last executing test programs: 9m20.01672466s ago: executing program 3 (id=4): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket(0x40000000015, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x58603) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x3, {0x1, 0x0, 0x1}}, 0x18) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0, 0xee}], 0x2) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000140)=0x2000003) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) 9m18.325362019s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34e7007c", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf257c00000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000002980)=[{&(0x7f00000003c0)="8b", 0x1}, {&(0x7f00000008c0)="dd52e3", 0x3}], 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x163d02) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x9, 0x4, 0x9, 0x2000, 0xffffffffffffffff, 0xc0, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x6}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="05"], 0x10) close(0xffffffffffffffff) close(0x4) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r10}, 0x38) openat$nvram(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000040)=""/213, &(0x7f0000000580)="f22bdc7348dc2580ca08ccd13aa43c482d668d28111486bba5e72799265fb1415bcad8e88a86afd0c629530aa219c318dea90326601f26f2c3fe00f6f8f34de4a4", &(0x7f0000000180), 0x3, r10}, 0x38) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,vers=2\x80\x00\x00\x00to=udp\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c, 0x80800) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r11, 0x4008941a, &(0x7f0000000440)=0x2) 9m16.41155117s ago: executing program 3 (id=21): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) 9m16.368226922s ago: executing program 32 (id=21): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) 8m21.658390875s ago: executing program 1 (id=397): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {0xa, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 8m21.340764167s ago: executing program 1 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 8m21.247400894s ago: executing program 1 (id=400): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x1, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x101000) ioctl$FE_READ_SNR(r4, 0x80026f48, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) landlock_restrict_self(r0, 0x9) 8m20.104526743s ago: executing program 1 (id=406): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x101, 0x336, 0x6, 0x20204, 0x1, 0xe, '\x00', 0x0, r0, 0x4, 0x3, 0x4, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 8m17.641937483s ago: executing program 1 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) 8m16.154573457s ago: executing program 1 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 8m16.129819406s ago: executing program 33 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 5.69405129s ago: executing program 5 (id=2891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0xc, &(0x7f0000000340)) syz_emit_ethernet(0x22, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @remote}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r8, @ANYRES16=r5, @ANYBLOB="158c5d8fe34aa87f9572d5da0ff2b8915e58161df0abc65214aebe0ea0aa6a257c51eef08bf85abc189fe1727cd5afda1125a7eff4ecfff8b90c2ceaf36ff307402a148fb3aa586f5c7ff112f9bc2e9ccb2ca28f7c8d126f198a158b542888fc97fda2f6cc965411095abd6ed86fb4a2f830ab305dd9d489b4e1dbdd4fa8279dab1460676b5c44635527cb1799100a918ead118b4ac483c50625d1f1cffa110f9ed568e2e0603bff81bedd5641f55cf617c7c19281dbda7559fde9dc08dfce1c116c7725cc0016006ff0610b614692bd903d8ad43df69d5fe97285a61d1c89917a14befbed69860bd14492", @ANYRES8=r3, @ANYRES64=r6, @ANYRES32=r7, @ANYRES32=r8], 0x56) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x9, 0x55}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e27, 0x2000, 0x84008006, 0x2, 0x12d5c}}, 0x44) 4.313393431s ago: executing program 5 (id=2897): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x38}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r4, &(0x7f0000000e00)=ANY=[@ANYBLOB="64656389f9ffff00696f00a583b5d6c4bc222847a7e1e232cc888e3c346f224e04a71c6967db338480f411e3bbe3f0985384fe1e187818a6f4d5104476b79976213c7a11f008707a8df3f2ebe4a3c5035574d1ab3aeb3a7524321662fbd5d946de63b8e709a3e111c013f7783e33a47c763a2ced8bbca9cbacbd5451dae8fb87f2afabb3354d80d2658439c8fe6bad02351d56d5ce1aee956792a69d949c19163632b7735c22e6ad721eb17f", @ANYBLOB="ca5530d18e30a1eb67ee6a168f064f4cd9eb4b4cc1402acb68f270b1296f461955090d04b664420d4021d711e11fc49962cddcdb6cb22976616deb2aa7ace3adc0abcbe316fb60aa49c706", @ANYRES16, @ANYRES32=r3], 0xb) setpriority(0x1, 0x0, 0x80000000) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write(r6, 0x0, 0x0) futex_waitv(&(0x7f0000000a40)=[{0xfc, &(0x7f0000000080)=0x100000001, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x6, 0x186}, {0x3736, &(0x7f0000000540)=0x5, 0x2}, {0xa6, &(0x7f0000000580)=0x5, 0x2}, {0x7, &(0x7f00000005c0)=0x3, 0x2}, {0xb38, &(0x7f0000000640)=0x101, 0x82}, {0x7, &(0x7f0000000680)=0x8000, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x2}, {0x1000, &(0x7f0000000700)=0x2, 0x82}, {0x2, &(0x7f0000000740)=0x100, 0x2}, {0x33c0000000000000, &(0x7f0000000780)=0xa6, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x6, &(0x7f0000000800)=0x2, 0x2}, {0x5, &(0x7f0000000880)=0x7, 0x2}, {0x7000000000000, &(0x7f00000008c0)=0xfffffffffffffff7, 0x2}, {0x200, &(0x7f0000000900)=0x52, 0x82}, {0x0, &(0x7f0000000940)=0x6b, 0x82}, {0x94, &(0x7f0000000980)=0x2d328a0f, 0x82}, {0xfffffffffffffffe, &(0x7f00000009c0)=0xb385, 0x82}, {0x6, &(0x7f0000000a00)=0x8, 0x82}], 0x14, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 3.887248012s ago: executing program 0 (id=2898): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) clock_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000083b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000301"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r0, 0x6, 0x80000}) 3.075451326s ago: executing program 5 (id=2904): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0xa9, {0x6, 0x1}, {0x1, 0x2}, @cond=[{0x7, 0x208, 0x7, 0xffff, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000700)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], 0x0, 0x597, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x1, 0x1}, {0x0, 0x4, 0x5, 0xb}, {0x1, 0x1, 0xd, 0x4}, {0x3, 0x1, 0x3, 0x9}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x5, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8}, 0x8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8bd4cec) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000e400)={0x2020}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x0) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r1}}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2.915310453s ago: executing program 0 (id=2906): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') lchown(&(0x7f0000000000)='./mnt/file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x67, &(0x7f00000003c0)=ANY=[@ANYBLOB="82cc73dddd21aaaaaaaaaa300011aaa93b0b180422ebecf9f1aee2613c3e761be802b37749c6eef1aa358ace178e53b308b6b71bcf0bceae930a6c93e6ed0e3a7268674baa86943a0ad1d1c9751c92941ddbf89856cf66b793216a45d78091b78b0b5e56b43689"], &(0x7f00000000c0)={0xffffffff, 0x1, [0xff6, 0xcc1, 0x20081a, 0x93c]}) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x60004099) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x40, 0x7, 0x2, 0x9, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x80002, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 2.49759196s ago: executing program 5 (id=2907): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xcab4, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x78}}], 0x2, 0x50010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000010000304000f00000000f351000000", @ANYBLOB="4a6337fb"], 0x88}, 0x1, 0xba01, 0x0, 0x10}, 0x4000081) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x410200, 0x0) setns(0xc9, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) unshare(0x2000000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='zstd\x00', 0x4) (fail_nth: 1) read(0xffffffffffffffff, &(0x7f0000000000), 0x10000) read(0xffffffffffffffff, &(0x7f0000000008), 0x8) read(0xffffffffffffffff, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.455462481s ago: executing program 4 (id=2908): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x2000, &(0x7f00000001c0)="ce"}], 0x1}) 2.404634652s ago: executing program 0 (id=2909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x38130d1, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @remote}) write$tun(r1, 0x0, 0x56) 2.394270414s ago: executing program 4 (id=2910): r0 = openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg/2:0:0:0\x00', 0x220000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x1010001, 0x59f781) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x0, {0x4}, 0x100, 0x8000002}}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)='2', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000005c0)="7a8197ee325eab82e5e1008f71ca1486760368a38c19f0de87c67e731cecec8d70d2be916e6e51bd728472dd8d83ae9ad28ceec3f98f1a9477dc27848407de27b99c7aefdb28affed9350c08d06c89fab8ce51eb207b9e878583e703", 0x5c}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000290000003e000000000000005400000029000000370000001d070000000000000523a5ac53e8bf9848cc5af034c6f5d8a6c7c6db145c754230b7d245446ed82b1d3efcd296c91020010000000000000000000000000000050200000000000000240000002900000039000000010200bc00000000ff0200000000000000000000000000015c00000029000000360000003a0900000000000005021000010100c20400000002040108c910fc000000000000000000000000000001c2040000000907180000000004050104ba8100000000000009000000000000000401090001008e399b2b97161614b1631685e4fe34dc3b8be98bff7a85611cc41298a9b1d1dd2d3c3dbdd5884953ea35a643eb09000000000000004de9cf11513c2f0bd1e5f3984b511e0e62085abf1dc2da174cd15f8c708f351c747f"], 0xe4}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x1, @private1, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000007c0)="43ce53d5f9d94d05155e936a5b45c0ad1d7423d4e280762292eeff4f94acc65efdd14a95d53461638036545dca665dd17ff9edafe11399ad3a094b685c10e5747c9317bf18418d56b52aff4d18407944942fa9f39a0381158652a9720560c04d805a32a6935e258c", 0x68}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x60}}], 0x3, 0x8000) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @loopback, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440), 0x0, 0x20000014) (async) shutdown(r2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x460e, &(0x7f0000000040)={0x0, 0xd70, 0x80, 0x4000001, 0x325}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) sched_setscheduler(r5, 0x6, &(0x7f00000003c0)=0x5) (async) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) 2.144107398s ago: executing program 4 (id=2911): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xcab4, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x78}}], 0x2, 0x50010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x96, 0x2, 0x0, 0x8, 0x2, 0xfffffffffff7fffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f859, 0x1830305, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000010000304000f00000000f351000000", @ANYBLOB="4a6337fb"], 0x88}, 0x1, 0xba01, 0x0, 0x10}, 0x4000081) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x410200, 0x0) setns(0xc9, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) unshare(0x2000000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='zstd\x00', 0x4) read(0xffffffffffffffff, &(0x7f0000000000), 0x10000) read(0xffffffffffffffff, &(0x7f0000000008), 0x8) read(0xffffffffffffffff, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1.994701642s ago: executing program 2 (id=2913): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x1, [0xe]}, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1.985313214s ago: executing program 0 (id=2914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c617374000000001800028008000140000000040c00024000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.494957704s ago: executing program 0 (id=2915): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0xa9, {0x6, 0x1}, {0x1, 0x2}, @cond=[{0x7, 0x208, 0x7, 0xffff, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000700)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], 0x0, 0x597, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x1, 0x1}, {0x0, 0x4, 0x5, 0xb}, {0x1, 0x1, 0xd, 0x4}, {0x3, 0x1, 0x3, 0x9}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x5, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8}, 0x8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8bd4cec) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000e400)={0x2020}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x0) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r1}}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1.167065583s ago: executing program 5 (id=2916): socket$inet6(0xa, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000000), 0x800) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 589.400096ms ago: executing program 4 (id=2917): syz_open_dev$I2C(&(0x7f0000001140), 0x97, 0x240602) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r1 = socket$inet6_sctp(0xa, 0x7, 0x84) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894c, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x2, 0x200000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) preadv(r2, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/36, 0x24}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc804) 500.38153ms ago: executing program 2 (id=2918): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x2000, &(0x7f00000001c0)="ce"}], 0x1}) 483.027111ms ago: executing program 5 (id=2919): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) accept4$unix(r1, &(0x7f0000000080), 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x4000, 0x4) 429.072479ms ago: executing program 2 (id=2920): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000300), 0x400100, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) poll(0x0, 0x0, 0x9) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r9}, 0x10, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=r3, @ANYRESHEX=r8], 0x20000600}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x2}}, 0x18) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x141cc0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf2500000000000000000800010033c01951835dce73d89ff84af6d71739b6a559d55f463effea3ee8711e8e975951b160ba4209f510c036fb518327a70d5dfde7b426eb6da09c6ce668343a4dc51dfb52447894c0689499f5726addf91a1dbbb374229bdc41a693c36cfdb5516b3251e57c92eadc3a855a64b7300f1fa2e6e735e6f0f973534b74e70669cbc922127468a8133b2833bc33eed35fc7973ca237db545382964832c38b49cbab591d9c666aa1f35359a96f9f0dba79617dc988"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYBLOB="28010000", @ANYRES16=r0, @ANYBLOB="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"/290], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x40088c1) mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x20e03, 0x1b1) write(r11, &(0x7f0000000600)='file amd5536udc_pci.c +p', 0x18) 356.767891ms ago: executing program 0 (id=2921): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r4, &(0x7f0000000e00)=ANY=[@ANYBLOB="64656389f9ffff00696f00a583b5d6c4bc222847a7e1e232cc888e3c346f224e04a71c6967db338480f411e3bbe3f0985384fe1e187818a6f4d5104476b79976213c7a11f008707a8df3f2ebe4a3c5035574d1ab3aeb3a7524321662fbd5d946de63b8e709a3e111c013f7783e33a47c763a2ced8bbca9cbacbd5451dae8fb87f2afabb3354d80d2658439c8fe6bad02351d56d5ce1aee956792a69d949c19163632b7735c22e6ad721eb17f", @ANYBLOB="ca5530d18e30a1eb67ee6a168f064f4cd9eb4b4cc1402acb68f270b1296f461955090d04b664420d4021d711e11fc49962cddcdb6cb22976616deb2aa7ace3adc0abcbe316fb60aa49c706", @ANYRES16, @ANYRES32=r3], 