last executing test programs: 5.795749128s ago: executing program 1 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000340)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0xa0000001}) unshare(0x22020400) epoll_pwait(r1, &(0x7f0000000440)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5.675473638s ago: executing program 0 (id=1140): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="648d", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000a40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x22020600) syz_io_uring_setup(0xf08, &(0x7f00000007c0)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000980)='./tracing\x00', 0x100, 0x0, 0x1}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f00000004c0)={0x0, 0x2, 0x10000, 0x4, 0x2}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_BIND=@ipv4={0x38, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000680)) 5.672996985s ago: executing program 0 (id=1150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/anycast6\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 4.446131509s ago: executing program 2 (id=1142): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r1) 4.445793137s ago: executing program 0 (id=1144): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001780)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001800)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x13}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x21c0, 0x103) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002040), 0x4000000004882, 0x0) io_setup(0x8, &(0x7f0000002080)=0x0) io_submit(r4, 0xca, &(0x7f00000020c0)=[&(0x7f0000002100)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000002140)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4.427621877s ago: executing program 1 (id=1153): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getaffinity(r0, 0x8, &(0x7f0000000640)) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 3.149775929s ago: executing program 3 (id=1145): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016800800"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x4, 0x100010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 3.065898717s ago: executing program 2 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x81}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, 0x0) 2.877328425s ago: executing program 2 (id=1148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.208326769s ago: executing program 3 (id=1149): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x147, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 1.784021125s ago: executing program 1 (id=1151): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="648d", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000a40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) unshare(0x22020600) syz_io_uring_setup(0xf08, 0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000980)='./tracing\x00', 0x100, 0x0, 0x1}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f00000004c0)={0x0, 0x2, 0x10000, 0x4, 0x2}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_BIND=@ipv4={0x38, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000680)) 1.671594299s ago: executing program 2 (id=1152): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x240480d5) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r2 = dup2(r0, r0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) 1.537529274s ago: executing program 1 (id=1154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ptrace$setsig(0x4203, 0x0, 0x81, &(0x7f00000000c0)={0x16, 0x7, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.409087607s ago: executing program 2 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000340)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0xa0000001}) unshare(0x22020400) epoll_pwait(r1, &(0x7f0000000440)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.398464s ago: executing program 0 (id=1156): syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000000a882, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SCHED_CORE(0x23, 0x2, 0x0, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 1.271479989s ago: executing program 1 (id=1157): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x40086610, &(0x7f0000000680)=@v2={0x2, @aes256, 0x8, '\x00', @c}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) 1.261616559s ago: executing program 3 (id=1158): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x5c) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x98546b504a9e4f1b}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000007000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'veth1_to_bridge\x00'}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write(r6, &(0x7f0000000280)="31d638db5a1ffa015ff7febf2abcd499b8b60669ded305836b22a036bdd669d4f3c2ac987418802c380f9e23087c454d9494b73f7b7633b9f1f9e61c0b2ed9ae70ef6b9edaa35677e1df82bbba73915c0c775e0c7584cdf252858563187363cf5920d48a3fc4ed4e6fcd63b307bc9b9929b6ec9864e5051fcd62bc6a0ad12e13d85ed847453d208304d7267e8cd08e3c193081669b5e756c1fb82d05039a63975dc1ef4a2b743d309761265d9483dc93d146c6327220e6a663", 0xb9) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e0, &(0x7f0000000040)) 1.027511933s ago: executing program 3 (id=1159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa2, &(0x7f0000000140)=""/186, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x2000005, r3}, 0x38) 258.890436ms ago: executing program 0 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, 0x0, 0x0, 0x202001, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(&(0x7f0000000cc0)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, {r0}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001140)='dummy_udc.0', 0xb) 211.428325ms ago: executing program 1 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000600), 0x612, 0x4000010) 180.552961ms ago: executing program 3 (id=1162): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="648d", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000a40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) unshare(0x22020600) syz_io_uring_setup(0xf08, 0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000980)='./tracing\x00', 0x100, 0x0, 0x1}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f00000004c0)={0x0, 0x2, 0x10000, 0x4, 0x2}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_BIND=@ipv4={0x38, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000680)) 34.952266ms ago: executing program 0 (id=1163): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 34.759423ms ago: executing program 3 (id=1164): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r4, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) syz_genetlink_get_family_id$ieee802154(0x0, r0) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 2 (id=1165): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'nq\x00', 0x0, 0x0, 0x50}, 0x2c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): do_fast_syscall_32+0x5b0/0x8c0 [ 137.655785][ T7808] do_fast_syscall_32+0x32/0x70 [ 137.655802][ T7808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.655815][ T7808] RIP: 0023:0xf744efbc [ 137.655824][ T7808] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 137.655834][ T7808] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 137.655846][ T7808] RAX: fffffffffffffe00 RBX: 00000000f7474f88 RCX: 0000000000000080 [ 137.655852][ T7808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 137.655859][ T7808] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 137.655865][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.655871][ T7808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.655885][ T7808] [ 139.089606][ T41] usb 8-1: USB disconnect, device number 6 [ 139.091100][ T41] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 139.096207][ T41] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 139.096699][ T41] keyspan 8-1:1.0: device disconnected [ 139.626938][ T5794] Bluetooth: hci1: unexpected event 0x30 length: 6 > 3 [ 141.060645][ T7850] syzkaller0: entered promiscuous mode [ 141.060667][ T7850] syzkaller0: entered allmulticast mode [ 141.326238][ T7857] syzkaller0: entered promiscuous mode [ 141.326253][ T7857] syzkaller0: entered allmulticast mode [ 141.561513][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.712134][ T7868] syzkaller0: entered promiscuous mode [ 141.712158][ T7868] syzkaller0: entered allmulticast mode [ 141.712427][ T5886] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 141.713485][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.713525][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.725753][ T5886] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 141.725948][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 141.726000][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 141.732043][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 141.732140][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 141.744059][ T5886] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 141.744833][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 141.748748][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 141.750355][ T5886] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.857472][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 141.857485][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 141.858477][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.860678][ T7870] bond2: (slave bond0): making interface the new active one [ 141.861066][ T7870] bond2: (slave bond0): Enslaving as an active interface with an up link [ 141.867087][ T7870] netlink: 'syz.2.538': attribute type 4 has an invalid length. [ 141.867099][ T7870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.538'. [ 141.914153][ T7875] syzkaller0: entered promiscuous mode [ 141.914167][ T7875] syzkaller0: entered allmulticast mode [ 143.037545][ T7888] syzkaller0: entered promiscuous mode [ 143.037564][ T7888] syzkaller0: entered allmulticast mode [ 144.355266][ T7897] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.360479][ T5886] usb 6-1: USB disconnect, device number 3 [ 144.362110][ T5886] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 144.364656][ T5886] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 144.364923][ T5886] keyspan 6-1:1.0: device disconnected [ 146.062905][ T7916] syzkaller0: entered promiscuous mode [ 146.062926][ T7916] syzkaller0: entered allmulticast mode [ 146.361710][ T7923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.554'. [ 146.361742][ T7923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.554'. [ 146.390320][ T7923] FAULT_INJECTION: forcing a failure. [ 146.390320][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 146.390340][ T7923] CPU: 2 UID: 0 PID: 7923 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.390355][ T7923] Tainted: [L]=SOFTLOCKUP [ 146.390359][ T7923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.390365][ T7923] Call Trace: [ 146.390368][ T7923] [ 146.390373][ T7923] dump_stack_lvl+0x100/0x190 [ 146.390393][ T7923] should_fail_ex.cold+0x5/0xa [ 146.390410][ T7923] should_failslab+0xc2/0x120 [ 146.390425][ T7923] __kmalloc_cache_noprof+0x91/0x6d0 [ 146.390440][ T7923] ? assoc_array_insert+0x262/0x32c0 [ 146.390454][ T7923] assoc_array_insert+0x262/0x32c0 [ 146.390464][ T7923] ? __mutex_lock+0x267/0x1c10 [ 146.390478][ T7923] ? __key_link_lock+0x92/0xb0 [ 146.390492][ T7923] ? __pfx___mutex_lock+0x10/0x10 [ 146.390507][ T7923] ? __pfx_assoc_array_insert+0x10/0x10 [ 146.390519][ T7923] ? down_write+0x141/0x1f0 [ 146.390533][ T7923] ? __pfx_down_write+0x10/0x10 [ 146.390549][ T7923] __key_link_begin+0xf5/0x260 [ 146.390560][ T7923] key_instantiate_and_link+0x201/0x4b0 [ 146.390577][ T7923] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 146.390592][ T7923] ? keyctl_get_persistent+0x4b4/0x860 [ 146.390615][ T7923] keyring_alloc+0x7a/0xc0 [ 146.390631][ T7923] keyctl_get_persistent+0x694/0x860 [ 146.390649][ T7923] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 146.390671][ T7923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.390691][ T7923] ? find_held_lock+0x2b/0x80 [ 146.390707][ T7923] ? __might_fault+0xc5/0x140 [ 146.390720][ T7923] ? __might_fault+0xc5/0x140 [ 146.390735][ T7923] __ia32_compat_sys_keyctl+0x38f/0x550 [ 146.390753][ T7923] __do_fast_syscall_32+0x14b/0x8c0 [ 146.390770][ T7923] do_fast_syscall_32+0x32/0x70 [ 146.390784][ T7923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.390797][ T7923] RIP: 0023:0xf7f87fbc [ 146.390805][ T7923] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 146.390815][ T7923] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 146.390826][ T7923] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 146.390832][ T7923] RDX: 0000000021017af0 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.390838][ T7923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.390844][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.390850][ T7923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.390863][ T7923] [ 146.559355][ T7930] syzkaller0: entered promiscuous mode [ 146.559370][ T7930] syzkaller0: entered allmulticast mode [ 146.565086][ T7930] tipc: Enabled bearer , priority 0 [ 146.568725][ T7930] tipc: Resetting bearer [ 146.572918][ T7929] tipc: Resetting bearer [ 146.588249][ T7929] tipc: Disabling bearer [ 146.911508][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.952455][ T7938] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 146.963463][ T7938] pci 0000:00:00.0: Adding to iommu group 0 [ 146.972771][ T7938] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 146.992383][ T7938] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 146.992503][ T7938] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 146.992707][ T7938] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 146.993362][ T7938] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 147.003253][ T7938] pci 0000:00:01.0: Adding to iommu group 1 [ 147.008326][ T7938] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 147.008339][ T7938] pci 0000:00:01.0: vgaarb: bridge control possible [ 147.008345][ T7938] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 147.015232][ T7938] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 147.021270][ T7938] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 147.031213][ T7938] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 147.040571][ T7938] [drm] Found bochs VGA, ID 0xb0c5. [ 147.040582][ T7938] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 147.054086][ T7938] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 147.062317][ T5886] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 147.063178][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.063210][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.066362][ T5886] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 147.066475][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 147.066504][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 147.067093][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 147.067125][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 147.068416][ T5886] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 147.069371][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 147.069429][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 147.074249][ T5886] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 147.198337][ T7938] Console: switching to colour frame buffer device 160x50 [ 147.240880][ T7938] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 147.997757][ T7951] syzkaller0: entered promiscuous mode [ 147.997771][ T7951] syzkaller0: entered allmulticast mode [ 148.356619][ T7957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.381101][ T7957] bond2: (slave ip6gretap1): making interface the new active one [ 148.385560][ T7957] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.442703][ T7957] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 148.853028][ T7965] syzkaller0: entered promiscuous mode [ 148.853043][ T7965] syzkaller0: entered allmulticast mode [ 149.713174][ T5886] usb 6-1: USB disconnect, device number 4 [ 149.718565][ T5886] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 149.723823][ T5886] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 149.724120][ T5886] keyspan 6-1:1.0: device disconnected [ 151.039006][ T8000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'. [ 151.039039][ T8000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'. [ 151.132838][ T8000] FAULT_INJECTION: forcing a failure. [ 151.132838][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 151.132872][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.2.