put+0xb9/0x640 [ 576.185814][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 576.185849][ T5745] device_add+0x294/0x1970 [ 576.185889][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 576.185911][ T5745] ? __pfx_device_add+0x10/0x10 [ 576.185950][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 576.186002][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 576.186037][ T5745] le_conn_complete_evt+0x122f/0x2130 [ 576.186085][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 576.186114][ T5745] ? hci_event_packet+0x186/0xcd0 [ 576.186151][ T5745] ? hci_event_packet+0x186/0xcd0 [ 576.186194][ T5745] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 576.186234][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 576.186291][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 576.186313][ T5745] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 576.186358][ T5745] hci_event_packet+0x51c/0xcd0 [ 576.186401][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 576.186423][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 576.186468][ T5745] ? lockdep_hardirqs_on+0x7d/0x110 [ 576.186497][ T5745] hci_rx_work+0x451/0xfc0 [ 576.186541][ T5745] process_one_work+0xac7/0x1b10 [ 576.186604][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 576.186628][ T5745] ? lock_acquire+0x1d1/0x380 [ 576.186677][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 576.186732][ T5745] worker_thread+0x5ef/0xe50 [ 576.186769][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 576.186811][ T5745] ? kthread+0x13a/0x450 [ 576.186838][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 576.186873][ T5745] kthread+0x373/0x450 [ 576.186898][ T5745] ? __pfx_kthread+0x10/0x10 [ 576.186936][ T5745] ret_from_fork+0x730/0xd60 [ 576.186972][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 576.187023][ T5745] ? __switch_to+0x800/0x10e0 [ 576.187051][ T5745] ? __pfx_kthread+0x10/0x10 [ 576.187089][ T5745] ret_from_fork_asm+0x1a/0x30 [ 576.187135][ T5745] [ 576.199109][ T5745] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 576.199150][ T5745] Bluetooth: hci0: failed to register connection device [ 576.339472][T18028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.339701][T18028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.339858][T18028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.340014][T18028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.340066][T18028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 576.345404][T18028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 576.374950][T18028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 576.467599][T18031] tipc: Enabling of bearer rejected, failed to enable media [ 577.418331][T18052] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 577.626751][T18059] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 577.626751][T18059] [ 577.627323][T18059] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 577.627403][T18059] CIFS: Attempting to mount //172.20.20.170/share [ 577.768484][ T5849] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 577.948044][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 578.041801][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 578.041844][ T5849] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 578.043563][ T5849] usb 5-1: config 4 interface 0 has no altsetting 0 [ 578.053573][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 578.053654][ T5849] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 578.061036][ T5849] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 578.094488][ T5849] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.094799][ T5849] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 578.094838][ T5849] usb 5-1: media controller created [ 578.146468][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.230118][T18059] CIFS: VFS: cifs_mount failed w/return code = -112 [ 578.273642][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 578.273660][ T42] audit: type=1326 audit(1792580948.350:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18057 comm="syz.0.4006" exe="/syz-executor" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x0 [ 578.283589][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 578.290440][T18069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 578.292547][T18069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 578.388742][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 578.388774][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 578.388797][ T66] Bluetooth: hci4: command 0x0406 tx timeout [ 578.388930][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 579.213945][ T5849] zl10353_read_register: readreg error (reg=127, ret==0) [ 580.475862][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.478222][ T5745] Bluetooth: hci3: command 0x0406 tx timeout [ 580.788930][T18089] xt_MASQUERADE: bad MAP_IPS. [ 580.824820][T18092] dvmrp0: entered allmulticast mode [ 581.221569][T13595] usb 5-1: USB disconnect, device number 104 [ 581.581808][T18100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.581824][T18100] block device autoloading is deprecated and will be removed. [ 581.709393][T18103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4017'. [ 581.897447][T18105] tipc: Started in network mode [ 581.897465][T18105] tipc: Node identity c2bf1f1f35c1, cluster identity 4711 [ 581.897547][T18105] tipc: Enabled bearer , priority 0 [ 581.899021][T18105] syzkaller0: entered promiscuous mode [ 581.899034][T18105] syzkaller0: entered allmulticast mode [ 581.997555][T18105] tipc: Resetting bearer [ 582.001050][T18104] tipc: Resetting bearer [ 582.017335][T18104] tipc: Disabling bearer [ 582.547364][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.617551][T17996] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 582.779203][T17996] usb 9-1: Using ep0 maxpacket: 32 [ 582.784683][T17996] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 582.795185][T17996] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.795311][T17996] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.795602][T17996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.869047][T17996] usb 9-1: config 0 descriptor?? [ 583.287138][ T5849] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 583.437121][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 583.440544][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.440571][ T5849] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 583.441927][ T5849] usb 5-1: config 4 interface 0 has no altsetting 0 [ 583.446813][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 583.446885][ T5849] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 583.458862][ T5849] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 583.467722][ T5849] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.467871][ T5849] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 583.467893][ T5849] usb 5-1: media controller created [ 583.480873][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.709162][ T42] audit: type=1326 audit(1792580953.790:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.0.4024" exe="/syz-executor" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x0 [ 584.118818][ T1036] usb 9-1: USB disconnect, device number 48 [ 584.553411][ T5849] zl10353_read_register: readreg error (reg=127, ret==0) [ 584.627190][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.714903][T18132] Bluetooth: MGMT ver 1.23 [ 584.731562][T18132] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 584.902360][T18138] kvm: emulating exchange as write [ 584.902699][T18138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.517428][ T5890] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 585.583154][ T62] usb 5-1: USB disconnect, device number 105 [ 585.677384][ T5890] usb 10-1: Using ep0 maxpacket: 32 [ 585.680991][ T5890] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 585.682936][ T5890] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.682949][ T5890] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.682967][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.686375][ T5890] usb 10-1: config 0 descriptor?? [ 585.972531][T18155] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 585.972548][T18155] device-mapper: ioctl: error adding target to table [ 585.978908][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4035'. [ 586.367264][ T5890] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 586.420503][T18164] ecryptfs: Bad value for 'ecryptfs_key_bytes' [ 586.459805][T17996] usb 10-1: USB disconnect, device number 49 [ 586.530374][ T5890] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 586.530422][ T5890] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 586.531774][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.531798][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.531814][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.533034][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.533057][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.533072][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.534575][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.534597][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.534611][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.535824][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.535846][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.535860][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.539156][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.539180][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.539195][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.542712][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.542735][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.542749][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.544018][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.544040][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.544054][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.545367][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 586.545389][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 586.545402][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.551095][ T5890] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 586.551111][ T5890] usb 5-1: Product: syz [ 586.551119][ T5890] usb 5-1: Manufacturer: syz [ 586.551128][ T5890] usb 5-1: SerialNumber: syz [ 586.552875][ T5890] usb 5-1: config 0 descriptor?? [ 586.565076][ T5890] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 586.790556][T17711] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 586.790919][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.545780][T18172] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 587.556281][T18172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.556539][T18172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.926527][ T5849] usb 5-1: USB disconnect, device number 106 [ 587.935230][ T5849] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 588.029878][ T50] IPVS: starting estimator thread 0... [ 588.188059][T18185] IPVS: using max 4 ests per chain, 9600 per kthread [ 588.885435][T18172] Process accounting resumed [ 589.225130][T18195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4046'. [ 592.307580][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 592.390376][T18215] FAULT_INJECTION: forcing a failure. [ 592.390376][T18215] name failslab, interval 1, probability 0, space 0, times 0 [ 592.390399][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.3.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.390415][T18215] Tainted: [L]=SOFTLOCKUP [ 592.390420][T18215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 592.390427][T18215] Call Trace: [ 592.390432][T18215] [ 592.390437][T18215] dump_stack_lvl+0x100/0x190 [ 592.390463][T18215] should_fail_ex.cold+0x5/0xa [ 592.390479][T18215] should_failslab+0xc2/0x120 [ 592.390492][T18215] kmem_cache_alloc_noprof+0x92/0x6a0 [ 592.390509][T18215] ? d_instantiate+0x8a/0xb0 [ 592.390521][T18215] ? alloc_empty_file+0x5b/0x1c0 [ 592.390535][T18215] alloc_empty_file+0x5b/0x1c0 [ 592.390547][T18215] alloc_file_pseudo+0x183/0x290 [ 592.390559][T18215] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 592.390571][T18215] ? alloc_fd+0x471/0x7a0 [ 592.390591][T18215] sock_alloc_file+0x50/0x210 [ 592.390609][T18215] __sys_socket+0x1c0/0x260 [ 592.390622][T18215] ? __pfx___sys_socket+0x10/0x10 [ 592.390635][T18215] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 592.390651][T18215] ? __do_compat_sys_rt_sigreturn+0x1ba/0x270 [ 592.390667][T18215] __ia32_sys_socket+0x72/0xb0 [ 592.390678][T18215] ? lockdep_hardirqs_on+0x7d/0x110 [ 592.390692][T18215] __do_fast_syscall_32+0x13a/0x8b0 [ 592.390721][T18215] ? lockdep_hardirqs_on+0x7d/0x110 [ 592.390735][T18215] do_fast_syscall_32+0x32/0x70 [ 592.390749][T18215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.390765][T18215] RIP: 0023:0xf748efec [ 592.390776][T18215] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 592.390787][T18215] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 592.390799][T18215] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 592.390807][T18215] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 592.390815][T18215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.390822][T18215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.390830][T18215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.390845][T18215] [ 592.649727][ T42] audit: type=1807 audit(1792580962.730:2867): action=appraise UNKNOWN=f res=0 [ 592.649917][ T42] audit: type=1802 audit(1792580962.730:2868): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.4052" res=0 errno=0 [ 592.683348][T18227] FAULT_INJECTION: forcing a failure. [ 592.683348][T18227] name failslab, interval 1, probability 0, space 0, times 0 [ 592.683373][T18227] CPU: 2 UID: 0 PID: 18227 Comm: syz.0.4052 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.683391][T18227] Tainted: [L]=SOFTLOCKUP [ 592.683395][T18227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 592.683422][T18227] Call Trace: [ 592.683428][T18227] [ 592.683433][T18227] dump_stack_lvl+0x100/0x190 [ 592.683454][T18227] should_fail_ex.cold+0x5/0xa [ 592.683471][T18227] should_failslab+0xc2/0x120 [ 592.683483][T18227] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 592.683501][T18227] ? proc_create_data+0xbe/0x110 [ 592.683515][T18227] ? cache_create_net+0x2b/0x1f0 [ 592.683532][T18227] kmemdup_noprof+0x29/0x60 [ 592.683548][T18227] cache_create_net+0x2b/0x1f0 [ 592.683564][T18227] nfsd_idmap_init+0x11f/0x250 [ 592.683579][T18227] ? __pfx_nfsd_net_init+0x10/0x10 [ 592.683595][T18227] nfsd_net_init+0x85/0x480 [ 592.683611][T18227] ? __pfx_nfsd_net_init+0x10/0x10 [ 592.683627][T18227] ops_init+0x1e2/0x5f0 [ 592.683646][T18227] setup_net+0x118/0x3a0 [ 