last executing test programs: 58.997226383s ago: executing program 0 (id=1): openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x180300, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x80001) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000280)=0x38800000, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000540)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000080000090000006311e000000000009500"/32], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 57.170957447s ago: executing program 0 (id=8): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x40040, 0x10) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x44051) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) 55.753459856s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200)=0xcde, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x1c, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) sendmmsg$inet(r2, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r5, 0x1, &(0x7f0000000000)=0x40) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UBLK_U_CMD_DEL_DEV(r0, 0xc0207505, &(0x7f0000002300)) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 53.756068362s ago: executing program 0 (id=22): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000340)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x80000, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000380)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x24048884) link(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x25) 53.556726719s ago: executing program 0 (id=24): pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000003500)={0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'dh\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d59, 0x12d59}}, 0x44) syz_usb_control_io$hid(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./gadget\x00', &(0x7f00000003c0)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)="01000000070581024000000705", 0xd) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10, 0x7) 53.093473988s ago: executing program 0 (id=25): write$sequencer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0xd1d, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d085}, 0x4010) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40102, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x2c10, 0x0, 0x0, @by_dev={r5}, [@raid={0x0, 0x1840, 0x0, 0xa0, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}}]}}]}) 53.067795448s ago: executing program 32 (id=25): write$sequencer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0xd1d, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d085}, 0x4010) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40102, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x2c10, 0x0, 0x0, @by_dev={r5}, [@raid={0x0, 0x1840, 0x0, 0xa0, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}}]}}]}) 7.502402855s ago: executing program 2 (id=286): syz_open_dev$sg(0x0, 0x6f5e, 0x188000) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0004"], 0x30}}, 0x0) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) syz_open_dev$sg(0x0, 0x6f5e, 0x188000) (async) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async) syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580), 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0004"], 0x30}}, 0x0) (async) gettid() (async) migrate_pages(r4, 0x4, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x1) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) (async) 7.400094216s ago: executing program 2 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x200009d1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 7.326878629s ago: executing program 2 (id=288): sched_getaffinity(0x0, 0x4, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f000034f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4008080}, 0x24008000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xb47}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev/ttyUSB0\x00', 0x40, 0x24) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000b80)=0xfff7ffff) 5.344662881s ago: executing program 1 (id=301): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 4.22127973s ago: executing program 2 (id=306): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000000)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000040)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80140, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 4.078259783s ago: executing program 1 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000000506030000000000000000000500000305000100070000000900030073797a32000000000900"], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x810) 3.992669684s ago: executing program 1 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="060015000800000020"], 0x60}}, 0x0) 3.93498477s ago: executing program 1 (id=313): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x23) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.214703727s ago: executing program 2 (id=314): sched_getaffinity(0x0, 0x4, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f000034f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4008080}, 0x24008000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000a00), 0x8) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xb47}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev/ttyUSB0\x00', 0x40, 0x24) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000b80)=0xfff7ffff) 3.160830157s ago: executing program 3 (id=316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x2, 0xba, &(0x7f0000000880)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414", @ANYRES32=0x41424344, @ANYRES64, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) socket$kcm(0x29, 0x5, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000c00)=0x2) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, 0x0) 3.085178023s ago: executing program 1 (id=317): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40025b0c, 0x0) 2.704486815s ago: executing program 4 (id=319): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x1284) memfd_create(&(0x7f0000000040)='\x00', 0x4) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x40, 0xb, 0x80, 0x4, 0x2, 0x3, 0x65, 0x32b, 0x34, 0x301, 0x3, 0xb2, 0x20, 0x1, 0xfff8, 0x401}, [{0x5, 0x2, 0x9, 0x800, 0x7, 0x835, 0x3, 0x1}], "5a11754a27eff3d6005e7418a6742418c37ec1b8d05d6433d66b5f2c0bd954792c524605170dff419ee0e84823084af54a01a90b0d3f418dfeaf162f4c6ea18a68279855c9ab330e90544a4200338128962b559392975378acdb4a9ab891d990ce55a139644673e7a464c9c6f1dc2f506ec08399e0aa550063a50644dd", ['\x00']}, 0x1d1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000003c0)={r3, 0x1, r2, 0x8}) recvmmsg$unix(r1, &(0x7f00000091c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/21, 0x15}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/62, 0x3e}], 0x9}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000b40)=""/157, 0x9d}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/252, 0xfc}, {&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/145, 0x91}, {&(0x7f0000001f80)=""/134, 0x86}, {&(0x7f0000002040)=""/1, 0x1}, {&(0x7f0000002080)=""/10, 0xa}], 0x9, &(0x7f0000002140)=[@cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x4c}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000005580)=[{&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/83, 0x53}, {&(0x7f0000003300)=""/89, 0x59}, {&(0x7f0000003380)=""/191, 0xbf}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/233, 0xe9}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/56, 0x38}], 0x9, &(0x7f0000005600)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x34}}, {{&(0x7f0000005640), 0x6e, &(0x7f0000005c00)=[{&(0x7f00000056c0)=""/49, 0x31}, {&(0x7f0000005700)=""/70, 0x46}, {&(0x7f0000005780)=""/3, 0x3}, {&(0x7f00000057c0)=""/84, 0x54}, {&(0x7f0000005840)=""/26, 0x1a}, {&(0x7f0000005880)=""/72, 0x48}, {&(0x7f0000005900)=""/223, 0xdf}, {&(0x7f0000005a00)=""/172, 0xac}, {&(0x7f0000005ac0)=""/88, 0x58}, {&(0x7f0000005b40)=""/166, 0xa6}], 0xa, &(0x7f0000005c80)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x5c}}, {{&(0x7f0000005d00)=@abs, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005d80)=""/127, 0x7f}, {&(0x7f0000005e00)=""/39, 0x27}, {&(0x7f0000005e40)=""/85, 0x55}, {&(0x7f0000005ec0)=""/110, 0x6e}], 0x4, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0), 0x6e, &(0x7f0000007300)=[{&(0x7f0000006040)=""/182, 0xb6}, {&(0x7f0000006100)=""/195, 0xc3}, {&(0x7f0000006200)=""/247, 0xf7}, {&(0x7f0000006300)=""/4096, 0x1000}], 0x4, &(0x7f0000007340)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x80}}, {{0x0, 0x0, &(0x7f00000073c0)}}, {{&(0x7f0000007400), 0x6e, &(0x7f0000008880)=[{&(0x7f0000007480)=""/50, 0x32}, {&(0x7f00000074c0)=""/90, 0x5a}, {&(0x7f0000007540)=""/206, 0xce}, {&(0x7f0000007640)=""/56, 0x38}, {&(0x7f0000007680)=""/40, 0x28}, {&(0x7f00000076c0)=""/4, 0x4}, {&(0x7f0000007700)=""/189, 0xbd}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/112, 0x70}, {&(0x7f0000008840)=""/49, 0x31}], 0xa, &(0x7f0000008900)=[@cred={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000008940)=""/218, 0xda}, {&(0x7f0000008a40)=""/28, 0x1c}, {&(0x7f0000008a80)=""/145, 0x91}, {&(0x7f0000008b40)=""/139, 0x8b}, {&(0x7f0000008c00)=""/169, 0xa9}, {&(0x7f0000008cc0)=""/174, 0xae}, {&(0x7f0000008d80)=""/1, 0x1}], 0x7, &(0x7f0000008e00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000009140)=[{&(0x7f0000008e80)=""/217, 0xd9}, {&(0x7f0000008f80)=""/180, 0xb4}, {&(0x7f0000009040)=""/215, 0xd7}], 0x3, &(0x7f0000009180)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0}}}], 0x30}}], 0xa, 0x2, &(0x7f0000009300)) r18 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r18, 0x4068aea3, &(0x7f0000009340)) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f00000093c0)={0xd5, 0x0, 0x64}) ioctl$KVM_SET_DEBUGREGS(r16, 0x4080aea2, &(0x7f0000009440)={[0xfec00000, 0x50000, 0x1000, 0x1ffe], 0x1, 0xa1, 0x4}) setxattr$trusted_overlay_redirect(&(0x7f00000094c0)='./file0\x00', &(0x7f0000009500), &(0x7f0000009540)='./file0\x00', 0x8, 0x2) copy_file_range(r8, &(0x7f0000009580)=0xffffffffe5e7a963, r5, 0x0, 0x1, 0x0) r19 = openat$fb0(0xffffff9c, &(0x7f00000095c0), 0x121700, 0x0) ioctl$FBIOBLANK(r19, 0x4611, 0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000009600)={'vlan1\x00'}) close_range(r15, r6, 0x2) pipe2$9p(&(0x7f0000009640), 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0185648, &(0x7f0000009700)={0xa10000, 0x8000, 0x7, r13, 0x0, &(0x7f00000096c0)={0x990965, 0xd, '\x00', @p_u8=&(0x7f0000009680)=0x2}}) sendmsg$inet_sctp(r10, &(0x7f000000ab80)={&(0x7f0000009740)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f000000ab00)=[{&(0x7f0000009780)="b95b203d1030329e43e82236f995f94c214e2c8f958aa24d4bd5b26939dda08f1cebbaaf1fcb50fb5fe81f0d43e4efdfddda4dcfaed986ceb0f2e9118a13eb0eaf2d8f2e4b8f68196c969182efe8b4819c21019c5d7a3d", 0x57}, {&(0x7f0000009800)="b4e3163ef92d233877e3549b6f74bdaa295bf4dc341d6408d9ffe02fc35693883fe57e5b8308dd80b51366ff39e90ebfab08e52ea932fd82aacb8323a97eeee184ec5507a5514c9eed0afa7264a5473e10", 0x51}, {&(0x7f0000009880)="819ff1a4206103b8a3202cac40a6f7f77ca39613eba4dd4ffcd2d660bff18ec14a676ceca8ec704cd054f63cf34f661c40dccaa1fa80e9b7a807a5859ed4cad43bd3c503", 0x44}, {&(0x7f0000009900)="0abd2c499f3804fd3ca0ca2590c8c87359e2948d4e52f46040bc3beaf264a547735704bc754c630b3d6319e7dadc4f063ac463b9110079d40ebc0e02245a5a10b8bd5bf51249b7a13bc949bab709a5e625ae1a408a5d47", 0x57}, {&(0x7f0000009980)="f2e481e5148a2bbfe41bdef03dba5b50409ff3e22c50d71c3d2abea927cdb96eb3252f1122c84c9ae53ecbc9f3c3ab71850d54c1e7d8ba5f5d588e6ce3bd8d3a5987c8938a2496bcf391111389957d49746713725c5dea24f606ee6b9f2bccbee505931e914f986bf1ae4789972acbb780", 0x71}, {&(0x7f0000009a00)="8d2ce2b96f548fe669888e7a3ed0db4a62a548f093f5e5416a220356b8ab40c15b22f60a7d5edd808a28ebc6c4ef56ee5087d66e5c1420bc1aac87d4328da005d64c75d29cb3769064b295474aedf0dbe31175d16c62ba5322a711b8c483e3de68bd3afae4c54e21ef0d0528ccfa96445b109d09e5692d87522c3b0d681ff6275b6b5cd75dbbf1b6f35827850d421182e29d429db4e7986d06820baf2b4d05bff545bdc902cc3e15e9d2b4a7718fcc8378b6f3246713dc27e2056e498a9ee0de30ee1948facd5ed90dd7b38a4e605b236fc15e881050429ff6f7a89be98717f6df198daf2889229402714affe69669afd0d69b766e48bbd2", 0xf8}, {&(0x7f0000009b00)="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", 0x1000}], 0x7, &(0x7f000000ab40)=[@init={0x14, 0x84, 0x0, {0x1, 0x2, 0x9, 0x7}}], 0x14, 0x40}, 0x10) openat$vga_arbiter(0xffffff9c, &(0x7f000000abc0), 0x80, 0x0) r20 = openat$cgroup_procs(r7, &(0x7f000000ac00)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r20, &(0x7f000000ac40)=r17, 0x12) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 2.704134424s ago: executing program 4 (id=320): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'}) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) (fail_nth: 2) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000240)="900100"/64) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.234596917s ago: executing program 3 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00"], 0x60}}, 0x0) 1.911170183s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd16e, 0x48021) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000180)={0xd55, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') preadv(r4, &(0x7f0000000200)=[{0x0}], 0x1, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x8d40, 0x0) ppoll(&(0x7f00000002c0)=[{r6, 0x1072}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000300)=0xfffffffa) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, "00769a7d8200010000001495595915303d6000"}) r7 = syz_open_pts(r6, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth1_macvtap\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xfffffff9, 0x7, 0x10, 0x8001, 0xfffffffe, 0x0, 0x1, 0x2, 0x1, 0x2, 0x1, 0x5434, 0x7fffffff, 0x2, 0xedc, 0x8, 0x6, 0x4, 0x1, 0x7, 0x4, 0x1, 0x7, 0x618e0bc4, 0x800, 0x7f, 0x3, 0x80, 0x1, 0x2, 0x5, 0x9, 0xfffffffa, 0xed, 0x10000, 0x6, 0x40, 0x3, 0x7, 0x8, 0x7, 0xe0, 0x1b1d, 0x6, 0x0, 0xc14, 0x0, 0x3, 0x0, 0x1, 0xb7, 0x6, 0xffff, 0xb, 0xe, 0x4, 0x1769, 0x4, 0x100, 0x1, 0x3, 0x5, 0x7, 0x572e, 0x9, 0x2, 0x4, 0x8, 0xb, 0xfffffffe, 0x7, 0xfffffffb, 0x123, 0x5, 0x6, 0xe000, 0xa, 0x2, 0xfffffffc, 0x7fffffff, 0x5, 0x100004, 0x0, 0x800, 0x2, 0x1, 0x843, 0x8001, 0x2, 0xb80f, 0x1, 0x40, 0x0, 0x4c6, 0xffffffdf, 0xeb5, 0x1, 0x1f7, 0x6, 0x4, 0x2, 0x2, 0x6, 0x80000001, 0x0, 0x7, 0x93, 0x2, 0x0, 0x2, 0x8, 0x5, 0x5, 0x835d, 0x5, 0x10, 0x3, 0x40, 0x4, 0x2, 0x4, 0xd, 0x6, 0x5, 0x3, 0x7, 0x7, 0x10002]}}) syz_emit_ethernet(0x5a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100450086dd6000000000200600ff010000000000000000000000000001fe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2200090780001080a0023000600000000d91f7e3e000035a814bf3e228dea9f5a0b4b1831c9b5ce7e1a2ab8ce69f8e4fb02c6c508ffbc6b0e8f0b64fcc834"], 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x20044081) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(r4, &(0x7f0000000740)='./tracing\x00', 0x404002, 0x1dd) 1.004580281s ago: executing program 3 (id=323): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0x12c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f0000000100)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x12, 0x0, 0x7fff8001}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x44}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flistxattr(r10, &(0x7f00000008c0)=""/90, 0x5a) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000880)={r11, 0x0, 0x0}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) 754.31129ms ago: executing program 3 (id=324): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)=@newtfilter={0x5ec, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x5b4, 0x5, {0xd, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7, [{0x3, 0x200, 0x2000004, 0x4}, {0x10000, 0x3, 0x4, 0x5}, {0xb, 0x8, 0x80000000, 0x7ff}, {0x8, 0x80000001, 0xa8, 0x12}, {0x7ff, 0x7, 0x0, 0xffff}, {0xbec, 0x5, 0xe, 0x9}, {0x81, 0x8, 0x2, 0x5}, {0xfffffff7, 0x2, 0xf8, 0x5}, {0xfffffffb, 0x5, 0x3, 0x800}, {0xb1, 0xfffffffa, 0x7fff, 0x1}, {0x4, 0x3, 0x8, 0x8}, {0xf, 0x80000001, 0x0, 0xfffffc01}, {0x8001, 0x3, 0x6, 0xa}, {0x6, 0x8, 0x401, 0x7}, {0xc, 0x24b80, 0x8b, 0x10001}, {0x2, 0xdbb, 0x9, 0x80000001}, {0x2, 0x7ff, 0xfffffffa, 0x2}, {0x8b, 0x800, 0x2, 0x9}, {0x0, 0x4, 0x6, 0x8}, {0x7, 0xe9, 0x3, 0x8}, {0x6, 0x5, 0x1, 0xfffffffa}, {0x1, 0x8001, 0x733, 0x7}, {0x6, 0x2592ddaf, 0x5, 0x1}, {0x3, 0x46, 0x101, 0x8}, {0x1, 0x6, 0x4, 0xfffff800}, {0x2a37, 0x7, 0x5, 0x8}, {0x15fe, 0x11e3, 0x2, 0x5}, {0x3, 0x7, 0x0, 0x5}, {0x3, 0x8, 0x1ff, 0x5}, {0xffffffff, 0x702d, 0x8001, 0x4}, {0xfffffff3, 0x3, 0x4, 0x2}, {0x5, 