0xb) setpriority(0x1, 0x0, 0x80000000) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write(r6, 0x0, 0x0) futex_waitv(&(0x7f0000000a40)=[{0xfc, &(0x7f0000000080)=0x100000001, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x6, 0x186}, {0x3736, &(0x7f0000000540)=0x5, 0x2}, {0xa6, &(0x7f0000000580)=0x5, 0x2}, {0x7, &(0x7f00000005c0)=0x3, 0x2}, {0xb38, &(0x7f0000000640)=0x101, 0x82}, {0x7, &(0x7f0000000680)=0x8000, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x2}, {0x1000, &(0x7f0000000700)=0x2, 0x82}, {0x2, &(0x7f0000000740)=0x100, 0x2}, {0x33c0000000000000, &(0x7f0000000780)=0xa6, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x6, &(0x7f0000000800)=0x2, 0x2}, {0x5, &(0x7f0000000880)=0x7, 0x2}, {0x7000000000000, &(0x7f00000008c0)=0xfffffffffffffff7, 0x2}, {0x200, &(0x7f0000000900)=0x52, 0x82}, {0x0, &(0x7f0000000940)=0x6b, 0x82}, {0x94, &(0x7f0000000980)=0x2d328a0f, 0x82}, {0xfffffffffffffffe, &(0x7f00000009c0)=0xb385, 0x82}, {0x6, &(0x7f0000000a00)=0x8, 0x82}], 0x14, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 352.773498ms ago: executing program 4 (id=2922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x38130d1, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @remote}) write$tun(r1, &(0x7f0000000580)=ANY=[], 0x56) 277.414008ms ago: executing program 2 (id=2923): syz_open_dev$I2C(&(0x7f0000001140), 0x97, 0x240602) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r1 = socket$inet6_sctp(0xa, 0x7, 0x84) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894c, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x2, 0x200000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) preadv(r2, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/36, 0x24}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc804) 207.654772ms ago: executing program 2 (id=2924): r0 = openat(0xffffffffffffffff, 0x0, 0x42, 0x196) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='./file0\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x521402, 0xb4) write(r7, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)="66630ab4f6814d3ca9fe7198499777278f9c35d1cc4be03885760cd8c40b878d7783c7f8", 0x24) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='fc\n', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444\n', 0x2c) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r11, &(0x7f00000008c0)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=testsubsys\x00', 0x86) 143.336091ms ago: executing program 2 (id=2925): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='./file0\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='fc\n', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='fc\n', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444\n', 0x2c) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r11, &(0x7f00000008c0)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=testsubsys\x00', 0x86) 0s ago: executing program 4 (id=2926): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="40e2449b47c219e2e21ae19c979dcad0c27a27928218915c5a47374cbef2a51b490ece96f6b326a397ebdd62d5d0d573e7a59b2ec42ad21b3eab85aedef2e96040c8951c58") (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="40e2449b47c219e2e21ae19c979dcad0c27a27928218915c5a47374cbef2a51b490ece96f6b326a397ebdd62d5d0d573e7a59b2ec42ad21b3eab85aedef2e96040c8951c58") connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) (async) close(0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): RDI: 0000000000000000 [ 549.744138][T15009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.744144][T15009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 549.744151][T15009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.744164][T15009] [ 550.005026][T15019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'. [ 550.063570][ T5813] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 550.226850][ T5813] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 550.229668][ T5813] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.229689][ T5813] usb 10-1: config 0 has no interfaces? [ 550.229706][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.236384][ T5813] usb 10-1: config 0 descriptor?? [ 550.679191][ T30] usb 10-1: USB disconnect, device number 41 [ 550.875137][ T43] kauditd_printk_skb: 99 callbacks suppressed [ 550.875150][ T43] audit: type=1800 audit(1789467614.611:6000): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 550.886587][ T43] audit: type=1800 audit(1789467614.620:6001): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 551.980984][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.989447][ T43] audit: type=1800 audit(1789467615.635:6002): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34528 res=0 errno=0 [ 552.004384][ T5707] usb 7-1: can't set config #1, error -71 [ 552.005317][ T5707] usb 7-1: USB disconnect, device number 36 [ 552.024329][ T43] audit: type=1800 audit(1789467615.672:6003): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223009 res=0 errno=0 [ 552.024358][ T43] audit: type=1800 audit(1789467615.672:6004): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223038 res=0 errno=0 [ 552.024378][ T43] audit: type=1800 audit(1789467615.672:6005): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=223016 res=0 errno=0 [ 552.024397][ T43] audit: type=1800 audit(1789467615.672:6006): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=223017 res=0 errno=0 [ 552.059982][ T43] audit: type=1800 audit(1789467615.709:6007): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 552.117260][ T43] audit: type=1800 audit(1789467615.755:6008): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 552.266896][ T43] audit: type=1800 audit(1789467615.903:6009): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 554.003219][T15049] virtiofs: Unknown parameter 'üAà¢çI' [ 554.233629][T15055] gadgetfs: bound to dummy_udc driver [ 554.550374][ T5707] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 554.550823][ C3] gadgetfs: connected [ 554.551314][ T5707] gadgetfs: disconnected [ 554.666798][T15025] syz.0.2710 (15025) used greatest stack depth: 17560 bytes left [ 554.724211][ C3] gadgetfs: connected [ 554.727199][ T5707] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 554.728804][ T5707] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 554.729054][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.787343][ C3] gadgetfs: configuration #1 [ 554.918005][T15061] 9p: Bad value for 'rfdno' [ 555.138477][T15055] gadgetfs: suspended from state 3 [ 555.139010][ T5707] usb 5-1: USB disconnect, device number 2 [ 555.149770][T15055] gadgetfs: disconnected [ 555.550747][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 555.575324][T15067] r8a66597_hcd pcspkr: platform_get_resource error. [ 555.861640][ T5707] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 556.030672][ T5707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.030697][ T5707] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.031539][ T5707] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x82 is Bulk; changing to Interrupt [ 556.031555][ T5707] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x3 is Bulk; changing to Interrupt [ 556.031567][ T5707] usb 5-1: config 1 interface 0 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.031579][ T5707] usb 5-1: config 1 interface 0 has no altsetting 0 [ 556.040606][ T5707] usb 5-1: language id specifier not provided by device, defaulting to English [ 556.438515][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 556.438564][ T43] audit: type=1800 audit(1789467619.750:6027): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 556.448239][T15079] program syz.5.2729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.450032][ T43] audit: type=1800 audit(1789467619.759:6028): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2729" name="num" dev="configfs" ino=58959 res=0 errno=0 [ 556.455431][ T43] audit: type=1800 audit(1789467619.759:6029): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 557.452361][ T43] audit: type=1800 audit(1789467620.682:6030): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 557.549485][T15093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2732'. [ 557.551754][T15091] gadgetfs: bound to dummy_udc driver [ 557.567519][ T43] audit: type=1800 audit(1789467620.793:6031): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34478 res=0 errno=0 [ 557.594782][ T43] audit: type=1800 audit(1789467620.811:6032): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34501 res=0 errno=0 [ 557.641316][ T43] audit: type=1800 audit(1789467620.857:6033): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223347 res=0 errno=0 [ 557.672257][ T43] audit: type=1800 audit(1789467620.876:6034): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223357 res=0 errno=0 [ 557.845915][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 557.846596][ C0] gadgetfs: connected [ 557.846981][ T9] gadgetfs: disconnected [ 558.012112][ C0] gadgetfs: connected [ 558.014078][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 558.014619][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 558.014671][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.066816][ C0] gadgetfs: configuration #1 [ 558.097685][ T43] audit: type=1800 audit(1789467621.245:6035): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223376 res=0 errno=0 [ 558.127282][ T43] audit: type=1800 audit(1789467621.300:6036): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223405 res=0 errno=0 [ 560.032757][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.100288][ T5707] usb 5-1: can't set config #1, error -71 [ 560.109119][ T5707] usb 5-1: USB disconnect, device number 3 [ 560.148459][T15091] gadgetfs: suspended from state 3 [ 560.148501][T15091] gadgetfs: disconnected [ 560.153901][ T6128] usb 6-1: USB disconnect, device number 11 [ 560.274022][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2734'. [ 561.060538][T15120] IPVS: ip_vs_add_dest(): server weight less than zero [ 561.519186][T15126] FAULT_INJECTION: forcing a failure. [ 561.519186][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.519208][T15126] CPU: 0 UID: 0 PID: 15126 Comm: syz.0.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.519224][T15126] Tainted: [L]=SOFTLOCKUP [ 561.519229][T15126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.519236][T15126] Call Trace: [ 561.519240][T15126] [ 561.519255][T15126] dump_stack_lvl+0x100/0x190 [ 561.519273][T15126] should_fail_ex.cold+0x5/0xa [ 561.519288][T15126] _copy_to_iter+0x5a4/0x1720 [ 561.519304][T15126] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 561.519319][T15126] ? __pfx__copy_to_iter+0x10/0x10 [ 561.519334][T15126] ? __skb_recv_datagram+0x1b2/0x220 [ 561.519349][T15126] simple_copy_to_iter+0x46/0x90 [ 561.519361][T15126] __skb_datagram_iter+0x129/0x900 [ 561.519372][T15126] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 561.519386][T15126] ? skb_recv_datagram+0x88/0xc0 [ 561.519400][T15126] skb_copy_datagram_iter+0xa1/0x250 [ 561.519413][T15126] netlink_recvmsg+0x27e/0xa90 [ 561.519427][T15126] ? __pfx_netlink_recvmsg+0x10/0x10 [ 561.519441][T15126] ? aa_sock_msg_perm+0x11e/0x200 [ 561.519455][T15126] ? __pfx_netlink_recvmsg+0x10/0x10 [ 561.519468][T15126] sock_recvmsg+0x1d5/0x220 [ 561.519486][T15126] ____sys_recvmsg+0x21e/0x670 [ 561.519499][T15126] ? __pfx_____sys_recvmsg+0x10/0x10 [ 561.519515][T15126] ? __lock_acquire+0x5c0/0x1f40 [ 561.519530][T15126] ? rb_commit+0x129/0x9d0 [ 561.519542][T15126] ___sys_recvmsg+0x16a/0x1a0 [ 561.519554][T15126] ? __pfx____sys_recvmsg+0x10/0x10 [ 561.519566][T15126] ? lock_acquire+0x1d1/0x380 [ 561.519590][T15126] do_recvmmsg+0x54d/0x740 [ 561.519604][T15126] ? __pfx_do_recvmmsg+0x10/0x10 [ 561.519622][T15126] ? event_triggers_call+0x337/0x4d0 [ 561.519641][T15126] __sys_recvmmsg+0x21f/0x270 [ 561.519658][T15126] ? __pfx___sys_recvmmsg+0x10/0x10 [ 561.519673][T15126] ? trace_syscall_enter+0xcc/0x120 [ 561.519690][T15126] ? trace_syscall_enter+0xcc/0x120 [ 561.519709][T15126] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 561.519722][T15126] ? trace_syscall_enter+0xd6/0x120 [ 561.519739][T15126] __do_fast_syscall_32+0x13a/0x8b0 [ 561.519758][T15126] ? lockdep_hardirqs_on+0x7d/0x110 [ 561.519775][T15126] do_fast_syscall_32+0x32/0x70 [ 561.519792][T15126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.519809][T15126] RIP: 0023:0xf7f15fec [ 561.519829][T15126] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 561.519836][T15126] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 561.519852][T15126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 561.519863][T15126] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.519873][T15126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.519882][T15126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 561.519893][T15126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.519916][T15126] [ 562.012766][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 562.012785][ T43] audit: type=1800 audit(1789467624.890:6096): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 562.098565][T15134] md: couldn't update array info. -22 [ 562.345188][T15137] IPVS: ip_vs_add_dest(): server weight less than zero [ 562.385961][ T43] audit: type=1326 audit(1789467625.093:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.386137][ T43] audit: type=1326 audit(1789467625.093:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.386251][ T43] audit: type=1326 audit(1789467625.102:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.386374][ T43] audit: type=1326 audit(1789467625.102:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.386694][ T43] audit: type=1326 audit(1789467625.102:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.386825][ T43] audit: type=1326 audit(1789467625.102:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71475ab code=0x7ffc0000 [ 562.386976][ T43] audit: type=1326 audit(1789467625.102:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.387111][ T43] audit: type=1326 audit(1789467625.102:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.387222][ T43] audit: type=1326 audit(1789467625.102:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.5.2743" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 562.901939][T15147] syz.0.2745: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 562.902003][T15147] CPU: 0 UID: 0 PID: 15147 Comm: syz.0.2745 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.902020][T15147] Tainted: [L]=SOFTLOCKUP [ 562.902025][T15147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.902033][T15147] Call Trace: [ 562.902037][T15147] [ 562.902043][T15147] dump_stack_lvl+0x100/0x190 [ 562.902062][T15147] warn_alloc.cold+0x9e/0xb2 [ 562.902075][T15147] ? __pfx_warn_alloc+0x10/0x10 [ 562.902086][T15147] ? __lock_acquire+0x5c0/0x1f40 [ 562.902112][T15147] __vmalloc_node_range_noprof+0x123b/0x1420 [ 562.902129][T15147] ? __lock_acquire+0x5c0/0x1f40 [ 562.902145][T15147] ? __lock_acquire+0x5c0/0x1f40 [ 562.902163][T15147] ? do_replace+0x1c6/0x490 [ 562.902177][T15147] ? do_raw_spin_lock+0x128/0x260 [ 562.902195][T15147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.902212][T15147] ? __lock_acquire+0x5c0/0x1f40 [ 562.902227][T15147] ? do_raw_spin_unlock+0x145/0x1e0 [ 562.902239][T15147] ? do_replace+0x1c6/0x490 [ 562.902251][T15147] __vmalloc_node_noprof+0xad/0xf0 [ 562.902266][T15147] ? do_replace+0x1c6/0x490 [ 562.902280][T15147] __vmalloc_noprof+0xa3/0x120 [ 562.902294][T15147] ? __pfx___vmalloc_noprof+0x10/0x10 [ 562.902314][T15147] do_replace+0x1c6/0x490 [ 562.902329][T15147] ? __pfx_do_replace+0x10/0x10 [ 