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.132886][ T8000] Tainted: [L]=SOFTLOCKUP [ 151.132890][ T8000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.132896][ T8000] Call Trace: [ 151.132900][ T8000] [ 151.132905][ T8000] dump_stack_lvl+0x100/0x190 [ 151.132985][ T8000] should_fail_ex.cold+0x5/0xa [ 151.133010][ T8000] should_failslab+0xc2/0x120 [ 151.133043][ T8000] __kmalloc_cache_noprof+0x91/0x6d0 [ 151.133058][ T8000] ? assoc_array_insert+0x10b/0x32c0 [ 151.133072][ T8000] assoc_array_insert+0x10b/0x32c0 [ 151.133083][ T8000] ? __mutex_lock+0x267/0x1c10 [ 151.133116][ T8000] ? key_link+0x2bb/0x390 [ 151.133129][ T8000] ? __pfx___mutex_lock+0x10/0x10 [ 151.133143][ T8000] ? __pfx_assoc_array_insert+0x10/0x10 [ 151.133153][ T8000] ? __pfx___might_resched+0x10/0x10 [ 151.133172][ T8000] ? down_write+0x141/0x1f0 [ 151.133186][ T8000] ? __pfx_down_write+0x10/0x10 [ 151.133201][ T8000] __key_link_begin+0xf5/0x260 [ 151.133212][ T8000] key_link+0x103/0x390 [ 151.133221][ T8000] ? keyctl_get_persistent+0x6d1/0x860 [ 151.133236][ T8000] ? keyctl_get_persistent+0x6d1/0x860 [ 151.133251][ T8000] ? __pfx_key_link+0x10/0x10 [ 151.133260][ T8000] ? bpf_lsm_key_permission+0x9/0x10 [ 151.133272][ T8000] ? key_task_permission+0x2c7/0x3c0 [ 151.133286][ T8000] keyctl_get_persistent+0x5bd/0x860 [ 151.133302][ T8000] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 151.133316][ T8000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.133335][ T8000] ? find_held_lock+0x2b/0x80 [ 151.133349][ T8000] ? __might_fault+0xc5/0x140 [ 151.133361][ T8000] ? __might_fault+0xc5/0x140 [ 151.133374][ T8000] __ia32_compat_sys_keyctl+0x38f/0x550 [ 151.133391][ T8000] __do_fast_syscall_32+0x14b/0x8c0 [ 151.133407][ T8000] do_fast_syscall_32+0x32/0x70 [ 151.133420][ T8000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.133433][ T8000] RIP: 0023:0xf741efbc [ 151.133442][ T8000] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 151.133452][ T8000] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 151.133471][ T8000] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 151.133477][ T8000] RDX: 00000000118c9844 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.133497][ T8000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.133503][ T8000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.133509][ T8000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.133523][ T8000] [ 151.267709][ T8003] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.440771][ T8011] kAFS: unable to lookup cell '.' [ 152.644944][ T8029] syzkaller0: entered promiscuous mode [ 152.644959][ T8029] syzkaller0: entered allmulticast mode [ 152.749008][ T8031] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 152.749571][ T8031] bridge1: entered promiscuous mode [ 152.749603][ T8031] bridge1: entered allmulticast mode [ 154.118963][ T8052] syzkaller0: entered promiscuous mode [ 154.118987][ T8052] syzkaller0: entered allmulticast mode [ 154.163609][ T8054] syzkaller0: entered promiscuous mode [ 154.163631][ T8054] syzkaller0: entered allmulticast mode [ 154.286316][ T8058] syzkaller0: entered promiscuous mode [ 154.286335][ T8058] syzkaller0: entered allmulticast mode [ 154.841520][ T5795] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.843950][ T5794] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 155.405671][ T8078] syzkaller0: entered promiscuous mode [ 155.405685][ T8078] syzkaller0: entered allmulticast mode [ 155.629778][ T8086] syzkaller0: entered promiscuous mode [ 155.629795][ T8086] syzkaller0: entered allmulticast mode [ 156.697862][ T5794] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 156.790029][ T8102] syzkaller0: entered promiscuous mode [ 156.790042][ T8102] syzkaller0: entered allmulticast mode [ 156.808833][ T8102] netlink: 76 bytes leftover after parsing attributes in process `syz.3.611'. [ 158.026816][ T8120] mmap: syz.2.618 (8120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.726717][ T8143] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 159.740878][ T8143] pci 0000:00:00.0: Adding to iommu group 0 [ 160.956622][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 161.435253][ T8165] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.241364][ T5794] Bluetooth: hci0: unexpected event 0x30 length: 6 > 3 [ 162.494588][ T8184] syzkaller0: entered promiscuous mode [ 162.494602][ T8184] syzkaller0: entered allmulticast mode [ 162.509867][ T8184] tipc: Enabled bearer , priority 0 [ 162.521160][ T8184] tipc: Resetting bearer [ 162.546524][ T8183] tipc: Resetting bearer [ 162.573252][ T8183] tipc: Disabling bearer [ 162.790354][ T5794] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 164.895132][ T8218] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.433777][ T5794] Bluetooth: hci2: unexpected event 0x30 length: 6 > 3 [ 165.436064][ T8226] device-mapper: table: 248:2: snapshot-origin: Cannot get target device (-EBUSY) [ 165.436101][ T8226] device-mapper: ioctl: error adding target to table [ 165.625472][ T8229] syzkaller0: entered promiscuous mode [ 165.625493][ T8229] syzkaller0: entered allmulticast mode [ 165.962996][ T8237] 0x000000000000-0x000000010000 : "" [ 166.057118][ T8237] ftl_cs: FTL header not found. [ 166.060148][ T8237] FAULT_INJECTION: forcing a failure. [ 166.060148][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 166.061054][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.1.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.061087][ T8237] Tainted: [L]=SOFTLOCKUP [ 166.061091][ T8237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.061098][ T8237] Call Trace: [ 166.061103][ T8237] [ 166.061108][ T8237] dump_stack_lvl+0x100/0x190 [ 166.061129][ T8237] should_fail_ex.cold+0x5/0xa [ 166.061145][ T8237] should_failslab+0xc2/0x120 [ 166.061171][ T8237] __kmalloc_noprof+0xfc/0x840 [ 166.061183][ T8237] ? group_cpus_evenly+0x195/0x660 [ 166.061202][ T8237] group_cpus_evenly+0x195/0x660 [ 166.061220][ T8237] ? __pfx_group_cpus_evenly+0x10/0x10 [ 166.061242][ T8237] blk_mq_map_queues+0x9d/0x430 [ 166.061258][ T8237] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 166.061270][ T8237] ? trace_kmalloc+0xeb/0x110 [ 166.061281][ T8237] ? __kasan_kmalloc+0xaa/0xb0 [ 166.061292][ T8237] ? __kmalloc_node_noprof+0x360/0x870 [ 166.061311][ T8237] blk_mq_update_queue_map+0x305/0x3a0 [ 166.061324][ T8237] blk_mq_alloc_tag_set+0x61a/0x1320 [ 166.061342][ T8237] ? __asan_memset+0x23/0x50 [ 166.061359][ T8237] add_mtd_blktrans_dev+0x6a1/0x1520 [ 166.061411][ T8237] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 166.061438][ T8237] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 166.061453][ T8237] ? mtdblock_add_mtd+0x4a/0x270 [ 166.061473][ T8237] mtdblock_add_mtd+0x1cc/0x270 [ 166.061490][ T8237] blktrans_notify_add+0xa2/0xf0 [ 166.061507][ T8237] add_mtd_device+0xb6d/0x1820 [ 166.061523][ T8237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.061539][ T8237] ? __pfx_add_mtd_device+0x10/0x10 [ 166.061554][ T8237] mtd_add_partition+0x376/0x6a0 [ 166.061569][ T8237] ? __pfx_mtd_add_partition+0x10/0x10 [ 166.061581][ T8237] ? __might_fault+0xc5/0x140 [ 166.061594][ T8237] ? __might_fault+0xc5/0x140 [ 166.061612][ T8237] mtdchar_blkpg_ioctl+0x207/0x250 [ 166.061626][ T8237] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 166.061654][ T8237] mtdchar_compat_ioctl+0x3d6/0x440 [ 166.061671][ T8237] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 166.061692][ T8237] ? __pfx_bpf_lsm_file_ioctl_compat+0x10/0x10 [ 166.061710][ T8237] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 166.061725][ T8237] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 166.061744][ T8237] __do_fast_syscall_32+0x14b/0x8c0 [ 166.061758][ T8237] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.061772][ T8237] do_fast_syscall_32+0x32/0x70 [ 166.061786][ T8237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.061799][ T8237] RIP: 0023:0xf7f87fbc [ 166.061809][ T8237] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 166.061818][ T8237] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 166.061830][ T8237] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 166.061836][ T8237] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.061842][ T8237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.061848][ T8237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.061854][ T8237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.061869][ T8237] [ 166.329523][ T8240] device-mapper: table: 248:2: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 166.329546][ T8240] device-mapper: ioctl: error adding target to table [ 166.479001][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.656'. [ 166.855563][ T5794] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 167.741254][ T8263] syzkaller0: entered promiscuous mode [ 167.741276][ T8263] syzkaller0: entered allmulticast mode [ 169.061772][ T5794] Bluetooth: hci0: unexpected event 0x30 length: 6 > 3 [ 171.281748][ T8303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.394945][ T8294] syz.0.679 (8294) used greatest stack depth: 18528 bytes left [ 171.532389][ T8303] bond2: (slave ip6gretap1): making interface the new active one [ 171.533202][ T8303] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 171.685501][ T8303] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 172.150338][ T8313] syzkaller0: entered promiscuous mode [ 172.150360][ T8313] syzkaller0: entered allmulticast mode [ 172.764673][ T5794] Bluetooth: hci0: unexpected event 0x30 length: 6 > 3 [ 172.874986][ T8328] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.496272][ T8348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.567995][ T8352] bond2: (slave ip6gretap1): making interface the new active one [ 173.577415][ T8352] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 173.608203][ T8353] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 173.698989][ T8353] pci 0000:00:00.0: Adding to iommu group 0 [ 173.780480][ T8348] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 175.034471][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 175.041310][ T8367] IPVS: dh: TCP 127.0.0.1:5376 - no destination available [ 175.986103][ T5794] Bluetooth: hci1: unexpected event 0x30 length: 6 > 3 [ 176.824402][ T8377] tipc: Enabling of bearer rejected, failed to enable media [ 176.834956][ T8392] syzkaller0: entered promiscuous mode [ 176.834969][ T8392] syzkaller0: entered allmulticast mode [ 176.887217][ T8401] syzkaller0: entered promiscuous mode [ 176.887232][ T8401] syzkaller0: entered allmulticast mode [ 176.945895][ T8405] netlink: 'syz.2.702': attribute type 4 has an invalid length. [ 176.945908][ T8405] netlink: 17 bytes leftover after parsing attributes in process `syz.2.702'. [ 176.946430][ T8405] FAULT_INJECTION: forcing a failure. [ 176.946430][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 176.946447][ T8405] CPU: 3 UID: 0 PID: 8405 Comm: syz.2.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.946462][ T8405] Tainted: [L]=SOFTLOCKUP [ 176.946466][ T8405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.946473][ T8405] Call Trace: [ 176.946477][ T8405] [ 176.946481][ T8405] dump_stack_lvl+0x100/0x190 [ 176.946502][ T8405] should_fail_ex.cold+0x5/0xa [ 176.946519][ T8405] should_failslab+0xc2/0x120 [ 176.946532][ T8405] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.946550][ T8405] ? fib_trie_unmerge+0x246/0xc00 [ 176.946565][ T8405] fib_trie_unmerge+0x246/0xc00 [ 176.946587][ T8405] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 176.946604][ T8405] ? lock_acquire+0x1d1/0x380 [ 176.946618][ T8405] fib_unmerge+0xee/0x510 [ 176.946632][ T8405] ? fib_nl2rule_locked+0x3ef/0x740 [ 176.946648][ T8405] fib4_rule_configure+0xaba/0x1160 [ 176.946665][ T8405] ? fib_nl2rule_locked+0x3fe/0x740 [ 176.946680][ T8405] fib_newrule+0x3c3/0x1e50 [ 176.946697][ T8405] ? __pfx_fib_newrule+0x10/0x10 [ 176.946709][ T8405] ? kfree_skbmem+0x19a/0x210 [ 176.946720][ T8405] ? kmem_cache_free+0xa0/0x6c0 [ 176.946734][ T8405] ? skb_release_data+0x69d/0x860 [ 176.946758][ T8405] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 176.946770][ T8405] ? find_held_lock+0x2b/0x80 [ 176.946785][ T8405] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.946795][ T8405] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 176.946806][ T8405] ? __pfx_fib_nl_newrule+0x10/0x10 [ 176.946819][ T8405] rtnetlink_rcv_msg+0x95e/0xe90 [ 176.946831][ T8405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.946849][ T8405] netlink_rcv_skb+0x159/0x420 [ 176.946865][ T8405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.946876][ T8405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.946896][ T8405] ? netlink_deliver_tap+0x1ae/0xb50 [ 176.946913][ T8405] netlink_unicast+0x668/0x950 [ 176.946930][ T8405] ? __pfx_netlink_unicast+0x10/0x10 [ 176.946949][ T8405] netlink_sendmsg+0x9ac/0x10c0 [ 176.946967][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.946985][ T8405] ? apparmor_socket_sendmsg+0x165/0x280 [ 176.947001][ T8405] ? ____sys_sendmsg+0xa99/0xc30 [ 176.947011][ T8405] ____sys_sendmsg+0xa99/0xc30 [ 176.947021][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.947038][ T8405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.947056][ T8405] ___sys_sendmsg+0x190/0x1e0 [ 176.947068][ T8405] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.947081][ T8405] ? futex_wait+0x11e/0x370 [ 176.947096][ T8405] ? find_held_lock+0x2b/0x80 [ 176.947120][ T8405] __sys_sendmsg+0x160/0x210 [ 176.947136][ T8405] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.947159][ T8405] __do_fast_syscall_32+0x14b/0x8c0 [ 176.947175][ T8405] do_fast_syscall_32+0x32/0x70 [ 176.947189][ T8405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.947203][ T8405] RIP: 0023:0xf741efbc [ 176.947213][ T8405] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 176.947222][ T8405] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 176.947234][ T8405] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001c00 [ 176.947240][ T8405] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.947247][ T8405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.947252][ T8405] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.947258][ T8405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.947272][ T8405] [ 176.958792][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 176.967033][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.967534][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.905701][ T8423] 0x000000000000-0x000000010000 : "" [ 177.911667][ T8423] ftl_cs: FTL header not found. [ 177.911826][ T8423] FAULT_INJECTION: forcing a failure. [ 177.911826][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 177.911842][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.2.