592.683662][T18227] ? __pfx_setup_net+0x10/0x10 [ 592.683683][T18227] copy_net_ns+0x345/0x7a0 [ 592.683695][T18227] create_new_namespaces+0x3ea/0xac0 [ 592.683717][T18227] unshare_nsproxy_namespaces+0xf2/0x220 [ 592.683736][T18227] ksys_unshare+0x44f/0x980 [ 592.683750][T18227] ? __pfx_ksys_unshare+0x10/0x10 [ 592.683764][T18227] ? __ia32_sys_clock_gettime+0x189/0x270 [ 592.683781][T18227] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 592.683801][T18227] __ia32_sys_unshare+0x30/0x40 [ 592.683813][T18227] __do_fast_syscall_32+0x13a/0x8b0 [ 592.683830][T18227] do_fast_syscall_32+0x32/0x70 [ 592.683844][T18227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.683859][T18227] RIP: 0023:0xf73aefec [ 592.683872][T18227] Code: Unable to access opcode bytes at 0xf73aefc2. [ 592.683877][T18227] RSP: 002b:00000000f538450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 592.683888][T18227] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 592.683896][T18227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.683903][T18227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.683909][T18227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.683915][T18227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.683930][T18227] [ 592.998312][T18232] netlink: 'syz.3.4053': attribute type 21 has an invalid length. [ 593.160637][T18234] FAULT_INJECTION: forcing a failure. [ 593.160637][T18234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.160677][T18234] CPU: 2 UID: 0 PID: 18234 Comm: syz.3.4054 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.160698][T18234] Tainted: [L]=SOFTLOCKUP [ 593.160702][T18234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.160709][T18234] Call Trace: [ 593.160714][T18234] [ 593.160719][T18234] dump_stack_lvl+0x100/0x190 [ 593.160739][T18234] should_fail_ex.cold+0x5/0xa [ 593.160754][T18234] _copy_from_user+0x2e/0xd0 [ 593.160768][T18234] get_compat_msghdr+0xb3/0x480 [ 593.160795][T18234] ? __pfx_get_compat_msghdr+0x10/0x10 [ 593.160811][T18234] ___sys_sendmsg+0x1b6/0x1e0 [ 593.160825][T18234] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.160844][T18234] ? find_held_lock+0x2b/0x80 [ 593.160868][T18234] __sys_sendmsg+0x160/0x210 [ 593.160884][T18234] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.160903][T18234] ? __pfx_ksys_write+0x10/0x10 [ 593.160922][T18234] __do_fast_syscall_32+0x13a/0x8b0 [ 593.160937][T18234] ? lockdep_hardirqs_on+0x7d/0x110 [ 593.160952][T18234] do_fast_syscall_32+0x32/0x70 [ 593.160966][T18234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.160981][T18234] RIP: 0023:0xf748efec [ 593.160994][T18234] Code: Unable to access opcode bytes at 0xf748efc2. [ 593.161000][T18234] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 593.161011][T18234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 593.161019][T18234] RDX: 0000000008000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.161026][T18234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.161033][T18234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 593.161039][T18234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.161053][T18234] [ 593.335655][T18222] ima: policy update failed [ 593.335937][ T42] audit: type=1802 audit(1792580963.410:2869): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4052" res=0 errno=0 [ 593.536700][T18242] netlink: 'syz.0.4056': attribute type 3 has an invalid length. [ 593.536720][T18242] netlink: 'syz.0.4056': attribute type 1 has an invalid length. [ 593.536731][T18242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4056'. [ 593.622815][T18247] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4058'. [ 593.645422][T18240] pimreg: entered allmulticast mode [ 593.652907][T18245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 593.652924][T18245] block device autoloading is deprecated and will be removed. [ 593.724435][T18240] pimreg: left allmulticast mode [ 594.026220][ T5745] Bluetooth: hci0: adv larger than maximum supported [ 594.787055][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 594.787201][T17711] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 594.887713][ T42] audit: type=1326 audit(1792580964.970:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.4.4066" exe="/syz-executor" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f84fec code=0x0 [ 596.401789][ T5891] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 596.472250][T18299] Invalid ELF header magic: != ELF [ 596.741329][T18298] overlay: Unknown parameter '/' [ 596.769223][T18298] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4070'. [ 596.770389][T18298] FAULT_INJECTION: forcing a failure. [ 596.770389][T18298] name failslab, interval 1, probability 0, space 0, times 0 [ 596.770433][T18298] CPU: 0 UID: 0 PID: 18298 Comm: syz.3.4070 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.770461][T18298] Tainted: [L]=SOFTLOCKUP [ 596.770469][T18298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 596.770482][T18298] Call Trace: [ 596.770490][T18298] [ 596.770499][T18298] dump_stack_lvl+0x100/0x190 [ 596.770533][T18298] should_fail_ex.cold+0x5/0xa [ 596.770560][T18298] should_failslab+0xc2/0x120 [ 596.770580][T18298] kmem_cache_alloc_noprof+0x92/0x6a0 [ 596.770608][T18298] ? __kernfs_new_node+0xd2/0xa10 [ 596.770635][T18298] __kernfs_new_node+0xd2/0xa10 [ 596.770658][T18298] ? __pfx___kernfs_new_node+0x10/0x10 [ 596.770681][T18298] ? lock_acquire+0x1d1/0x380 [ 596.770707][T18298] ? kernfs_root+0x23/0x2a0 [ 596.770725][T18298] ? find_held_lock+0x2b/0x80 [ 596.770748][T18298] ? kernfs_root+0xee/0x2a0 [ 596.770766][T18298] ? kernfs_root+0xee/0x2a0 [ 596.770791][T18298] kernfs_new_node+0x194/0x200 [ 596.770815][T18298] ? __pfx_kernfs_new_node+0x10/0x10 [ 596.770839][T18298] ? kernfs_add_one+0x213/0xb40 [ 596.770865][T18298] __kernfs_create_file+0x53/0x350 [ 596.770894][T18298] sysfs_add_file_mode_ns+0x207/0x3c0 [ 596.770929][T18298] internal_create_group+0x593/0xfb0 [ 596.770955][T18298] ? __pfx_internal_create_group+0x10/0x10 [ 596.770981][T18298] ? kernfs_create_link+0x1f1/0x280 [ 596.771012][T18298] internal_create_groups+0x9d/0x150 [ 596.771034][T18298] device_add+0x7c8/0x1970 [ 596.771068][T18298] ? __pfx_device_add+0x10/0x10 [ 596.771103][T18298] ? lockdep_init_map_type+0x5c/0x250 [ 596.771125][T18298] ? __init_waitqueue_head+0xca/0x150 [ 596.771155][T18298] netdev_register_kobject+0x1df/0x410 [ 596.771202][T18298] register_netdevice+0x15b1/0x25a0 [ 596.771241][T18298] ? __pfx_register_netdevice+0x10/0x10 [ 596.771270][T18298] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 596.771295][T18298] ? register_vlan_dev+0x5f8/0x910 [ 596.771348][T18298] register_vlan_dev+0x36c/0x910 [ 596.771405][T18298] vlan_newlink+0x48c/0x750 [ 596.771439][T18298] ? __pfx_vlan_newlink+0x10/0x10 [ 596.771465][T18298] rtnl_newlink+0x1697/0x2620 [ 596.771503][T18298] ? __pfx_rtnl_newlink+0x10/0x10 [ 596.771529][T18298] ? rcu_is_watching+0x13/0xc0 [ 596.771570][T18298] ? find_held_lock+0x2b/0x80 [ 596.771587][T18298] ? lock_acquire+0x1d1/0x380 [ 596.771607][T18298] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 596.771626][T18298] ? find_held_lock+0x2b/0x80 [ 596.771639][T18298] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 596.771655][T18298] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 596.771673][T18298] ? __pfx_rtnl_newlink+0x10/0x10 [ 596.771690][T18298] rtnetlink_rcv_msg+0x95e/0xe90 [ 596.771708][T18298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.771729][T18298] ? ref_tracker_free+0x37e/0x6c0 [ 596.771749][T18298] netlink_rcv_skb+0x159/0x420 [ 596.771771][T18298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.771791][T18298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.771812][T18298] ? netlink_deliver_tap+0x1ae/0xcc0 [ 596.771829][T18298] netlink_unicast+0x65f/0x950 [ 596.771846][T18298] ? __pfx_netlink_unicast+0x10/0x10 [ 596.771866][T18298] netlink_sendmsg+0xa02/0x1020 [ 596.771884][T18298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.771904][T18298] ? apparmor_socket_sendmsg+0x165/0x280 [ 596.771928][T18298] ? ____sys_sendmsg+0xa4d/0xbe0 [ 596.771940][T18298] ____sys_sendmsg+0xa4d/0xbe0 [ 596.771952][T18298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.771968][T18298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.771988][T18298] ___sys_sendmsg+0x190/0x1e0 [ 596.772002][T18298] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.772016][T18298] ? futex_wait+0x11e/0x370 [ 596.772039][T18298] ? find_held_lock+0x2b/0x80 [ 596.772064][T18298] __sys_sendmsg+0x160/0x210 [ 596.772080][T18298] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.772109][T18298] __do_fast_syscall_32+0x13a/0x8b0 [ 596.772128][T18298] do_fast_syscall_32+0x32/0x70 [ 596.772143][T18298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.772159][T18298] RIP: 0023:0xf748efec [ 596.772173][T18298] Code: Unable to access opcode bytes at 0xf748efc2. [ 596.772179][T18298] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 596.772192][T18298] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000540 [ 596.772200][T18298] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.772208][T18298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.772214][T18298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.772221][T18298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.772236][T18298] [ 596.817138][ T5891] usb 10-1: Using ep0 maxpacket: 32 [ 596.819630][ T5891] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 596.822063][ T5891] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.822077][ T5891] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.822095][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.824082][ T5891] usb 10-1: config 0 descriptor?? [ 597.148516][T18303] bond0: (slave syz_tun): Releasing backup interface [ 597.161307][T18303] batman_adv: batadv0: Adding interface: syz_tun [ 597.161318][T18303] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.161334][T18303] batman_adv: batadv0: Not using interface syz_tun (retrying later): interface not active [ 597.356585][T18318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 597.356605][T18318] block device autoloading is deprecated and will be removed. [ 597.427278][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.428497][T17711] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 597.524575][ T5849] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 597.787618][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 597.792476][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 597.792520][ T5849] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 597.794262][ T5849] usb 5-1: config 4 interface 0 has no altsetting 0 [ 597.821449][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 597.821527][ T5849] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 597.822069][ T5890] usb 10-1: USB disconnect, device number 50 [ 597.840195][ T5849] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 597.845252][ T5849] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.845434][ T5849] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 597.845455][ T5849] usb 5-1: media controller created [ 597.862391][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.104204][ T42] audit: type=1326 audit(1792580968.180:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18307 comm="syz.0.4074" exe="/syz-executor" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf73aefec code=0x0 [ 598.307117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 598.948906][ T5849] zl10353_read_register: readreg error (reg=127, ret==0) [ 599.366778][T18340] FAULT_INJECTION: forcing a failure. [ 599.366778][T18340] name failslab, interval 1, probability 0, space 0, times 0 [ 599.366801][T18340] CPU: 2 UID: 0 PID: 18340 Comm: syz.5.4081 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.366829][T18340] Tainted: [L]=SOFTLOCKUP [ 599.366835][T18340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.366842][T18340] Call Trace: [ 599.366847][T18340] [ 599.366852][T18340] dump_stack_lvl+0x100/0x190 [ 599.366872][T18340] should_fail_ex.cold+0x5/0xa [ 599.366887][T18340] should_failslab+0xc2/0x120 [ 599.366918][T18340] __kmalloc_noprof+0xfc/0x840 [ 599.366933][T18340] ? rcu_is_watching+0x13/0xc0 [ 599.366948][T18340] ? tomoyo_realpath_from_path+0xb6/0x690 [ 599.366969][T18340] tomoyo_realpath_from_path+0xb6/0x690 [ 599.366990][T18340] tomoyo_path_number_perm+0x23c/0x580 [ 599.367005][T18340] ? tomoyo_path_number_perm+0x22e/0x580 [ 599.367021][T18340] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 599.367037][T18340] ? get_pid_task+0x106/0x250 [ 599.367054][T18340] ? __lock_acquire+0x5c0/0x1f40 [ 599.367079][T18340] ? __fget_files+0x34/0x3d0 [ 599.367096][T18340] ? find_held_lock+0x2b/0x80 [ 599.367109][T18340] ? __fget_files+0x215/0x3d0 [ 599.367125][T18340] ? hook_file_ioctl_common+0x140/0x440 [ 599.367141][T18340] ? __fget_files+0x215/0x3d0 [ 599.367160][T18340] ? __fget_files+0x21f/0x3d0 [ 599.367179][T18340] security_file_ioctl_compat+0xd3/0x230 [ 599.367196][T18340] __ia32_compat_sys_ioctl+0xc2/0x360 [ 599.367213][T18340] __do_fast_syscall_32+0x13a/0x8b0 [ 599.367228][T18340] ? lockdep_hardirqs_on+0x7d/0x110 [ 599.367242][T18340] do_fast_syscall_32+0x32/0x70 [ 599.367256][T18340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.367285][T18340] RIP: 0023:0xf743efec [ 599.367299][T18340] Code: Unable to access opcode bytes at 0xf743efc2. [ 599.367304][T18340] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 599.367316][T18340] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 599.367323][T18340] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.367330][T18340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.367337][T18340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.367344][T18340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.367359][T18340] [ 599.451844][T18342] FAULT_INJECTION: forcing a failure. [ 599.451844][T18342] name fail_futex, interval 1, probability 0, space 0, times 0 [ 599.451867][T18342] CPU: 3 UID: 0 PID: 18342 Comm: syz.4.4082 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.451884][T18342] Tainted: [L]=SOFTLOCKUP [ 599.451888][T18342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.451895][T18342] Call Trace: [ 599.451899][T18342] [ 599.451905][T18342] dump_stack_lvl+0x100/0x190 [ 599.451924][T18342] should_fail_ex.cold+0x5/0xa [ 599.451940][T18342] get_futex_key+0x1c9/0x13e0 [ 599.451956][T18342] ? __pfx_get_futex_key+0x10/0x10 [ 599.451967][T18342] ? find_held_lock+0x2b/0x80 [ 599.451981][T18342] ? get_pid_task+0xfc/0x250 [ 599.451997][T18342] futex_wake+0xf4/0x5e0 [ 599.452014][T18342] ? find_held_lock+0x2b/0x80 [ 599.452028][T18342] ? __pfx_futex_wake+0x10/0x10 [ 599.452044][T18342] ? __might_fault+0xc5/0x140 [ 599.452058][T18342] ? find_held_lock+0x2b/0x80 [ 599.452071][T18342] ? __might_fault+0xc5/0x140 [ 599.452085][T18342] do_futex+0x2b2/0x440 [ 