562.902348][T15147] ? register_lock_class+0x3f/0x7b0 [ 562.902366][T15147] compat_do_replace+0x589/0x7a0 [ 562.902381][T15147] ? __pfx_compat_do_replace+0x10/0x10 [ 562.902403][T15147] ? bpf_lsm_capable+0x9/0x10 [ 562.902419][T15147] ? security_capable+0x80/0x260 [ 562.902434][T15147] do_ebt_set_ctl+0x3f4/0x4a0 [ 562.902448][T15147] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 562.902464][T15147] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 562.902477][T15147] ? nf_sockopt_find.isra.0+0x222/0x290 [ 562.902494][T15147] nf_setsockopt+0x8d/0xf0 [ 562.902528][T15147] ip_setsockopt+0xcb/0xf0 [ 562.902542][T15147] tcp_setsockopt+0xa7/0x100 [ 562.902557][T15147] smc_setsockopt+0x1b6/0xa40 [ 562.902572][T15147] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 562.902591][T15147] ? __pfx_smc_setsockopt+0x10/0x10 [ 562.902606][T15147] ? aa_sock_opt_perm+0x114/0x1e0 [ 562.902621][T15147] ? __pfx_smc_setsockopt+0x10/0x10 [ 562.902637][T15147] do_sock_setsockopt+0xf3/0x1d0 [ 562.902656][T15147] __sys_setsockopt+0x119/0x190 [ 562.902673][T15147] __ia32_sys_setsockopt+0xbc/0x160 [ 562.902688][T15147] ? trace_syscall_enter+0xd6/0x120 [ 562.902706][T15147] __do_fast_syscall_32+0x13a/0x8b0 [ 562.902725][T15147] do_fast_syscall_32+0x32/0x70 [ 562.902742][T15147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.902756][T15147] RIP: 0023:0xf7f15fec [ 562.902770][T15147] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 562.902775][T15147] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 562.902787][T15147] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 562.902794][T15147] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 562.902801][T15147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.902807][T15147] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 562.902814][T15147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.902828][T15147] [ 562.902865][T15147] Mem-Info: [ 562.902873][T15147] active_anon:8618 inactive_anon:5345 isolated_anon:68 [ 562.902873][T15147] active_file:3200 inactive_file:5495 isolated_file:38 [ 562.902873][T15147] unevictable:0 dirty:298 writeback:0 [ 562.902873][T15147] slab_reclaimable:6852 slab_unreclaimable:62306 [ 562.902873][T15147] mapped:25154 shmem:12364 pagetables:1514 [ 562.902873][T15147] sec_pagetables:334 bounce:0 [ 562.902873][T15147] kernel_misc_reclaimable:0 [ 562.902873][T15147] free:55961 free_pcp:13150 free_cma:0 [ 562.902903][T15147] Node 0 active_anon:48kB inactive_anon:6696kB active_file:180kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2128kB dirty:12kB writeback:0kB shmem:6460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9504kB pagetables:1852kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 562.902933][T15147] Node 1 active_anon:34424kB inactive_anon:14684kB active_file:12620kB inactive_file:21972kB unevictable:0kB isolated(anon):272kB isolated(file):152kB mapped:98488kB dirty:1180kB writeback:0kB shmem:42996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:7096kB pagetables:4204kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 562.902964][T15147] Node 0 DMA free:1976kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:404kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 562.902997][T15147] lowmem_reserve[]: 0 277 277 277 277 [ 562.903018][T15147] Node 0 DMA32 free:15652kB boost:12288kB min:26088kB low:29536kB high:32984kB reserved_highatomic:2048kB free_highatomic:148kB active_anon:40kB inactive_anon:6292kB active_file:144kB inactive_file:4kB unevictable:0kB writepending:8kB zspages:2960kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:3456kB local_pcp:160kB free_cma:0kB [ 562.903051][T15147] lowmem_reserve[]: 0 0 0 0 0 [ 562.903069][T15147] Node 1 DMA32 free:206216kB boost:4096kB min:50084kB low:61580kB high:73076kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34424kB inactive_anon:14684kB active_file:12620kB inactive_file:21972kB unevictable:0kB writepending:1180kB zspages:4412kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:48940kB local_pcp:10640kB free_cma:0kB [ 562.903099][T15147] lowmem_reserve[]: 0 0 0 0 0 [ 562.903116][T15147] Node 0 DMA: 86*4kB (UM) 24*8kB (UM) 6*16kB (UM) 16*32kB (UM) 3*64kB (UM) 3*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1976kB [ 562.903211][T15147] Node 0 DMA32: 1437*4kB (UMEH) 250*8kB (UMEH) 60*16kB (UMH) 97*32kB (UME) 30*64kB (UE) 7*128kB (UME) 2*256kB (ME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15652kB [ 562.903302][T15147] Node 1 DMA32: 7082*4kB (UME) 2667*8kB (UME) 757*16kB (UME) 377*32kB (UME) 296*64kB (UME) 146*128kB (UM) 118*256kB (UME) 78*512kB (UME) 14*1024kB (M) 5*2048kB (M) 0*4096kB = 206192kB [ 562.903393][T15147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.903402][T15147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.903410][T15147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.903418][T15147] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 562.903426][T15147] 21625 total pagecache pages [ 562.903430][T15147] 497 pages in swap cache [ 562.903434][T15147] Free swap = 95840kB [ 562.903438][T15147] Total swap = 124996kB [ 562.903442][T15147] 524155 pages RAM [ 562.903446][T15147] 0 pages HighMem/MovableOnly [ 562.903450][T15147] 212121 pages reserved [ 562.903453][T15147] 0 pages cma reserved [ 563.905401][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2757'. [ 563.955256][T15162] syz.0.2750 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 564.941381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 565.147528][T15179] IPVS: ip_vs_add_dest(): server weight less than zero [ 565.280991][T15183] gadgetfs: bound to dummy_udc driver [ 565.551315][T11683] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 565.552092][ C2] gadgetfs: connected [ 565.552662][T11683] gadgetfs: disconnected [ 565.735125][ C2] gadgetfs: connected [ 565.737035][T11683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 565.737579][T11683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.737633][T11683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.769602][ C2] gadgetfs: configuration #1 [ 566.124037][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'. [ 566.128515][T15191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2756'. [ 566.128529][T15191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2756'. [ 566.158863][T15183] gadgetfs: suspended from state 3 [ 566.158902][T15183] gadgetfs: disconnected [ 566.160341][ T1024] usb 5-1: USB disconnect, device number 4 [ 566.340765][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 566.435397][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 566.625955][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 566.625978][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 566.625993][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1df2 instead [ 566.626009][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4f74 instead [ 566.626023][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 566.626036][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 566.626048][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 566.626064][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 566.626090][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 566.626113][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 566.626125][T15205] jffs2: Further such events for this erase block will not be printed [ 566.626391][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 566.626403][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 566.626415][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1df2 instead [ 566.626426][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4f74 instead [ 566.626434][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 566.626443][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 566.626452][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 566.626465][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 566.626482][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 566.626500][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 566.626510][T15205] jffs2: Further such events for this erase block will not be printed [ 566.626745][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 566.626757][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 566.626771][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1df2 instead [ 566.626786][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4f74 instead [ 566.626825][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 566.626839][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 566.626851][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1df2 instead [ 566.626864][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4f74 instead [ 566.626896][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 566.626907][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 566.626919][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1df2 instead [ 566.626932][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4f74 instead [ 566.626963][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 566.626974][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 566.626986][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1df2 instead [ 566.626998][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4f74 instead [ 566.627030][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 566.627041][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 566.627053][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1df2 instead [ 566.627070][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4f74 instead [ 566.627102][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 566.627113][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 566.627124][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1df2 instead [ 566.627137][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4f74 instead [ 566.627184][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 566.627200][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 566.627215][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1df2 instead [ 566.627230][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4f74 instead [ 566.627271][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 566.627285][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 566.627299][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1df2 instead [ 566.627314][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4f74 instead [ 566.627355][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 566.627370][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 566.627385][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1df2 instead [ 566.627399][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4f74 instead [ 566.627439][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 566.627452][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 566.627467][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1df2 instead [ 566.627484][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4f74 instead [ 566.627522][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 566.627536][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 566.627549][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1df2 instead [ 566.627564][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4f74 instead [ 566.627605][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 566.627619][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 566.627634][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1df2 instead [ 566.627649][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4f74 instead [ 566.627684][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 566.627696][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 566.627709][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1df2 instead [ 566.627723][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4f74 instead [ 566.627758][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 566.627770][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 566.627782][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1df2 instead [ 566.627796][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4f74 instead [ 566.627863][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 566.627876][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 566.627889][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1df2 instead [ 566.627904][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4f74 instead [ 566.627943][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 566.627955][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 566.627969][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1df2 instead [ 566.627984][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4f74 instead [ 566.628087][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 566.628102][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 566.628116][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1df2 instead [ 566.628132][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4f74 instead [ 566.628174][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 566.628186][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 566.628199][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1df2 instead [ 566.628213][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4f74 instead [ 566.628248][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 566.628261][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 566.628275][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1df2 instead [ 566.628291][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4f74 instead [ 566.628329][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 566.628342][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 566.628356][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1df2 instead [ 566.628371][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4f74 instead [ 566.628408][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 566.628420][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 566.628434][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1df2 instead [ 566.628449][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4f74 instead [ 566.628484][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 566.628496][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 566.628508][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1df2 instead [ 566.628522][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4f74 instead [ 566.628557][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 566.628569][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 566.628581][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1df2 instead [ 566.628595][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4f74 instead [ 566.628654][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 566.628669][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 566.628681][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1df2 instead [ 566.628695][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4f74 instead [ 566.628730][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 566.628742][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 566.628755][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1df2 instead [ 566.628768][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4f74 instead [ 566.628804][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 566.628816][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 566.628829][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1df2 instead [ 566.628842][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4f74 