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.911858][ T8423] Tainted: [L]=SOFTLOCKUP [ 177.911862][ T8423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.911869][ T8423] Call Trace: [ 177.911873][ T8423] [ 177.911878][ T8423] dump_stack_lvl+0x100/0x190 [ 177.911898][ T8423] should_fail_ex.cold+0x5/0xa [ 177.911916][ T8423] should_failslab+0xc2/0x120 [ 177.911929][ T8423] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 177.911972][ T8423] ? blk_alloc_queue+0x31/0x790 [ 177.911989][ T8423] blk_alloc_queue+0x31/0x790 [ 177.912005][ T8423] blk_mq_alloc_queue+0x174/0x290 [ 177.912022][ T8423] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 177.912047][ T8423] ? blk_mq_alloc_tag_set+0xc0e/0x1320 [ 177.912067][ T8423] __blk_mq_alloc_disk+0x29/0x120 [ 177.912083][ T8423] add_mtd_blktrans_dev+0x7ad/0x1520 [ 177.912102][ T8423] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 177.912130][ T8423] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 177.912144][ T8423] ? mtdblock_add_mtd+0x4a/0x270 [ 177.912162][ T8423] mtdblock_add_mtd+0x1cc/0x270 [ 177.912178][ T8423] blktrans_notify_add+0xa2/0xf0 [ 177.912193][ T8423] add_mtd_device+0xb6d/0x1820 [ 177.912207][ T8423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.912222][ T8423] ? __pfx_add_mtd_device+0x10/0x10 [ 177.912238][ T8423] mtd_add_partition+0x376/0x6a0 [ 177.912253][ T8423] ? __pfx_mtd_add_partition+0x10/0x10 [ 177.912265][ T8423] ? __might_fault+0xc5/0x140 [ 177.912278][ T8423] ? __might_fault+0xc5/0x140 [ 177.912296][ T8423] mtdchar_blkpg_ioctl+0x207/0x250 [ 177.912310][ T8423] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 177.912336][ T8423] mtdchar_compat_ioctl+0x3d6/0x440 [ 177.912353][ T8423] ? find_held_lock+0x2b/0x80 [ 177.912368][ T8423] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 177.912389][ T8423] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 177.912404][ T8423] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 177.912422][ T8423] __do_fast_syscall_32+0x14b/0x8c0 [ 177.912436][ T8423] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.912451][ T8423] do_fast_syscall_32+0x32/0x70 [ 177.912465][ T8423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.912478][ T8423] RIP: 0023:0xf741efbc [ 177.912488][ T8423] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.912498][ T8423] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.912509][ T8423] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 177.912515][ T8423] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.912521][ T8423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.912527][ T8423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.912533][ T8423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.912547][ T8423] [ 178.894921][ T8434] tipc: Enabling of bearer rejected, failed to enable media [ 178.895308][ T8434] syzkaller0: entered promiscuous mode [ 178.895322][ T8434] syzkaller0: entered allmulticast mode [ 180.431886][ T8447] input: syz0 as /devices/virtual/input/input11 [ 180.471653][ T8447] netlink: 220 bytes leftover after parsing attributes in process `syz.2.714'. [ 180.471673][ T8447] tc_dump_action: action bad kind [ 180.478832][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478845][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478851][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478856][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478861][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478866][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478872][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478877][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478882][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478888][ T8449] tc action pedit unable to extract header offset for header type (0x4) [ 180.478898][ T8449] 0: reclassify loop, rule prio 0, protocol 800 [ 180.776460][ T8468] 0x000000000000-0x000000010000 : "" [ 180.784586][ T8468] ftl_cs: FTL header not found. [ 181.593206][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 181.593224][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 181.645642][ T8502] loop0: detected capacity change from 0 to 4096 [ 181.708309][ T8502] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 181.717874][ T8502] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 181.717904][ T8502] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 181.717916][ T8502] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 181.720148][ T8502] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.720160][ T8502] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.720168][ T8502] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.720175][ T8502] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 181.720181][ T8502] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 181.720211][ T8502] loop0: [ 182.681591][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.684713][ T5886] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.685023][ T5886] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 182.918502][ T8523] tipc: Enabling of bearer rejected, failed to enable media [ 182.918788][ T8523] syzkaller0: entered promiscuous mode [ 182.918798][ T8523] syzkaller0: entered allmulticast mode [ 183.009171][ T8528] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.217134][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 183.217152][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 183.961778][ T8546] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.008229][ T8546] md: md0 stopped. [ 184.102489][ T8552] syzkaller0: entered promiscuous mode [ 184.102511][ T8552] syzkaller0: entered allmulticast mode [ 184.171171][ T8554] 0x000000000000-0x000000010000 : "" [ 184.176238][ T8554] ftl_cs: FTL header not found. [ 184.176264][ T8554] FAULT_INJECTION: forcing a failure. [ 184.176264][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 184.176280][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.3.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.176296][ T8554] Tainted: [L]=SOFTLOCKUP [ 184.176301][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.176308][ T8554] Call Trace: [ 184.176312][ T8554] [ 184.176317][ T8554] dump_stack_lvl+0x100/0x190 [ 184.176338][ T8554] should_fail_ex.cold+0x5/0xa [ 184.176356][ T8554] should_failslab+0xc2/0x120 [ 184.176369][ T8554] __kmalloc_cache_noprof+0x91/0x6d0 [ 184.176385][ T8554] ? blk_mq_alloc_tag_set+0x343/0x1320 [ 184.176405][ T8554] blk_mq_alloc_tag_set+0x343/0x1320 [ 184.176422][ T8554] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 184.176439][ T8554] ? __asan_memset+0x23/0x50 [ 184.176462][ T8554] add_mtd_blktrans_dev+0x6a1/0x1520 [ 184.176481][ T8554] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 184.176508][ T8554] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 184.176524][ T8554] ? mtdblock_add_mtd+0x4a/0x270 [ 184.176543][ T8554] mtdblock_add_mtd+0x1cc/0x270 [ 184.176560][ T8554] blktrans_notify_add+0xa2/0xf0 [ 184.176577][ T8554] add_mtd_device+0xb6d/0x1820 [ 184.176594][ T8554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.176609][ T8554] ? __pfx_add_mtd_device+0x10/0x10 [ 184.176625][ T8554] mtd_add_partition+0x376/0x6a0 [ 184.176640][ T8554] ? __pfx_mtd_add_partition+0x10/0x10 [ 184.176652][ T8554] ? __might_fault+0xc5/0x140 [ 184.176664][ T8554] ? __might_fault+0xc5/0x140 [ 184.176682][ T8554] mtdchar_blkpg_ioctl+0x207/0x250 [ 184.176696][ T8554] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 184.176724][ T8554] mtdchar_compat_ioctl+0x3d6/0x440 [ 184.176740][ T8554] ? find_held_lock+0x2b/0x80 [ 184.176755][ T8554] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 184.176776][ T8554] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 184.176791][ T8554] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 184.176809][ T8554] __do_fast_syscall_32+0x14b/0x8c0 [ 184.176823][ T8554] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.176838][ T8554] do_fast_syscall_32+0x32/0x70 [ 184.176851][ T8554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.176865][ T8554] RIP: 0023:0xf73defbc [ 184.176874][ T8554] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 184.176884][ T8554] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 184.176895][ T8554] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 184.176901][ T8554] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.176907][ T8554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.176913][ T8554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.176919][ T8554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.176933][ T8554] [ 184.841503][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.841582][ T5886] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 184.841592][ T5886] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 185.058905][ T5794] Bluetooth: hci2: unexpected event 0x30 length: 6 > 3 [ 185.069240][ T8577] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 185.069254][ T8577] device-mapper: ioctl: error adding target to table [ 185.611022][ T8584] tipc: Enabling of bearer rejected, failed to enable media [ 185.611300][ T8584] syzkaller0: entered promiscuous mode [ 185.611310][ T8584] syzkaller0: entered allmulticast mode [ 185.697701][ T8587] device-mapper: table: 248:2: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 185.697718][ T8587] device-mapper: ioctl: error adding target to table [ 185.798544][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.799121][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.799575][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.800116][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.805362][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.805805][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.806217][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.806641][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.807060][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.807467][ T8587] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.855884][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 186.210402][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 186.210874][ T8602] syzkaller0: entered promiscuous mode [ 186.210885][ T8602] syzkaller0: entered allmulticast mode [ 186.921513][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.921749][ T5886] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 186.921794][ T5886] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 187.125814][ T8613] tipc: Enabling of bearer rejected, failed to enable media [ 187.126598][ T8613] syzkaller0: entered promiscuous mode [ 187.126609][ T8613] syzkaller0: entered allmulticast mode [ 187.360485][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 187.360506][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 187.411558][ T8617] device-mapper: table: 248:2: snapshot-origin: Cannot get target device (-EBUSY) [ 187.411582][ T8617] device-mapper: ioctl: error adding target to table [ 187.817582][ T8620] tipc: Enabling of bearer rejected, failed to enable media [ 187.818015][ T8620] syzkaller0: entered promiscuous mode [ 187.818025][ T8620] syzkaller0: entered allmulticast mode [ 188.286529][ T8641] tipc: Enabling of bearer rejected, failed to enable media [ 189.011541][ T5794] Bluetooth: hci3: command 0x040f tx timeout [ 189.012303][ T5886] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 189.012320][ T5886] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 189.318656][ T8649] input: syz0 as /devices/virtual/input/input12 [ 190.372668][ T8665] device-mapper: ioctl: device has been removed from the dev hash table. [ 190.909066][ T8673] tipc: Enabling of bearer rejected, failed to enable media [ 190.909506][ T8673] syzkaller0: entered promiscuous mode [ 190.909516][ T8673] syzkaller0: entered allmulticast mode [ 191.722360][ T8680] tipc: Enabling of bearer rejected, failed to enable media [ 191.722706][ T8680] syzkaller0: entered promiscuous mode [ 191.722717][ T8680] syzkaller0: entered allmulticast mode [ 191.764554][ T8681] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 191.765177][ T8681] exFAT-fs (nbd2): unable to read boot sector [ 191.765185][ T8681] exFAT-fs (nbd2): failed to read boot sector [ 191.765189][ T8681] exFAT-fs (nbd2): failed to recognize exfat type [ 192.139088][ T8688] 0x000000000000-0x000000010000 : "" [ 192.152817][ T8688] ftl_cs: FTL header not found. [ 192.153012][ T8688] FAULT_INJECTION: forcing a failure. [ 192.153012][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 192.153038][ T8688] CPU: 2 UID: 0 PID: 8688 Comm: syz.3.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.153064][ T8688] Tainted: [L]=SOFTLOCKUP [ 192.153072][ T8688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.153082][ T8688] Call Trace: [ 192.153088][ T8688] [ 192.153096][ T8688] dump_stack_lvl+0x100/0x190 [ 192.153130][ T8688] should_fail_ex.cold+0x5/0xa [ 192.153159][ T8688] should_failslab+0xc2/0x120 [ 192.153183][ T8688] __kvmalloc_node_noprof+0x113/0x9b0 [ 192.153206][ T8688] ? sbitmap_init_node+0x1cc/0x720 [ 192.153239][ T8688] sbitmap_init_node+0x1cc/0x720 [ 192.153266][ T8688] ? __kmalloc_cache_node_noprof+0x271/0x710 [ 192.153290][ T8688] sbitmap_queue_init_node+0x40/0x4a0 [ 192.153323][ T8688] blk_mq_init_tags+0x184/0x300 [ 192.153347][ T8688] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 192.153382][ T8688] ? blk_mq_update_queue_map+0x227/0x3a0 [ 192.153406][ T8688] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 192.153444][ T8688] add_mtd_blktrans_dev+0x6a1/0x1520 [ 192.153479][ T8688] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 192.153521][ T8688] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 192.153549][ T8688] ? mtdblock_add_mtd+0x4a/0x270 [ 192.153588][ T8688] mtdblock_add_mtd+0x1cc/0x270 [ 192.153620][ T8688] blktrans_notify_add+0xa2/0xf0 [ 192.153648][ T8688] add_mtd_device+0xb6d/0x1820 [ 192.153676][ T8688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.153721][ T8688] ? __pfx_add_mtd_device+0x10/0x10 [ 192.153752][ T8688] mtd_add_partition+0x376/0x6a0 [ 192.153781][ T8688] ? __pfx_mtd_add_partition+0x10/0x10 [ 192.153806][ T8688] ? __might_fault+0xc5/0x140 [ 192.153830][ T8688] ? __might_fault+0xc5/0x140 [ 192.153866][ T8688] mtdchar_blkpg_ioctl+0x207/0x250 [ 192.153893][ T8688] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 192.153942][ T8688] mtdchar_compat_ioctl+0x3d6/0x440 [ 192.153971][ T8688] ? find_held_lock+0x2b/0x80 [ 192.153997][ T8688] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 192.154036][ T8688] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 192.154064][ T8688] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 192.154096][ T8688] __do_fast_syscall_32+0x14b/0x8c0 [ 192.154120][ T8688] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.154146][ T8688] do_fast_syscall_32+0x32/0x70 [ 192.154169][ T8688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.154191][ T8688] RIP: 0023:0xf73defbc [ 192.154208][ T8688] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.154224][ T8688] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 