599.452100][T18342] ? __pfx_do_futex+0x10/0x10 [ 599.452113][T18342] ? _copy_to_user+0xaf/0xd0 [ 599.452129][T18342] __ia32_sys_futex_time32+0x2f4/0x470 [ 599.452147][T18342] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 599.452163][T18342] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 599.452183][T18342] __do_fast_syscall_32+0x13a/0x8b0 [ 599.452200][T18342] do_fast_syscall_32+0x32/0x70 [ 599.452214][T18342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.452242][T18342] RIP: 0023:0xf7f84fec [ 599.452255][T18342] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 599.452261][T18342] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 599.452273][T18342] RAX: ffffffffffffffda RBX: 00000000f7444f8c RCX: 0000000000000081 [ 599.452280][T18342] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 599.452288][T18342] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 599.452296][T18342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.452303][T18342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.452319][T18342] [ 599.518625][T18340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.063911][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4085'. [ 600.121146][T18356] overlay: ./file0 is not a directory [ 600.137378][T16903] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 600.268347][T16903] usb 10-1: device descriptor read/64, error -71 [ 600.307104][T17711] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 600.307269][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.488143][T13595] usb 5-1: USB disconnect, device number 107 [ 600.507234][T16903] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 600.647235][T16903] usb 10-1: device descriptor read/64, error -71 [ 600.757681][T16903] usb usb10-port1: attempt power cycle [ 601.097082][T16903] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 601.130012][T16903] usb 10-1: device descriptor read/8, error -71 [ 601.377550][T16903] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 601.398445][T16903] usb 10-1: device descriptor read/8, error -71 [ 601.507443][T16903] usb usb10-port1: unable to enumerate USB device [ 601.590617][T18392] overlay: ./file0 is not a directory [ 602.958902][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 602.958990][ T5745] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 603.022368][T18408] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4100'. [ 603.022385][T18408] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4100'. [ 603.050129][T18416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.050144][T18416] block device autoloading is deprecated and will be removed. [ 604.668807][ T5841] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 604.797045][ T5841] usb 5-1: device descriptor read/64, error -71 [ 604.824861][T18447] batman_adv: batadv0: Adding interface: syzkaller0 [ 604.824873][T18447] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.824890][T18447] batman_adv: batadv0: Interface activated: syzkaller0 [ 604.852730][T18447] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 604.874343][T18447] batman_adv: batadv0: Removing interface: syzkaller0 [ 605.027252][ T5745] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 605.028347][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 605.030004][ T5745] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 605.037076][ T5841] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 605.167053][ T5841] usb 5-1: device descriptor read/64, error -71 [ 605.277407][ T5841] usb usb5-port1: attempt power cycle [ 605.394513][T16903] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 605.661585][ T5890] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 605.767119][ T5841] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 605.864269][T18459] ceph: No mds server is up or the cluster is laggy [ 605.997428][T18473] netlink: 'syz.3.4115': attribute type 8 has an invalid length. [ 606.064748][ T5841] usb 5-1: device descriptor read/8, error -71 [ 606.357065][ T5841] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 606.406320][ T5841] usb 5-1: device descriptor read/8, error -71 [ 606.547093][ T5841] usb usb5-port1: unable to enumerate USB device [ 607.107415][T17711] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.298823][T17711] Bluetooth: hci3: adv larger than maximum supported [ 608.489799][T18508] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 608.489815][T18508] block device autoloading is deprecated and will be removed. [ 608.576302][T18510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.140698][T18519] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:286 [ 609.913342][T18537] devpts: Unknown parameter 'צdv}[o`Tr֮6 [ 609.913342][T18537] vw7ɛ09]O[h\0~IZKȕP~q^P(k]_> 8s>&PMx{UOz1os2zcybͩĿ~Z'Xky҄WSg*Z0x00000000ffffffff' [ 609.957165][ T1036] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 609.961467][T18539] rxe_eth0 speed is unknown, defaulting to 1000 [ 609.981348][T18505] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 610.070460][T18537] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 610.097035][ T1036] usb 9-1: device descriptor read/64, error -71 [ 610.238032][T18543] FAULT_INJECTION: forcing a failure. [ 610.238032][T18543] name fail_futex, interval 1, probability 0, space 0, times 0 [ 610.238066][T18543] CPU: 3 UID: 0 PID: 18543 Comm: syz.5.4132 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.238091][T18543] Tainted: [L]=SOFTLOCKUP [ 610.238100][T18543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 610.238111][T18543] Call Trace: [ 610.238119][T18543] [ 610.238128][T18543] dump_stack_lvl+0x100/0x190 [ 610.238160][T18543] should_fail_ex.cold+0x5/0xa [ 610.238187][T18543] get_futex_key+0x1c9/0x13e0 [ 610.238213][T18543] ? __pfx_get_futex_key+0x10/0x10 [ 610.238243][T18543] futex_wait_setup+0x91/0x540 [ 610.238278][T18543] __futex_wait+0x19f/0x360 [ 610.238307][T18543] ? __pfx___futex_wait+0x10/0x10 [ 610.238332][T18543] ? __pfx_try_to_wake_up+0x10/0x10 [ 610.238349][T18543] ? futex_hash+0x311/0x400 [ 610.238372][T18543] ? __pfx_futex_wake_mark+0x10/0x10 [ 610.238403][T18543] ? find_held_lock+0x2b/0x80 [ 610.238426][T18543] ? futex_wake+0x4ea/0x5e0 [ 610.238456][T18543] futex_wait+0xe6/0x370 [ 610.238483][T18543] ? __pfx_futex_wait+0x10/0x10 [ 610.238515][T18543] ? __might_fault+0xc5/0x140 [ 610.238539][T18543] ? find_held_lock+0x2b/0x80 [ 610.238571][T18543] ? __might_fault+0xc5/0x140 [ 610.238598][T18543] do_futex+0x265/0x440 [ 610.238623][T18543] ? __pfx_do_futex+0x10/0x10 [ 610.238646][T18543] ? _copy_to_user+0xaf/0xd0 [ 610.238674][T18543] __ia32_sys_futex_time32+0x2f4/0x470 [ 610.238704][T18543] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 610.238731][T18543] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 610.238764][T18543] __do_fast_syscall_32+0x13a/0x8b0 [ 610.238787][T18543] ? lockdep_hardirqs_on+0x7d/0x110 [ 610.238811][T18543] do_fast_syscall_32+0x32/0x70 [ 610.238833][T18543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.238858][T18543] RIP: 0023:0xf743efec [ 610.238874][T18543] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 610.238892][T18543] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 610.238914][T18543] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 610.238927][T18543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 610.238940][T18543] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 