instead [ 566.628878][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 566.628890][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 566.628902][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1df2 instead [ 566.628916][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4f74 instead [ 566.628951][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 566.628963][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 566.628975][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1df2 instead [ 566.628989][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4f74 instead [ 566.629025][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 566.629037][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 566.629049][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1df2 instead [ 566.629063][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4f74 instead [ 566.629098][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 566.629109][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 566.629122][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1df2 instead [ 566.629136][T15205] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4f74 instead [ 566.629164][T15205] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 566.629184][T15205] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 566.677835][ T1024] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 566.887424][ T1024] usb 7-1: unable to get BOS descriptor or descriptor too short [ 566.887604][ T1024] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.892346][ T1024] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x82 is Bulk; changing to Interrupt [ 566.892388][ T1024] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x3 is Bulk; changing to Interrupt [ 566.892639][ T1024] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0 [ 566.892728][ T1024] usb 7-1: config 1 interface 0 has no altsetting 0 [ 566.894520][T15209] gadgetfs: bound to dummy_udc driver [ 566.980288][ T1024] usb 7-1: language id specifier not provided by device, defaulting to English [ 567.188355][T13310] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 567.188676][ C0] gadgetfs: connected [ 567.189593][T13310] gadgetfs: disconnected [ 567.351450][ C0] gadgetfs: connected [ 567.354060][T13310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 567.355264][T13310] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 567.355605][T13310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.407023][ C0] gadgetfs: configuration #1 [ 567.461395][ T43] kauditd_printk_skb: 107 callbacks suppressed [ 567.461409][ T43] audit: type=1800 audit(1789467629.900:6213): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224377 res=0 errno=0 [ 567.475717][ T43] audit: type=1800 audit(1789467629.928:6214): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=224406 res=0 errno=0 [ 567.509291][ T43] audit: type=1800 audit(1789467629.955:6215): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=224384 res=0 errno=0 [ 567.524141][ T43] audit: type=1800 audit(1789467629.983:6216): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=224385 res=0 errno=0 [ 567.543786][ T43] audit: type=1800 audit(1789467629.992:6217): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=224386 res=0 errno=0 [ 567.857832][ T43] audit: type=1800 audit(1789467630.278:6218): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 568.023412][T15209] gadgetfs: suspended from state 3 [ 568.023846][ T10] usb 5-1: USB disconnect, device number 5 [ 568.026258][T15209] gadgetfs: disconnected [ 568.142837][ T43] audit: type=1800 audit(1789467630.546:6219): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 568.202364][ T43] audit: type=1800 audit(1789467630.601:6220): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 568.694450][ T43] audit: type=1800 audit(1789467631.063:6221): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 568.851210][T15224] gadgetfs: bound to dummy_udc driver [ 569.192704][ T43] audit: type=1326 audit(1789467631.358:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.0.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 569.330041][T15225] IPVS: ip_vs_add_dest(): server weight less than zero [ 569.452757][T11850] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 569.453185][ C1] gadgetfs: connected [ 569.454088][T11850] gadgetfs: disconnected [ 569.535673][ T1024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.537282][ T1024] usb 7-1: can't set config #1, error -71 [ 569.540208][ T1024] usb 7-1: USB disconnect, device number 37 [ 569.853842][ C1] gadgetfs: connected [ 569.855535][T11850] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 569.856551][T11850] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 569.856709][T11850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.870465][T15224] gadgetfs: suspended from state 3 [ 569.870593][T15224] gadgetfs: disconnected [ 569.881720][T11850] usb 5-1: can't set config #1, error -71 [ 569.882793][T11850] usb 5-1: USB disconnect, device number 6 [ 570.851329][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 571.103239][T15253] bond2: Removing last arp target with arp_interval on [ 572.338044][T15267] IPVS: ip_vs_add_dest(): server weight less than zero [ 572.891239][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 572.891251][ T43] audit: type=1800 audit(1789467634.929:6252): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 572.937914][ T43] audit: type=1800 audit(1789467634.966:6253): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 572.957546][ T43] audit: type=1800 audit(1789467634.993:6254): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 573.026447][ T43] audit: type=1800 audit(1789467635.049:6255): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 573.051667][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2788'. [ 573.051684][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2788'. [ 573.051723][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2788'. [ 573.090059][ T43] audit: type=1800 audit(1789467635.113:6256): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 573.206861][ T43] audit: type=1800 audit(1789467635.215:6257): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 573.317723][T15292] bad cache= option: nonenr_mlock 2048 [ 573.317723][T15292] nr_zspages 1753 [ 573.317723][T15292] nr_free_cma 0 [ 573.317723][T15292] numa_hit 341483 [ 573.317723][T15292] numa_miss 3542074 [ 573.317723][T15292] numa_foreign 3542074 [ 573.317723][T15292] numa_interleave 6286 [ 573.317723][T15292] numa_local 336248 [ 573.317723][T15292] numa_other 3547309 [ 573.317723][T15292] nr_inactive_anon 3413 [ 573.317723][T15292] nr_active_anon 9966 [ 573.317723][T15292] nr_inactive_file 9290 [ 573.317723][T15292] nr_active_file 1441 [ 573.317723][T15292] nr_unevictable 2048 [ 573.317723][T15292] nr_slab_reclaimable 6507 [ 573.317723][T15292] nr_slab_unreclaimable 62614 [ 573.317723][T15292] nr_isolated_anon 0 [ 573.317723][T15292] nr_isolated_file 0 [ 573.317723][T15292] workingset_nodes 183 [ 573.317723][T15292] workingset_refault_anon 80734 [ 573.317723][T15292] workingset_refault_file 17748 [ 573.317723][T15292] workingset_activate_anon 333 [ 573.317723][T15292] workingset_activate_file 1457 [ 573.317723][T15292] workingset_restore_anon 372 [ 573.317723][T15292] workingset_restore_file 1490 [ 573.317723][T15292] workingset_nodereclaim 907 [ 573.317723][T15292] nr_anon_pages 7983 [ 573.317723][T15292] nr_mapped 22552 [ 573.317723][T15292] nr_file_pages 18493 [ 573.317723][T15292] nr_dirty 152 [ 573.317723][T15292] nr_writeback 0 [ 573.317723][T15292] nr_shmem 6959 [ 573.317723][T15292] nr_shmem_hugepages 0 [ 573.317723][T15292] nr_shmem_pmdmapped 0 [ 573.317723][T15292] nr_file_hugepages 0 [ 573.317723][T15292] nr_file_pmdmapped 0 [ 573.317723][T15292] nr_anon_transparent_hugepages 10 [ 573.317723][T15292] nr_vmscan_write 141752 [ 573.317723][T15292] nr_vmscan_immediate_reclaim 962 [ 573.317723][T15292] nr_dirtied 36122 [ 573.317723][T15292] nr_written 34900 [ 573.317723][T15292] nr_throttled_written 272 [ 573.317723][T15292] nr_kernel_misc_reclaimable 0 [ 573.317723][T15292] nr_foll_pin_acquired 17662 [ 573.317723][T15292] nr_foll_pin_released 17662 [ 573.317989][T15292] CIFS: VFS: bad cache= option: nonenr_mlock 2048 [ 573.317989][T15292] nr_zspages 1753 [ 573.317989][T15292] nr_free_cma 0 [ 573.317989][T15292] numa_hit 341483 [ 573.317989][T15292] numa_miss 3542074 [ 573.317989][T15292] numa_foreign 3542074 [ 573.317989][T15292] numa_interleave 6286 [ 573.317989][T15292] numa_local 336248 [ 573.317989][T15292] numa_other 3547309 [ 573.317989][T15292] nr_inactive_anon 3413 [ 573.317989][T15292] nr_active_anon 9966 [ 573.317989][T15292] nr_inactive_file 9290 [ 573.317989][T15292] nr_active_file 1441 [ 573.317989][T15292] nr_unevictable 2048 [ 573.317989][T15292] nr_slab_reclaimable 6507 [ 573.317989][T15292] nr_slab_unreclaimable 62614 [ 573.317989][T15292] nr_isolated_anon 0 [ 573.317989][T15292] nr_isolated_file 0 [ 573.317989][T15292] workingset_nodes 183 [ 573.317989][T15292] workingset_refault_anon 80734 [ 573.317989][T15292] workingset_refault_file 17748 [ 573.317989][T15292] workingset_activate_anon 333 [ 573.317989][T15292] workingset_activate_file 1457 [ 573.317989][T15292] workingset_restore_anon 372 [ 573.317989][T15292] workingset_restore_file 1490 [ 573.317989][T15292] workingset_nodereclaim 907 [ 573.317989][T15292] nr_anon_pages 7983 [ 573.317989][T15292] nr_mapped 22552 [ 573.317989][T15292] nr_file_pages 18493 [ 573.317989][T15292] nr_dirty 152 [ 573.317989][T15292] nr_writeback 0 [ 573.317989][T15292] nr_shmem 6959 [ 573.317989][T15292] nr_shmem_hugepages 0 [ 573.317989][T15292] nr_shmem_pmdmapped 0 [ 573.317989][T15292] nr_file_hugepages 0 [ 573.317989][T15292] nr_file_pmdmapped 0 [ 573.317989][T15292] nr_anon_transparent_hugepages 10 [ 573.317989][T15292] nr_vmscan_write 141752 [ 573.317989][T15292] nr_vmscan_immediate_reclaim 962 [ 573.317989][T15292] nr_dirtied 36122 [ 573.317989][T15292] nr_written 34900 [ 573.317989][T15292] nr_throttled_written 272 [ 573.317989][T15292] nr_kernel_misc_reclaimable 0 [ 573.317989][T15292] nr_foll_pin_acquired 17662 [ 573.473256][ T43] audit: type=1800 audit(1789467635.473:6258): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 573.648785][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.668157][ T43] audit: type=1800 audit(1789467635.639:6259): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 573.776500][ T43] audit: type=1800 audit(1789467635.676:6260): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 573.776538][ T43] audit: type=1800 audit(1789467635.704:6261): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225241 res=0 errno=0 [ 573.903279][T15301] IPVS: ip_vs_add_dest(): server weight less than zero [ 574.055742][T15311] IPVS: ip_vs_add_dest(): server weight less than zero [ 574.674118][T15322] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 574.680247][T15322] FAULT_INJECTION: forcing a failure. [ 574.680247][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 574.680274][T15322] CPU: 3 UID: 0 PID: 15322 Comm: syz.2.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.680295][T15322] Tainted: [L]=SOFTLOCKUP [ 574.680300][T15322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 574.680309][T15322] Call Trace: [ 574.680315][T15322] [ 574.680321][T15322] dump_stack_lvl+0x100/0x190 [ 574.680345][T15322] should_fail_ex.cold+0x5/0xa [ 574.680364][T15322] should_failslab+0xc2/0x120 [ 574.680383][T15322] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 574.680401][T15322] ? lock_acquire+0x1d1/0x380 [ 574.680421][T15322] ? kstrdup_const+0x63/0x80 [ 574.680439][T15322] kstrdup+0x51/0xe0 [ 574.680453][T15322] kstrdup_const+0x63/0x80 [ 574.680466][T15322] alloc_vfsmnt+0xe5/0x710 [ 574.680487][T15322] mnt_clone_internal+0x81/0x250 [ 574.680506][T15322] acct_on+0xdf/0xa00 [ 574.680524][T15322] ? __pfx_acct_on+0x10/0x10 [ 574.680546][T15322] ? bpf_lsm_capable+0x9/0x10 [ 574.680570][T15322] __ia32_sys_acct+0x80/0x1e0 [ 574.680622][T15322] __do_fast_syscall_32+0x13a/0x8b0 [ 574.680660][T15322] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.680682][T15322] do_fast_syscall_32+0x32/0x70 [ 574.680703][T15322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.680722][T15322] RIP: 0023:0xf7fd5fec [ 574.680739][T15322] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 574.680749][T15322] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 574.680764][T15322] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 574.680774][T15322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.680782][T15322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.680791][T15322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 574.680800][T15322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.680819][T15322] [ 574.819191][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2801'. [ 575.033651][T11683] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 575.187476][T11683] usb 7-1: device descriptor read/64, error -71 [ 575.365796][T15351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2808'. [ 575.467659][T11683] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 575.526432][T15356] IPVS: ip_vs_add_dest(): server weight less than zero [ 575.618921][T11683] usb 7-1: device descriptor read/64, error -71 [ 575.705574][T13774] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 575.738372][T11683] usb usb7-port1: attempt power cycle [ 575.846481][T13774] usb 9-1: device descriptor read/64, error -71 [ 576.106549][T11683] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 576.106589][T13774] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 576.128879][T11683] usb 7-1: device descriptor read/8, error -71 [ 576.249994][T13774] usb 9-1: device descriptor read/64, error -71 [ 576.355502][T15358] binder: 15357:15358 ioctl c0306201 0 returned -14 [ 576.366933][T13774] usb usb9-port1: attempt power cycle [ 576.376267][T15360] macsec0: entered promiscuous mode [ 576.376383][T15360] macsec0: entered allmulticast mode [ 576.376391][T15360] veth1_macvtap: entered allmulticast mode [ 576.377892][T15360] batman_adv: batadv0: Adding interface: macsec0 [ 576.377906][T15360] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.377931][T15360] batman_adv: batadv0: Interface activated: macsec0 [ 576.382270][T15360] FAULT_INJECTION: forcing a failure. [ 576.382270][T15360] name failslab, interval 1, probability 0, space 0, times 0 [ 576.382299][T15360] CPU: 0 UID: 0 PID: 15360 Comm: syz.5.2811 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.382323][T15360] Tainted: [L]=SOFTLOCKUP [ 576.382330][T15360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.382340][T15360] Call Trace: [ 576.382347][T15360] [ 576.382354][T15360] dump_stack_lvl+0x100/0x190 [ 576.382381][T15360] should_fail_ex.cold+0x5/0xa [ 576.382404][T15360] should_failslab+0xc2/0x120 [ 576.382428][T15360] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 576.382449][T15360] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 576.382470][T15360] ? sock_alloc_inode+0x26/0x2c0 [ 576.382497][T15360] ? __pfx_sock_alloc_inode+0x10/0x10 [ 576.382524][T15360] sock_alloc_inode+0x26/0x2c0 [ 576.382549][T15360] ? __pfx_sock_alloc_inode+0x10/0x10 [ 576.382573][T15360] alloc_inode+0x68/0x250 [ 576.382598][T15360] sock_alloc+0x44/0x280 [ 576.382618][T15360] ? security_socket_create+0x7f/0x250 [ 576.382644][T15360] __sock_create+0xc2/0x860 [ 576.382666][T15360] __sys_socket+0x14d/0x260 [ 576.382684][T15360] ? __pfx___sys_socket+0x10/0x10 [ 576.382697][T15360] ? find_held_lock+0x2b/0x80 [ 576.382709][T15360] ? trace_syscall_enter+0xcc/0x120 [ 576.382729][T15360] ? trace_syscall_enter+0xcc/0x120 [ 576.382757][T15360] __ia32_sys_socket+0x72/0xb0 [ 576.382777][T15360] __do_fast_syscall_32+0x13a/0x8b0 [ 576.382806][T15360] do_fast_syscall_32+0x32/0x70 [ 576.382832][T15360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.382854][T15360] RIP: 0023:0xf700efec [ 576.382874][T15360] Code: Unable to access opcode bytes at 0xf700efc2. [ 576.382880][T15360] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 576.382891][T15360] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000005 [ 576.382898][T15360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.382905][T15360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.382911][T15360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 576.382917][T15360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.382930][T15360] [ 576.382939][T15360] socket: no more sockets [ 576.399195][T11683] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 576.414105][T15361] binder: 15357:15361 ioctl c0306201 0 returned -14 [ 576.421750][T11683] usb 7-1: device descriptor read/8, error -71 [ 576.470385][T15366] binder: 15357:15366 ioctl 40189206 0 returned -22 [ 576.472619][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 576.475521][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.529502][T11683] usb usb7-port1: unable to enumerate USB device [ 576.746084][T13774] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 576.768900][T13774] usb 9-1: device descriptor read/8, error -71 [ 577.038690][T13774] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 577.060747][T13774] usb 9-1: device descriptor read/8, error -71 [ 577.179821][T13774] usb usb9-port1: unable to enumerate USB device [ 578.282428][T15377] FAULT_INJECTION: forcing a failure. [ 578.282428][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 578.282451][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.282468][T15377] Tainted: [L]=SOFTLOCKUP [ 578.282473][T15377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.282480][T15377] Call Trace: [ 578.282485][T15377] [ 578.282490][T15377] dump_stack_lvl+0x100/0x190 [ 578.282508][T15377] should_fail_ex.cold+0x5/0xa [ 578.282523][T15377] should_failslab+0xc2/0x120 [ 578.282540][T15377] __kmalloc_noprof+0xfc/0x840 [ 578.282553][T15377] ? trace_kmalloc+0xeb/0x110 [ 578.282568][T15377] ? lsm_blob_alloc+0x68/0x90 [ 578.282582][T15377] lsm_blob_alloc+0x68/0x90 [ 578.282594][T15377] security_sk_alloc+0x2d/0x290 [ 578.282609][T15377] sk_prot_alloc+0x12a/0x2a0 [ 578.282628][T15377] sk_alloc+0x36/0xe80 [ 578.282642][T15377] bt_sock_alloc+0x3b/0x3c0 [ 578.282657][T15377] hci_sock_create+0xbc/0x1c0 [ 578.282673][T15377] bt_sock_create+0x185/0x350 [ 578.282686][T15377] __sock_create+0x339/0x860 [ 578.282699][T15377] __sys_socket+0x14d/0x260 [ 578.282711][T15377] ? __pfx___sys_socket+0x10/0x10 [ 578.282721][T15377] ? find_held_lock+0x2b/0x80 [ 578.282733][T15377] ? trace_syscall_enter+0xcc/0x120 [ 578.282750][T15377] ? trace_syscall_enter+0xcc/0x120 [ 578.282769][T15377] __ia32_sys_socket+0x72/0xb0 [ 578.282781][T15377] __do_fast_syscall_32+0x13a/0x8b0 [ 578.282798][T15377] ? lockdep_hardirqs_on+0x7d/0x110 [ 578.282814][T15377] do_fast_syscall_32+0x32/0x70 [ 578.282834][T15377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.282848][T15377] RIP: 0023:0xf700efec [ 578.282862][T15377] Code: Unable to access opcode bytes at 0xf700efc2. [ 578.282867][T15377] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 578.282878][T15377] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000003 [ 578.282885][T15377] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000f53fd53c [ 578.282892][T15377] RBP: 00000000f53fd5ec R08: 0000000000000000 R09: 0000000000000000 [ 578.282898][T15377] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 578.282905][T15377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.282918][T15377] [ 578.360336][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 578.360348][ T43] audit: type=1800 audit(1789467639.967:6274): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 578.606279][T15389] IPVS: ip_vs_add_dest(): server weight less than zero [ 578.761932][ T43] audit: type=1800 audit(1789467640.317:6275): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 578.799775][T15391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 578.812701][ T43] audit: type=1800 audit(1789467640.391:6276): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2822" name="trace_pipe" dev="tracefs" ino=2043 res=0 errno=0 [ 578.835039][ T43] audit: type=1800 audit(1789467640.409:6277): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 578.842739][ T43] audit: type=1800 audit(1789467640.419:6278): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 578.864108][T15393] nfs: Unknown parameter 'a.0.1' [ 578.867106][T15393] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2823'. [ 578.881795][T15393] kAFS: unable to lookup cell 'syz0' [ 579.490103][ T43] audit: type=1800 audit(1789467641.018:6279): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 579.799618][ T43] audit: type=1800 audit(1789467641.295:6280): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 579.821331][T15406] FAULT_INJECTION: forcing a failure. [ 579.821331][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.821364][T15406] CPU: 2 UID: 0 PID: 15406 Comm: syz.4.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.821382][T15406] Tainted: [L]=SOFTLOCKUP [ 579.821386][T15406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.821393][T15406] Call Trace: [ 579.821397][T15406] [ 579.821402][T15406] dump_stack_lvl+0x100/0x190 [ 579.821420][T15406] should_fail_ex.cold+0x5/0xa [ 579.821436][T15406] _copy_from_user+0x2e/0xd0 [ 579.821453][T15406] generic_map_update_batch+0x534/0x890 [ 579.821475][T15406] ? __pfx_generic_map_update_batch+0x10/0x10 [ 579.821494][T15406] ? __pfx_generic_map_update_batch+0x10/0x10 [ 579.821510][T15406] bpf_map_do_batch+0x66f/0x6d0 [ 579.821537][T15406] __sys_bpf+0x4ce/0x4a30 [ 579.821560][T15406] ? __pfx___sys_bpf+0x10/0x10 [ 579.821575][T15406] ? trace_event_buffer_commit+0x20a/0xa80 [ 579.821601][T15406] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 579.821633][T15406] ? trace_event_buffer_commit+0x20a/0xa80 [ 579.821664][T15406] ? find_held_lock+0x2b/0x80 [ 579.821686][T15406] ? __ia32_sys_bpf+0xcc/0x170 [ 579.821698][T15406] __ia32_sys_bpf+0xcc/0x170 [ 579.821710][T15406] ? rcu_is_watching+0x13/0xc0 [ 579.821722][T15406] __do_fast_syscall_32+0x13a/0x8b0 [ 579.821743][T15406] ? lockdep_hardirqs_on+0x7d/0x110 [ 579.821761][T15406] do_fast_syscall_32+0x32/0x70 [ 579.821777][T15406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.821792][T15406] RIP: 0023:0xf708efec [ 579.821805][T15406] Code: Unable to access opcode bytes at 0xf708efc2. [ 579.821810][T15406] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 579.821822][T15406] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000900 [ 579.821829][T15406] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.821836][T15406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.821842][T15406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 579.821849][T15406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.821862][T15406] [ 579.873742][T15404] IPVS: ip_vs_add_dest(): server weight less than zero [ 579.896131][ T43] audit: type=1800 audit(1789467641.388:6281): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 580.102886][ T43] audit: type=1800 audit(1789467641.581:6282): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 580.225283][ T43] audit: type=1800 audit(1789467641.701:6283): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 580.506734][T11683] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 580.658508][T11683] usb 7-1: Using ep0 maxpacket: 16 [ 580.659402][T11683] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 580.694208][T11683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.791190][T11683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.791207][T11683] usb 7-1: Product: syz [ 580.791214][T11683] usb 7-1: Manufacturer: syz [ 580.791222][T11683] usb 7-1: SerialNumber: syz [ 581.137991][T11683] usb 7-1: config 0 descriptor?? [ 581.225848][T11683] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 581.225869][T11683] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 581.795418][T11683] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 582.239945][T11683] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 582.241287][T11683] em28xx 7-1:0.0: board has no eeprom [ 582.493267][T15414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 582.566080][T11683] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 582.566107][T11683] em28xx 7-1:0.0: dvb set to bulk mode. [ 582.569605][ T25] em28xx 7-1:0.0: Binding DVB extension [ 582.578192][T11683] usb 7-1: USB disconnect, device number 42 [ 582.579353][T11683] em28xx 7-1:0.0: Disconnecting em28xx [ 582.651794][ T25] em28xx 7-1:0.0: Registering input extension [ 582.655480][T11683] em28xx 7-1:0.0: Closing input extension [ 582.730109][T11683] em28xx: Freeing device [ 582.859230][T15445] IPVS: ip_vs_add_dest(): server weight less than zero [ 583.173377][T15456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.715104][T11850] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 583.953748][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 583.953767][ T43] audit: type=1800 audit(1789467645.143:6311): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 584.271445][ T43] audit: type=1800 audit(1789467645.429:6312): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 584.388211][T11850] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 584.390356][T11850] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 584.390397][T11850] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 584.390684][T11850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.415625][ T43] audit: type=1800 audit(1789467645.558:6313): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226484 res=0 errno=0 [ 584.415654][ T43] audit: type=1800 audit(1789467645.558:6314): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=226513 res=0 errno=0 [ 584.415674][ T43] audit: type=1800 audit(1789467645.558:6315): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=226491 res=0 errno=0 [ 584.417966][ T43] audit: type=1800 audit(1789467645.558:6316): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=226492 res=0 errno=0 [ 584.417992][ T43] audit: type=1800 audit(1789467645.558:6317): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=226493 res=0 errno=0 [ 584.432648][T15456] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 584.451732][ T43] audit: type=1800 audit(1789467645.595:6318): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226533 res=0 errno=0 [ 584.465975][T11850] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 584.502048][ T43] audit: type=1800 audit(1789467645.641:6319): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226549 res=0 errno=0 [ 584.769493][T11850] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 584.773604][ T43] audit: type=1800 audit(1789467645.890:6320): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226640 res=0 errno=0 [ 584.802192][T15481] IPVS: ip_vs_add_dest(): server weight less than zero [ 585.324391][T15497] gadgetfs: bound to dummy_udc driver [ 586.088668][T11850] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 586.089248][ C1] gadgetfs: connected [ 586.090640][T11850] gadgetfs: disconnected [ 586.251476][ C1] gadgetfs: connected [ 586.264749][T11850] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 586.268430][T11850] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 586.269417][T11850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.306922][ C1] gadgetfs: configuration #1 [ 586.433698][T15497] gadgetfs: suspended from state 3 [ 586.434151][ T30] usb 5-1: USB disconnect, device number 7 [ 586.439140][T15497] gadgetfs: disconnected [ 586.455449][ T25] usb 10-1: USB disconnect, device number 42 [ 586.524128][ T25] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 586.524646][ T25] spcp8x5 10-1:1.0: device disconnected [ 586.736075][T15507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.736917][T15507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.737930][T15507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.742893][T15507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.745316][T15507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.977672][ T1] EXT4-fs error: 5 callbacks suppressed [ 586.977685][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.978337][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.979169][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.979405][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.979606][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.979810][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 586.999908][T15507] Bluetooth: hci4: command 0x0406 tx timeout [ 587.913919][T15506] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.913999][T15506] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.914061][T15506] bridge_slave_0: entered allmulticast mode [ 587.915305][T15506] bridge_slave_0: entered promiscuous mode [ 587.947108][T15506] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.947182][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.947269][T15506] bridge_slave_1: entered allmulticast mode [ 587.948060][T15506] bridge_slave_1: entered promiscuous mode [ 588.034820][T15506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.036177][T15506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.056243][T15506] team0: Port device team_slave_0 added [ 588.057572][T15506] team0: Port device team_slave_1 added [ 588.081122][T15506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.081138][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.081158][T15506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.089403][T15506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.089414][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.089433][T15506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.157256][T15506] hsr_slave_0: entered promiscuous mode [ 588.157989][T15506] hsr_slave_1: entered promiscuous mode [ 588.172765][T15506] debugfs: 'hsr0' already exists in 'hsr' [ 588.172785][T15506] Cannot create hsr debugfs directory [ 588.255798][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 588.411807][ T5444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 588.419111][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 588.422664][ T30] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 588.423752][ T30] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 588.423781][ T30] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 588.423812][ T30] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 588.423833][ T30] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 588.423853][ T30] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 588.423873][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 588.432179][ T30] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 588.432207][ T30] usb 5-1: Product: syz [ 588.432220][ T30] usb 5-1: Manufacturer: syz [ 588.432234][ T30] usb 5-1: SerialNumber: syz [ 588.436032][ T30] usb 5-1: config 0 descriptor?? [ 588.437971][T15539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.443447][ T30] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 588.447150][ T30] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 588.547225][ T7050] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 588.547243][ T7050] bridge0 (unregistering): left promiscuous mode [ 588.562758][ T7050] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.563907][ T7050] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.564497][ T7050] .