192.154240][ T8688] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 192.154253][ T8688] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.154263][ T8688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.154273][ T8688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.154283][ T8688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.154306][ T8688] [ 192.163202][ T8688] blk-mq: reduced tag depth (2 -> 1) [ 193.136978][ T8703] syzkaller0: entered promiscuous mode [ 193.136993][ T8703] syzkaller0: entered allmulticast mode [ 193.202245][ T8705] syzkaller0: entered promiscuous mode [ 193.202259][ T8705] syzkaller0: entered allmulticast mode [ 193.833054][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.833125][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.680191][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 194.680203][ T42] audit: type=1807 audit(1793890379.050:193): action=appraise func=FIRMWARE_CHECK res=1 [ 194.680667][ T42] audit: type=1807 audit(1793890379.050:194): action=appraise func=POLICY_CHECK res=1 [ 194.680927][ T8724] ima: policy update completed [ 194.681009][ T42] audit: type=1802 audit(1793890379.050:195): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.794" res=1 errno=0 [ 194.684016][ T8722] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.776302][ T8611] asus 0005:0B05:8502.0005: hidraw1: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 194.972171][ T8733] fido_id[8733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.738049][ T8753] netlink: 'syz.1.800': attribute type 17 has an invalid length. [ 196.738079][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 196.861750][ T8760] syzkaller0: entered promiscuous mode [ 196.861771][ T8760] syzkaller0: entered allmulticast mode [ 196.873209][ T8757] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 196.873394][ T8757] device-mapper: ioctl: error adding target to table [ 197.858635][ T8771] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.149603][ T8787] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 198.163651][ T8787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.210260][ T8787] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 198.217551][ T8787] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 198.217565][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.808'. [ 198.217746][ T8787] dummy0: entered promiscuous mode [ 198.218901][ T8787] bond3: (slave dummy0): Releasing backup interface [ 198.236575][ T8793] netlink: 'syz.2.810': attribute type 17 has an invalid length. [ 198.236592][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 198.304774][ T8797] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 198.304790][ T8797] device-mapper: ioctl: error adding target to table [ 200.818861][ T8832] device-mapper: ioctl: device has been removed from the dev hash table. [ 201.481945][ T8837] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 201.544494][ T8824] FAULT_INJECTION: forcing a failure. [ 201.544494][ T8824] name failslab, interval 1, probability 0, space 0, times 0 [ 201.544526][ T8824] CPU: 2 UID: 0 PID: 8824 Comm: syz.3.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.544555][ T8824] Tainted: [L]=SOFTLOCKUP [ 201.544562][ T8824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.544574][ T8824] Call Trace: [ 201.544581][ T8824] [ 201.544590][ T8824] dump_stack_lvl+0x100/0x190 [ 201.544624][ T8824] should_fail_ex.cold+0x5/0xa [ 201.544652][ T8824] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 201.544681][ T8824] should_failslab+0xc2/0x120 [ 201.544703][ T8824] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 201.544728][ T8824] __kmalloc_cache_noprof+0x91/0x6d0 [ 201.544754][ T8824] ? fib_rules_register+0x41d/0x510 [ 201.544777][ T8824] ? mr_table_alloc+0x61/0x3e0 [ 201.544805][ T8824] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 201.544846][ T8824] mr_table_alloc+0x61/0x3e0 [ 201.544870][ T8824] ? __pfx_ipmr_expire_process+0x10/0x10 [ 201.544900][ T8824] ip6mr_net_init+0x41c/0x5e0 [ 201.544930][ T8824] ? __pfx_ip6mr_net_init+0x10/0x10 [ 201.544954][ T8824] ? inet6_net_init+0x67c/0xa20 [ 201.544978][ T8824] ? ac6_proc_init+0x5f/0x80 [ 201.544999][ T8824] ? inet6_net_init+0x76d/0xa20 [ 201.545019][ T8824] ? __pfx_ip6mr_net_init+0x10/0x10 [ 201.545045][ T8824] ops_init+0x1e2/0x5f0 [ 201.545077][ T8824] setup_net+0x118/0x3a0 [ 201.545105][ T8824] ? __pfx_setup_net+0x10/0x10 [ 201.545135][ T8824] ? bpf_lsm_namespace_init+0x9/0x10 [ 201.545163][ T8824] copy_net_ns+0x340/0x7a0 [ 201.545185][ T8824] create_new_namespaces+0x3ea/0xac0 [ 201.545212][ T8824] unshare_nsproxy_namespaces+0xf6/0x210 [ 201.545236][ T8824] ksys_unshare+0x44f/0x980 [ 201.545271][ T8824] ? __pfx_ksys_unshare+0x10/0x10 [ 201.545296][ T8824] ? __might_fault+0xc5/0x140 [ 201.545329][ T8824] __ia32_sys_unshare+0x30/0x40 [ 201.545350][ T8824] __do_fast_syscall_32+0x14b/0x8c0 [ 201.545383][ T8824] do_fast_syscall_32+0x32/0x70 [ 201.545411][ T8824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.545434][ T8824] RIP: 0023:0xf73defbc [ 201.545454][ T8824] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 201.545472][ T8824] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 201.545492][ T8824] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 201.545505][ T8824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.545517][ T8824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.545529][ T8824] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.545541][ T8824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.545568][ T8824] [ 201.598699][ T8837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.600131][ T8841] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 201.600148][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.823'. [ 201.610946][ T8838] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 201.611249][ T8841] dummy0: entered promiscuous mode [ 201.625257][ T8841] bond3: (slave dummy0): Releasing backup interface [ 202.157104][ T8849] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 203.502097][ T8874] syzkaller0: entered promiscuous mode [ 203.502118][ T8874] syzkaller0: entered allmulticast mode [ 203.725471][ T858] libceph: connect (1)127.0.0.1:1 error -101 [ 203.725656][ T858] libceph: mon0 (1)127.0.0.1:1 connect error [ 203.730720][ T858] libceph: connect (1)127.0.0.1:1 error -101 [ 203.730864][ T858] libceph: mon0 (1)127.0.0.1:1 connect error [ 203.754300][ T8898] warning: `syz.3.835' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.981667][ T858] libceph: connect (1)127.0.0.1:1 error -101 [ 203.981811][ T858] libceph: mon0 (1)127.0.0.1:1 connect error [ 204.503964][ T858] libceph: connect (1)127.0.0.1:1 error -101 [ 204.504057][ T858] libceph: mon0 (1)127.0.0.1:1 connect error [ 204.761535][ T8890] ceph: No mds server is up or the cluster is laggy [ 206.302303][ T8927] syzkaller0: entered promiscuous mode [ 206.302318][ T8927] syzkaller0: entered allmulticast mode [ 206.538326][ T8934] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 206.540910][ T8934] exFAT-fs (nbd0): unable to read boot sector [ 206.540986][ T8934] exFAT-fs (nbd0): failed to read boot sector [ 206.541054][ T8934] exFAT-fs (nbd0): failed to recognize exfat type [ 206.629052][ T8933] syz.2.846: attempt to access beyond end of device [ 206.629052][ T8933] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 206.629098][ T8933] gfs2: error -5 reading superblock [ 207.543771][ T8937] device-mapper: ioctl: device has been removed from the dev hash table. [ 208.323714][ T8956] Invalid ELF header magic: != ELF [ 208.749240][ T8968] syzkaller0: entered promiscuous mode [ 208.749260][ T8968] syzkaller0: entered allmulticast mode [ 209.426006][ T8980] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.459286][ T8996] device-mapper: ioctl: device has been removed from the dev hash table. [ 210.612395][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 210.612411][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 210.612421][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb674 instead [ 210.612430][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb6ed instead [ 210.612439][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 210.612447][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 210.612455][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 210.612465][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 210.612520][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 210.612539][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 210.612547][ T9001] jffs2: Further such events for this erase block will not be printed [ 210.612740][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 210.612748][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 210.612756][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xb674 instead [ 210.612765][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb6ed instead [ 210.612772][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 210.612780][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 210.612787][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 210.612797][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 210.612812][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 210.612827][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 210.612835][ T9001] jffs2: Further such events for this erase block will not be printed [ 210.613024][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 210.613033][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 210.613041][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xb674 instead [ 210.613051][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb6ed instead [ 210.613075][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 210.613083][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 210.613092][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb674 instead [ 210.613102][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb6ed instead [ 210.613125][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 210.613134][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 210.613143][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xb674 instead [ 210.613153][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb6ed instead [ 210.613175][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 210.613183][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 210.613191][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xb674 instead [ 210.613200][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb6ed instead [ 210.613221][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 210.613229][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 210.613237][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xb674 instead [ 210.613246][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb6ed instead [ 210.613350][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 210.613360][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 210.613370][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb674 instead [ 210.613379][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb6ed instead [ 210.613402][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 210.613411][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 210.613420][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xb674 instead [ 210.613430][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb6ed instead [ 210.613452][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 210.613460][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 210.613468][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xb674 instead [ 210.613477][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb6ed instead [ 210.613498][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 210.613506][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 210.613514][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xb674 instead [ 210.613522][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb6ed instead [ 210.613543][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 210.613551][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 210.613559][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb674 instead [ 210.613568][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb6ed instead [ 210.613589][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 210.613597][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 210.613605][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xb674 instead [ 210.613614][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb6ed instead [ 210.613635][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 210.613643][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 210.613651][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xb674 instead [ 210.613659][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb6ed instead [ 210.613680][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 210.613688][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 210.613696][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xb674 instead [ 210.613705][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb6ed instead [ 210.613726][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 210.613734][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 210.613742][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xb674 instead [ 210.613751][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb6ed instead [ 210.613788][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 210.613797][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 210.613807][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xb674 instead [ 210.613816][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb6ed instead [ 210.613839][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 210.613848][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 210.613857][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xb674 instead [ 210.613879][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb6ed instead [ 210.613902][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 210.613911][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 210.613920][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xb674 instead [ 210.613930][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb6ed instead [ 210.613953][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 210.613962][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 210.613971][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xb674 instead [ 210.613981][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb6ed instead [ 210.614004][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 210.614019][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 210.614028][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xb674 instead [ 210.614038][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb6ed instead [ 210.614062][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 210.614071][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 210.614080][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xb674 instead [ 210.614090][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb6ed instead [ 210.614113][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 210.614122][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 210.614131][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xb674 instead [ 