610.238954][T18543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.238967][T18543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.238993][T18543] [ 610.347607][ T1036] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 610.717157][ T1036] usb 9-1: device descriptor read/64, error -71 [ 610.828051][ T1036] usb usb9-port1: attempt power cycle [ 611.167146][ T1036] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 611.255654][ T1036] usb 9-1: device descriptor read/8, error -71 [ 611.636963][ T1036] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 611.691435][ T1036] usb 9-1: device descriptor read/8, error -71 [ 611.821944][ T1036] usb usb9-port1: unable to enumerate USB device [ 611.837083][ T5890] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 611.987354][ T5890] usb 10-1: Using ep0 maxpacket: 8 [ 611.990852][ T5890] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.993042][ T5890] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.993066][ T5890] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.993087][ T5890] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.993107][ T5890] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.993140][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.097400][T18566] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 612.240853][T18572] futex_wake_op: syz.0.4138 tries to shift op by 144; fix this program [ 612.462132][ T5890] usb 10-1: GET_CAPABILITIES returned 0 [ 612.462159][ T5890] usbtmc 10-1:16.0: can't read capabilities [ 612.732082][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.744905][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.744933][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.744951][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.744969][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.744990][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745009][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745293][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745315][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745334][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745352][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745370][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745389][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745407][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745708][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.745731][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 612.767745][ T1036] usb 10-1: USB disconnect, device number 55 [ 613.166852][ T5841] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 613.177143][T18578] batman_adv: batadv0: Interface activated: syz_tun [ 613.317020][ T5841] usb 9-1: Using ep0 maxpacket: 16 [ 613.317804][ T5841] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 613.322280][ T5841] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 613.322294][ T5841] usb 9-1: Product: syz [ 613.322302][ T5841] usb 9-1: Manufacturer: syz [ 613.322310][ T5841] usb 9-1: SerialNumber: syz [ 613.324534][ T5841] usb 9-1: config 0 descriptor?? [ 613.564948][T18576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.565170][T18576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.574277][T18576] overlayfs: failed to resolve './file1/file0': -2 [ 613.588995][ T5817] usb 9-1: USB disconnect, device number 53 [ 614.475388][T18596] bridge_slave_0: left allmulticast mode [ 614.475406][T18596] bridge_slave_0: left promiscuous mode [ 614.475505][T18596] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.483808][T18596] bridge_slave_1: left allmulticast mode [ 614.483844][T18596] bridge_slave_1: left promiscuous mode [ 614.484016][T18596] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.498327][T18596] bond0: (slave bond_slave_0): Releasing backup interface [ 614.506157][T18596] bond0: (slave bond_slave_1): Releasing backup interface [ 614.513386][T18596] team0: Port device team_slave_0 removed [ 614.517153][T18596] team0: Port device team_slave_1 removed [ 614.517519][T18596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.517531][T18596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.522704][T18596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.522716][T18596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.525958][T18596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 614.998382][ T42] audit: type=1326 audit(1792580985.080:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998415][ T42] audit: type=1326 audit(1792580985.080:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998435][ T42] audit: type=1326 audit(1792580985.080:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998756][ T42] audit: type=1326 audit(1792580985.080:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998849][ T42] audit: type=1326 audit(1792580985.080:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998891][ T42] audit: type=1326 audit(1792580985.080:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.998973][ T42] audit: type=1326 audit(1792580985.080:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.999052][ T42] audit: type=1326 audit(1792580985.080:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.999673][ T42] audit: type=1326 audit(1792580985.080:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 614.999698][ T42] audit: type=1326 audit(1792580985.080:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.4.4154" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 615.000783][T18615] FAULT_INJECTION: forcing a failure. [ 615.000783][T18615] name failslab, interval 1, probability 0, space 0, times 0 [ 615.000801][T18615] CPU: 3 UID: 0 PID: 18615 Comm: syz.4.4154 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.000817][T18615] Tainted: [L]=SOFTLOCKUP [ 615.000821][T18615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 615.000828][T18615] Call Trace: [ 615.000832][T18615] [ 615.000837][T18615] dump_stack_lvl+0x100/0x190 [ 615.000860][T18615] should_fail_ex.cold+0x5/0xa [ 615.000882][T18615] should_failslab+0xc2/0x120 [ 615.000900][T18615] __kmalloc_cache_noprof+0x91/0x6d0 [ 615.000915][T18615] ? audit_log_d_path+0xed/0x210 [ 615.000941][T18615] audit_log_d_path+0xed/0x210 [ 615.000966][T18615] audit_log_d_path_exe+0x46/0x80 [ 615.000991][T18615] audit_log_task+0x2fe/0x3a0 [ 615.001015][T18615] ? __pfx_audit_log_task+0x10/0x10 [ 615.001032][T18615] ? rcu_read_lock_any_held+0x6a/0x90 [ 615.001055][T18615] ? find_held_lock+0x2b/0x80 [ 615.001077][T18615] audit_seccomp+0x79/0x190 [ 615.001100][T18615] __seccomp_filter+0x88c/0x1130 [ 615.001126][T18615] ? __pfx___seccomp_filter+0x10/0x10 [ 615.001149][T18615] ? fput+0x7c/0x100 [ 615.001160][T18615] ? ksys_write+0x1ac/0x250 [ 615.001177][T18615] __seccomp_permit_syscall+0x207/0x2d0 [ 615.001193][T18615] __do_fast_syscall_32+0x420/0x8b0 [ 615.001209][T18615] ? lockdep_hardirqs_on+0x7d/0x110 [ 615.001228][T18615] do_fast_syscall_32+0x32/0x70 [ 615.001249][T18615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.001271][T18615] RIP: 0023:0xf7f84fec [ 615.001291][T18615] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 615.001299][T18615] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b7 [ 615.001317][T18615] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000000000000 [ 615.001329][T18615] RDX: 0000000000000026 RSI: 0000000000001100 RDI: 0000000000000000 [ 615.001340][T18615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.001350][T18615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 