0x9, 0x526c5012, 0x3}, {0xb2a, 0x8, 0xec000, 0x5}, {0x8c61, 0x9, 0x6, 0x1}, {0xb695, 0x4000b475, 0x401, 0x1}, {0x3, 0x2, 0xff, 0x8}, {0x3, 0xb, 0xffffffff, 0x8}, {0x1, 0x3, 0x2, 0x7ff}, {0x71980000, 0x4, 0x81, 0x2}, {0x8, 0xa, 0x400, 0x1ff}, {0x4, 0x8, 0xf, 0x6}, {0x8, 0x9, 0x4000002, 0x7fffffff}, {0x81, 0x6, 0x7, 0x9}, {0x8f, 0x100, 0x3, 0x3}, {0x15a4, 0x0, 0x8, 0x7}, {0xffffffff, 0x9, 0x5, 0x800}, {0x10200, 0x3f2, 0x5, 0x6}, {0x0, 0x8, 0x7, 0x2}, {0x6, 0x7ff, 0x3, 0x8}, {0x5, 0x8, 0xf05, 0x270}, {0x8, 0x4, 0x2, 0x4}, {0x3e, 0x7fffffff, 0x8, 0xe2f}, {0x2, 0x2, 0xc14a, 0x7fffffff}, {0x1, 0x9, 0x8, 0x3}, {0x7fffffff, 0x2, 0x3ff, 0x8}, {0x320, 0x80000000, 0x401, 0x3}, {0x6, 0x2, 0x81, 0xfffffffc}, {0x80, 0xa07, 0x9, 0x9}, {0x100, 0x1ff, 0x8, 0x3}, {0x9, 0xa30, 0x1, 0x8000}, {0x3ef6f465, 0x9, 0x1000, 0x10000}, {0x8, 0x800, 0xe57, 0x2}, {0xa, 0x40, 0xbde, 0x6}, {0x0, 0x5000, 0x4, 0x5}, {0x4, 0xb, 0x4}, {0x6, 0x6, 0x0, 0x7}, {0xf6b9b19, 0x0, 0x7f, 0x100}, {0x3ff, 0x4, 0xc0a6, 0x7}, {0x7f, 0x1, 0x3, 0x1}, {0x3, 0x8, 0x6, 0x2}, {0x7113, 0x7f, 0x4, 0x476}, {0x9, 0x8, 0x0, 0x80000001}, {0xa29d, 0x4, 0x193, 0x2}, {0x9, 0x81, 0x5, 0x8}, {0x4, 0xffff, 0x6, 0x22cb}, {0x3, 0xf4e6, 0x5e, 0x9}, {0x1000, 0x6, 0xe9ef}, {0x3, 0x40, 0x1000, 0x335}, {0x4, 0x5, 0x6, 0x4000}, {0xa, 0xf, 0x1, 0x8}, {0x72, 0xb7, 0x81, 0x19}, {0x0, 0xd, 0x2a20, 0xffffff81}, {0x71, 0x90000, 0x4, 0x8001}, {0x700000, 0x3, 0x1, 0x10}, {0x4, 0x6, 0x4, 0x400}, {0xffffff7f, 0x1, 0x5, 0x59}, {0x9e26e0, 0x8, 0xa4d, 0x3}, {0x4, 0x9, 0x8, 0x1}, {0x7fff, 0x6, 0x3c3d8, 0x1}, {0xe00000, 0x3, 0x7f, 0x6}]}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000001440)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000001480)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000001540)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f00000015c0)=0x20000) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000001600)={0x80, 0x401, 0x1}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa6c00aaaaaaffcedeffffffacf7ffff0800450000340065000000019078ac1e78080000000000020000650a539891df267d824a17a3caf9407c7bdcaab01b4da7"], 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x20e8401, 0x0) 615.198051ms ago: executing program 4 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000006840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006880)='./proc\x00', &(0x7f00000068c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000006940)='10', 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x3f00, 0x0) 613.763079ms ago: executing program 4 (id=326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 515.017853ms ago: executing program 4 (id=327): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001200)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47b480f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="04080076657273696f6e00020500000004080070726f66696c650007050400", 0x1f) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r1, 0x100000000) 145.193703ms ago: executing program 2 (id=328): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) fgetxattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="62747266732e003dadbbd19a8c4897482a5f590f7088125719579d19be295314550e3df513604486a88662a08de6fc8931c546f9adad581da9ae9982f3d1dad082e19a81d50ede12db1c8248f88ea26e34c48fafbbd2b2452282cc43a4bb493e24b3730a69c05f97e04b5f3bdb591223149a687edd6f5661f877b7cde9900a43b1e8255d86fefba081a32ffc76fea35aa50c22ac523012da47b029d58f0ce506d16caee94ca51a37bd8597742546fe852ffcc478d2776edf4c05b6432ea1dfa7f6a775908fb175335237081b2fdd4dee6cce38c1fc794e167aed5f9300d91852a8dac5037278c967d63457d871c00a662b17f398633dac43a54e4fa33ce33678f2b2e14f13dbf692e78b48d37c3abbf4893641852cfbaf467c7b3f30088fa1c6a315af19357941ec5fbf347dfe54686b2e1e94d34399d5d0b35dc87e9d9d409e6c73aa87e38a4f0a16261185b947f6"], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x4c) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x800}, @ipv6=@tcp={0x3, 0x6, "c6f0af", 0x14, 0x6, 0x1, @private1, @remote, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x9a27, 0x0, 0x4}}}}}, 0x4a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r6, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1) timer_create(0x0, &(0x7f0000000fc0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001000)) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.550221ms ago: executing program 1 (id=329): timer_create(0xb3b54c18e0590239, 0x0, 0x0) (async) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x183042, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0xa5e11, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x460, 0x0, 0x68, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'p', 0x20, '8', ' 1 discard_zeroes_cow'}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x180, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x3, 0xf0, 0x4, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x22f9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x800, 0x1, 0x0, 0x9, 0xfffffffa, 0xa}}, {0x18, 0x2, [0x4, 0xc3d7, 0x0, 0x8, 0x6, 0x2, 0x5, 0xff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x6, 0x0, 0x5, 0xd, 0x9}}, {0x16, 0x2, [0xdd2a, 0x0, 0x7, 0x8, 0xe, 0x4, 0x0, 0x5, 0x24]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x7, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0x180}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0xaf, &(0x7f0000000600)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x6, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x400000000002) (async) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000a80), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0xc0a45320, &(0x7f0000000ac0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r3, 0x2, &(0x7f0000000b80)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000c00)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000c80), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000cc0)=0x2) (async) recvmmsg(r5, &(0x7f0000000d00), 0x10106, 0x2, 0x0) (async) prlimit64(r3, 0xf, 0x0, &(0x7f0000000d40)) (async) add_key$user(&(0x7f0000000d80), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000dc0)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async) syz_open_dev$dvb_demux(&(0x7f0000000e00), 0x0, 0x41) connect$inet6(r7, &(0x7f0000000e40)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r8, @ANYBLOB="00b75f95ed026c57300012800b0001006272696467100002800c00210080000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async) sendmsg$nl_route(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./pipe\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001040)='./pipe\x00', &(0x7f0000001080)='rpc_pipefs\x00', 0x0, 0x0) 283.828µs ago: executing program 3 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00"], 0x60}}, 0x0) 0s ago: executing program 4 (id=331): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x1090, 0x0, 0x98, 'crypt\x00', {'aes-ecb', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '8'}, ' 1 same_cpu_crypt'}}]}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="00082abd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) r6 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x65, 0x64, 0x66, 0x31, 0x36, 0x33, 0x31, 0x66, 0x64, 0x65, 0x35, 0x31, 0x38, 0x66, 0x66, 0x35]}, &(0x7f0000000a80)={0x0, "3eab5c3d45476641474fd2450caec6edaff5f211604503501bad0e4edb5d4fafe6b417b6f0a1da46a015c6f96cd7cacfd83f8dd6c6cd5219b79b52d3eb5353a9", 0x23}, 0x48, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x181440, 0x0) ioctl$FIONREAD(r8, 0x80045430, &(0x7f00000009c0)) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r9) keyctl$unlink(0x9, r7, r9) syz_clone(0x5000, &(0x7f0000000140)="e9d332fe4aaff9c40fd65fcb80ae7ee5475ef2de08888980a2e1fdff425a", 0x1e, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="c7ceab07395ccb525027296dfdf09095289ceb1a9aef89240060ff2e11a64718823d6b5b385c7ecffe1a908c36352da7da96876a6afddadc43b4fdff659ee6ea3a11cc60310d136f1d0e1f2ea9e0608d2d8c321894a6f19738e82ff197acc7e999f439265f58fd363179761b737e04c69056ced38dbdc027996a3b5f370cf53c93c157da542c02e81ffed46b9a751aea6e515be7446707ade411c452e78333e0f077ce9fd63d509b9d3d2f332ff17b7a3982f89440cd51") r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) writev(r10, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)="83", 0x1}, {&(0x7f0000000b00)="c9532339ea7abd328719abfb3e1735bffa2fcc95d9b175696fdff7d780d40fce2374d278c671f351d4097162b8f03b3c60b6dab52c0ba5bdbc68217fb6982471b92a6dc5a1d3beacb7a8d38bf6fc6641ed6c562779743875a87d237146775318d8e44833cab9ea5e73f77df6fde542bbf5f5b5188ea6f2b175a892b5dee348ac91f88c3098af25bc258c7407889b91935585b7bc7865c038dc4933a93cf50a1ac97bd4ef46c2c261e8816f2ea8c94bb0b27729f733b08fb335679d54e0adfc1a8a6d950975b7b1bdd24833895dd1de77c4d443b2", 0xd4}, {&(0x7f00000002c0)="de7890b1b4b24ee221abe2fa81f4966a242c3a59194dee78178966a734460497752de5d0e66c283a0b45f50e723f56022f39ff16fdf575d729d2e4b178f79a19a7a4e7bc03a4", 0x46}], 0x4) kernel console output (not intermixed with test programs): 794] veth1_vlan: entered promiscuous mode [ 40.834408][ T5796] veth0_macvtap: entered promiscuous mode [ 40.852092][ T5646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.852203][ T5646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.856141][ T5796] veth1_macvtap: entered promiscuous mode [ 40.861392][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.861409][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.886183][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.908548][ T5794] veth0_macvtap: entered promiscuous mode [ 40.914696][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.915340][ T5794] veth1_macvtap: entered promiscuous mode [ 40.921343][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.921360][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.925833][ T5884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925920][ T5884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925989][ T5884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.949969][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.961213][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.974186][ T5884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.999261][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.999277][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.008713][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.008877][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.009027][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.009220][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.009302][ T5884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.030069][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.030080][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.052826][ T466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.052837][ T466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.059938][ T5646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.060106][ T5646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.068280][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.068291][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.633571][ T5960] block nbd2: shutting down sockets [ 41.685137][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 42.096038][ T5973] Invalid ELF header magic: != ELF [ 42.102171][ T5973] ======================================================= [ 42.102171][ T5973] WARNING: The mand mount option has been deprecated and [ 42.102171][ T5973] and is ignored by this kernel. Remove the mand [ 42.102171][ T5973] option from the mount to silence this warning. [ 42.102171][ T5973] ======================================================= [ 42.105640][ T5973] overlay: Unknown parameter '/' [ 42.217380][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 42.568390][ T5799] Bluetooth: hci2: command tx timeout [ 42.568420][ T5799] Bluetooth: hci0: command tx timeout [ 42.568437][ T5799] Bluetooth: hci3: command tx timeout [ 42.568454][ T5799] Bluetooth: hci1: command tx timeout [ 42.677640][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.869985][ T5883] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 42.870020][ T5883] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 42.871788][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.871810][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.871844][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.871865][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.873086][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.873131][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.873150][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.873162][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.873965][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.873976][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.873994][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.874006][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.875149][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.875166][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.875199][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.875219][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.876424][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.876440][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.876470][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.876490][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.877715][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.877732][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.877809][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.877830][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.883414][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.883432][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.883465][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.883485][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.887164][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.887182][ T5883] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.887211][ T5883] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.887232][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 42.903297][ T5883] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 42.903321][ T5883] usb 8-1: Product: syz [ 42.903333][ T5883] usb 8-1: Manufacturer: syz [ 42.903345][ T5883] usb 8-1: SerialNumber: syz [ 42.908989][ T5883] usb 8-1: config 0 descriptor?? [ 42.924827][ T5883] yurex 8-1:0.0: Could not find endpoints [ 43.266494][ T5991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.266741][ T5991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.271505][ T5987] Zero length message leads to an empty skb [ 43.289278][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 43.290264][ T5987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 43.293457][ T5883] usb 8-1: USB disconnect, device number 2 [ 44.054967][ T5997] ubi0: attaching mtd0 [ 44.064883][ T5997] ubi0: scanning is finished [ 44.064894][ T5997] ubi0: empty MTD device detected [ 44.419486][ T5997] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 44.419511][ T5997] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 44.419527][ T5997] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 44.419542][ T5997] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 44.419556][ T5997] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 44.419569][ T5997] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 44.419583][ T5997] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 656253400 [ 44.419598][ T5997] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 44.420759][ T6009] ubi0: background thread "ubi_bgt0d" started, PID 6009 [ 44.421782][ T6000] ubi0: detaching mtd0 [ 44.456188][ T6000] ubi0: mtd0 is detached [ 44.500117][ T6011] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 44.586151][ T6011] TC_ACT_REPEAT abuse ? [ 44.648285][ T5803] Bluetooth: hci1: command tx timeout [ 44.648308][ T5803] Bluetooth: hci3: command tx timeout [ 44.648320][ T5803] Bluetooth: hci0: command tx timeout [ 44.648332][ T5803] Bluetooth: hci2: command tx timeout [ 45.171722][ T5646] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 45.411040][ T6032] ubi0: attaching mtd0 [ 45.411983][ T6032] ubi0: scanning is finished [ 45.980997][ T6032] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 45.981013][ T6032] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 45.981022][ T6032] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 45.981031][ T6032] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 45.981039][ T6032] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 45.981048][ T6032] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 45.981057][ T6032] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 45.981067][ T6032] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 45.981509][ T6036] ubi0: background thread "ubi_bgt0d" started, PID 6036 [ 46.274442][ T43] audit: type=1804 audit(1792989589.413:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.22" name="/newroot/3/file0/file0" dev="9p" ino=74449121 res=1 errno=0 [ 46.452712][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.606800][ T5646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.611068][ T58] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 46.612401][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.612423][ T58] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 46.612453][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.624092][ T58] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 46.631153][ T58] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 46.689409][ T5646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.728014][ T5799] Bluetooth: hci2: command tx timeout [ 46.728037][ T5799] Bluetooth: hci3: command tx timeout [ 46.728049][ T5799] Bluetooth: hci1: command tx timeout [ 46.767054][ T5646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.823491][ T5803] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 46.847228][ T5646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.880413][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.880962][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.881497][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.882334][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.882924][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.960520][ T5646] bridge_slave_1: left allmulticast mode [ 46.960542][ T5646] bridge_slave_1: left promiscuous mode [ 46.961461][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.964939][ T5646] bridge_slave_0: left allmulticast mode [ 46.964952][ T5646] bridge_slave_0: left promiscuous mode [ 46.965050][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.979203][ T6038] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 46.979550][ T6038] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 46.979918][ T6038] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 47.064742][ T5646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.071433][ T5646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.072438][ T5646] bond0 (unregistering): Released all slaves [ 47.076430][ T6038] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 47.178555][ T6046] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.190024][ T6037] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 47.192722][ T58] usb 7-1: USB disconnect, device number 2 [ 47.205610][ T58] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 47.205946][ T58] spcp8x5 7-1:1.0: device disconnected [ 47.470611][ T5646] hsr_slave_0: left promiscuous mode [ 47.471902][ T5646] hsr_slave_1: left promiscuous mode [ 47.472471][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.472490][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.473550][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.473565][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.480266][ T5646] veth1_macvtap: left promiscuous mode [ 47.480327][ T5646] veth0_macvtap: left promiscuous mode [ 47.480402][ T5646] veth1_vlan: left promiscuous mode [ 47.480730][ T5646] veth0_vlan: left promiscuous mode [ 47.618326][ T5646] team0 (unregistering): Port device team_slave_1 removed [ 47.623234][ T5646] team0 (unregistering): Port device team_slave_0 removed [ 47.715008][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.715078][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.715132][ T6046] bridge_slave_0: entered allmulticast mode [ 47.715762][ T6046] bridge_slave_0: entered promiscuous mode [ 47.717188][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.717228][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.717278][ T6046] bridge_slave_1: entered allmulticast mode [ 47.718318][ T6046] bridge_slave_1: entered promiscuous mode [ 47.731142][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.732479][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.748912][ T6046] team0: Port device team_slave_0 added [ 47.750269][ T6046] team0: Port device team_slave_1 added [ 47.761473][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.761482][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.761494][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.762299][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.762306][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.762318][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.778841][ T6046] hsr_slave_0: entered promiscuous mode [ 47.779230][ T6046] hsr_slave_1: entered promiscuous mode [ 48.070973][ T6024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.076086][ T6046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.084073][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.084666][ T6046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.090124][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.092296][ T6046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.107848][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.109524][ T6046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.118524][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.148828][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.148876][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.148979][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.149056][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.180024][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 48.203682][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.210364][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.216008][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.226732][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.234550][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234594][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.242880][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.242924][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.429035][ T6090] ubi: mtd0 is already attached to ubi0 [ 48.435081][ T6090] ubi0: detaching mtd0 [ 48.500419][ T6090] ubi0: mtd0 is detached [ 48.804666][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 48.889136][ T5803] Bluetooth: hci1: command tx timeout [ 48.967778][ T5803] Bluetooth: hci0: command tx timeout [ 49.006161][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.235472][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4 [ 49.292271][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.411940][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 49.444399][ T6046] veth0_vlan: entered promiscuous mode [ 49.450005][ T6046] veth1_vlan: entered promiscuous mode [ 49.463555][ T6046] veth0_macvtap: entered promiscuous mode [ 49.465746][ T6046] veth1_macvtap: entered promiscuous mode [ 49.473092][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.477106][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.507970][ T5884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.508104][ T5884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.508271][ T5884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.508289][ T5884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.531098][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.531112][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.542721][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.542737][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.587686][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.700195][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 49.700211][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 49.700219][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1d27 instead [ 49.700229][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1ed6 instead [ 49.700237][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 49.700245][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 49.700253][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 49.700263][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 49.700279][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 49.700295][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 49.700302][ T6146] jffs2: Further such events for this erase block will not be printed [ 49.700483][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 49.700491][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 49.700500][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1d27 instead [ 49.700509][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1ed6 instead [ 49.700516][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 49.700524][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 49.700531][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 49.700541][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 49.700556][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 49.700572][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 49.700579][ T6146] jffs2: Further such events for this erase block will not be printed [ 49.700757][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 49.700765][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 49.700774][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1d27 instead [ 49.700783][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1ed6 instead [ 49.700805][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 49.700813][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 49.700827][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1d27 instead [ 49.700836][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1ed6 instead [ 49.700858][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 49.700866][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 49.700875][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1d27 instead [ 49.700884][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1ed6 instead [ 49.700906][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 49.700914][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 49.700923][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1d27 instead [ 49.700932][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1ed6 instead [ 49.700954][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 49.700962][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 49.700970][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1d27 instead [ 49.700979][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1ed6 instead [ 49.701001][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 49.701009][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 49.701017][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1d27 instead [ 49.701026][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1ed6 instead [ 49.701048][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 49.701056][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 49.701064][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1d27 instead [ 49.701073][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1ed6 instead [ 49.701094][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 49.701104][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 49.701113][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1d27 instead [ 49.701122][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1ed6 instead [ 49.701147][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 49.701155][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 49.701163][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1d27 instead [ 49.701173][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1ed6 instead [ 49.701206][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 49.701218][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 49.701230][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1d27 instead [ 49.701243][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1ed6 instead [ 49.701282][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 49.701295][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 49.701303][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1d27 instead [ 49.701312][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1ed6 instead [ 49.701334][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 49.701342][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 49.701350][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1d27 instead [ 49.701359][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1ed6 instead [ 49.701380][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 49.701388][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 49.701396][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1d27 instead [ 49.701405][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1ed6 instead [ 49.701426][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 49.701434][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 49.701442][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1d27 instead [ 49.701452][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1ed6 instead [ 49.701473][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 49.701481][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 49.701489][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1d27 instead [ 49.701498][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1ed6 instead [ 49.701520][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 49.701528][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 49.701536][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1d27 instead [ 49.701545][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1ed6 instead [ 49.701566][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 49.701574][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 49.701582][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1d27 instead [ 49.701591][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1ed6 instead [ 49.701613][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 49.701621][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 49.701629][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1d27 instead [ 49.701639][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1ed6 instead [ 49.701660][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 49.701668][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 49.701676][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1d27 instead [ 49.701686][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1ed6 instead [ 49.701707][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 49.701715][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 49.701724][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1d27 instead [ 49.701733][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1ed6 instead [ 49.701754][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 49.701762][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 49.701770][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1d27 instead [ 49.701779][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1ed6 instead [ 49.701800][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 49.701808][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 49.701822][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1d27 instead [ 49.701832][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1ed6 instead [ 49.701854][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 49.701864][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 49.701873][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1d27 instead [ 49.701882][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1ed6 instead [ 49.701903][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 49.701911][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 49.701919][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1d27 instead [ 49.701929][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1ed6 instead [ 49.701950][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 49.701958][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 49.701966][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1d27 instead [ 49.701975][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1ed6 instead [ 49.701997][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 