` (unregistering): Released all slaves [ 588.567805][ T7050] bond1 (unregistering): Released all slaves [ 588.591400][ T7050] bond0 (unregistering): Released all slaves [ 588.600657][ T7050] bond2 (unregistering): Released all slaves [ 588.643509][T15546] EXT4-fs error (device sda1): ext4_lookup:1787: inode #90: comm dhcpcd: iget: checksum invalid [ 588.675300][T15547] EXT4-fs error (device sda1): ext4_lookup:1787: inode #90: comm dhcpcd: iget: checksum invalid [ 588.835338][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 588.891797][T15539] FAULT_INJECTION: forcing a failure. [ 588.891797][T15539] name fail_futex, interval 1, probability 0, space 0, times 0 [ 588.891832][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.0.2864 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.891859][T15539] Tainted: [L]=SOFTLOCKUP [ 588.891867][T15539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 588.891880][T15539] Call Trace: [ 588.891887][T15539] [ 588.891895][T15539] dump_stack_lvl+0x100/0x190 [ 588.891925][T15539] should_fail_ex.cold+0x5/0xa [ 588.891951][T15539] get_futex_key+0x1d0/0x14f0 [ 588.891984][T15539] ? __pfx_get_futex_key+0x10/0x10 [ 588.892017][T15539] ? trace_event_buffer_commit+0x20a/0xa80 [ 588.892051][T15539] futex_wake+0xf4/0x5e0 [ 588.892076][T15539] ? __pfx_futex_wake+0x10/0x10 [ 588.892100][T15539] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 588.892129][T15539] do_futex+0x2b2/0x440 [ 588.892149][T15539] ? __pfx_do_futex+0x10/0x10 [ 588.892169][T15539] ? event_triggers_call+0x337/0x4d0 [ 588.892201][T15539] __ia32_sys_futex_time32+0x2f4/0x470 [ 588.892233][T15539] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 588.892255][T15539] ? find_held_lock+0x2b/0x80 [ 588.892277][T15539] ? trace_syscall_enter+0xcc/0x120 [ 588.892307][T15539] ? trace_syscall_enter+0xcc/0x120 [ 588.892346][T15539] __do_fast_syscall_32+0x13a/0x8b0 [ 588.892375][T15539] ? lockdep_hardirqs_on+0x7d/0x110 [ 588.892404][T15539] do_fast_syscall_32+0x32/0x70 [ 588.892433][T15539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.892454][T15539] RIP: 0023:0xf7f15fec [ 588.892473][T15539] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 588.892482][T15539] RSP: 002b:00000000f53d65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 588.892502][T15539] RAX: ffffffffffffffda RBX: 00000000f73d4f8c RCX: 0000000000000081 [ 588.892538][T15539] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 588.892552][T15539] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 588.892563][T15539] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 588.892577][T15539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.892599][T15539] [ 588.893610][ T854] usb 5-1: USB disconnect, device number 8 [ 588.894944][ T854] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 588.989523][ T5444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 589.013923][ T5729] Bluetooth: hci1: command tx timeout [ 589.049952][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 589.202122][T15559] gadgetfs: bound to dummy_udc driver [ 589.468886][ T43] kauditd_printk_skb: 72 callbacks suppressed [ 589.468925][ T43] audit: type=1800 audit(1789467650.209:6393): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134828 res=0 errno=0 [ 589.491410][T13774] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 589.491979][ C3] gadgetfs: connected [ 589.492691][T13774] gadgetfs: disconnected [ 589.657485][ C3] gadgetfs: connected [ 589.659029][T13774] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 589.664953][T13774] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 589.664979][T13774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.695108][ C3] gadgetfs: configuration #1 [ 589.752846][ T43] audit: type=1800 audit(1789467650.467:6394): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233034 res=0 errno=0 [ 589.777841][ T43] audit: type=1800 audit(1789467650.513:6395): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=233063 res=0 errno=0 [ 589.802261][ T43] audit: type=1800 audit(1789467650.532:6396): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=233041 res=0 errno=0 [ 589.823582][ T43] audit: type=1800 audit(1789467650.550:6397): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=233042 res=0 errno=0 [ 589.849343][ T43] audit: type=1800 audit(1789467650.578:6398): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=233043 res=0 errno=0 [ 590.228253][ T43] audit: type=1800 audit(1789467650.919:6399): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 590.359600][ T43] audit: type=1800 audit(1789467651.048:6400): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 590.366025][T15559] gadgetfs: suspended from state 3 [ 590.366293][ T5707] usb 5-1: USB disconnect, device number 9 [ 590.381235][T15559] gadgetfs: disconnected [ 590.448009][ T43] audit: type=1800 audit(1789467651.131:6401): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 590.450954][ T43] audit: type=1800 audit(1789467651.131:6402): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233101 res=0 errno=0 [ 590.582680][ T7050] hsr_slave_0: left promiscuous mode [ 590.583144][ T7050] hsr_slave_1: left promiscuous mode [ 590.583853][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.584552][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.587304][ T7050] batman_adv: batadv0: Interface deactivated: macsec0 [ 590.587317][ T7050] batman_adv: batadv0: Removing interface: macsec0 [ 590.589557][ T7050] veth1_macvtap: left allmulticast mode [ 590.737704][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 590.772527][ T7050] team0 (unregistering): Port device team_slave_0 removed [ 591.074128][T15506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 591.095301][ T5707] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 591.113939][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 591.115002][T15506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 591.135628][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.136805][T15506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 591.151690][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.152379][T15506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.168896][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.248083][ T5729] Bluetooth: hci1: command tx timeout [ 591.249389][ T7050] IPVS: stop unused estimator thread 0... [ 591.255158][T15506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.263104][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.265696][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.265740][T13949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.269640][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.269723][T13949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.279891][ T5707] usb 9-1: unable to get BOS descriptor or descriptor too short [ 591.279928][ T5707] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.280882][ T5707] usb 9-1: config 1 interface 0 altsetting 135 endpoint 0x82 is Bulk; changing to Interrupt [ 591.280903][ T5707] usb 9-1: config 1 interface 0 altsetting 135 endpoint 0x3 is Bulk; changing to Interrupt [ 591.280921][ T5707] usb 9-1: config 1 interface 0 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0 [ 591.280938][ T5707] usb 9-1: config 1 interface 0 has no altsetting 0 [ 591.283617][ T5707] usb 9-1: language id specifier not provided by device, defaulting to English [ 591.339074][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.368298][T15506] veth0_vlan: entered promiscuous mode [ 591.371952][T15506] veth1_vlan: entered promiscuous mode [ 591.389881][T15506] veth0_macvtap: entered promiscuous mode [ 591.392082][T15506] veth1_macvtap: entered promiscuous mode [ 591.398392][T15506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.410268][T15506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.479647][ T7046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.479672][ T7046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.479690][ T7046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.479708][ T7046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.531551][T13949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.531565][T13949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.555315][T13949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.555335][T13949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.627101][T15608] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 591.627391][T15608] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 591.627629][T15608] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 591.627874][T15608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 591.627904][T15608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 591.627921][T15608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 592.541972][T15620] EXT4-fs error: 33 callbacks suppressed [ 592.541991][T15620] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.551029][T15621] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.568100][T15623] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.570379][T15624] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.574160][T15625] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.581390][T15626] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 592.644303][T15635] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:44: iget: checksum invalid [ 592.657346][T15636] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:32: iget: checksum invalid [ 592.663629][T15638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:32: iget: checksum invalid [ 592.664818][T15639] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:32: iget: checksum invalid [ 592.805317][T15643] gadgetfs: bound to dummy_udc driver [ 593.067886][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 593.068973][ C0] gadgetfs: connected [ 593.070400][ T9] gadgetfs: disconnected [ 593.267686][ C0] gadgetfs: connected [ 593.280432][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 593.281719][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 593.281963][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.348595][ C0] gadgetfs: configuration #1 [ 593.512154][ T5729] Bluetooth: hci1: command tx timeout [ 594.190264][T15643] gadgetfs: suspended from state 3 [ 594.190627][ T10] usb 5-1: USB disconnect, device number 10 [ 594.206382][T15643] gadgetfs: disconnected [ 594.300946][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.340929][ T5707] usb 9-1: can't set config #1, error -71 [ 594.342112][ T5707] usb 9-1: USB disconnect, device number 39 [ 594.658907][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2883'. [ 594.700160][T15666] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2888'. [ 594.788041][T15666] syz.5.2888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 594.788065][T15666] CPU: 3 UID: 0 PID: 15666 Comm: syz.5.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.788082][T15666] Tainted: [L]=SOFTLOCKUP [ 594.788087][T15666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 594.788095][T15666] Call Trace: [ 594.788100][T15666] [ 594.788105][T15666] dump_stack_lvl+0x100/0x190 [ 594.788124][T15666] dump_header+0xfb/0x606 [ 594.788137][T15666] oom_kill_process.cold+0xd/0x380 [ 594.788152][T15666] out_of_memory+0x340/0x14f0 [ 594.788171][T15666] ? __pfx_out_of_memory+0x10/0x10 [ 594.788190][T15666] mem_cgroup_out_of_memory+0xc6/0x130 [ 594.788204][T15666] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 594.788216][T15666] ? find_held_lock+0x2b/0x80 [ 594.788230][T15666] ? do_raw_spin_unlock+0x145/0x1e0 [ 594.788240][T15666] ? _raw_spin_unlock+0x28/0x50 [ 594.788266][T15666] try_charge_memcg+0x783/0xf60 [ 594.788286][T15666] ? __pfx_try_charge_memcg+0x10/0x10 [ 594.788303][T15666] ? find_held_lock+0x2b/0x80 [ 594.788315][T15666] ? rcu_read_unlock+0x17/0x60 [ 594.788334][T15666] ? rcu_read_unlock+0x17/0x60 [ 594.788356][T15666] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 594.788379][T15666] ? kasan_save_track+0x14/0x30 [ 594.788395][T15666] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 594.788409][T15666] ? d_instantiate+0x8a/0xb0 [ 594.788424][T15666] ? alloc_empty_file+0x5b/0x1c0 [ 594.788441][T15666] alloc_empty_file+0x5b/0x1c0 [ 594.788456][T15666] alloc_file_pseudo+0x183/0x290 [ 594.788471][T15666] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 594.788512][T15666] ? tipc_sk_finish_conn+0x600/0x7a0 [ 594.788529][T15666] sock_alloc_file+0x50/0x210 [ 594.788547][T15666] __sys_socketpair+0x353/0x5b0 [ 594.788560][T15666] ? __pfx___sys_socketpair+0x10/0x10 [ 594.788574][T15666] ? trace_syscall_enter+0xcc/0x120 [ 594.788592][T15666] ? trace_syscall_enter+0xcc/0x120 [ 594.788612][T15666] __ia32_sys_socketpair+0x95/0x100 [ 594.788624][T15666] ? trace_syscall_enter+0xd6/0x120 [ 594.788640][T15666] __do_fast_syscall_32+0x13a/0x8b0 [ 594.788658][T15666] ? lockdep_hardirqs_on+0x7d/0x110 [ 594.788674][T15666] do_fast_syscall_32+0x32/0x70 [ 594.788691][T15666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.788706][T15666] RIP: 0023:0xf705efec [ 594.788720][T15666] Code: Unable to access opcode bytes at 0xf705efc2. [ 594.788725][T15666] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 594.788737][T15666] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000005 [ 594.788744][T15666] RDX: 0000000000000000 RSI: 0000000080000440 RDI: 0000000000000000 [ 594.788750][T15666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.788756][T15666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 594.788763][T15666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.788777][T15666] [ 594.788782][T15666] memory: usage 8kB, limit 8kB, failcnt 21 [ 594.788788][T15666] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 594.788796][T15666] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 594.788803][T15666] Memory cgroup stats for /syz5/test: [ 594.788879][T15666] cache 0 [ 594.788884][T15666] rss 0 [ 594.788888][T15666] rss_huge 0 [ 594.788893][T15666] shmem 0 [ 594.788899][T15666] mapped_file 0 [ 594.788904][T15666] dirty 0 [ 594.788910][T15666] writeback 0 [ 594.788915][T15666] workingset_refault_anon 0 [ 594.788922][T15666] workingset_refault_file 0 [ 594.788928][T15666] swap 0 [ 594.788933][T15666] swapcached 0 [ 594.788939][T15666] pgpgin 0 [ 594.788945][T15666] pgpgout 0 [ 594.788951][T15666] pgfault 0 [ 594.788957][T15666] pgmajfault 0 [ 594.788965][T15666] inactive_anon 0 [ 594.788972][T15666] active_anon 0 [ 594.788978][T15666] inactive_file 0 [ 594.788984][T15666] active_file 0 [ 594.788990][T15666] unevictable 0 [ 594.788996][T15666] hierarchical_memory_limit 8192 [ 594.789003][T15666] hierarchical_memsw_limit 9223372036854771712 [ 594.789013][T15666] total_cache 0 [ 594.789019][T15666] total_rss 0 [ 594.789025][T15666] total_rss_huge 0 [ 594.789031][T15666] total_shmem 0 [ 594.789036][T15666] total_mapped_file 0 [ 594.789040][T15666] total_dirty 0 [ 594.789044][T15666] total_writeback 0 [ 594.789048][T15666] total_workingset_refault_anon 0 [ 594.789052][T15666] total_workingset_refault_file 0 [ 594.789057][T15666] total_swap 0 [ 594.789061][T15666] total_swapcached 0 [ 594.789065][T15666] total_pgpgin 0 [ 594.789069][T15666] total_pgpgout 0 [ 594.789073][T15666] total_pgfault 0 [ 594.789077][T15666] total_pgmajfault 0 [ 594.789081][T15666] total_inactive_anon 0 [ 594.789085][T15666] total_active_anon 0 [ 594.789089][T15666] total_inactive_file 0 [ 594.789093][T15666] total_active_file 0 [ 594.789097][T15666] total_unevictable 0 [ 594.789101][T15666] anon_cost 0 [ 594.789104][T15666] file_cost 0 [ 