615.001361][T18615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.001384][T18615] [ 615.564080][T18630] 9p: Unknown Cache mode or invalid value mm`p [ 615.752348][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 615.762683][T18642] ip6erspan0: entered promiscuous mode [ 616.086685][ T5891] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 616.236804][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 616.242705][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 616.242747][ T5891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 616.245451][ T5891] usb 5-1: config index 0 descriptor too short (expected 38418, got 18) [ 616.245477][ T5891] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 616.245495][ T5891] usb 5-1: config 1 has no interfaces? [ 616.253200][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 616.253305][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.409169][T18647] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 616.829659][T18655] FAULT_INJECTION: forcing a failure. [ 616.829659][T18655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.829682][T18655] CPU: 1 UID: 0 PID: 18655 Comm: syz.4.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.829698][T18655] Tainted: [L]=SOFTLOCKUP [ 616.829702][T18655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 616.829709][T18655] Call Trace: [ 616.829713][T18655] [ 616.829718][T18655] dump_stack_lvl+0x100/0x190 [ 616.829738][T18655] should_fail_ex.cold+0x5/0xa [ 616.829754][T18655] _copy_from_user+0x2e/0xd0 [ 616.829768][T18655] memdup_user+0x6b/0xe0 [ 616.829783][T18655] kvm_vcpu_ioctl+0x8bc/0x1770 [ 616.829813][T18655] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 616.829829][T18655] ? tomoyo_path_number_perm+0x188/0x580 [ 616.829851][T18655] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 616.829867][T18655] ? get_pid_task+0x106/0x250 [ 616.829884][T18655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 616.829904][T18655] ? do_vfs_ioctl+0x226/0x13e0 [ 616.829919][T18655] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 616.829937][T18655] ? __fget_files+0x34/0x3d0 [ 616.829956][T18655] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 616.829972][T18655] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 616.829988][T18655] ? __fget_files+0x21f/0x3d0 [ 616.830007][T18655] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 616.830023][T18655] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 616.830040][T18655] __do_fast_syscall_32+0x13a/0x8b0 [ 616.830055][T18655] ? lockdep_hardirqs_on+0x7d/0x110 [ 616.830069][T18655] do_fast_syscall_32+0x32/0x70 [ 616.830083][T18655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.830098][T18655] RIP: 0023:0xf7f84fec [ 616.830111][T18655] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 616.830117][T18655] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 616.830129][T18655] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004138ae84 [ 616.830136][T18655] RDX: 0000000080001dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.830143][T18655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.830150][T18655] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 616.830157][T18655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.830171][T18655] [ 617.303991][T18661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4171'. [ 617.346952][T17711] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 617.347037][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 617.524375][T18664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 618.636998][ T5841] usb 5-1: USB disconnect, device number 112 [ 618.853308][T18705] 9p: Bad value for 'rfdno' [ 619.128731][T18714] gfs2: gfs2 mount does not exist [ 619.360136][T18719] 9pnet_virtio: no channels available for device 127.0.0.1 [ 619.503620][T18729] hub 8-0:1.0: USB hub found [ 619.504087][T18729] hub 8-0:1.0: 1 port detected [ 619.582466][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 619.590964][T17711] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 619.596580][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 619.735473][T18730] ------------[ cut here ]------------ [ 619.735485][T18730] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 619.735495][T18730] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#0: syz.5.4192/18730 [ 619.744482][T18730] Modules linked in: [ 619.746490][T18730] CPU: 0 UID: 0 PID: 18730 Comm: syz.5.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.751423][T18730] Tainted: [L]=SOFTLOCKUP [ 619.753309][T18730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 619.757865][T18730] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 619.760496][T18730] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d b9 03 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 c0 7f 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 4c 51 49 ff 48 8d 7d 18 48 b8 00 [ 619.767847][T18730] RSP: 0000:ffffc900072df6a0 EFLAGS: 00010246 [ 619.769973][T18730] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804ea9325c [ 619.773091][T18730] RDX: ffff88801e3fe5dc RSI: ffffffff8c0b7fc0 RDI: ffffffff924c06a0 [ 619.776431][T18730] RBP: ffff88804ea93238 R08: ffff888045647c5c R09: ffffed1009d52633 [ 619.779329][T18730] R10: ffff88804ea9319b R11: 0000000000000000 R12: ffff88804ea93180 [ 619.782195][T18730] R13: ffff88801e3fe500 R14: ffff888045647c38 R15: dffffc0000000000 [ 619.785091][T18730] FS: 0000000000000000(0000) GS:ffff88809573a000(0063) knlGS:00000000f5435b40 [ 619.788358][T18730] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 619.790697][T18730] CR2: 0000563510242f78 CR3: 000000004efcb000 CR4: 0000000000352ef0 [ 619.793718][T18730] Call Trace: [ 619.794946][T18730] [ 619.796288][T18730] ? __pfx_remove_proc_entry+0x10/0x10 [ 619.798369][T18730] ? mtree_load+0x3a4/0xb50 [ 619.800029][T18730] ? __pfx_mtree_load+0x10/0x10 [ 619.801743][T18730] ? rcu_is_watching+0x13/0xc0 [ 619.803419][T18730] unregister_irq_proc+0x206/0x2a0 [ 619.805213][T18730] ? __pfx_unregister_irq_proc+0x10/0x10 [ 619.807357][T18730] free_desc+0x89/0x330 [ 619.808931][T18730] ? __pfx_free_desc+0x10/0x10 SYZFAIL: failed to recv rpc [ 619.811190][T18730] ? kasan_quarantine_put+0x104/0x240 [ 619.813314][T18730] ? lockdep_hardirqs_on+0x7d/0x110 [ 619.815351][T18730] ? irq_domain_free_irqs+0x340/0x5c0 [ 619.817494][T18730] irq_free_descs+0x84/0xc0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 619.819246][T18730] irq_domain_free_irqs+0x46a/0x5c0 [ 619.821310][T18730] mp_unmap_irq+0xf8/0x130 [ 619.823007][T18730] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 619.825221][T18730] acpi_unregister_gsi_ioapic+0x40/0x60 [ 619.827441][T18730] acpi_unregister_gsi+0x25/0x40 [ 619.829324][T18730] acpi_pci_irq_disable+0x275/0x360 [ 619.831774][T18730] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 619.833947][T18730] pcibios_disable_device+0x89/0xb0 [ 619.835897][T18730] do_pci_disable_device+0x9f/0x100 [ 619.836592][T17996] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 619.840499][T18730] ? __pfx_do_pci_disable_device+0x10/0x10 [ 619.842543][T18730] pci_disable_device+0x130/0x270 [ 619.844364][T18730] pci_device_remove+0xb2/0x1d0 [ 619.846116][T18730] ? __pfx_pci_device_remove+0x10/0x10 [ 619.848317][T18730] device_remove+0xcb/0x180 [ 619.850041][T18730] device_release_driver_internal+0x44e/0x620 [ 619.852248][T18730] pci_stop_bus_device+0x120/0x160 [ 