49.702004][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 49.702013][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1d27 instead [ 49.702022][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1ed6 instead [ 49.702062][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 49.702070][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 49.702079][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1d27 instead [ 49.702088][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1ed6 instead [ 49.702110][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 49.702118][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 49.702126][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1d27 instead [ 49.702135][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1ed6 instead [ 49.702157][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 49.702165][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 49.702174][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1d27 instead [ 49.702210][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1ed6 instead [ 49.702235][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 49.702243][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 49.702252][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1d27 instead [ 49.702262][ T6146] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1ed6 instead [ 49.702278][ T6146] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 49.702283][ T6146] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 49.738255][ T5883] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 49.739087][ T5883] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 49.739100][ T5883] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 49.739117][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.747111][ T5883] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 49.753321][ T5883] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 50.160418][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 50.481370][ T6163] dlm: no locking on control device [ 50.538311][ T6167] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.539912][ T6167] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 50.717696][ T6173] ubi0: attaching mtd0 [ 50.721823][ T6173] ubi0: scanning is finished [ 50.901103][ T859] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.047691][ T5803] Bluetooth: hci0: command tx timeout [ 51.315710][ T6173] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 51.315758][ T6173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 51.315824][ T6173] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 51.315858][ T6173] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 51.316061][ T6173] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 51.316094][ T6173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 51.316160][ T6173] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 51.316374][ T6173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 51.316439][ T6183] ubi0: background thread "ubi_bgt0d" started, PID 6183 [ 51.316466][ T6174] ubi0: detaching mtd0 [ 51.338990][ T6174] ubi0: mtd0 is detached [ 51.487627][ T1036] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.658564][ T1036] usb 8-1: Using ep0 maxpacket: 8 [ 51.660872][ T1036] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.664382][ T1036] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 51.664406][ T1036] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.664417][ T1036] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.664428][ T1036] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.664439][ T1036] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.664458][ T1036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.705282][ T43] audit: type=1326 audit(1792989594.843:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.705390][ T43] audit: type=1326 audit(1792989594.843:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706107][ T43] audit: type=1326 audit(1792989594.843:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706129][ T43] audit: type=1326 audit(1792989594.843:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706260][ T43] audit: type=1326 audit(1792989594.843:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706282][ T43] audit: type=1326 audit(1792989594.843:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706421][ T43] audit: type=1326 audit(1792989594.843:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706631][ T43] audit: type=1326 audit(1792989594.843:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706733][ T43] audit: type=1326 audit(1792989594.843:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.706809][ T43] audit: type=1326 audit(1792989594.843:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.4.45" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f93fbc code=0x7ffc0000 [ 51.777352][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 51.855715][ T6200] process 'syz.4.45' launched '/dev/fd/5' with NULL argv: empty string added [ 51.868752][ T1036] usb 8-1: usb_control_msg returned -32 [ 51.868790][ T1036] usbtmc 8-1:16.0: can't read capabilities [ 52.043748][ T6200] Console: switching to colour dummy device 80x25 [ 52.209288][ T5872] usb 7-1: USB disconnect, device number 3 [ 52.221431][ T5872] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 52.221692][ T5872] spcp8x5 7-1:1.0: device disconnected [ 52.414062][ T6210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 52.414076][ T6210] UDF-fs: Scanning with blocksize 2048 failed [ 52.415719][ T6210] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 52.415730][ T6210] UDF-fs: Scanning with blocksize 4096 failed [ 52.624455][ T6215] block device autoloading is deprecated and will be removed. [ 52.928904][ T6225] ubi0: attaching mtd0 [ 53.157791][ T5803] Bluetooth: hci0: command tx timeout [ 53.675523][ T6225] ubi0: scanning is finished [ 53.946779][ T6225] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 53.946801][ T6225] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 53.946860][ T6225] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 53.946875][ T6225] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 53.946889][ T6225] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 53.946903][ T6225] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 53.946918][ T6225] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 53.946935][ T6225] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 53.947033][ T6231] ubi0: background thread "ubi_bgt0d" started, PID 6231 [ 53.976549][ T6226] ubi0: detaching mtd0 [ 53.982642][ T6226] ubi0: mtd0 is detached [ 54.229267][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.232343][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.234077][ T6242] bond0 (unregistering): Released all slaves [ 54.250072][ T1036] usb 8-1: USB disconnect, device number 3 [ 54.395335][ T6245] warning: `syz.3.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.467726][ T1032] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 54.978051][ T1032] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 54.978893][ T1032] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.978906][ T1032] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 54.978923][ T1032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.983869][ T1032] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 54.985592][ T1032] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 55.207649][ T5803] Bluetooth: hci0: command tx timeout [ 55.706707][ T5872] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.938604][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 55.939043][ T5872] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.939810][ T5872] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 55.939832][ T5872] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.939843][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.939855][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.939866][ T5872] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.939884][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.973712][ T6279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.976018][ T6279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.977049][ T6279] bond0 (unregistering): Released all slaves [ 56.233824][ T5872] usb 8-1: usb_control_msg returned -32 [ 56.233848][ T5872] usbtmc 8-1:16.0: can't read capabilities [ 57.134025][ T1032] usb 9-1: USB disconnect, device number 2 [ 57.140385][ T1032] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 57.140785][ T1032] spcp8x5 9-1:1.0: device disconnected [ 57.231116][ T6301] fuse: Unknown parameter '0x0000000000000003' [ 58.092406][ T6317] fuse: Unknown parameter '0x0000000000000003' [ 58.749788][ T1036] usb 8-1: USB disconnect, device number 4 [ 59.677671][ T1036] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.838452][ T1036] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 59.842512][ T1036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.842529][ T1036] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 59.842547][ T1036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.851776][ T1036] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 59.863515][ T1036] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 60.917933][ T6363] syzkaller1: entered promiscuous mode [ 60.917947][ T6363] syzkaller1: entered allmulticast mode [ 60.925159][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 61.291268][ T6372] ubi0: attaching mtd0 [ 61.306765][ T6372] ubi0: scanning is finished [ 61.388754][ T65] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.557791][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 61.562171][ T65] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.567402][ T65] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 61.587043][ T65] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.587059][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.587070][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.587081][ T65] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.587102][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.883970][ T6372] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 61.883987][ T6372] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 61.883996][ T6372] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 61.884005][ T6372] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 61.884014][ T6372] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 61.885183][ T6372] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 61.885193][ T6372] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 61.887677][ T6372] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 61.887760][ T6375] ubi0: background thread "ubi_bgt0d" started, PID 6375 [ 61.890978][ T6373] ubi0: detaching mtd0 [ 61.892724][ T6373] ubi0: mtd0 is detached [ 62.161283][ T65] usb 7-1: usb_control_msg returned -32 [ 62.161305][ T65] usbtmc 7-1:16.0: can't read capabilities [ 62.307784][ T5892] usb 8-1: USB disconnect, device number 5 [ 62.318762][ T5892] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 62.319028][ T5892] spcp8x5 8-1:1.0: device disconnected [ 62.407259][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 63.893773][ T6424] ubi0: attaching mtd0 [ 63.897152][ T6424] ubi0: scanning is finished [ 64.078047][ T6424] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 64.078079][ T6424] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 64.078088][ T6424] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 64.078096][ T6424] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 64.078105][ T6424] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 64.078130][ T6424] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 64.078140][ T6424] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 64.078154][ T6424] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 64.078269][ T6427] ubi0: background thread "ubi_bgt0d" started, PID 6427 [ 64.078309][ T6425] ubi0: detaching mtd0 [ 64.080032][ T6425] ubi0: mtd0 is detached [ 64.616462][ T58] usb 7-1: USB disconnect, device number 4 [ 64.812043][ T6434] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 64.838910][ T6438] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16777216.0), cmd(9) [ 64.944290][ T6446] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.168295][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.318362][ T5883] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 65.319356][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.319370][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 65.319387][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.329763][ T5883] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 65.336255][ T5883] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 65.850909][ T6466] ubi0: attaching mtd0 [ 65.852164][ T6466] ubi0: scanning is finished [ 66.205099][ T6466] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 66.205171][ T6466] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 66.205302][ T6466] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 66.205370][ T6466] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 66.205536][ T6466] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 66.205864][ T6466] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 66.205899][ T6466] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 66.205969][ T6466] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 66.206181][ T6467] ubi0: detaching mtd0 [ 66.206179][ T6469] ubi0: background thread "ubi_bgt0d" started, PID 6469 [ 66.258903][ T6467] ubi0: mtd0 is detached [ 66.438281][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 66.544134][ T6481] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 66.544149][ T6481] netlink: 4108 bytes leftover after parsing attributes in process `syz.2.119'. [ 66.544158][ T6481] nbd: illegal input index 12649037 [ 66.611350][ T6483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 66.611399][ T6483] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.677636][ T65] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 66.847619][ T65] usb 9-1: Using ep0 maxpacket: 8 [ 66.850057][ T65] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.850862][ T65] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 66.850885][ T65] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.850896][ T65] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.850908][ T65] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.850919][ T65] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.850937][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.060212][ T65] usb 9-1: usb_control_msg returned -32 [ 67.060234][ T65] usbtmc 9-1:16.0: can't read capabilities [ 67.068598][ T65] usb 9-1: USB disconnect, device number 3 [ 67.545521][ T6497] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 67.597405][ T6501] kvm: emulating exchange as write [ 67.698714][ T34] usb 6-1: USB disconnect, device number 2 [ 67.701890][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 67.702185][ T34] spcp8x5 6-1:1.0: device disconnected [ 67.791622][ T6521] ubi0: attaching mtd0 [ 67.792537][ T6521] ubi0: scanning is finished [ 67.799187][ T6523] befs: (nullb0): No write support. Marking filesystem read-only [ 67.800015][ T6523] befs: (nullb0): invalid magic header [ 67.988650][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 68.021608][ T6521] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 68.021753][ T6521] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 68.021818][ T6521] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 68.021884][ T6521] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 68.021996][ T6521] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 68.022062][ T6521] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 68.022114][ T6521] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 68.022126][ T6521] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 68.022185][ T6531] ubi0: background thread "ubi_bgt0d" started, PID 6531 [ 68.022254][ T6527] ubi0: detaching mtd0 [ 68.074766][ T6527] ubi0: mtd0 is detached [ 68.457667][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 68.617680][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 68.619029][ T34] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.619897][ T34] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 