210.614141][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb6ed instead [ 210.614164][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 210.614172][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 210.614180][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xb674 instead [ 210.614189][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb6ed instead [ 210.614218][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 210.614226][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 210.614234][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xb674 instead [ 210.614243][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb6ed instead [ 210.614265][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 210.614273][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 210.614281][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xb674 instead [ 210.614370][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb6ed instead [ 210.614396][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 210.614405][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 210.614414][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xb674 instead [ 210.614424][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb6ed instead [ 210.614447][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 210.614456][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 210.614465][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xb674 instead [ 210.614475][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb6ed instead [ 210.614501][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 210.614509][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 210.614517][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xb674 instead [ 210.614526][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb6ed instead [ 210.614547][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 210.614555][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 210.614563][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xb674 instead [ 210.614572][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb6ed instead [ 210.614593][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 210.614602][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 210.614611][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xb674 instead [ 210.614621][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb6ed instead [ 210.614722][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 210.614734][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 210.614744][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xb674 instead [ 210.614754][ T9001] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb6ed instead [ 210.614771][ T9001] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 210.614776][ T9001] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 210.810445][ T9006] syzkaller0: entered promiscuous mode [ 210.810458][ T9006] syzkaller0: entered allmulticast mode [ 211.084660][ T9004] xt_l2tp: missing protocol rule (udp|l2tpip) [ 213.074437][ T9024] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.125153][ T9031] device-mapper: table: 248:2: snapshot-origin: Cannot get target device (-EBUSY) [ 213.125169][ T9031] device-mapper: ioctl: error adding target to table [ 213.605350][ T9039] syzkaller0: entered promiscuous mode [ 213.605371][ T9039] syzkaller0: entered allmulticast mode [ 216.629255][ T9086] rxe_eth0 speed is unknown, defaulting to 1000 [ 216.655145][ T42] audit: type=1326 audit(1793890401.030:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.2.887" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741efbc code=0x0 [ 218.342199][ T9104] syzkaller0: entered promiscuous mode [ 218.342214][ T9104] syzkaller0: entered allmulticast mode [ 218.530110][ T9108] syz.3.894: attempt to access beyond end of device [ 218.530110][ T9108] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 218.530131][ T9108] gfs2: error -5 reading superblock [ 220.140277][ T9132] syzkaller0: entered promiscuous mode [ 220.140298][ T9132] syzkaller0: entered allmulticast mode [ 220.449196][ T9137] syzkaller0: entered promiscuous mode [ 220.449211][ T9137] syzkaller0: entered allmulticast mode [ 221.534509][ T9142] rxe_eth0 speed is unknown, defaulting to 1000 [ 224.010915][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 224.691483][ T1597] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 224.841965][ T1597] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 224.842778][ T1597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.842789][ T1597] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.845173][ T1597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 224.845186][ T1597] usb 6-1: Product: syz [ 224.845192][ T1597] usb 6-1: Manufacturer: syz [ 224.861042][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 224.917230][ T9186] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 224.917255][ T9186] device-mapper: ioctl: error adding target to table [ 225.241215][ T29] usb 6-1: USB disconnect, device number 5 [ 225.593029][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 225.913962][ T9208] comedi comedi0: Minor 47 could not be opened [ 226.396555][ T9221] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.227141][ T9225] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.689277][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 227.930885][ T9247] tipc: Enabled bearer , priority 0 [ 227.936820][ T9247] tipc: Resetting bearer [ 227.951734][ T9246] tipc: Disabling bearer [ 228.445369][ T9258] tipc: Enabled bearer , priority 0 [ 228.445860][ T9258] syzkaller0: entered promiscuous mode [ 228.445872][ T9258] syzkaller0: entered allmulticast mode [ 228.448429][ T9258] tipc: Resetting bearer [ 228.449330][ T9257] tipc: Resetting bearer [ 228.455920][ T9257] tipc: Disabling bearer [ 229.174844][ T9271] netlink: 52 bytes leftover after parsing attributes in process `syz.1.943'. [ 229.382733][ T9277] tipc: Enabled bearer , priority 0 [ 229.395930][ T9276] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.429224][ T9277] tipc: Resetting bearer [ 229.896596][ T9275] tipc: Disabling bearer [ 230.274477][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 230.274494][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 230.274504][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb674 instead [ 230.274515][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb6ed instead [ 230.274523][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 230.274532][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 230.274540][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 230.274551][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 230.274568][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 230.274584][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 230.274592][ T9285] jffs2: Further such events for this erase block will not be printed [ 230.274778][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 230.274786][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 230.274794][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xb674 instead [ 230.274804][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb6ed instead [ 230.274811][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 230.274818][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 230.274826][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 230.274835][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 230.274850][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 230.274865][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 230.274873][ T9285] jffs2: Further such events for this erase block will not be printed [ 230.275162][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 230.275178][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 230.275193][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xb674 instead [ 230.275209][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb6ed instead [ 230.275248][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 230.275261][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 230.275275][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb674 instead [ 230.275290][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb6ed instead [ 230.275327][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 230.275339][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 230.275353][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xb674 instead [ 230.275368][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb6ed instead [ 230.275404][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 230.275416][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 230.275429][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xb674 instead [ 230.275444][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb6ed instead [ 230.275481][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 230.275494][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 230.275507][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xb674 instead [ 230.275522][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb6ed instead [ 230.275558][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 230.275571][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 230.275584][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb674 instead [ 230.275599][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb6ed instead [ 230.275635][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 230.275648][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 230.275661][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xb674 instead [ 230.275676][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb6ed instead [ 230.275741][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 230.275755][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 230.275769][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xb674 instead [ 230.275784][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb6ed instead [ 230.275822][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 230.275836][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 230.275850][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xb674 instead [ 230.275864][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb6ed instead [ 230.275901][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 230.275914][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 230.275932][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb674 instead [ 230.276075][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb6ed instead [ 230.276117][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 230.276131][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 230.276146][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xb674 instead [ 230.276162][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb6ed instead [ 230.276199][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 230.276212][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 230.276225][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xb674 instead [ 230.276240][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb6ed instead [ 230.276274][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 230.276287][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 230.276299][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xb674 instead [ 230.276314][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb6ed instead [ 230.276350][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 230.276362][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 230.276375][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xb674 instead [ 230.276389][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb6ed instead [ 230.276427][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 230.276440][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 230.276454][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xb674 instead [ 230.276469][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb6ed instead [ 230.276506][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 230.276519][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 230.276532][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xb674 instead [ 230.276546][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb6ed instead [ 230.276582][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 230.276595][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 230.276608][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xb674 instead [ 230.276623][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb6ed instead [ 230.276660][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 230.276673][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 230.276686][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xb674 instead [ 230.276701][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb6ed instead [ 230.276738][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 230.276750][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 230.276764][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xb674 instead [ 230.276779][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb6ed instead [ 230.276814][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 230.276827][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 230.276841][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xb674 instead [ 230.276856][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb6ed instead [ 230.276893][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 230.276905][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 230.276918][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xb674 instead [ 230.276940][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb6ed instead [ 230.276979][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 230.276992][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 230.277005][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xb674 instead [ 230.277020][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb6ed instead [ 230.277097][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 230.277111][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 230.277124][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xb674 instead [ 230.277138][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb6ed instead [ 230.277174][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 230.277206][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 230.277220][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xb674 instead [ 230.277235][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb6ed instead [ 230.277273][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 230.277285][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 230.277299][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xb674 instead [ 230.277314][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb6ed instead [ 230.277351][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 230.277363][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 230.277376][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xb674 instead [ 230.277391][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb6ed instead [ 230.277428][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 230.277441][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 230.277455][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xb674 instead [ 230.277470][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb6ed