619.854083][T18730] pci_stop_and_remove_bus_device+0x58/0xa0 [ 619.856345][T18730] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 619.858705][T18730] remove_store+0x123/0x140 [ 619.860394][T18730] ? __pfx_remove_store+0x10/0x10 [ 619.862506][T18730] ? find_held_lock+0x2b/0x80 [ 619.864274][T18730] ? sysfs_file_kobj+0xe4/0x290 [ 619.866036][T18730] ? sysfs_file_kobj+0xe4/0x290 [ 619.868221][T18730] ? __pfx_remove_store+0x10/0x10 [ 619.870524][T18730] dev_attr_store+0x58/0x80 [ 619.872552][T18730] ? __pfx_dev_attr_store+0x10/0x10 [ 619.874524][T18730] sysfs_kf_write+0xf2/0x150 [ 619.876733][T18730] kernfs_fop_write_iter+0x3e0/0x5f0 [ 619.878511][T18730] ? __pfx_sysfs_kf_write+0x10/0x10 [ 619.880491][T18730] vfs_write+0x6af/0x1050 [ 619.882029][T18730] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 619.884084][T18730] ? __pfx_vfs_write+0x10/0x10 [ 619.885853][T18730] ? find_held_lock+0x2b/0x80 [ 619.887554][T18730] ksys_write+0x12a/0x250 [ 619.889380][T18730] ? __pfx_ksys_write+0x10/0x10 [ 619.891127][T18730] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 619.893339][T18730] __do_fast_syscall_32+0x13a/0x8b0 [ 619.895074][T18730] do_fast_syscall_32+0x32/0x70 [ 619.896883][T18730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.898961][T18730] RIP: 0023:0xf743efec [ 619.900333][T18730] Code: Unable to access opcode bytes at 0xf743efc2. [ 619.903005][T18730] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 619.905691][T18730] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 [ 619.908687][T18730] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.911211][T18730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.913801][T18730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 619.916293][T18730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.918829][T18730] [ 619.919942][T18730] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 619.922129][T18730] CPU: 0 UID: 0 PID: 18730 Comm: syz.5.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.925346][T18730] Tainted: [L]=SOFTLOCKUP [ 619.926602][T18730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 619.929548][T18730] Call Trace: [ 619.930543][T18730] [ 619.931421][T18730] dump_stack_lvl+0x100/0x190 [ 619.932831][T18730] vpanic+0x553/0x970 [ 619.934021][T18730] ? __pfx_vpanic+0x10/0x10 [ 619.935370][T18730] panic+0xd1/0xe0 [ 619.936475][T18730] ? __pfx_panic+0x10/0x10 [ 619.937767][T18730] check_panic_on_warn.cold+0x19/0x34 [ 619.939343][T18730] ? remove_proc_entry+0x4e7/0x610 [ 619.940891][T18730] __warn.cold+0x191/0x318 [ 619.942187][T18730] __report_bug+0x30f/0x440 [ 619.943516][T18730] ? remove_proc_entry+0x4e7/0x610 [ 619.944982][T18730] ? __pfx___report_bug+0x10/0x10 [ 619.946573][T18730] ? __do_fast_syscall_32+0x13a/0x8b0 [ 619.948258][T18730] ? do_raw_spin_lock+0x128/0x260 [ 619.949722][T18730] ? find_held_lock+0x2b/0x80 [ 619.951073][T18730] ? proc_entry_rundown+0x158/0x1e0 [ 619.952623][T18730] ? proc_entry_rundown+0x158/0x1e0 [ 619.954137][T18730] report_bug_entry+0xe2/0x290 [ 619.955531][T18730] ? remove_proc_entry+0x4f5/0x610 [ 619.957016][T18730] handle_bug+0x1cd/0x2a0 [ 619.958551][T18730] exc_invalid_op+0x17/0x50 [ 619.960050][T18730] asm_exc_invalid_op+0x1a/0x20 [ 619.961549][T18730] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 619.963178][T18730] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d b9 03 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 c0 7f 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 4c 51 49 ff 48 8d 7d 18 48 b8 00 [ 619.968921][T18730] RSP: 0000:ffffc900072df6a0 EFLAGS: 00010246 [ 619.970757][T18730] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804ea9325c [ 619.973012][T18730] RDX: ffff88801e3fe5dc RSI: ffffffff8c0b7fc0 RDI: ffffffff924c06a0 [ 619.975376][T18730] RBP: ffff88804ea93238 R08: ffff888045647c5c R09: ffffed1009d52633 [ 619.977702][T18730] R10: ffff88804ea9319b R11: 0000000000000000 R12: ffff88804ea93180 [ 619.979987][T18730] R13: ffff88801e3fe500 R14: ffff888045647c38 R15: dffffc0000000000 [ 619.982244][T18730] ? __pfx_remove_proc_entry+0x10/0x10 [ 619.983824][T18730] ? mtree_load+0x3a4/0xb50 [ 619.985135][T18730] ? __pfx_mtree_load+0x10/0x10 [ 619.986526][T18730] ? rcu_is_watching+0x13/0xc0 [ 619.987875][T18730] unregister_irq_proc+0x206/0x2a0 [ 619.989196][T18730] ? __pfx_unregister_irq_proc+0x10/0x10 [ 619.990845][T18730] free_desc+0x89/0x330 [ 619.992056][T18730] ? __pfx_free_desc+0x10/0x10 [ 619.993426][T18730] ? kasan_quarantine_put+0x104/0x240 [ 619.994979][T18730] ? lockdep_hardirqs_on+0x7d/0x110 [ 619.996501][T18730] ? irq_domain_free_irqs+0x340/0x5c0 [ 619.998058][T18730] irq_free_descs+0x84/0xc0 [ 619.999397][T18730] irq_domain_free_irqs+0x46a/0x5c0 [ 620.001026][T18730] mp_unmap_irq+0xf8/0x130 [ 620.002358][T18730] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 620.004172][T18730] acpi_unregister_gsi_ioapic+0x40/0x60 [ 620.005792][T18730] acpi_unregister_gsi+0x25/0x40 [ 620.007295][T18730] acpi_pci_irq_disable+0x275/0x360 [ 620.008710][T18730] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 620.010337][T18730] pcibios_disable_device+0x89/0xb0 [ 620.011871][T18730] do_pci_disable_device+0x9f/0x100 [ 620.013384][T18730] ? __pfx_do_pci_disable_device+0x10/0x10 [ 620.015070][T18730] pci_disable_device+0x130/0x270 [ 620.016543][T18730] pci_device_remove+0xb2/0x1d0 [ 620.017946][T18730] ? __pfx_pci_device_remove+0x10/0x10 [ 620.019564][T18730] device_remove+0xcb/0x180 [ 620.020925][T18730] device_release_driver_internal+0x44e/0x620 [ 620.022659][T18730] pci_stop_bus_device+0x120/0x160 [ 620.024133][T18730] pci_stop_and_remove_bus_device+0x58/0xa0 [ 620.025812][T18730] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 620.027701][T18730] remove_store+0x123/0x140 [ 620.029038][T18730] ? __pfx_remove_store+0x10/0x10 [ 620.030499][T18730] ? find_held_lock+0x2b/0x80 [ 620.031864][T18730] ? sysfs_file_kobj+0xe4/0x290 [ 620.033215][T18730] ? sysfs_file_kobj+0xe4/0x290 [ 620.034612][T18730] ? __pfx_remove_store+0x10/0x10 [ 620.036084][T18730] dev_attr_store+0x58/0x80 [ 620.037401][T18730] ? __pfx_dev_attr_store+0x10/0x10 [ 620.038932][T18730] sysfs_kf_write+0xf2/0x150 [ 620.040309][T18730] kernfs_fop_write_iter+0x3e0/0x5f0 [ 620.041837][T18730] ? __pfx_sysfs_kf_write+0x10/0x10 [ 620.043356][T18730] vfs_write+0x6af/0x1050 [ 620.044618][T18730] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 620.046302][T18730] ? __pfx_vfs_write+0x10/0x10 [ 620.047710][T18730] ? find_held_lock+0x2b/0x80 [ 620.049168][T18730] ksys_write+0x12a/0x250 [ 620.050452][T18730] ? __pfx_ksys_write+0x10/0x10 [ 620.051926][T18730] ? __pfx___ia32_sys_clock_gettime+0x10/0x10 [ 620.053713][T18730] __do_fast_syscall_32+0x13a/0x8b0 [ 620.055223][T18730] do_fast_syscall_32+0x32/0x70 [ 620.056655][T18730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.058536][T18730] RIP: 0023:0xf743efec [ 620.059745][T18730] Code: Unable to access opcode bytes at 0xf743efc2. [ 620.061647][T18730] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 620.064112][T18730] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 [ 620.066501][T18730] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.068900][T18730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.071152][T18730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.073409][T18730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.075689][T18730] [ 620.077309][T18730] Kernel Offset: disabled [ 620.078592][T18730] Rebooting in 86400 seconds..