68.619920][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.619931][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.619942][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.619953][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.619972][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.709872][ T6540] comedi comedi1: 8255: I/O base address not correctly aligned [ 68.719234][ T6543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.139'. [ 68.781734][ T6540] xt_CT: No such helper "snmp_trap" [ 68.823823][ T6551] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 68.852261][ T34] usb 9-1: usb_control_msg returned -71 [ 68.852284][ T34] usbtmc 9-1:16.0: can't read capabilities [ 68.871349][ T34] usb 9-1: USB disconnect, device number 4 [ 68.888003][ T6556] /dev/sg0: Can't lookup blockdev [ 68.928132][ T6547] [U] m7°:Q´u}Uüͯ†-£­¯Æúþbé”ØY½òT ‰Rñi˜µdèQÐ5ÒºÚ'íó[Á{4©´þ¢€±Už´IŸ}vš [ 69.032678][ T6565] netlink: 80 bytes leftover after parsing attributes in process `syz.2.144'. [ 69.032695][ T6565] openvswitch: netlink: Missing key (keys=40, expected=80) [ 69.163050][ T43] kauditd_printk_skb: 917 callbacks suppressed [ 69.163080][ T43] audit: type=1800 audit(1792989612.303:930): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.144" name="file0" dev="overlay" ino=245 res=0 errno=-22 [ 69.277757][ T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.396806][ T6578] ubi0: attaching mtd0 [ 69.403293][ T6578] ubi0: scanning is finished [ 69.455987][ T65] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 69.480766][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.480782][ T65] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.480800][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.494508][ T65] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 69.504264][ T65] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 69.579133][ T6578] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 69.580213][ T6578] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 69.580225][ T6578] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 69.580234][ T6578] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 69.580243][ T6578] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 69.581393][ T6578] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 69.581404][ T6578] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 69.583297][ T6578] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 69.584436][ T6579] ubi0: detaching mtd0 [ 69.614549][ T6579] ubi0: mtd0 is detached [ 69.816595][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 69.917226][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 70.157709][ T65] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 70.335677][ T65] usb 8-1: Using ep0 maxpacket: 8 [ 70.338786][ T65] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.339939][ T65] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 70.339976][ T65] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.339993][ T65] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.340011][ T65] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.340029][ T65] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.340059][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.608099][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 70.757625][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 70.758068][ T34] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.760288][ T34] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 70.760313][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.760325][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.760337][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.760350][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.760370][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.890149][ T6621] ubi0: attaching mtd0 [ 70.891527][ T6621] ubi0: scanning is finished [ 70.967309][ T34] usb 9-1: usb_control_msg returned -71 [ 70.967333][ T34] usbtmc 9-1:16.0: can't read capabilities [ 70.977468][ T34] usb 9-1: USB disconnect, device number 5 [ 70.983906][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.983934][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.984662][ T42] cfg80211: failed to load regulatory.db [ 71.050796][ T6621] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 71.050812][ T6621] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 71.050821][ T6621] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 71.050829][ T6621] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 71.050838][ T6621] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 71.050846][ T6621] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 71.050856][ T6621] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 71.050865][ T6621] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 71.051994][ T6623] ubi0: background thread "ubi_bgt0d" started, PID 6623 [ 71.052040][ T6622] ubi0: detaching mtd0 [ 71.064740][ T6622] ubi0: mtd0 is detached [ 71.458330][ T6628] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 71.458346][ T6628] netlink: 4108 bytes leftover after parsing attributes in process `syz.3.153'. [ 71.458356][ T6628] nbd: illegal input index 12649037 [ 71.690748][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 71.969312][ T65] usb 6-1: USB disconnect, device number 3 [ 71.971259][ T6634] netlink: 80 bytes leftover after parsing attributes in process `syz.2.163'. [ 71.971276][ T6634] openvswitch: netlink: Missing key (keys=40, expected=80) [ 71.978953][ T65] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 71.979441][ T65] spcp8x5 6-1:1.0: device disconnected [ 72.356295][ T6653] ubi0: attaching mtd0 [ 72.366763][ T6653] ubi0: scanning is finished [ 72.565546][ T6653] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 72.565639][ T6653] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 72.565713][ T6653] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 72.565845][ T6653] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 72.565911][ T6653] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 72.566128][ T6653] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 72.566194][ T6653] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 72.566259][ T6653] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 72.566570][ T6656] ubi0: background thread "ubi_bgt0d" started, PID 6656 [ 72.566583][ T6654] ubi0: detaching mtd0 [ 72.576162][ T6654] ubi0: mtd0 is detached [ 72.907348][ T1036] usb 8-1: USB disconnect, device number 6 [ 72.969171][ T6660] FAULT_INJECTION: forcing a failure. [ 72.969171][ T6660] name fail_futex, interval 1, probability 0, space 0, times 1 [ 72.969208][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT(full) [ 72.969221][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.969234][ T6660] Call Trace: [ 72.969238][ T6660] [ 72.969242][ T6660] dump_stack_lvl+0x100/0x190 [ 72.969262][ T6660] should_fail_ex.cold+0x5/0xa [ 72.969277][ T6660] get_futex_key+0x28c/0x13e0 [ 72.969295][ T6660] ? __pfx_get_futex_key+0x10/0x10 [ 72.969312][ T6660] ? __mutex_unlock_slowpath+0x35d/0x930 [ 72.969334][ T6660] futex_wake+0xf4/0x5e0 [ 72.969354][ T6660] ? __pfx_futex_wake+0x10/0x10 [ 72.969373][ T6660] ? detach_task_ctx_data+0x83/0x490 [ 72.969392][ T6660] do_futex+0x2b2/0x440 [ 72.969407][ T6660] ? __pfx_do_futex+0x10/0x10 [ 72.969420][ T6660] ? __might_fault+0xc5/0x140 [ 72.969433][ T6660] mm_exit_exec_release+0x256/0x2f0 [ 72.969452][ T6660] do_exit+0x6d8/0x2a00 [ 72.969466][ T6660] ? __pfx_do_exit+0x10/0x10 [ 72.969477][ T6660] ? do_raw_spin_lock+0x128/0x260 [ 72.969489][ T6660] ? find_held_lock+0x2b/0x80 [ 72.969502][ T6660] ? get_signal+0x7db/0x21d0 [ 72.969520][ T6660] do_group_exit+0xd5/0x2a0 [ 72.969533][ T6660] get_signal+0x1ebd/0x21d0 [ 72.969554][ T6660] ? __pfx_get_signal+0x10/0x10 [ 72.969571][ T6660] ? do_futex+0x190/0x440 [ 72.969586][ T6660] arch_do_signal_or_restart+0x91/0x7a0 [ 72.969603][ T6660] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.969626][ T6660] exit_to_user_mode_loop+0x139/0x700 [ 72.969640][ T6660] ? rcu_is_watching+0x13/0xc0 [ 72.969657][ T6660] __do_fast_syscall_32+0x5b0/0x8c0 [ 72.969671][ T6660] do_fast_syscall_32+0x32/0x70 [ 72.969682][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.969696][ T6660] RIP: 0023:0xf7f08fbc [ 72.969705][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.969715][ T6660] RSP: 002b:00000000f53b65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 72.969735][ T6660] RAX: fffffffffffffe00 RBX: 00000000f73c4f88 RCX: 0000000000000080 [ 72.969743][ T6660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73c4f8c [ 72.969749][ T6660] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 72.969755][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.969761][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.969774][ T6660] [ 73.190731][ T6669] FAULT_INJECTION: forcing a failure. [ 73.190731][ T6669] name failslab, interval 1, probability 0, space 0, times 1 [ 73.190751][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT(full) [ 73.190763][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.190769][ T6669] Call Trace: [ 73.190773][ T6669] [ 73.190777][ T6669] dump_stack_lvl+0x100/0x190 [ 73.190795][ T6669] should_fail_ex.cold+0x5/0xa [ 73.190817][ T6669] should_failslab+0xc2/0x120 [ 73.190833][ T6669] __kmalloc_cache_noprof+0x91/0x6d0 [ 73.190846][ T6669] ? bpf_prog_stream_init+0x121/0x390 [ 73.190860][ T6669] bpf_prog_stream_init+0x121/0x390 [ 73.190875][ T6669] bpf_prog_load+0xa97/0x2ba0 [ 73.190894][ T6669] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.190920][ T6669] __sys_bpf+0x146f/0x4b60 [ 73.190939][ T6669] ? __pfx___sys_bpf+0x10/0x10 [ 73.190954][ T6669] ? lock_acquire+0x1d1/0x380 [ 73.190970][ T6669] ? get_pid_task+0x2a/0x250 [ 73.190983][ T6669] ? find_held_lock+0x2b/0x80 [ 73.190996][ T6669] ? get_pid_task+0xfc/0x250 [ 73.191007][ T6669] ? get_pid_task+0xfc/0x250 [ 73.191023][ T6669] ? proc_fail_nth_write+0x9f/0x220 [ 73.191039][ T6669] ? find_held_lock+0x2b/0x80 [ 73.191056][ T6669] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.191070][ T6669] ? find_held_lock+0x2b/0x80 [ 73.191084][ T6669] ? ksys_write+0x190/0x250 [ 73.191097][ T6669] ? ksys_write+0x190/0x250 [ 73.191118][ T6669] ? lock_acquire+0x1d1/0x380 [ 73.191134][ T6669] ? __might_fault+0xc5/0x140 [ 73.191145][ T6669] ? find_held_lock+0x2b/0x80 [ 73.191160][ T6669] ? __ia32_sys_bpf+0xcc/0x170 [ 73.191176][ T6669] __ia32_sys_bpf+0xcc/0x170 [ 73.191192][ T6669] ? __might_fault+0x111/0x140 [ 73.191203][ T6669] __do_fast_syscall_32+0x14b/0x8c0 [ 73.191214][ T6669] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.191233][ T6669] do_fast_syscall_32+0x32/0x70 [ 73.191244][ T6669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.191257][ T6669] RIP: 0023:0xf73fefbc [ 73.191266][ T6669] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.191276][ T6669] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 73.191289][ T6669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 73.191295][ T6669] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.191301][ T6669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.191307][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.191313][ T6669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.191325][ T6669] [ 73.274122][ T6679] netlink: 'syz.1.180': attribute type 5 has an invalid length. [ 73.274876][ T6679] netlink: 72 bytes leftover after parsing attributes in process `syz.1.180'. [ 73.275476][ T6679] netlink: 830 bytes leftover after parsing attributes in process `syz.1.180'. [ 73.397823][ T1036] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 73.460335][ T6683] FAULT_INJECTION: forcing a failure. [ 73.460335][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 73.460356][ T6683] CPU: 2 UID: 0 PID: 6683 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 73.460369][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.460375][ T6683] Call Trace: [ 73.460379][ T6683] [ 73.460383][ T6683] dump_stack_lvl+0x100/0x190 [ 73.460403][ T6683] should_fail_ex.cold+0x5/0xa [ 73.460418][ T6683] should_failslab+0xc2/0x120 [ 73.460434][ T6683] __kmalloc_flags_noprof+0x122/0x8e0 [ 73.460446][ T6683] ? find_held_lock+0x2b/0x80 [ 73.460460][ T6683] ? __pcs_replace_empty_main+0x132/0x650 [ 73.460471][ T6683] ? __pcs_replace_empty_main+0x3fa/0x650 [ 73.460485][ T6683] __pcs_replace_empty_main+0x3fa/0x650 [ 73.460498][ T6683] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 73.460512][ T6683] ? ovs_flow_alloc+0x1e/0x210 [ 73.460530][ T6683] ovs_flow_alloc+0x1e/0x210 [ 73.460545][ T6683] ovs_packet_cmd_execute+0x619/0x16c0 [ 73.460564][ T6683] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 73.460583][ T6683] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 73.460616][ T6683] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 73.460634][ T6683] genl_family_rcv_msg_doit+0x214/0x300 [ 73.460650][ T6683] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 73.460665][ T6683] ? genl_get_cmd+0x3e7/0x760 [ 73.460682][ T6683] ? bpf_lsm_capable+0x9/0x10 [ 73.460698][ T6683] ? security_capable+0x80/0x260 [ 73.460711][ T6683] ? ns_capable+0xcd/0xf0 [ 73.460728][ T6683] genl_rcv_msg+0x560/0x800 [ 73.460744][ T6683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.460759][ T6683] ? __lock_acquire+0x5c0/0x1f40 [ 73.460775][ T6683] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 73.460797][ T6683] netlink_rcv_skb+0x159/0x420 [ 73.460810][ T6683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.460826][ T6683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.460844][ T6683] ? netlink_deliver_tap+0x1ae/0xb50 [ 73.460858][ T6683] genl_rcv+0x28/0x40 [ 73.460871][ T6683] netlink_unicast+0x668/0x950 [ 73.460886][ T6683] ? __pfx_netlink_unicast+0x10/0x10 [ 73.460903][ T6683] netlink_sendmsg+0x9ac/0x10c0 [ 73.460918][ T6683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.460935][ T6683] ? apparmor_socket_sendmsg+0x165/0x280 [ 73.460951][ T6683] ? __sys_sendto+0x492/0x4e0 [ 73.460970][ T6683] __sys_sendto+0x492/0x4e0 [ 73.460980][ T6683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.460993][ T6683] ? __pfx___sys_sendto+0x10/0x10 [ 73.461014][ T6683] ? find_held_lock+0x2b/0x80 [ 73.461027][ T6683] ? __might_fault+0xc5/0x140 [ 73.461037][ T6683] ? __might_fault+0xc5/0x140 [ 73.461049][ T6683] __ia32_sys_sendto+0xdd/0x1b0 [ 73.461060][ T6683] ? __might_fault+0x111/0x140 [ 73.461070][ T6683] __do_fast_syscall_32+0x14b/0x8c0 [ 73.461082][ T6683] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.461100][ T6683] do_fast_syscall_32+0x32/0x70 [ 73.461111][ T6683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.461125][ T6683] RIP: 0023:0xf7f92fbc [ 73.461134][ T6683] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.461144][ T6683] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 73.461155][ T6683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 73.461162][ T6683] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.461168][ T6683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.461173][ T6683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.461179][ T6683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.461193][ T6683] [ 73.465308][ T6683] netlink: ct family unspecified [ 73.547626][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.628700][ T1036] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 73.630432][ T1036] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.630453][ T1036] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 73.630483][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.656786][ T1036] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 73.668835][ T1036] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 73.697624][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 73.709829][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 73.709854][ T5892] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 73.710400][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 73.721121][ T5892] usb 6-1: string descriptor 0 read error: -22 [ 73.721177][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.724353][ T5892] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 73.724372][ T5892] dw2102: su3000_power_ctrl: 1, initialized 0 [ 73.724585][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 73.739708][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 73.741018][ T5892] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 73.741041][ T5892] usb 6-1: media controller created [ 73.741264][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741271][ T5892] dw2102: i2c transfer