instead [ 230.277506][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 230.277518][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 230.277531][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xb674 instead [ 230.277546][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb6ed instead [ 230.277582][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 230.277595][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 230.277609][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xb674 instead [ 230.277624][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb6ed instead [ 230.277659][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 230.277671][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 230.277695][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xb674 instead [ 230.277711][ T9285] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb6ed instead [ 230.277739][ T9285] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 230.277746][ T9285] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 230.425548][ T9287] tipc: Enabled bearer , priority 0 [ 230.426100][ T9287] syzkaller0: entered promiscuous mode [ 230.426116][ T9287] syzkaller0: entered allmulticast mode [ 230.448867][ T9287] tipc: Resetting bearer [ 230.457851][ T9286] tipc: Resetting bearer [ 230.480643][ T9286] tipc: Disabling bearer [ 230.602825][ T9291] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 230.661576][ T9292] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 231.006909][ T9296] device-mapper: ioctl: device has been removed from the dev hash table. [ 231.292729][ T9303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.952'. [ 231.471513][ T1366] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 231.539191][ T9306] device-mapper: ioctl: device has been removed from the dev hash table. [ 231.631492][ T1366] usb 5-1: Using ep0 maxpacket: 32 [ 231.631988][ T1366] usb 5-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 231.632823][ T1366] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.632835][ T1366] usb 5-1: config 0 has no interface number 0 [ 231.632852][ T1366] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 231.632861][ T1366] usb 5-1: config 0 interface 1 has no altsetting 0 [ 231.636802][ T1366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.636816][ T1366] usb 5-1: Product: syz [ 231.636823][ T1366] usb 5-1: Manufacturer: syz [ 231.636830][ T1366] usb 5-1: SerialNumber: syz [ 231.640518][ T1366] usb 5-1: config 0 descriptor?? [ 231.809738][ T9314] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.851965][ T1366] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 231.851984][ T1366] cx231xx 5-1:0.1: Not found matching IAD interface [ 231.854098][ T1366] usb 5-1: USB disconnect, device number 9 [ 232.350522][ T9325] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 232.350547][ T9325] device-mapper: ioctl: error adding target to table [ 232.615532][ T9334] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.560541][ T9352] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.995832][ T9359] syzkaller0: entered promiscuous mode [ 234.995847][ T9359] syzkaller0: entered allmulticast mode [ 234.999160][ T9359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.136277][ T9362] device-mapper: ioctl: device has been removed from the dev hash table. [ 235.151964][ T9366] vlan2: entered promiscuous mode [ 235.151984][ T9366] hsr0: entered promiscuous mode [ 235.217623][ T9372] netlink: 52 bytes leftover after parsing attributes in process `syz.1.972'. [ 235.232228][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 235.235748][ T9366] hsr_slave_0: left promiscuous mode [ 235.253310][ T9366] hsr_slave_1: left promiscuous mode [ 235.494352][ T9379] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.433878][ T9388] rxe_eth0 speed is unknown, defaulting to 1000 [ 237.195093][ T9405] netlink: 52 bytes leftover after parsing attributes in process `syz.0.981'. [ 237.276909][ T9407] tipc: Enabled bearer , priority 0 [ 237.279796][ T9407] syzkaller0: entered promiscuous mode [ 237.279814][ T9407] syzkaller0: entered allmulticast mode [ 237.290665][ T9407] tipc: Resetting bearer [ 237.298591][ T9406] tipc: Resetting bearer [ 237.320529][ T9406] tipc: Disabling bearer [ 237.685728][ T9422] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.034190][ T9441] tipc: Enabled bearer , priority 0 [ 239.039357][ T9441] syzkaller0: entered promiscuous mode [ 239.039376][ T9441] syzkaller0: entered allmulticast mode [ 239.065252][ T9441] tipc: Resetting bearer [ 239.079325][ T9440] tipc: Resetting bearer [ 239.101790][ T9440] tipc: Disabling bearer [ 239.313685][ T9448] device-mapper: table: 248:0: snapshot-origin: Cannot get target device (-EBUSY) [ 239.313701][ T9448] device-mapper: ioctl: error adding target to table [ 239.327677][ T9447] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.554436][ T9457] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.638333][ T9478] tipc: Enabled bearer , priority 0 [ 240.744294][ T9475] tipc: Disabling bearer [ 242.171352][ T9484] vlan2: entered promiscuous mode [ 242.171495][ T9484] hsr0: entered promiscuous mode [ 242.189729][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 242.189914][ T9484] hsr_slave_0: left promiscuous mode [ 242.190673][ T9484] hsr_slave_1: left promiscuous mode [ 242.330542][ T9489] tcf_pedit_act: 7 callbacks suppressed [ 242.330555][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330561][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330566][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330571][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330576][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330581][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330586][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330591][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330596][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330601][ T9489] tc action pedit unable to extract header offset for header type (0x5) [ 242.330611][ T9489] 0: reclassify loop, rule prio 0, protocol 800 [ 242.453227][ T42] audit: type=1326 audit(1793890426.830:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.453417][ T42] audit: type=1326 audit(1793890426.830:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.454636][ T42] audit: type=1326 audit(1793890426.830:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.454676][ T42] audit: type=1326 audit(1793890426.830:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.454709][ T42] audit: type=1326 audit(1793890426.830:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.455058][ T42] audit: type=1326 audit(1793890426.830:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.456232][ T42] audit: type=1326 audit(1793890426.830:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.457517][ T42] audit: type=1326 audit(1793890426.830:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.458231][ T42] audit: type=1326 audit(1793890426.830:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.458266][ T42] audit: type=1326 audit(1793890426.830:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.1006" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 242.624974][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 242.654773][ T9495] FAULT_INJECTION: forcing a failure. [ 242.654773][ T9495] name failslab, interval 1, probability 0, space 0, times 0 [ 242.654794][ T9495] CPU: 3 UID: 0 PID: 9495 Comm: syz.1.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.654810][ T9495] Tainted: [L]=SOFTLOCKUP [ 242.654815][ T9495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.654821][ T9495] Call Trace: [ 242.654826][ T9495] [ 242.654830][ T9495] dump_stack_lvl+0x100/0x190 [ 242.654851][ T9495] should_fail_ex.cold+0x5/0xa [ 242.654867][ T9495] should_failslab+0xc2/0x120 [ 242.654881][ T9495] kmem_cache_alloc_noprof+0x92/0x6a0 [ 242.654898][ T9495] ? __proc_create+0xc1/0x8f0 [ 242.654908][ T9495] ? __proc_create+0x247/0x8f0 [ 242.654919][ T9495] __proc_create+0x247/0x8f0 [ 242.654930][ T9495] ? __pfx___proc_create+0x10/0x10 [ 242.654941][ T9495] ? _raw_write_unlock+0x28/0x50 [ 242.654954][ T9495] ? proc_register+0x56d/0x910 [ 242.654966][ T9495] proc_create_reg+0x75/0x170 [ 242.654977][ T9495] ? __pfx_rt6_stats_seq_show+0x10/0x10 [ 242.654996][ T9495] proc_create_net_single+0x86/0x180 [ 242.655007][ T9495] ? __pfx_proc_create_net_single+0x10/0x10 [ 242.655019][ T9495] ? fib_default_rule_add+0x341/0x420 [ 242.655033][ T9495] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 242.655048][ T9495] ip6_route_net_init_late+0x9c/0x110 [ 242.655064][ T9495] ops_init+0x1e2/0x5f0 [ 242.655082][ T9495] setup_net+0x118/0x3a0 [ 242.655097][ T9495] ? __pfx_setup_net+0x10/0x10 [ 242.655113][ T9495] ? bpf_lsm_namespace_init+0x9/0x10 [ 242.655129][ T9495] copy_net_ns+0x340/0x7a0 [ 242.655142][ T9495] create_new_namespaces+0x3ea/0xac0 [ 242.655157][ T9495] unshare_nsproxy_namespaces+0xf6/0x210 [ 242.655169][ T9495] ksys_unshare+0x44f/0x980 [ 242.655182][ T9495] ? __pfx_ksys_unshare+0x10/0x10 [ 242.655194][ T9495] ? __might_fault+0xc5/0x140 [ 242.655219][ T9495] __ia32_sys_unshare+0x30/0x40 [ 242.655231][ T9495] __do_fast_syscall_32+0x14b/0x8c0 [ 242.655249][ T9495] do_fast_syscall_32+0x32/0x70 [ 242.655264][ T9495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.655278][ T9495] RIP: 0023:0xf7f87fbc [ 242.655288][ T9495] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 242.655298][ T9495] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 242.655309][ T9495] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 242.655316][ T9495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.655321][ T9495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.655327][ T9495] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.655333][ T9495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.655346][ T9495] [ 242.688100][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1009'. [ 242.851976][ T9506] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 242.908842][ T9507] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 244.190420][ T9517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 244.190449][ T9517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 244.191807][ T9517] vhci_hcd vhci_hcd.0: Device attached [ 244.394753][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 244.411506][ T5879] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 244.472280][ T29] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 244.792411][ T5879] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.793488][ T9518] vhci_hcd: connection reset by peer [ 244.793798][ T5879] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.793825][ T5879] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 244.793846][ T5879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 244.797535][ T5865] vhci_hcd vhci_hcd.0: stop threads [ 244.797982][ T5865] vhci_hcd vhci_hcd.0: release socket [ 244.798466][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.798486][ T5879] usb 7-1: Product: syz [ 244.798500][ T5879] usb 7-1: Manufacturer: syz [ 244.798512][ T5879] usb 7-1: SerialNumber: syz [ 244.800178][ T5865] vhci_hcd vhci_hcd.0: disconnect device [ 244.802100][ T5879] usb 7-1: config 0 descriptor?? [ 244.803510][ T9511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.809628][ T5879] usb 7-1: selecting invalid altsetting 0 [ 245.386791][ T9527] tipc: Enabled bearer , priority 0 [ 245.388650][ T9527] syzkaller0: entered promiscuous mode [ 245.388662][ T9527] syzkaller0: entered allmulticast mode [ 245.424540][ T9527] tipc: Resetting bearer [ 245.435941][ T9526] tipc: Resetting bearer [ 245.515384][ T9526] tipc: Disabling bearer [ 246.046756][ T57] usb 7-1: USB disconnect, device number 5 [ 246.594534][ T9536] process 'syz.0.1028' launched '/dev/fd/3' with NULL argv: empty string added [ 246.852728][ T9548] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 246.903312][ T9549] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 247.945793][ T9553] tipc: Enabling of bearer rejected, failed to enable media [ 248.933541][ T9567] tipc: Enabled bearer , priority 0 [ 248.933874][ T9567] syzkaller0: entered promiscuous mode [ 248.933884][ T9567] syzkaller0: entered allmulticast mode [ 248.952494][ T9567] tipc: Resetting bearer [ 248.955767][ T9566] tipc: Resetting bearer [ 248.987301][ T9566] tipc: Disabling bearer [ 249.554456][ T9571] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.653780][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 250.142832][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 250.392763][ T9593] syzkaller0: entered promiscuous mode [ 250.392786][ T9593] syzkaller0: entered allmulticast mode [ 250.400710][ T9593] tipc: Enabled bearer , priority 0 [ 250.405016][ T9593] tipc: Resetting bearer [ 250.409320][ T9592] tipc: Resetting bearer [ 250.423757][ T9592] tipc: Disabling bearer [ 250.795337][ T9599] tipc: Enabled bearer , priority 0 [ 250.796526][ T9599] syzkaller0: entered promiscuous mode [ 250.796539][ T9599] syzkaller0: entered allmulticast mode [ 250.803885][ T9599] tipc: Resetting bearer [ 250.806579][ T9598] tipc: Resetting bearer [ 250.813927][ T9598] tipc: Disabling bearer [ 250.960450][ T9601] 0x0000000000ec-0x0000000000f2 : "" [ 250.965872][ T9601] ftl_cs: FTL header corrupt! [ 251.258744][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.258767][ T9609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.259626][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.259642][ T9609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.305604][ T9613] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 251.308354][ T9613] exFAT-fs (nbd1): unable to read boot sector [ 251.308391][ T9613] exFAT-fs (nbd1): failed to read boot sector [ 251.308397][ T9613] exFAT-fs (nbd1): failed to recognize exfat type [ 252.221045][ T9619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.221589][ T9619] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 254.717364][ T9635] tipc: Enabled bearer , priority 0 [ 254.719144][ T9635] syzkaller0: entered promiscuous mode [ 254.719162][ T9635] syzkaller0: entered allmulticast mode [ 254.733162][ T9635] tipc: Resetting bearer [ 254.735497][ T9634] tipc: Resetting bearer [ 254.745195][ T9634] tipc: Disabling bearer [ 254.821671][ T9637] 0x0000000000ec-0x0000000000f2 : "" [ 254.826871][ T9637] ftl_cs: FTL header corrupt! [ 255.015988][ T9644] rxe_eth0 speed is unknown, defaulting to 1000 [ 255.252593][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.252625][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.436638][ T9652] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 255.815835][ T9656] syzkaller0: entered promiscuous mode [ 255.815850][ T9656] syzkaller0: entered allmulticast mode [ 256.388892][ T9665] lo speed is unknown, defaulting to 1000 [ 256.388928][ T9665] lo speed is unknown, defaulting to 1000 [ 256.389710][ T9665] lo speed is unknown, defaulting to 1000 [ 256.390180][ T9665] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 256.390198][ T9665] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 256.390220][ T9665] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 256.409523][ T9665] lo speed is unknown, defaulting to 1000 [ 256.410646][ T9665] lo speed is unknown, defaulting to 1000 [ 256.411916][ T9665] lo speed is unknown, defaulting to 1000 [ 256.412882][ T9665] lo speed is unknown, defaulting to 1000 [ 