594.789109][T15666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2888,pid=15665,uid=0 [ 594.790919][T15666] Memory cgroup out of memory: Killed process 15665 (syz.5.2888) total-vm:102164kB, anon-rss:1296kB, file-rss:23148kB, shmem-rss:9744kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 594.812719][ T6128] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 595.001082][T15670] gadgetfs: bound to dummy_udc driver [ 595.007666][ T6128] usb 7-1: Using ep0 maxpacket: 16 [ 595.008168][ T6128] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.009106][ T6128] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 595.010932][ T6128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.010950][ T6128] usb 7-1: Product: syz [ 595.010962][ T6128] usb 7-1: Manufacturer: syz [ 595.010973][ T6128] usb 7-1: SerialNumber: syz [ 595.012571][ T6128] usb 7-1: config 0 descriptor?? [ 595.013250][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 595.013260][ T43] audit: type=1800 audit(1789467655.339:6441): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234122 res=0 errno=0 [ 595.014904][ T43] audit: type=1800 audit(1789467655.339:6442): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=234154 res=0 errno=0 [ 595.015210][ T6128] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.015234][ T6128] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 595.015903][ T43] audit: type=1800 audit(1789467655.339:6443): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=234129 res=0 errno=0 [ 595.016424][ T43] audit: type=1800 audit(1789467655.339:6444): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=234130 res=0 errno=0 [ 595.256906][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 595.257387][ C0] gadgetfs: connected [ 595.257583][ T10] gadgetfs: disconnected [ 595.282375][ T43] audit: type=1800 audit(1789467655.588:6445): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 595.399431][ T43] audit: type=1326 audit(1789467655.597:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.5.2891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 595.399484][ T43] audit: type=1326 audit(1789467655.606:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.5.2891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 595.399521][ T43] audit: type=1326 audit(1789467655.606:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.5.2891" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf705efec code=0x7ffc0000 [ 595.399567][ T43] audit: type=1326 audit(1789467655.606:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.5.2891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 595.399604][ T43] audit: type=1326 audit(1789467655.606:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.5.2891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 595.485160][ C0] gadgetfs: connected [ 595.486245][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 595.486606][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 595.486637][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.491692][ C0] gadgetfs: configuration #1 [ 595.537828][T15680] IPVS: ip_vs_add_dest(): server weight less than zero [ 595.547603][T13952] IPVS: starting estimator thread 0... [ 595.619677][T15678] ipvlan1: entered allmulticast mode [ 595.619691][T15678] veth0_vlan: entered allmulticast mode [ 595.636309][T15681] IPVS: using max 31 ests per chain, 74400 per kthread [ 595.685591][ T6128] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 595.755501][ T5729] Bluetooth: hci1: command tx timeout [ 595.827206][T15670] gadgetfs: suspended from state 3 [ 595.827604][ T10] usb 5-1: USB disconnect, device number 11 [ 595.834689][T15670] gadgetfs: disconnected [ 596.043066][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2894'. [ 596.043093][T15685] block nbd0: Unsupported socket: should be TCP or UNIX. [ 596.230669][ T6128] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 596.230732][ T6128] em28xx 7-1:0.0: board has no eeprom [ 596.308214][ T6128] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 596.308241][ T6128] em28xx 7-1:0.0: dvb set to bulk mode. [ 596.309156][ T30] em28xx 7-1:0.0: Binding DVB extension [ 596.328298][ T6128] usb 7-1: USB disconnect, device number 43 [ 596.341082][ T6128] em28xx 7-1:0.0: Disconnecting em28xx [ 596.343412][ T30] em28xx 7-1:0.0: Registering input extension [ 596.357490][ T6128] em28xx 7-1:0.0: Closing input extension [ 596.450424][T15695] gadgetfs: bound to dummy_udc driver [ 596.609439][ T6128] em28xx: Freeing device [ 596.672335][ T9096] udevd[9096]: setting mode of /dev/bus/usb/007/043 to 020664 failed: No such file or directory [ 596.673044][ T9096] udevd[9096]: setting owner of /dev/bus/usb/007/043 to uid=0, gid=0 failed: No such file or directory [ 596.712038][ T30] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 596.712751][ C1] gadgetfs: connected [ 596.713164][ T30] gadgetfs: disconnected [ 596.884852][ C1] gadgetfs: connected [ 596.898378][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 596.899205][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 596.899258][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.920173][ C1] gadgetfs: configuration #1 [ 597.155543][T15702] FAULT_INJECTION: forcing a failure. [ 597.155543][T15702] name failslab, interval 1, probability 0, space 0, times 0 [ 597.155576][T15702] CPU: 2 UID: 0 PID: 15702 Comm: syz.2.2899 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.155619][T15702] Tainted: [L]=SOFTLOCKUP [ 597.155627][T15702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 597.155639][T15702] Call Trace: [ 597.155646][T15702] [ 597.155654][T15702] dump_stack_lvl+0x100/0x190 [ 597.155683][T15702] should_fail_ex.cold+0x5/0xa [ 597.155708][T15702] should_failslab+0xc2/0x120 [ 597.155733][T15702] __kmalloc_cache_noprof+0x91/0x6d0 [ 597.155762][T15702] ? bdi_split_work_to_wbs+0x2d7/0xfe0 [ 597.155796][T15702] bdi_split_work_to_wbs+0x2d7/0xfe0 [ 597.155830][T15702] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 597.155869][T15702] ? __pfx_down_write+0x10/0x10 [ 597.155887][T15702] ? __pfx___might_resched+0x10/0x10 [ 597.155910][T15702] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 597.155943][T15702] sync_inodes_sb+0x226/0xc80 [ 597.155963][T15702] ? down_read+0x13b/0x4c0 [ 597.155979][T15702] ? __pfx_down_read+0x10/0x10 [ 597.155998][T15702] ? __pfx_sync_inodes_sb+0x10/0x10 [ 597.156021][T15702] ? super_lock+0x150/0x3f0 [ 597.156050][T15702] ? find_held_lock+0x2b/0x80 [ 597.156068][T15702] ? __iterate_supers+0x247/0x4a0 [ 597.156085][T15702] ? __iterate_supers+0x247/0x4a0 [ 597.156107][T15702] sync_inodes_one_sb+0x57/0x70 [ 597.156130][T15702] __iterate_supers+0x3b7/0x4a0 [ 597.156149][T15702] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 597.156175][T15702] ? __pfx___iterate_supers+0x10/0x10 [ 597.156201][T15702] ksys_sync+0x87/0xf0 [ 597.156224][T15702] ? __pfx_ksys_sync+0x10/0x10 [ 597.156245][T15702] ? trace_syscall_enter+0xcc/0x120 [ 597.156276][T15702] ? rcu_is_watching+0x13/0xc0 [ 597.156295][T15702] ? trace_syscall_enter+0xd6/0x120 [ 597.156322][T15702] __do_sys_sync+0xe/0x20 [ 597.156344][T15702] __do_fast_syscall_32+0x13a/0x8b0 [ 597.156372][T15702] ? lockdep_hardirqs_on+0x7d/0x110 [ 597.156399][T15702] do_fast_syscall_32+0x32/0x70 [ 597.156426][T15702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 597.156449][T15702] RIP: 0023:0xf7fd5fec [ 597.156467][T15702] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 597.156498][T15702] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000024 [ 597.156516][T15702] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 597.156528][T15702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 597.156538][T15702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.156549][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.156560][T15702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.156585][T15702] [ 597.375520][T15695] gadgetfs: suspended from state 3 [ 597.375575][T15695] gadgetfs: disconnected [ 597.376655][T14018] usb 5-1: USB disconnect, device number 12 [ 597.494813][T15710] gadgetfs: bound to dummy_udc driver [ 597.710384][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 597.710408][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 597.710421][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1df2 instead [ 597.710438][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4f74 instead [ 597.710452][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 597.710466][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 597.710480][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 597.710494][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 597.710513][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 597.710544][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 597.710558][T15715] jffs2: Further such events for this erase block will not be printed [ 597.713495][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 597.713511][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 597.713527][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1df2 instead [ 597.713539][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4f74 instead [ 597.713548][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 597.713557][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 597.713566][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 597.713577][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 597.713595][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 597.713613][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 597.713622][T15715] jffs2: Further such events for this erase block will not be printed [ 597.713818][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 597.713827][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 597.713836][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1df2 instead [ 597.713886][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4f74 instead [ 597.713921][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 597.713934][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 597.713950][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1df2 instead [ 597.713968][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4f74 instead [ 597.714008][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 597.714022][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 597.714037][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1df2 instead [ 597.714051][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4f74 instead [ 597.714076][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 597.714085][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 597.714093][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1df2 instead [ 597.714103][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4f74 instead [ 597.714126][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 597.714134][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 597.714143][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1df2 instead [ 597.714153][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4f74 instead [ 597.714176][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 597.714184][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 597.714193][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1df2 instead [ 597.714203][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4f74 instead [ 597.714226][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 597.714235][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 597.714244][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1df2 instead [ 597.714254][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4f74 instead [ 597.714276][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 597.714285][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 597.714294][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1df2 instead [ 597.714304][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4f74 instead [ 597.714327][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 597.714336][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 597.714345][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1df2 instead [ 597.714355][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4f74 instead [ 597.714378][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 597.714387][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 597.714396][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1df2 instead [ 597.714406][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4f74 instead [ 597.714429][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 597.714437][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 597.714447][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1df2 instead [ 597.714457][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4f74 instead [ 597.714480][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 597.714488][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 597.714498][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1df2 instead [ 597.714508][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4f74 instead [ 597.714538][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 597.714547][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 597.714558][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1df2 instead [ 597.714569][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4f74 instead [ 597.714594][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 597.714603][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 597.714613][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1df2 instead [ 597.714624][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4f74 instead [ 597.714673][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 597.714684][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 597.714693][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1df2 instead [ 597.714702][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4f74 instead [ 597.714725][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 597.714734][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 597.714745][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1df2 instead [ 597.714755][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4f74 instead [ 597.714779][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 597.714788][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 597.714798][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1df2 instead [ 597.714808][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4f74 instead [ 597.714831][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 597.714839][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 597.714848][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1df2 instead [ 597.714857][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4f74 instead [ 597.714879][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 597.714888][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 597.714897][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1df2 instead [ 597.714906][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4f74 instead [ 597.714968][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 597.714979][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 597.717170][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1df2 instead [ 597.717191][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4f74 instead [ 597.717242][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 597.717258][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 597.717275][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1df2 instead [ 