failed. [ 73.741291][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741297][ T5892] dw2102: i2c transfer failed. [ 73.741302][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741312][ T5892] dw2102: i2c transfer failed. [ 73.741318][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741323][ T5892] dw2102: i2c transfer failed. [ 73.741329][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741334][ T5892] dw2102: i2c transfer failed. [ 73.741339][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 73.741345][ T5892] dw2102: i2c transfer failed. [ 73.741349][ T5892] dvb-usb: MAC address: 02:02:02:02:02:02 [ 73.759972][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.788374][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 73.788385][ T5892] dw2102: command 0x0e transfer failed. [ 73.788389][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 73.788395][ T5892] dw2102: command 0x0e transfer failed. [ 74.107724][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 74.107741][ T5892] dw2102: command 0x0e transfer failed. [ 74.107748][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 74.107757][ T5892] dw2102: command 0x0e transfer failed. [ 74.107762][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 74.107772][ T5892] dw2102: command 0x51 transfer failed. [ 74.112306][ T6679] dw2102: i2c rd: len=4096 is too big! [ 74.112306][ T6679] [ 74.132651][ T5892] DVB: Unable to find symbol ds3000_attach() [ 74.132662][ T5892] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 74.182738][ T6695] ubi0: attaching mtd0 [ 74.183667][ T6695] ubi0: scanning is finished [ 74.393313][ T6695] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.393374][ T6695] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.393612][ T6695] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.393628][ T6695] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 74.393643][ T6695] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.393780][ T6695] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.393992][ T6695] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 74.394060][ T6695] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.394227][ T6699] ubi0: background thread "ubi_bgt0d" started, PID 6699 [ 74.394353][ T6696] ubi0: detaching mtd0 [ 74.398470][ T5892] rc_core: IR keymap rc-su3000 not found [ 74.398480][ T5892] Registered IR keymap rc-empty [ 74.413309][ T6696] ubi0: mtd0 is detached [ 75.040073][ T5892] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 75.041597][ T5892] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 75.044332][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 75.044343][ T5892] dw2102: su3000_power_ctrl: 0, initialized 1 [ 75.044350][ T5892] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 75.048937][ T5892] usb 6-1: USB disconnect, device number 4 [ 75.110756][ T5892] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 75.934531][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.934657][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.949372][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.962480][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.962589][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.970500][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.981836][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.983584][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.986773][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.993374][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.993593][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.996928][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.081115][ T6739] xt_hl: Unknown Hop Limit match mode: 230 [ 76.136730][ T6739] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 76.173005][ T1032] usb 9-1: USB disconnect, device number 6 [ 76.180966][ T1032] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 76.181241][ T1032] spcp8x5 9-1:1.0: device disconnected [ 76.491336][ T6751] ubi0: attaching mtd0 [ 76.492831][ T6751] ubi0: scanning is finished [ 76.730695][ T6751] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 76.730856][ T6751] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 76.730893][ T6751] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 76.730903][ T6751] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 76.730938][ T6751] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 76.730947][ T6751] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 76.730982][ T6751] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 76.731018][ T6751] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 76.731092][ T6760] ubi0: background thread "ubi_bgt0d" started, PID 6760 [ 76.731117][ T6752] ubi0: detaching mtd0 [ 76.778985][ T6752] ubi0: mtd0 is detached [ 77.438009][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 77.528220][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.945799][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 78.018989][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.019042][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.019096][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.150638][ T6794] ubi0: attaching mtd0 [ 78.151513][ T6794] ubi0: scanning is finished [ 78.312238][ T6794] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.312298][ T6794] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.312516][ T6794] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.312660][ T6794] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 78.312729][ T6794] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.312802][ T6794] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.313052][ T6794] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 78.313119][ T6794] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.313314][ T6795] ubi0: detaching mtd0 [ 78.355960][ T6795] ubi0: mtd0 is detached [ 79.132863][ T43] audit: type=1326 audit(1792989622.273:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7fc00000 [ 79.233783][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 79.242149][ T6799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.251139][ T6799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.253385][ T6799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.253533][ T6799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.253666][ T6799] hwrng_fill thread creation failed [ 79.325406][ T6817] tmpfs: Bad value for 'mpol' [ 79.488265][ T65] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.499427][ T6826] tipc: Enabling of bearer rejected, failed to enable media [ 79.565101][ T6823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.617697][ T65] usb 8-1: device descriptor read/64, error -71 [ 79.867757][ T65] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.914191][ T43] audit: type=1326 audit(1792989623.053:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fefbc code=0x7fc00000 [ 80.007668][ T65] usb 8-1: device descriptor read/64, error -71 [ 80.028121][ T6839] ubi0: attaching mtd0 [ 80.029143][ T6839] ubi0: scanning is finished [ 80.117868][ T65] usb usb8-port1: attempt power cycle [ 80.269954][ T6839] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 80.270089][ T6839] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 80.270186][ T6839] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 80.270283][ T6839] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 80.270412][ T6839] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 80.270445][ T6839] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 80.270643][ T6839] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 80.270772][ T6839] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 80.270900][ T6844] ubi0: background thread "ubi_bgt0d" started, PID 6844 [ 80.270987][ T6842] ubi0: detaching mtd0 [ 80.287318][ T6842] ubi0: mtd0 is detached [ 80.467790][ T65] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 80.488148][ T65] usb 8-1: device descriptor read/8, error -71 [ 80.685311][ T6854] batman_adv: batadv0: Adding interface: syzkaller0 [ 80.685328][ T6854] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.685351][ T6854] batman_adv: batadv0: Interface activated: syzkaller0 [ 80.737659][ T65] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 80.758159][ T65] usb 8-1: device descriptor read/8, error -71 [ 80.790652][ T6856] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.224'. [ 80.791232][ T6854] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.224'. [ 80.847831][ T6855] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.224'. [ 80.965013][ T65] usb usb8-port1: unable to enumerate USB device [ 80.980017][ T6853] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 81.002925][ T6853] batman_adv: batadv0: Removing interface: syzkaller0 [ 81.113745][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'. [ 81.128568][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.223708][ T43] audit: type=1326 audit(1792989624.363:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.230" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f92fbc code=0x0 [ 81.260237][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 81.287796][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.287835][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.287835][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.527788][ T1036] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.678425][ T1036] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.679433][ T1036] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.679456][ T1036] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 81.679474][ T1036] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.681351][ T1036] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.681371][ T1036] usb 7-1: Product: syz [ 81.681383][ T1036] usb 7-1: Manufacturer: syz [ 81.681394][ T1036] usb 7-1: SerialNumber: syz [ 81.684430][ T1036] usb 7-1: config 0 descriptor?? [ 81.684987][ T6871] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.691048][ T1036] usb 7-1: selecting invalid altsetting 0 [ 82.057691][ T6884] ubi0: attaching mtd0 [ 82.064366][ T6884] ubi0: scanning is finished [ 82.253105][ T6884] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 82.253175][ T6884] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 82.253239][ T6884] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 82.253309][ T6884] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 82.253375][ T6884] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 82.253409][ T6884] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 82.253475][ T6884] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 82.253541][ T6884] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 82.253625][ T6888] ubi0: background thread "ubi_bgt0d" started, PID 6888 [ 82.253711][ T6886] ubi0: detaching mtd0 [ 82.261977][ T6886] ubi0: mtd0 is detached [ 82.340968][ T6892] FAULT_INJECTION: forcing a failure. [ 82.340968][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.340996][ T6892] CPU: 2 UID: 0 PID: 6892 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) [ 82.341016][ T6892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.341026][ T6892] Call Trace: [ 82.341032][ T6892] [ 82.341039][ T6892] dump_stack_lvl+0x100/0x190 [ 82.341077][ T6892] should_fail_ex.cold+0x5/0xa [ 82.341104][ T6892] _copy_from_user+0x2e/0xd0 [ 82.341130][ T6892] ctl_ioctl+0xf3/0xcc0 [ 82.341176][ T6892] ? __pfx_ctl_ioctl+0x10/0x10 [ 82.341223][ T6892] ? __fget_files+0x21f/0x3d0 [ 82.341252][ T6892] dm_compat_ctl_ioctl+0x23/0x30 [ 82.341277][ T6892] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 82.341301][ T6892] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 82.341328][ T6892] __do_fast_syscall_32+0x14b/0x8c0 [ 82.341346][ T6892] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.341374][ T6892] do_fast_syscall_32+0x32/0x70 [ 82.341392][ T6892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.341414][ T6892] RIP: 0023:0xf7f08fbc [ 82.341429][ T6892] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 82.341445][ T6892] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 82.341464][ T6892] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c138fd0e [ 82.341475][ T6892] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.341485][ T6892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.341495][ T6892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.341505][ T6892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.341529][ T6892] [ 82.872728][ T6913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 83.207705][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.248029][ T58] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.288614][ T1036] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 83.367795][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.367828][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.367874][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.401367][ T58] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 83.407536][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.408127][ T58] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 83.408345][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 83.408443][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.438136][ T1036] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 83.439310][ T1036] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.439323][ T1036] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 83.439341][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.455970][ T1036] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 83.470836][ T1036] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 83.892959][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 84.454501][ T5892] usb 7-1: USB disconnect, device number 5 [ 84.658843][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 84.708922][ T58] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 84.708958][ T58] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 84.708965][ T58] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 84.721621][ T58] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 84.725010][ T58] usb 8-1: USB disconnect, device number 11 [ 84.866005][ T6933] cgroup: fork rejected by pids controller in /syz1 [ 84.947950][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.077666][ T5892] usb 7-1: device descriptor read/64, error -71 [ 85.317711][ T5892] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.447635][ T5892] usb 7-1: device descriptor read/64, error -71 [ 85.558708][ T5892] usb usb7-port1: attempt power cycle [ 85.604810][ T7075] ubi0: attaching mtd0 [ 85.615143][ T7075] ubi0: scanning is finished [ 85.908022][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.936778][ T65] usb 9-1: USB disconnect, device number 7 [ 85.938278][ T5892] usb 7-1: device descriptor read/8, error -71 [ 85.952885][ T65] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 85.953652][ T65] spcp8x5 9-1:1.0: device disconnected [ 86.177736][ T5892] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 86.198406][ T5892] usb 7-1: device descriptor read/8, error -71 [ 86.308238][ T5892] usb usb7-port1: unable to enumerate USB device [ 86.467816][ T1032] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 86.493792][ T7075] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 86.629736][ T1032] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 86.631571][ T1032] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.631596][ T1032] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 86.631930][ T1032] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.631952][ T1032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.792866][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.250'. [ 87.382558][ T1032] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 87.382574][ T1032] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 87.382581][ T1032] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 87.386029][ T1032] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 87.389928][ T1032] usb 8-1: USB disconnect, device number 12 [ 87.670104][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 87.712513][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'. [ 87.820938][ T7106] syzkaller1: entered promiscuous mode [ 87.820960][ T7106] syzkaller1: entered allmulticast mode [ 88.178941][ T7113] ubi0: attaching mtd0 [ 88.180964][ T7113] ubi0: scanning is finished [ 88.338247][ T7113] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 88.339384][ T7113] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.339395][ T7113] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.339403][ T7113] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 88.339411][ T7113] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.339419][ T7113] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.339427][ T7113] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 88.340534][ T7113] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.340601][ T7116] ubi0: background thread "ubi_bgt0d" started, PID 7116 [ 88.340697][ T7114] ubi0: detaching mtd0 [ 88.365804][ T7114] ubi0: mtd0 is detached [ 88.460265][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.640443][ T5883] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 88.644692][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.644716][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.644747][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.666916][ T5883] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 88.677425][ T5883] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 89.026402][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.262'. [ 89.057099][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 89.083282][ T7132] FAULT_INJECTION: forcing a failure. [ 89.083282][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 89.083301][ T7132] CPU: 2 UID: 0 PID: 7132 Comm: syz.3.264 Not tainted syzkaller #0 PREEMPT(full) [ 89.083314][ T7132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.083320][ T7132] Call Trace: [ 89.083324][ T7132] [ 89.083329][ T7132] dump_stack_lvl+0x100/0x190 [ 89.083348][ T7132] should_fail_ex.cold+0x5/0xa [ 89.083362][ T7132] ? __netlink_lookup+0x692/0x950 [ 89.083376][ T7132] should_failslab+0xc2/0x120 [ 89.083392][ T7132] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.083406][ T7132] ? netlink_deliver_tap+0x103/0xb50 [ 89.083418][ T7132] ? skb_clone+0x187/0x3f0 [ 89.083433][ T7132] skb_clone+0x187/0x3f0 [ 89.083446][ T7132] netlink_deliver_tap+0x82f/0xb50 [ 89.083462][ T7132] netlink_unicast+0x708/0x950 [ 89.083477][ T7132] ? __pfx_netlink_unicast+0x10/0x10 [ 89.083494][ T7132] netlink_sendmsg+0x9ac/0x10c0 [ 89.083509][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.083532][ T7132] ? apparmor_socket_sendmsg+0x165/0x280 [ 89.083556][ T7132] ? ____sys_sendmsg+0xa99/0xc30 [ 89.083581][ T7132] ____sys_sendmsg+0xa99/0xc30 [ 89.083604][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.083628][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.083657][ T7132] ___sys_sendmsg+0x190/0x1e0 [ 89.083675][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.083697][ T7132] ? find_held_lock+0x2b/0x80 [ 89.083720][ T7132] __sys_sendmsg+0x160/0x210 [ 89.083733][ T7132] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.083757][ T7132] __do_fast_syscall_32+0x14b/0x8c0 [ 89.083775][ T7132] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.083803][ T7132] do_fast_syscall_32+0x32/0x70 [ 89.083823][ T7132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.083847][ T7132] RIP: 0023:0xf7f08fbc [ 89.083862][ T7132] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.083878][ T7132] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.083895][ T7132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 89.083904][ T7132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.083910][ T7132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.083916][ T7132] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.083922][ T7132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.083936][ T7132] [ 89.112110][ T7134] netlink: 120 bytes leftover after parsing attributes in process `syz.3.265'. [ 89.219336][ T5883] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 89.359583][ T5883] usb 7-1: device descriptor read/64, error -71 [ 89.510190][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 89.517277][ T7173] ubi0: attaching mtd0 [ 89.530871][ T7173] ubi0: scanning is finished [ 89.597703][ T5883] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.632957][ T7173] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 89.633052][ T7173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 89.633092][ T7173] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 89.633101][ T7173] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 89.633139][ T7173] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 89.633149][ T7173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 89.633184][ T7173] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 89.633195][ T7173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 89.633294][ T7174] ubi0: detaching mtd0 [ 89.633304][ T7175] ubi0: background thread "ubi_bgt0d" started, PID 7175 [ 89.640771][ T7174] ubi0: mtd0 is detached [ 89.737670][ T5883] usb 7-1: device descriptor read/64, error -71 [ 89.848544][ T5883] usb usb7-port1: attempt power cycle [ 90.197669][ T5883] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 90.219380][ T5883] usb 7-1: device descriptor read/8, error -71 [ 90.333538][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.272'. [ 90.353741][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 90.356149][ T7182] FAULT_INJECTION: forcing a failure. [ 90.356149][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.356167][ T7182] CPU: 2 UID: 0 PID: 7182 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 90.356179][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.356186][ T7182] Call Trace: [ 90.356189][ T7182] [ 90.356193][ T7182] dump_stack_lvl+0x100/0x190 [ 90.356212][ T7182] should_fail_ex.cold+0x5/0xa [ 90.356227][ T7182] _copy_from_user+0x2e/0xd0 [ 90.356244][ T7182] get_compat_msghdr+0xb3/0x480 [ 90.356275][ T7182] ? __pfx_get_compat_msghdr+0x10/0x10 [ 90.356293][ T7182] ? rcu_is_watching+0x13/0xc0 [ 90.356307][ T7182] ? ___sys_sendmsg+0x19d/0x1e0 [ 90.356322][ T7182] ? kfree+0x1e5/0x6d0 [ 90.356332][ T7182] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 90.356348][ T7182] ___sys_sendmsg+0x1b6/0x1e0 [ 90.356365][ T7182] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.356380][ T7182] ? do_user_addr_fault+0x7d7/0x12f0 [ 90.356399][ T7182] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.356422][ T7182] ? __pfx___might_resched+0x10/0x10 [ 90.356441][ T7182] __sys_sendmmsg+0x304/0x440 [ 90.356456][ T7182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.356481][ T7182] ? __might_fault+0x111/0x140 [ 90.356493][ T7182] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 90.356511][ T7182] __do_fast_syscall_32+0x14b/0x8c0 [ 90.356522][ T7182] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.356540][ T7182] do_fast_syscall_32+0x32/0x70 [ 90.356552][ T7182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.356571][ T7182] RIP: 0023:0xf7f08fbc [ 90.356580][ T7182] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 90.356591][ T7182] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 90.356601][ T7182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800bd000 [ 90.356608][ T7182] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.356614][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.356620][ T7182] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.356626][ T7182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.356639][ T7182] [ 90.403042][ T7184] vivid-003: disconnect [ 90.407321][ T7184] vivid-003: reconnect [ 90.459868][ T7187] FAULT_INJECTION: forcing a failure. [ 90.459868][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.459898][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(full) [ 90.459918][ T7187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.459927][ T7187] Call Trace: [ 90.459932][ T7187] [ 90.459940][ T7187] dump_stack_lvl+0x100/0x190 [ 90.459967][ T7187] should_fail_ex.cold+0x5/0xa [ 90.459990][ T7187] _copy_from_user+0x2e/0xd0 [ 90.460016][ T7187] bpf_prog_load+0x15ef/0x2ba0 [ 90.460048][ T7187] ? __pfx_bpf_prog_load+0x10/0x10 [ 90.460089][ T7187] __sys_bpf+0x146f/0x4b60 [ 90.460119][ T7187] ? __pfx___sys_bpf+0x10/0x10 [ 90.460141][ T7187] ? lock_acquire+0x1d1/0x380 [ 90.460168][ T7187] ? get_pid_task+0x2a/0x250 [ 90.460187][ T7187] ? find_held_lock+0x2b/0x80 [ 90.460208][ T7187] ? get_pid_task+0xfc/0x250 [ 90.460226][ T7187] ? get_pid_task+0xfc/0x250 [ 90.460251][ T7187] ? proc_fail_nth_write+0x9f/0x220 [ 90.460278][ T7187] ? find_held_lock+0x2b/0x80 [ 90.460304][ T7187] ? rcu_read_lock_any_held+0x6a/0x90 [ 90.460347][ T7187] ? find_held_lock+0x2b/0x80 [ 90.460368][ T7187] ? ksys_write+0x190/0x250 [ 90.460390][ T7187] ? ksys_write+0x190/0x250 [ 90.460423][ T7187] ? lock_acquire+0x1d1/0x380 [ 90.460448][ T7187] ? __might_fault+0xc5/0x140 [ 90.460465][ T7187] ? find_held_lock+0x2b/0x80 [ 90.460491][ T7187] ? __ia32_sys_bpf+0xcc/0x170 [ 90.460515][ T7187] __ia32_sys_bpf+0xcc/0x170 [ 90.460540][ T7187] ? __might_fault+0x111/0x140 [ 90.460557][ T7187] __do_fast_syscall_32+0x14b/0x8c0 [ 90.460575][ T7187] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.460609][ T7187] do_fast_syscall_32+0x32/0x70 [ 90.460626][ T7187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.460647][ T7187] RIP: 0023:0xf7f93fbc [ 90.460661][ T7187] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 90.460676][ T7187] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 90.460693][ T7187] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 90.460704][ T7187] RDX: 00000000000000b6 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.460713][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.460722][ T7187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.460732][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.460754][ T7187] [ 90.467754][ T5883] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 90.498272][ T5883] usb 7-1: device descriptor read/8, error -71 [ 90.600796][ T5883] usb usb7-port1: unable to enumerate USB device [ 90.901038][ T7202] netlink: 'syz.3.279': attribute type 6 has an invalid length. [ 91.228863][ T65] usb 6-1: USB disconnect, device number 5 [ 91.336717][ T65] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 91.355676][ T65] spcp8x5 6-1:1.0: device disconnected [ 91.706431][ T7213] ubi0: attaching mtd0 [ 91.713861][ T7213] ubi0: scanning is finished [ 91.891407][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 91.921469][ T7213] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.921663][ T7213] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.922724][ T7213] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.922942][ T7213] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 91.923265][ T7213] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.923457][ T7213] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.923504][ T7213] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 656253400 [ 91.924097][ T7213] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.926840][ T7218] ubi0: background thread "ubi_bgt0d" started, PID 7218 [ 92.247465][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 92.445046][ T7232] FAULT_INJECTION: forcing a failure. [ 92.445046][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 92.445066][ T7232] CPU: 3 UID: 0 PID: 7232 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) [ 92.445079][ T7232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.445086][ T7232] Call Trace: [ 92.445090][ T7232] [ 92.445095][ T7232] dump_stack_lvl+0x100/0x190 [ 92.445114][ T7232] should_fail_ex.cold+0x5/0xa [ 92.445129][ T7232] should_failslab+0xc2/0x120 [ 92.445146][ T7232] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.445161][ T7232] ? __kernfs_new_node+0xd2/0xa10 [ 92.445176][ T7232] __kernfs_new_node+0xd2/0xa10 [ 92.445191][ T7232] ? __pfx___kernfs_new_node+0x10/0x10 [ 92.445205][ T7232] ? lock_acquire+0x1d1/0x380 [ 92.445223][ T7232] ? kernfs_root+0x23/0x2a0 [ 92.445234][ T7232] ? find_held_lock+0x2b/0x80 [ 92.445247][ T7232] ? kernfs_root+0xee/0x2a0 [ 92.445257][ T7232] ? kernfs_root+0xee/0x2a0 [ 92.445271][ T7232] kernfs_new_node+0x194/0x200 [ 92.445284][ T7232] ? __pfx_kernfs_new_node+0x10/0x10 [ 92.445297][ T7232] ? kernfs_add_one+0x213/0xb40 [ 92.445312][ T7232] __kernfs_create_file+0x53/0x350 [ 92.445330][ T7232] sysfs_add_file_mode_ns+0x207/0x3c0 [ 92.445350][ T7232] internal_create_group+0x593/0xfb0 [ 92.445365][ T7232] ? __pfx_internal_create_group+0x10/0x10 [ 92.445378][ T7232] ? kernfs_create_link+0x1f1/0x280 [ 92.445396][ T7232] internal_create_groups+0x9d/0x150 [ 92.445409][ T7232] device_add+0xf60/0x1970 [ 92.445445][ T7232] ? __pfx_device_add+0x10/0x10 [ 92.445462][ T7232] ? lockdep_init_map_type+0x5c/0x250 [ 92.445475][ T7232] ? __init_waitqueue_head+0xca/0x150 [ 92.445491][ T7232] netdev_register_kobject+0x1df/0x410 [ 92.445528][ T7232] register_netdevice+0x1313/0x26b0 [ 92.445547][ T7232] ? __pfx_register_netdevice+0x10/0x10 [ 92.445564][ T7232] ? dev_addr_mod+0x14f/0x2c0 [ 92.445577][ T7232] ip6gre_newlink_common.isra.0+0x153/0x350 [ 92.445598][ T7232] ? __pfx_ip6gre_newlink_common.isra.0+0x10/0x10 [ 92.445615][ T7232] ? net_generic+0xf4/0x2a0 [ 92.445630][ T7232] ? ip6gre_tunnel_find+0x35c/0x540 [ 92.445649][ T7232] ip6gre_newlink+0x197/0x450 [ 92.445667][ T7232] ? __pfx_ip6gre_newlink+0x10/0x10 [ 92.445687][ T7232] rtnl_newlink+0x1697/0x2620 [ 92.445708][ T7232] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.445724][ T7232] ? rcu_is_watching+0x13/0xc0 [ 92.445739][ T7232] ? kasan_quarantine_put+0x104/0x240 [ 92.445757][ T7232] ? kfree_skbmem+0x19a/0x210 [ 92.445782][ T7232] ? __dev_queue_xmit+0xa5e/0x4a50 [ 92.445795][ T7232] ? lock_acquire+0x1d1/0x380 [ 92.445812][ T7232] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 92.445827][ T7232] ? find_held_lock+0x2b/0x80 [ 92.445840][ T7232] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 92.445855][ T7232] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 92.445870][ T7232] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.445885][ T7232] rtnetlink_rcv_msg+0x95e/0xe90 [ 92.445901][ T7232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.445923][ T7232] netlink_rcv_skb+0x159/0x420 [ 92.445937][ T7232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.445952][ T7232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.445964][ T7232] ? __asan_memcpy+0x3c/0x60 [ 92.446007][ T7232] ? netlink_deliver_tap+0x1ae/0xb50 [ 92.446024][ T7232] netlink_unicast+0x668/0x950 [ 92.446041][ T7232] ? __pfx_netlink_unicast+0x10/0x10 [ 92.446060][ T7232] netlink_sendmsg+0x9ac/0x10c0 [ 92.446076][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.446093][ T7232] ? apparmor_socket_sendmsg+0x165/0x280 [ 92.446110][ T7232] ? ____sys_sendmsg+0xa99/0xc30 [ 92.446125][ T7232] ____sys_sendmsg+0xa99/0xc30 [ 92.446140][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.446155][ T7232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.446177][ T7232] ___sys_sendmsg+0x190/0x1e0 [ 92.446194][ T7232] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.446210][ T7232] ? futex_wait+0x11e/0x370 [ 92.446233][ T7232] ? find_held_lock+0x2b/0x80 [ 92.446256][ T7232] __sys_sendmsg+0x160/0x210 [ 92.446269][ T7232] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.446289][ T7232] __do_fast_syscall_32+0x14b/0x8c0 [ 92.446303][ T7232] do_fast_syscall_32+0x32/0x70 [ 92.446315][ T7232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.446329][ T7232] RIP: 0023:0xf7f92fbc [ 92.446339][ T7232] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 92.446349][ T7232] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.446360][ T7232] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 92.446367][ T7232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.446373][ T7232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.446379][ T7232] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.446385][ T7232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.446399][ T7232] [ 92.479722][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 92.760211][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 92.765714][ T7254] xt_LOG: prefix is not null-terminated [ 92.877670][ T859] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 92.877768][ T5892] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 92.996361][ T7259] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 92.996380][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.997953][ T7259] vhci_hcd vhci_hcd.0: Device attached [ 93.010609][ T7259] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.198475][ T65] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 93.237683][ T5892] usb 9-1: device descriptor