256.466689][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 257.556069][ T9697] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.678615][ T9697] lo speed is unknown, defaulting to 1000 [ 258.042461][ T9703] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 258.043109][ T9705] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 258.836448][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 258.837634][ T9718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1070'. [ 258.837647][ T9718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1070'. [ 259.340252][ T9727] Console: switching to colour dummy device 80x25 [ 259.493284][ T9731] rxe_eth0 speed is unknown, defaulting to 1000 [ 260.249956][ T9729] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 260.275726][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 260.275896][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 260.287130][ T9729] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 260.288141][ T9729] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 260.320353][ T9729] pci 0000:00:01.0: Adding to iommu group 1 [ 260.328872][ T9729] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 260.328894][ T9729] pci 0000:00:01.0: vgaarb: bridge control possible [ 260.328907][ T9729] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 260.367686][ T9731] lo speed is unknown, defaulting to 1000 [ 260.433430][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 260.433582][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 260.435056][ T9729] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 260.460968][ T9729] [drm] Found bochs VGA, ID 0xb0c5. [ 260.460985][ T9729] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 260.466864][ T9729] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 260.951512][ T8495] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 261.132298][ T8495] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 261.133442][ T8495] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.133478][ T8495] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.363952][ T8495] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 261.372017][ T8495] wwan wwan0: port wwan0qmi0 attached [ 261.552845][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.553158][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.596195][ T9758] tipc: Enabled bearer , priority 0 [ 261.596705][ T9758] syzkaller0: entered promiscuous mode [ 261.596720][ T9758] syzkaller0: entered allmulticast mode [ 261.601884][ T9758] tipc: Resetting bearer [ 261.605053][ T9757] tipc: Resetting bearer [ 261.622086][ T9757] tipc: Disabling bearer [ 261.664127][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.664175][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.664660][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.664670][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.664855][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.664864][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.665122][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.665133][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.665317][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.665325][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.665522][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.665531][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.665749][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.665759][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.665982][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.665991][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.666186][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.666195][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.666389][ C1] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 261.666398][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 261.862193][ T9771] 0x000000000000-0x000000010000 : "" [ 262.627273][ T9771] ftl_cs: FTL header not found. [ 262.630292][ T8495] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, f6:10:1e:2f:e9:66 [ 262.631680][ C1] qmi_wwan 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 262.631696][ T8495] usb 7-1: USB disconnect, device number 6 [ 262.632934][ T8495] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 263.088922][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 263.088934][ T42] audit: type=1326 audit(1793890448.462:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.088960][ T42] audit: type=1326 audit(1793890448.462:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.090412][ T42] audit: type=1326 audit(1793890448.462:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.090644][ T42] audit: type=1326 audit(1793890448.462:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.090680][ T42] audit: type=1326 audit(1793890448.462:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.101530][ T42] audit: type=1326 audit(1793890448.472:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.101557][ T42] audit: type=1326 audit(1793890448.482:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.103255][ T42] audit: type=1326 audit(1793890448.482:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.103279][ T42] audit: type=1326 audit(1793890448.482:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.103507][ T42] audit: type=1326 audit(1793890448.482:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.0.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 263.177344][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.178399][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.485235][ T9784] syz_tun (unregistering): left allmulticast mode [ 263.496392][ T8495] wwan wwan0: port wwan0qmi0 disconnected [ 263.515956][ T9780] rxe_eth0 speed is unknown, defaulting to 1000 [ 263.607404][ T9774] rxe_eth0 speed is unknown, defaulting to 1000 [ 263.611337][ T9780] lo speed is unknown, defaulting to 1000 [ 263.730603][ T9774] lo speed is unknown, defaulting to 1000 [ 264.693136][ T9798] 0x0000000000ec-0x0000000000f2 : "" [ 264.701047][ T9798] ftl_cs: FTL header corrupt! [ 265.160055][ T9803] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 265.211203][ T9804] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 265.636150][ T9806] tipc: Enabled bearer , priority 0 [ 265.637360][ T9806] syzkaller0: entered promiscuous mode [ 265.637373][ T9806] syzkaller0: entered allmulticast mode [ 265.643040][ T9806] tipc: Resetting bearer [ 265.651044][ T9805] tipc: Resetting bearer [ 265.670371][ T9805] tipc: Disabling bearer [ 265.901223][ T9813] tipc: Enabled bearer , priority 0 [ 265.903474][ T9813] syzkaller0: entered promiscuous mode [ 265.903544][ T9813] syzkaller0: entered allmulticast mode [ 265.919819][ T9813] tipc: Resetting bearer [ 265.924775][ T9811] tipc: Resetting bearer [ 265.941434][ T9811] tipc: Disabling bearer [ 266.700931][ T9825] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.783267][ T9825] lo speed is unknown, defaulting to 1000 [ 266.821307][ T9831] rxe_eth0 speed is unknown, defaulting to 1000 [ 267.333725][ T9831] lo speed is unknown, defaulting to 1000 [ 268.316389][ T9848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 268.316417][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.317685][ T9848] vhci_hcd vhci_hcd.0: Device attached [ 268.685022][ T5879] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 268.883414][ T5879] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 269.475774][ T9849] vhci_hcd: connection reset by peer [ 269.482573][ T13] vhci_hcd vhci_hcd.1: stop threads [ 269.482630][ T13] vhci_hcd vhci_hcd.1: release socket [ 269.482783][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 270.402344][ T9854] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.278092][ T9854] lo speed is unknown, defaulting to 1000 [ 271.732497][ T9871] siw: device registration error -23 [ 271.756422][ T9870] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.794390][ T9877] tipc: Enabled bearer , priority 0 [ 271.794728][ T9877] syzkaller0: entered promiscuous mode [ 271.794739][ T9877] syzkaller0: entered allmulticast mode [ 271.799487][ T9877] tipc: Resetting bearer [ 271.800311][ T9875] tipc: Resetting bearer [ 271.817478][ T9875] tipc: Disabling bearer [ 271.859684][ T9870] lo speed is unknown, defaulting to 1000 [ 271.988599][ T9874] capability: warning: `syz.0.1110' uses deprecated v2 capabilities in a way that may be insecure [ 272.162510][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 273.159606][ T9899] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 273.159632][ T9899] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.161245][ T9899] vhci_hcd vhci_hcd.0: Device attached [ 273.981804][ T9902] vhci_hcd: connection closed [ 273.985358][ T5865] vhci_hcd vhci_hcd.2: stop threads [ 273.985374][ T5865] vhci_hcd vhci_hcd.2: release socket [ 273.985385][ T5865] vhci_hcd vhci_hcd.2: disconnect device [ 273.988234][ T9910] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.032478][ T5879] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 274.183136][ T9910] lo speed is unknown, defaulting to 1000 [ 274.595230][ T9925] siw: device registration error -23 [ 274.598874][ T9923] tipc: Enabled bearer , priority 0 [ 274.601108][ T9923] syzkaller0: entered promiscuous mode [ 274.601126][ T9923] syzkaller0: entered allmulticast mode [ 274.622066][ T9922] tipc: Resetting bearer [ 274.650643][ T9922] tipc: Disabling bearer [ 274.741087][ T9928] FAULT_INJECTION: forcing a failure. [ 274.741087][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 274.741140][ T9928] CPU: 2 UID: 0 PID: 9928 Comm: syz.1.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.741168][ T9928] Tainted: [L]=SOFTLOCKUP [ 274.741176][ T9928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.741187][ T9928] Call Trace: [ 274.741194][ T9928] [ 274.741203][ T9928] dump_stack_lvl+0x100/0x190 [ 274.741304][ T9928] should_fail_ex.cold+0x5/0xa [ 274.741343][ T9928] should_failslab+0xc2/0x120 [ 274.741403][ T9928] __kmalloc_cache_noprof+0x91/0x6d0 [ 274.741432][ T9928] ? __pfx___mutex_lock+0x10/0x10 [ 274.741486][ T9928] ? ring_buffer_read_start+0xf4/0x530 [ 274.741512][ T9928] ring_buffer_read_start+0xf4/0x530 [ 274.741531][ T9928] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 274.741550][ T9928] ? lockdep_init_map_type+0x5c/0x250 [ 274.741574][ T9928] ? ring_buffer_overruns+0x14e/0x1a0 [ 274.741604][ T9928] __tracing_open+0x82e/0xa80 [ 274.741627][ T9928] tracing_open+0x26b/0x460 [ 274.741649][ T9928] do_dentry_open+0x674/0x1470 [ 274.741669][ T9928] ? __pfx_tracing_open+0x10/0x10 [ 274.741692][ T9928] vfs_open_consume+0xcc/0x460 [ 274.741721][ T9928] path_openat+0x1547/0x23f0 [ 274.741747][ T9928] ? __pfx_path_openat+0x10/0x10 [ 274.741777][ T9928] do_file_open+0x20e/0x430 [ 274.741801][ T9928] ? __pfx_do_file_open+0x10/0x10 [ 274.741839][ T9928] ? _raw_spin_unlock+0x28/0x50 [ 274.741860][ T9928] ? alloc_fd+0x471/0x7a0 [ 274.741889][ T9928] do_sys_openat2+0x163/0x1d0 [ 274.741916][ T9928] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.741951][ T9928] __ia32_compat_sys_openat+0x12d/0x210 [ 274.741976][ T9928] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 274.742012][ T9928] __do_fast_syscall_32+0x14b/0x8c0 [ 274.742049][ T9928] do_fast_syscall_32+0x32/0x70 [ 274.742077][ T9928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.742100][ T9928] RIP: 0023:0xf7f87fbc [ 274.742117][ T9928] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 274.742134][ T9928] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 274.742169][ T9928] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 274.742182][ T9928] RDX: 0000000000048342 RSI: 00000000000001a1 RDI: 0000000000000000 [ 274.742194][ T9928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.742207][ T9928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 274.742219][ T9928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.742246][ T9928] [ 275.174623][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 275.174637][ T42] audit: type=1326 audit(1793890460.552:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.174663][ T42] audit: type=1326 audit(1793890460.552:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.177245][ T42] audit: type=1326 audit(1793890460.552:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.177270][ T42] audit: type=1326 audit(1793890460.552:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.177290][ T42] audit: type=1326 audit(1793890460.552:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.177581][ T42] audit: type=1326 audit(1793890460.552:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.177685][ T42] audit: type=1326 audit(1793890460.552:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.180675][ T42] audit: type=1326 audit(1793890460.552:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.180854][ T42] audit: type=1326 audit(1793890460.552:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.180891][ T42] audit: type=1326 audit(1793890460.552:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 275.353196][ T9940] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 275.354425][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1128'. [ 275.355579][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 276.345444][ T9962] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 276.345472][ T9962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.345835][ T9962] vhci_hcd vhci_hcd.0: Device attached [ 276.580135][ T9983] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 276.603047][ T9945] cgroup: fork rejected by pids controller in /syz1 [ 276.630308][ T9978] ip6erspan0: entered allmulticast mode [ 276.637922][ T9978] bond3: (slave ip6erspan0): making interface the new active one [ 276.639325][ T9978] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 276.712379][ T9990] siw: device registration error -23 [ 276.714240][ T9988] tipc: Enabled bearer , priority 0 [ 276.715281][ T9988] syzkaller0: entered promiscuous mode [ 276.715298][ T9988] syzkaller0: entered allmulticast mode [ 276.721105][ T9987] tipc: Resetting bearer [ 276.748633][ T9987] tipc: Disabling bearer [ 276.959573][ T9975] vhci_hcd: connection closed [ 276.965781][ T12] vhci_hcd vhci_hcd.3: stop threads [ 276.965858][ T12] vhci_hcd vhci_hcd.3: release socket [ 276.965958][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 277.337912][ T9996] rxe_eth0 speed is unknown, defaulting to 1000 [ 277.485623][ T9996] lo speed is unknown, defaulting to 1000 [ 279.291807][T10026] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 280.582401][T10035] tipc: Enabled bearer , priority 0 [ 280.585108][T10035] syzkaller0: entered promiscuous mode [ 280.585120][T10035] syzkaller0: entered allmulticast mode [ 280.588702][T10034] tipc: Resetting bearer [ 280.622774][T10034] tipc: Disabling bearer [ 281.459713][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 281.459789][T10066] tipc: Resetting bearer [ 281.483573][T10066] tipc: Disabling bearer [ 282.448619][T10095] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 283.811573][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 283.971873][ T9] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 283.972351][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.972365][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.972386][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 283.972601][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.999565][ C0] ------------[ cut here ]------------ [ 283.999574][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 283.999582][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: kworker/0:0/9 [ 284.006619][ C0] Modules linked in: [ 284.008053][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.011414][ C0] Tainted: [L]=SOFTLOCKUP [ 284.012796][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.015928][ C0] Workqueue: usb_hub_wq hub_event [ 284.017506][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 284.019180][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea b3 86 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b9 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 ab fb 8c [ 284.025101][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010046 [ 284.026987][ C0] RAX: dffffc0000000000 RBX: ffff888022fd00e0 RCX: ffffffff8cfbf000 [ 284.029420][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbb900 RDI: ffffffff92785cd0 [ 284.031892][ C0] RBP: 0000000000000081 R08: ffffffff8cfbabe0 R09: 0000000000000000 [ 284.034361][ C0] R10: ffffffff926ad95f R11: 0000000000000001 R12: ffffffff8cfbabe0 [ 284.036824][ C0] R13: 0000000000000000 R14: ffff888022fd00e0 R15: ffff88802fe65720 [ 284.039264][ C0] FS: 0000000000000000(0000) GS:ffff88809527e000(0000) knlGS:0000000000000000 [ 284.042015][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.044099][ C0] CR2: 000000002ecfaff8 CR3: 000000004ecbd000 CR4: 0000000000352ef0 [ 284.046578][ C0] Call Trace: [ 284.047656][ C0] [ 284.048579][ C0] hidg_set_alt+0x190/0xa10 [ 284.050016][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 284.051653][ C0] ? rcu_is_watching+0x13/0xc0 [ 284.053183][ C0] composite_setup+0x2ccf/0x9290 [ 284.054736][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 284.056291][ C0] ? __pfx_composite_setup+0x10/0x10 [ 284.057932][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.059607][ C0] ? do_raw_spin_lock+0x128/0x260 [ 284.061178][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.062865][ C0] ? configfs_composite_setup+0xfb/0x130 [ 284.064641][ C0] configfs_composite_setup+0xfb/0x130 [ 284.066368][ C0] dummy_timer+0x20a0/0x3840 [ 284.067844][ C0] ? do_raw_spin_lock+0x128/0x260 [ 284.069419][ C0] ? find_held_lock+0x2b/0x80 [ 284.070903][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.072676][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.074422][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.076250][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.078067][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 284.079932][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 284.081481][ C0] ? mark_held_locks+0x40/0x70 [ 284.083027][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.084852][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 284.086399][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 284.088056][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 284.089662][ C0] handle_softirqs+0x216/0xa20 [ 284.091174][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.092883][ C0] ? _raw_spin_unlock+0x28/0x50 [ 284.094408][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 284.096158][ C0] __irq_exit_rcu+0x178/0x220 [ 284.097702][ C0] irq_exit_rcu+0x9/0x30 [ 284.099034][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 284.100788][ C0] [ 284.101719][ C0] [ 284.102681][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.104556][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 284.106431][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 4a 94 f9 f5 48 89 df e8 d2 ea f9 f5 e8 6d de 26 f6 fb bf 01 00 00 00 92 b3 e8 f5 65 48 83 3d 51 d4 ca 09 00 74 06 5b e9 01 4d 00 00 [ 284.112332][ C0] RSP: 0000:ffffc900001b6f48 EFLAGS: 00000202 [ 284.114290][ C0] RAX: 0000000000085ead RBX: ffff88802ae3b980 RCX: 0000000000000040 [ 284.116773][ C0] RDX: 0000000000000001 RSI: ffffffff8e625249 RDI: 0000000000000001 [ 284.119211][ C0] RBP: 1ffff92000036deb R08: 0000000000000001 R09: 0000000000000000 [ 284.121647][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae3b980 [ 284.124141][ C0] R13: 0000000000000001 R14: ffff8880278ea580 R15: dffffc0000000000 [ 284.126581][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.128250][ C0] wq_worker_sleeping+0x276/0x2d0 [ 284.129831][ C0] ? __pfx_wq_worker_sleeping+0x10/0x10 [ 284.131564][ C0] schedule+0x244/0x2c0 [ 284.132887][ C0] schedule_timeout+0x127/0x280 [ 284.134401][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 284.136076][ C0] ? __pfx_process_timeout+0x10/0x10 [ 284.137748][ C0] ? mark_held_locks+0x40/0x70 [ 284.139240][ C0] __wait_for_common+0x2e6/0x500 [ 284.140744][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 284.142385][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 284.144139][ C0] usb_start_wait_urb+0x2ae/0x580 [ 284.145718][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 284.147469][ C0] ? __asan_memset+0x23/0x50 [ 284.148954][ C0] usb_control_msg+0x328/0x4b0 [ 284.150456][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 284.152103][ C0] usb_control_msg_send+0xca/0x130 [ 284.153710][ C0] usb_set_configuration+0xb8f/0x1dc0 [ 284.155378][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 284.157275][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 284.158945][ C0] usb_probe_device+0xef/0x400 [ 284.160457][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 284.162135][ C0] really_probe+0x241/0xa60 [ 284.163604][ C0] __driver_probe_device+0x210/0x460 [ 284.165244][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.167047][ C0] driver_probe_device+0x4a/0x140 [ 284.168640][ C0] __device_attach_driver+0x1df/0x320 [ 284.170523][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 284.172394][ C0] bus_for_each_drv+0x159/0x1e0 [ 284.173940][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 284.176073][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.177718][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.179548][ C0] __device_attach+0x1e4/0x4c0 [ 284.181050][ C0] ? __pfx___device_attach+0x10/0x10 [ 284.182730][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 284.184412][ C0] device_initial_probe+0xaf/0xf0 [ 284.185983][ C0] __bus_probe_device+0x60/0x160 [ 284.187613][ C0] device_add+0x121d/0x1970 [ 284.189034][ C0] ? __pfx_device_add+0x10/0x10 [ 284.190649][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 284.192451][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 284.194123][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 284.196008][ C0] ? mark_held_locks+0x40/0x70 [ 284.197527][ C0] hub_event.cold+0x1e3/0xe90 [ 284.199032][ C0] ? __pfx_hub_event+0x10/0x10 [ 284.200564][ C0] ? rwsem_mark_wake+0x7c0/0x970 [ 284.202125][ C0] ? lock_acquire+0x1d1/0x380 [ 284.203666][ C0] ? process_one_work+0xa2c/0x1b10 [ 284.205328][ C0] ? process_one_work+0x906/0x1b10 [ 284.206871][ C0] ? process_one_work+0x906/0x1b10 [ 284.208424][ C0] process_one_work+0xac7/0x1b10 [ 284.209957][ C0] ? __pfx_process_one_work+0x10/0x10 [ 284.211601][ C0] ? lock_acquire+0x1d1/0x380 [ 284.213090][ C0] ? __pfx_hub_event+0x10/0x10 [ 284.214678][ C0] worker_thread+0x5ef/0xe50 [ 284.216274][ C0] ? kthread+0x13a/0x450 [ 284.217561][ C0] ? __pfx_worker_thread+0x10/0x10 [ 284.219120][ C0] kthread+0x373/0x450 [ 284.220371][ C0] ? __pfx_kthread+0x10/0x10 [ 284.221828][ C0] ret_from_fork+0x730/0xd60 [ 284.223349][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 284.225016][ C0] ? __switch_to+0x800/0x10e0 [ 284.226501][ C0] ? __pfx_kthread+0x10/0x10 [ 284.228011][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.229574][ C0] [ 284.230564][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.232863][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.236131][ C0] Tainted: [L]=SOFTLOCKUP [ 284.237486][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.240539][ C0] Workqueue: usb_hub_wq hub_event [ 284.242098][ C0] Call Trace: [ 284.243226][ C0] [ 284.244158][ C0] dump_stack_lvl+0x100/0x190 [ 284.245647][ C0] vpanic+0x2dc/0x6f8 [ 284.246911][ C0] panic+0xd1/0xe0 [ 284.248106][ C0] ? __pfx_panic+0x10/0x10 [ 284.249521][ C0] check_panic_on_warn.cold+0x19/0x34 [ 284.251199][ C0] ? usb_ep_enable+0x3e6/0x490 [ 284.252723][ C0] __warn.cold+0x191/0x321 [ 284.254133][ C0] __report_bug+0x30f/0x440 [ 284.255671][ C0] ? usb_ep_enable+0x3e6/0x490 [ 284.257180][ C0] ? __pfx___report_bug+0x10/0x10 [ 284.258761][ C0] ? try_to_wake_up+0x158/0x1ca0 [ 284.260336][ C0] report_bug_entry+0xe2/0x290 [ 284.261846][ C0] ? usb_ep_enable+0x3f8/0x490 [ 284.263383][ C0] handle_bug+0x1cd/0x2a0 [ 284.264900][ C0] exc_invalid_op+0x17/0x50 [ 284.266358][ C0] asm_exc_invalid_op+0x1a/0x20 [ 284.267918][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 284.269607][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea b3 86 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b9 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 ab fb 8c [ 284.275606][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010046 [ 284.277499][ C0] RAX: dffffc0000000000 RBX: ffff888022fd00e0 RCX: ffffffff8cfbf000 [ 284.279969][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbb900 RDI: ffffffff92785cd0 [ 284.282429][ C0] RBP: 0000000000000081 R08: ffffffff8cfbabe0 R09: 0000000000000000 [ 284.285103][ C0] R10: ffffffff926ad95f R11: 0000000000000001 R12: ffffffff8cfbabe0 [ 284.287567][ C0] R13: 0000000000000000 R14: ffff888022fd00e0 R15: ffff88802fe65720 [ 284.290032][ C0] hidg_set_alt+0x190/0xa10 [ 284.291483][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 284.293190][ C0] ? rcu_is_watching+0x13/0xc0 [ 284.294826][ C0] composite_setup+0x2ccf/0x9290 [ 284.296398][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 284.297958][ C0] ? __pfx_composite_setup+0x10/0x10 [ 284.299619][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.301427][ C0] ? do_raw_spin_lock+0x128/0x260 [ 284.303026][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.304751][ C0] ? configfs_composite_setup+0xfb/0x130 [ 284.306494][ C0] configfs_composite_setup+0xfb/0x130 [ 284.308205][ C0] dummy_timer+0x20a0/0x3840 [ 284.309654][ C0] ? do_raw_spin_lock+0x128/0x260 [ 284.311331][ C0] ? find_held_lock+0x2b/0x80 [ 284.312834][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.314600][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.316356][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.318145][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.319915][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 284.321786][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 284.323353][ C0] ? mark_held_locks+0x40/0x70 [ 284.325084][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.326897][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 284.328459][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 284.330083][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 284.331702][ C0] handle_softirqs+0x216/0xa20 [ 284.333219][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.335090][ C0] ? _raw_spin_unlock+0x28/0x50 [ 284.337083][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 284.338846][ C0] __irq_exit_rcu+0x178/0x220 [ 284.340331][ C0] irq_exit_rcu+0x9/0x30 [ 284.341656][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 284.343426][ C0] [ 284.344401][ C0] [ 284.345341][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.347197][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 284.349021][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 4a 94 f9 f5 48 89 df e8 d2 ea f9 f5 e8 6d de 26 f6 fb bf 01 00 00 00 92 b3 e8 f5 65 48 83 3d 51 d4 ca 09 00 74 06 5b e9 01 4d 00 00 [ 284.355272][ C0] RSP: 0000:ffffc900001b6f48 EFLAGS: 00000202 [ 284.357706][ C0] RAX: 0000000000085ead RBX: ffff88802ae3b980 RCX: 0000000000000040 [ 284.360619][ C0] RDX: 0000000000000001 RSI: ffffffff8e625249 RDI: 0000000000000001 [ 284.363671][ C0] RBP: 1ffff92000036deb R08: 0000000000000001 R09: 0000000000000000 [ 284.366766][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae3b980 [ 284.369874][ C0] R13: 0000000000000001 R14: ffff8880278ea580 R15: dffffc0000000000 [ 284.373006][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.375054][ C0] wq_worker_sleeping+0x276/0x2d0 [ 284.377050][ C0] ? __pfx_wq_worker_sleeping+0x10/0x10 [ 284.379230][ C0] schedule+0x244/0x2c0 [ 284.380767][ C0] schedule_timeout+0x127/0x280 [ 284.382538][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 284.384327][ C0] ? __pfx_process_timeout+0x10/0x10 [ 284.385972][ C0] ? mark_held_locks+0x40/0x70 [ 284.387533][ C0] __wait_for_common+0x2e6/0x500 [ 284.389085][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 284.390752][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 284.392526][ C0] usb_start_wait_urb+0x2ae/0x580 [ 284.394097][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 284.396054][ C0] ? __asan_memset+0x23/0x50 [ 284.397518][ C0] usb_control_msg+0x328/0x4b0 [ 284.399025][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 284.400688][ C0] usb_control_msg_send+0xca/0x130 [ 284.402370][ C0] usb_set_configuration+0xb8f/0x1dc0 [ 284.404458][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 284.406741][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 284.408960][ C0] usb_probe_device+0xef/0x400 [ 284.410962][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 284.413243][ C0] really_probe+0x241/0xa60 [ 284.415145][ C0] __driver_probe_device+0x210/0x460 [ 284.417253][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.419077][ C0] driver_probe_device+0x4a/0x140 [ 284.420669][ C0] __device_attach_driver+0x1df/0x320 [ 284.422434][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 284.424905][ C0] bus_for_each_drv+0x159/0x1e0 [ 284.426755][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 284.428650][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.430174][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.431992][ C0] __device_attach+0x1e4/0x4c0 [ 284.433503][ C0] ? __pfx___device_attach+0x10/0x10 [ 284.435218][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 284.436813][ C0] device_initial_probe+0xaf/0xf0 [ 284.438397][ C0] __bus_probe_device+0x60/0x160 [ 284.439960][ C0] device_add+0x121d/0x1970 [ 284.441391][ C0] ? __pfx_device_add+0x10/0x10 [ 284.442929][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 284.444773][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 284.446460][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 284.448287][ C0] ? mark_held_locks+0x40/0x70 [ 284.449783][ C0] hub_event.cold+0x1e3/0xe90 [ 284.451273][ C0] ? __pfx_hub_event+0x10/0x10 [ 284.452803][ C0] ? rwsem_mark_wake+0x7c0/0x970 [ 284.454400][ C0] ? lock_acquire+0x1d1/0x380 [ 284.455893][ C0] ? process_one_work+0xa2c/0x1b10 [ 284.457493][ C0] ? process_one_work+0x906/0x1b10 [ 284.459081][ C0] ? process_one_work+0x906/0x1b10 [ 284.460689][ C0] process_one_work+0xac7/0x1b10 [ 284.462241][ C0] ? __pfx_process_one_work+0x10/0x10 [ 284.463953][ C0] ? lock_acquire+0x1d1/0x380 [ 284.465455][ C0] ? __pfx_hub_event+0x10/0x10 [ 284.466886][ C0] worker_thread+0x5ef/0xe50 [ 284.468359][ C0] ? kthread+0x13a/0x450 [ 284.469700][ C0] ? __pfx_worker_thread+0x10/0x10 [ 284.471392][ C0] kthread+0x373/0x450 [ 284.472706][ C0] ? __pfx_kthread+0x10/0x10 [ 284.474171][ C0] ret_from_fork+0x730/0xd60 [ 284.475675][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 284.477265][ C0] ? __switch_to+0x800/0x10e0 [ 284.478735][ C0] ? __pfx_kthread+0x10/0x10 [ 284.480201][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.481709][ C0] [ 284.483355][ C0] Kernel Offset: disabled [ 284.484809][ C0] Rebooting in 86400 seconds..