read/64, error -71 [ 93.238846][ T859] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 93.242111][ T859] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.242124][ T859] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.242142][ T859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.263181][ T65] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 93.479238][ T859] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 93.597623][ T5892] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 93.676083][ T7260] vhci_hcd: connection reset by peer [ 93.681532][ T5884] vhci_hcd vhci_hcd.3: stop threads [ 93.682007][ T5884] vhci_hcd vhci_hcd.3: release socket [ 93.682901][ T5884] vhci_hcd vhci_hcd.3: disconnect device [ 93.819957][ T7266] ubi: mtd0 is already attached to ubi0 [ 93.827660][ T5892] usb 9-1: device descriptor read/64, error -71 [ 93.863805][ T859] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 93.971414][ T5892] usb usb9-port1: attempt power cycle [ 94.481675][ T7268] __nla_validate_parse: 1 callbacks suppressed [ 94.481694][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 94.597692][ T5892] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 94.619987][ T5892] usb 9-1: device descriptor read/8, error -71 [ 94.776429][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 95.031474][ T5892] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 95.048223][ T5892] usb 9-1: device descriptor read/8, error -71 [ 95.169676][ T5892] usb usb9-port1: unable to enumerate USB device [ 95.562468][ T1483] usb 7-1: USB disconnect, device number 14 [ 95.574894][ T1483] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 95.576309][ T1483] spcp8x5 7-1:1.0: device disconnected [ 95.772061][ T7300] ubi: mtd0 is already attached to ubi0 [ 96.614126][ T7315] FAULT_INJECTION: forcing a failure. [ 96.614126][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 96.614146][ T7315] CPU: 2 UID: 0 PID: 7315 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(full) [ 96.614158][ T7315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.614165][ T7315] Call Trace: [ 96.614169][ T7315] [ 96.614174][ T7315] dump_stack_lvl+0x100/0x190 [ 96.614192][ T7315] should_fail_ex.cold+0x5/0xa [ 96.614208][ T7315] should_failslab+0xc2/0x120 [ 96.614224][ T7315] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.614239][ T7315] ? security_file_alloc+0x34/0x2c0 [ 96.614257][ T7315] security_file_alloc+0x34/0x2c0 [ 96.614274][ T7315] init_file+0x95/0x480 [ 96.614291][ T7315] alloc_empty_file+0x79/0x1c0 [ 96.614302][ T7315] alloc_file_pseudo+0x17e/0x290 [ 96.614314][ T7315] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 96.614328][ T7315] __anon_inode_getfile+0xe8/0x280 [ 96.614344][ T7315] bpf_link_prime+0x200/0x4c0 [ 96.614362][ T7315] bpf_tracing_prog_attach+0x5f7/0x1580 [ 96.614381][ T7315] ? __pfx_bpf_tracing_prog_attach+0x10/0x10 [ 96.614400][ T7315] ? __lock_acquire+0x5c0/0x1f40 [ 96.614418][ T7315] ? fast_dput+0x494/0x6f0 [ 96.614434][ T7315] bpf_raw_tp_link_attach+0x699/0x880 [ 96.614451][ T7315] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 96.614466][ T7315] ? find_held_lock+0x2b/0x80 [ 96.614480][ T7315] ? __fget_files+0x215/0x3d0 [ 96.614495][ T7315] ? __fget_files+0x215/0x3d0 [ 96.614516][ T7315] ? fput+0x7c/0x100 [ 96.614532][ T7315] ? __bpf_prog_get+0x97/0x290 [ 96.614545][ T7315] __sys_bpf+0x62b/0x4b60 [ 96.614564][ T7315] ? __pfx___sys_bpf+0x10/0x10 [ 96.614579][ T7315] ? lock_acquire+0x1d1/0x380 [ 96.614595][ T7315] ? get_pid_task+0x2a/0x250 [ 96.614613][ T7315] ? find_held_lock+0x2b/0x80 [ 96.614626][ T7315] ? get_pid_task+0xfc/0x250 [ 96.614638][ T7315] ? get_pid_task+0xfc/0x250 [ 96.614654][ T7315] ? proc_fail_nth_write+0x9f/0x220 [ 96.614671][ T7315] ? find_held_lock+0x2b/0x80 [ 96.614688][ T7315] ? rcu_read_lock_any_held+0x6a/0x90 [ 96.614703][ T7315] ? find_held_lock+0x2b/0x80 [ 96.614716][ T7315] ? ksys_write+0x190/0x250 [ 96.614729][ T7315] ? ksys_write+0x190/0x250 [ 96.614751][ T7315] ? lock_acquire+0x1d1/0x380 [ 96.614767][ T7315] ? __might_fault+0xc5/0x140 [ 96.614778][ T7315] ? find_held_lock+0x2b/0x80 [ 96.614794][ T7315] ? __ia32_sys_bpf+0xcc/0x170 [ 96.614810][ T7315] __ia32_sys_bpf+0xcc/0x170 [ 96.614826][ T7315] ? __might_fault+0x111/0x140 [ 96.614837][ T7315] __do_fast_syscall_32+0x14b/0x8c0 [ 96.614849][ T7315] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.614867][ T7315] do_fast_syscall_32+0x32/0x70 [ 96.614879][ T7315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.614892][ T7315] RIP: 0023:0xf7f08fbc [ 96.614902][ T7315] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 96.614912][ T7315] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 96.614923][ T7315] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 96.614930][ T7315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.614936][ T7315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.614942][ T7315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.614948][ T7315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.614962][ T7315] [ 97.037680][ T5892] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 97.050916][ T1483] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.187890][ T1483] usb 6-1: device descriptor read/64, error -71 [ 97.218311][ T5892] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 97.223195][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.223210][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 97.223228][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.427735][ T1483] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.570159][ T1483] usb 6-1: device descriptor read/64, error -71 [ 97.689460][ T1483] usb usb6-port1: attempt power cycle [ 97.828965][ T5975] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 98.002501][ T5975] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 98.004771][ T5975] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.004917][ T5975] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 98.004957][ T5975] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.005426][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.025551][ T5892] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 98.072556][ T1483] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 98.106376][ T1483] usb 6-1: device descriptor read/8, error -71 [ 98.243795][ T7331] FAULT_INJECTION: forcing a failure. [ 98.243795][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 98.243841][ T7331] CPU: 3 UID: 0 PID: 7331 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT(full) [ 98.243867][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.243885][ T7331] Call Trace: [ 98.243889][ T7331] [ 98.243894][ T7331] dump_stack_lvl+0x100/0x190 [ 98.243913][ T7331] should_fail_ex.cold+0x5/0xa [ 98.243928][ T7331] should_failslab+0xc2/0x120 [ 98.243945][ T7331] __kmalloc_noprof+0xfc/0x840 [ 98.243959][ T7331] ? tomoyo_encode2+0xfb/0x3c0 [ 98.243979][ T7331] tomoyo_encode2+0xfb/0x3c0 [ 98.243999][ T7331] tomoyo_encode+0x29/0x50 [ 98.244015][ T7331] tomoyo_realpath_from_path+0x18c/0x690 [ 98.244036][ T7331] tomoyo_path_number_perm+0x23c/0x580 [ 98.244051][ T7331] ? tomoyo_path_number_perm+0x22e/0x580 [ 98.244066][ T7331] ? lock_acquire+0x1d4/0x380 [ 98.244083][ T7331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.244099][ T7331] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 98.244122][ T7331] ? __lock_acquire+0x5c0/0x1f40 [ 98.244145][ T7331] ? __fget_files+0x34/0x3d0 [ 98.244161][ T7331] ? find_held_lock+0x2b/0x80 [ 98.244174][ T7331] ? __fget_files+0x215/0x3d0 [ 98.244188][ T7331] ? hook_file_ioctl_common+0x140/0x440 [ 98.244204][ T7331] ? __fget_files+0x215/0x3d0 [ 98.244221][ T7331] ? __fget_files+0x21f/0x3d0 [ 98.244238][ T7331] security_file_ioctl_compat+0xd3/0x230 [ 98.244255][ T7331] __ia32_compat_sys_ioctl+0xc2/0x360 [ 98.244270][ T7331] __do_fast_syscall_32+0x14b/0x8c0 [ 98.244282][ T7331] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.244300][ T7331] do_fast_syscall_32+0x32/0x70 [ 98.244312][ T7331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.244326][ T7331] RIP: 0023:0xf7f93fbc [ 98.244336][ T7331] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.244346][ T7331] RSP: 002b:00000000f54244b4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 98.244357][ T7331] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0085508 [ 98.244364][ T7331] RDX: 00000000f54244f8 RSI: 00000000f741dff4 RDI: 0000000000000000 [ 98.244370][ T7331] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 98.244388][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.244394][ T7331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.244408][ T7331] [ 98.244569][ T7331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.357824][ T1483] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.392107][ T1483] usb 6-1: device descriptor read/8, error -71 [ 98.418807][ T65] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 98.499377][ T1483] usb usb6-port1: unable to enumerate USB device [ 98.532261][ T5892] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 98.560486][ T5975] cxacru 9-1:1.0: send of cm 0x91 failed (-71) [ 98.560503][ T5975] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 98.560509][ T5975] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 98.561431][ T5975] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 98.564541][ T5975] usb 9-1: USB disconnect, device number 12 [ 99.169901][ T7344] ubi: mtd0 is already attached to ubi0 [ 99.172546][ T7344] ubi0: detaching mtd0 [ 99.187873][ T7344] ubi0: mtd0 is detached [ 99.243306][ T7346] FAULT_INJECTION: forcing a failure. [ 99.243306][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 99.243335][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT(full) [ 99.243355][ T7346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.243365][ T7346] Call Trace: [ 99.243371][ T7346] [ 99.243379][ T7346] dump_stack_lvl+0x100/0x190 [ 99.243408][ T7346] should_fail_ex.cold+0x5/0xa [ 99.243434][ T7346] should_failslab+0xc2/0x120 [ 99.243460][ T7346] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.243480][ T7346] ? ptmx_open+0x11a/0x360 [ 99.243496][ T7346] ? alloc_tty_struct+0x96/0x8e0 [ 99.243524][ T7346] alloc_tty_struct+0x96/0x8e0 [ 99.243547][ T7346] ? __pfx_alloc_tty_struct+0x10/0x10 [ 99.243576][ T7346] tty_init_dev.part.0+0x20/0x470 [ 99.243601][ T7346] tty_init_dev+0x60/0x80 [ 99.243622][ T7346] ? __pfx_ptmx_open+0x10/0x10 [ 99.243638][ T7346] ptmx_open+0x128/0x360 [ 99.243654][ T7346] ? __pfx_ptmx_open+0x10/0x10 [ 99.243669][ T7346] chrdev_open+0x234/0x6a0 [ 99.243692][ T7346] ? __pfx_apparmor_file_open+0x10/0x10 [ 99.243714][ T7346] ? __pfx_chrdev_open+0x10/0x10 [ 99.243740][ T7346] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 99.243765][ T7346] do_dentry_open+0x674/0x1470 [ 99.243788][ T7346] ? __pfx_chrdev_open+0x10/0x10 [ 99.243817][ T7346] vfs_open_consume+0xcc/0x460 [ 99.243837][ T7346] path_openat+0x1547/0x23f0 [ 99.243866][ T7346] ? __pfx_path_openat+0x10/0x10 [ 99.243897][ T7346] do_file_open+0x20e/0x430 [ 99.243923][ T7346] ? __pfx_do_file_open+0x10/0x10 [ 99.243964][ T7346] ? _raw_spin_unlock+0x28/0x50 [ 99.243988][ T7346] ? alloc_fd+0x471/0x7a0 [ 99.244026][ T7346] do_sys_openat2+0x163/0x1d0 [ 99.244065][ T7346] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.244086][ T7346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.244112][ T7346] __ia32_compat_sys_openat+0x12d/0x210 [ 99.244133][ T7346] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 99.244162][ T7346] __do_fast_syscall_32+0x14b/0x8c0 [ 99.244183][ T7346] do_fast_syscall_32+0x32/0x70 [ 99.244201][ T7346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.244223][ T7346] RIP: 0023:0xf7f93fbc [ 99.244238][ T7346] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 99.244254][ T7346] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 99.244273][ T7346] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 99.244285][ T7346] RDX: 0000000000003f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.244295][ T7346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.244305][ T7346] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.244315][ T7346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.244337][ T7346] [ 99.641930][ T1032] usb 7-1: USB disconnect, device number 15 [ 99.655822][ T1032] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 99.656379][ T1032] spcp8x5 7-1:1.0: device disconnected [ 99.913201][ T7359] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 99.915470][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT(full) [ 99.918329][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.921301][ T7359] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 99.923099][ T7359] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 59 11 [ 99.929273][ T7359] RSP: 0000:ffffc9000df8f6f0 EFLAGS: 00010246 [ 99.931597][ T7359] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 99.934459][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.936894][ T7359] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 99.939329][ T7359] R10: 00000000ffffffff R11: 000000000000001f R12: 0000000000000000 [ 99.941781][ T7359] R13: ffffc9000df8f848 R14: 00000000ffffffff R15: ffffc9000df8f9e8 [ 99.944202][ T7359] FS: 0000000000000000(0000) GS:ffff8880952ae000(0063) knlGS:00000000f5416b40 [ 99.946920][ T7359] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.948946][ T7359] CR2: 000000002e663fff CR3: 000000004dc60000 CR4: 0000000000352ef0 [ 99.951387][ T7359] Call Trace: [ 99.952464][ T7359] [ 99.953401][ T7359] dm_calculate_queue_limits+0x38f/0xeb0 [ 99.955116][ T7359] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 99.956996][ T7359] ? mempool_init_noprof+0x3a/0x50 [ 99.958593][ T7359] ? kasan_save_track+0x14/0x30 [ 99.960104][ T7359] ? bioset_init+0x3e8/0x8a0 [ 99.961544][ T7359] ? __pfx_bioset_init+0x10/0x10 [ 99.963095][ T7359] dm_setup_md_queue+0xe2/0x550 [ 99.964604][ T7359] ? dm_table_complete+0xaa6/0x1c90 [ 99.966254][ T7359] ? dm_table_complete+0xbc0/0x1c90 [ 99.967842][ T7359] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 99.969532][ T7359] ? __pfx_dm_table_complete+0x10/0x10 [ 99.971208][ T7359] table_load+0x4e8/0x7b0 [ 99.972604][ T7359] ? __pfx_table_load+0x10/0x10 [ 99.974127][ T7359] ? __might_fault+0xc5/0x140 [ 99.975586][ T7359] ? __might_fault+0xc5/0x140 [ 99.977032][ T7359] ctl_ioctl+0x4d2/0xcc0 [ 99.978363][ T7359] ? __pfx_table_load+0x10/0x10 [ 99.979859][ T7359] ? __pfx_ctl_ioctl+0x10/0x10 [ 99.981347][ T7359] ? __fget_files+0x21f/0x3d0 [ 99.982843][ T7359] dm_compat_ctl_ioctl+0x23/0x30 [ 99.984379][ T7359] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 99.986110][ T7359] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 99.987783][ T7359] __do_fast_syscall_32+0x14b/0x8c0 [ 99.989410][ T7359] do_fast_syscall_32+0x32/0x70 [ 99.990908][ T7359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.993244][ T7359] RIP: 0023:0xf73fefbc [ 99.994786][ T7359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.000711][ T7359] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 100.003285][ T7359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 100.005712][ T7359] RDX: 0000000080000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.008135][ T7359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.010549][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.013122][ T7359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.015503][ T7359] [ 100.016470][ T7359] Modules linked in: [ 100.017871][ T7359] ---[ end trace 0000000000000000 ]--- [ 100.021723][ T7359] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 100.021744][ T7359] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 59 11 [ 100.021754][ T7359] RSP: 0000:ffffc9000df8f6f0 EFLAGS: 00010246 [ 100.021763][ T7359] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 100.021770][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.021776][ T7359] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 100.021782][ T7359] R10: 00000000ffffffff R11: 000000000000001f R12: 0000000000000000 [ 100.021788][ T7359] R13: ffffc9000df8f848 R14: 00000000ffffffff R15: ffffc9000df8f9e8 [ 100.021795][ T7359] FS: 0000000000000000(0000) GS:ffff8880952ae000(0063) knlGS:00000000f5416b40 [ 100.021818][ T7359] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 100.021827][ T7359] CR2: 00000000f5371da4 CR3: 000000004dc60000 CR4: 0000000000352ef0 [ 100.021835][ T7359] Kernel panic - not syncing: Fatal exception [ 100.052752][ T7359] Kernel Offset: disabled [ 100.054127][ T7359] Rebooting in 86400 seconds..