597.717293][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4f74 instead [ 597.717330][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 597.717339][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 597.717348][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1df2 instead [ 597.717358][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4f74 instead [ 597.717380][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 597.717389][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 597.717398][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1df2 instead [ 597.717407][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4f74 instead [ 597.717443][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 597.717457][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 597.717474][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1df2 instead [ 597.717488][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4f74 instead [ 597.717535][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 597.717551][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 597.717562][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1df2 instead [ 597.717572][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4f74 instead [ 597.717596][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 597.717606][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 597.717616][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1df2 instead [ 597.717626][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4f74 instead [ 597.717651][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 597.717661][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 597.717670][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1df2 instead [ 597.717681][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4f74 instead [ 597.717705][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 597.717713][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 597.717722][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1df2 instead [ 597.717736][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4f74 instead [ 597.717762][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 597.717771][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 597.717780][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1df2 instead [ 597.717790][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4f74 instead [ 597.717816][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 597.717828][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 597.717839][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1df2 instead [ 597.717852][T15715] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4f74 instead [ 597.717875][T15715] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 597.717882][T15715] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 597.825578][T14018] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 597.825849][ C2] gadgetfs: connected [ 597.826049][T14018] gadgetfs: disconnected [ 597.940040][T15715] evm: overlay not supported [ 597.988394][ C2] gadgetfs: connected [ 597.989439][T14018] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 597.989785][T14018] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 597.989819][T14018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.992811][ C2] gadgetfs: configuration #1 [ 598.319336][T15710] gadgetfs: suspended from state 3 [ 598.319605][ T30] usb 5-1: USB disconnect, device number 13 [ 598.321415][T15710] gadgetfs: disconnected [ 598.341056][T15724] FAULT_INJECTION: forcing a failure. [ 598.341056][T15724] name failslab, interval 1, probability 0, space 0, times 0 [ 598.341078][T15724] CPU: 3 UID: 0 PID: 15724 Comm: syz.5.2907 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.341100][T15724] Tainted: [L]=SOFTLOCKUP [ 598.341106][T15724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.341116][T15724] Call Trace: [ 598.341123][T15724] [ 598.341130][T15724] dump_stack_lvl+0x100/0x190 [ 598.341160][T15724] should_fail_ex.cold+0x5/0xa [ 598.341194][T15724] should_failslab+0xc2/0x120 [ 598.341217][T15724] __kmalloc_noprof+0xfc/0x840 [ 598.341230][T15724] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 598.341249][T15724] kernfs_fop_write_iter+0x26a/0x5f0 [ 598.341268][T15724] vfs_write+0x6af/0x1050 [ 598.341280][T15724] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 598.341298][T15724] ? __pfx_vfs_write+0x10/0x10 [ 598.341319][T15724] ? event_triggers_call+0x337/0x4d0 [ 598.341350][T15724] ? trace_event_buffer_commit+0x20a/0xa80 [ 598.341385][T15724] ksys_write+0x12a/0x250 [ 598.341405][T15724] ? __pfx_ksys_write+0x10/0x10 [ 598.341421][T15724] ? trace_syscall_enter+0xcc/0x120 [ 598.341446][T15724] __do_fast_syscall_32+0x13a/0x8b0 [ 598.341463][T15724] ? lockdep_hardirqs_on+0x7d/0x110 [ 598.341480][T15724] do_fast_syscall_32+0x32/0x70 [ 598.341498][T15724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.341512][T15724] RIP: 0023:0xf705efec [ 598.341525][T15724] Code: Unable to access opcode bytes at 0xf705efc2. [ 598.341530][T15724] RSP: 002b:00000000f540b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 598.341541][T15724] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 598.341548][T15724] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.341554][T15724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.341560][T15724] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 598.341567][T15724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.341581][T15724] [ 600.119278][T13332] EXT4-fs error: 23 callbacks suppressed [ 600.119291][T13332] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 600.119560][T13332] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 600.119764][T13332] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 600.156066][T15755] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 600.157331][T15756] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:32: iget: checksum invalid [ 600.349511][T15767] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 600.350989][T15768] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:35: iget: checksum invalid [ 600.384621][T15762] gadgetfs: bound to dummy_udc driver [ 600.453757][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 600.453770][ T43] audit: type=1800 audit(1789467660.358:6525): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="attr_allow_any_host" dev="configfs" ino=63234 res=0 errno=0 [ 600.456747][T15772] nvmet: adding nsid 1 to subsystem testsubsys [ 600.457596][ T43] audit: type=1800 audit(1789467660.358:6526): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="buffered_io" dev="configfs" ino=63236 res=0 errno=0 [ 600.458668][ T43] audit: type=1800 audit(1789467660.358:6527): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="device_path" dev="configfs" ino=65726 res=0 errno=0 [ 600.460662][ T43] audit: type=1800 audit(1789467660.367:6528): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="addr_trtype" dev="configfs" ino=65727 res=0 errno=0 [ 600.461011][T15772] nvmet: Invalid value 'fc [ 600.461011][T15772] ´öM<©þq˜I—w'œ5ÑÌKà8…v ØÄ ‡wƒÇø' for trtype [ 600.461410][ T43] audit: type=1800 audit(1789467660.367:6529): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="addr_adrfam" dev="configfs" ino=65728 res=0 errno=0 [ 600.462265][ T43] audit: type=1800 audit(1789467660.367:6530): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2924" name="addr_traddr" dev="configfs" ino=65729 res=0 errno=0 [ 600.464231][T15773] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u33:38: iget: checksum invalid [ 600.465012][T15772] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 600.499604][ T43] audit: type=1800 audit(1789467660.395:6531): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 600.567265][ T43] audit: type=1800 audit(1789467660.460:6532): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2925" name="add_local_port" dev="sysfs" ino=22670 res=0 errno=0 [ 600.574392][ T43] audit: type=1800 audit(1789467660.469:6533): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2925" name="add_target_port" dev="sysfs" ino=22674 res=0 errno=0 [ 600.591665][ T43] audit: type=1800 audit(1789467660.487:6534): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2925" name="add_remote_port" dev="sysfs" ino=22672 res=0 errno=0 [ 600.643274][ T30] usb 5-1: new full-speed USB de ** replaying previous printk message ** [ 600.643274][ T30] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 600.643499][ C1] gadgetfs: connected [ 600.643625][ T30] gadgetfs: disconnected [ 600.655678][T15775] [ 600.662810][T15775] ====================================================== [ 600.665030][T15775] WARNING: possible circular locking dependency detected [ 600.667271][T15775] syzkaller #0 Tainted: G L [ 600.669318][T15775] ------------------------------------------------------ [ 600.671484][T15775] syz.2.2925/15775 is trying to acquire lock: [ 600.673401][T15775] ffff88802950c460 (sb_writers#5){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 600.676799][T15775] [ 600.676799][T15775] but task is already holding lock: [ 600.679866][T15775] ffff888029141868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 600.683638][T15775] [ 600.683638][T15775] which lock already depends on the new lock. [ 600.683638][T15775] [ 600.687913][T15775] [ 600.687913][T15775] the existing dependency chain (in reverse order) is: [ 600.691605][T15775] [ 600.691605][T15775] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 600.694716][T15775] lock_acquire+0x1d1/0x380 [ 600.696882][T15775] __mutex_lock+0x1a4/0x1bd0 [ 600.699047][T15775] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 600.701683][T15775] configfs_write_iter+0x302/0x4e0 [ 600.704065][T15775] vfs_write+0x6af/0x1050 [ 600.705844][T15775] ksys_write+0x12a/0x250 [ 600.707414][T15775] __do_fast_syscall_32+0x13a/0x8b0 [ 600.709227][T15775] do_fast_syscall_32+0x32/0x70 [ 600.710932][T15775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.713077][T15775] [ 600.713077][T15775] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 600.715391][T15775] lock_acquire+0x1d1/0x380 [ 600.717025][T15775] down_read+0x99/0x4c0 [ 600.718537][T15775] __configfs_open_file+0xe8/0x9c0 [ 600.720323][T15775] do_dentry_open+0x6ab/0x14d0 [ 600.721993][T15775] vfs_open+0x82/0x3f0 [ 600.723453][T15775] dentry_open+0x71/0xd0 [ 600.724977][T15775] ima_calc_file_hash+0xe1/0x380 [ 600.726697][T15775] ima_collect_measurement+0x94f/0xb30 [ 600.728610][T15775] process_measurement+0xdfe/0x2350 [ 600.730402][T15775] ima_file_check+0xcc/0x120 [ 600.732014][T15775] security_file_post_open+0xc4/0x210 [ 600.733897][T15775] path_openat+0x5cd/0x2440 [ 600.735576][T15775] do_file_open+0x20e/0x430 [ 600.737255][T15775] do_sys_openat2+0x10f/0x1e0 [ 600.738909][T15775] __ia32_compat_sys_openat+0x12d/0x210 [ 600.740878][T15775] __do_fast_syscall_32+0x13a/0x8b0 [ 600.742714][T15775] do_fast_syscall_32+0x32/0x70 [ 600.744428][T15775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.746607][T15775] [ 600.746607][T15775] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 600.749519][T15775] lock_acquire+0x1d1/0x380 [ 600.751146][T15775] __mutex_lock+0x1a4/0x1bd0 [ 600.752782][T15775] process_measurement+0x5ab/0x2350 [ 600.754574][T15775] ima_file_check+0xcc/0x120 [ 600.756188][T15775] security_file_post_open+0xc4/0x210 [ 600.758465][T15775] path_openat+0x5cd/0x2440 [ 600.760676][T15775] do_file_open+0x20e/0x430 [ 600.762449][T15775] do_sys_openat2+0x10f/0x1e0 [ 600.764025][T15775] __x64_sys_openat+0x12d/0x210 [ 600.765721][T15775] do_syscall_64+0x121/0x770 [ 600.767371][T15775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.769376][T15775] [ 600.769376][T15775] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 600.771672][T15775] check_prev_add+0xeb/0xe60 [ 600.773337][T15775] __lock_acquire+0x1528/0x1f40 [ 600.775563][T15775] lock_acquire+0x1d1/0x380 [ 600.777716][T15775] mnt_want_write+0x6f/0x420 [ 600.779863][T15775] lookup_open+0x150/0x1990 [ 600.782001][T15775] path_openat+0xa2c/0x2440 [ 600.784104][T15775] do_file_open+0x20e/0x430 [ 600.786229][T15775] file_open_name+0x1c3/0x3e0 [ 600.788391][T15775] filp_open+0x2e/0x50 [ 600.790372][T15775] nvmet_file_ns_enable+0x95/0x420 [ 600.792722][T15775] nvmet_ns_enable+0x43b/0x650 [ 600.794933][T15775] nvmet_ns_enable_store+0x11e/0x160 [ 600.797379][T15775] configfs_write_iter+0x302/0x4e0 [ 600.799478][T15775] vfs_write+0x6af/0x1050 [ 600.801028][T15775] ksys_write+0x12a/0x250 [ 600.802602][T15775] __do_fast_syscall_32+0x13a/0x8b0 [ 600.804395][T15775] do_fast_syscall_32+0x32/0x70 [ 600.805960][ C1] gadgetfs: connected [ 600.806694][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 600.807031][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 600.807049][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.808142][ C1] gadgetfs: configuration #1 [ 600.818495][T15775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.821400][T15775] [ 600.821400][T15775] other info that might help us debug this: [ 600.821400][T15775] [ 600.825566][T15775] Chain exists of: [ 600.825566][T15775] sb_writers#5 --> &p->frag_sem --> &subsys->lock [ 600.825566][T15775] [ 600.830618][T15775] Possible unsafe locking scenario: [ 600.830618][T15775] [ 600.833657][T15775] CPU0 CPU1 [ 600.835872][T15775] ---- ---- [ 600.838105][T15775] lock(&subsys->lock); [ 600.839935][T15775] lock(&p->frag_sem); [ 600.842739][T15775] lock(&subsys->lock); [ 600.845576][T15775] rlock(sb_writers#5); [ 600.846987][T15775] [ 600.846987][T15775] *** DEADLOCK *** [ 600.846987][T15775] [ 600.849705][T15775] locks held by syz.2.2925/15775: 6, last CPU#3: [ 600.851672][T15775] #0: ffff8880298c62b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 600.854544][T15775] #1: ffff888022806460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 600.857445][T15775] #2: ffff88802a6a3a80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 600.860535][T15775] #3: ffff888025f21570 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 600.863541][T15775] #4: ffffffff8ff5bd28 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 600.866726][T15775] #5: ffff888029141868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 600.869709][T15775] [ 600.869709][T15775] stack backtrace: [ 600.871843][T15775] CPU: 3 UID: 0 PID: 15775 Comm: syz.2.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.876355][T15775] Tainted: [L]=SOFTLOCKUP [ 600.878169][T15775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.882383][T15775] Call Trace: [ 600.883842][T15775] [ 600.885106][T15775] dump_stack_lvl+0x100/0x190 [ 600.887091][T15775] print_circular_bug.cold+0x178/0x1be [ 600.889387][T15775] check_noncircular+0x146/0x160 [ 600.891468][T15775] check_prev_add+0xeb/0xe60 [ 600.893426][T15775] __lock_acquire+0x1528/0x1f40 [ 600.895477][T15775] lock_acquire+0x1d1/0x380 [ 600.897425][T15775] ? lookup_open+0x150/0x1990 [ 600.899462][T15775] ? __pfx___might_resched+0x10/0x10 [ 600.901366][T15775] ? find_held_lock+0x2b/0x80 [ 600.902856][T15775] mnt_want_write+0x6f/0x420 [ 600.904315][T15775] ? lookup_open+0x150/0x1990 [ 600.905806][T15775] lookup_open+0x150/0x1990 [ 600.907340][T15775] path_openat+0xa2c/0x2440 [ 600.908975][T15775] ? __pfx_path_openat+0x10/0x10 [ 600.910758][T15775] ? kasan_save_stack+0x3f/0x50 [ 600.912797][T15775] ? kasan_save_stack+0x30/0x50 [ 600.914720][T15775] ? kasan_save_track+0x14/0x30 [ 600.916733][T15775] ? __kasan_slab_alloc+0x89/0x90 [ 600.918870][T15775] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 600.921215][T15775] ? do_getname_kernel+0x5d/0x250 [ 600.923297][T15775] ? filp_open+0x1d/0x50 [ 600.925112][T15775] ? nvmet_file_ns_enable+0x95/0x420 [ 600.927335][T15775] do_file_open+0x20e/0x430 [ 600.929084][T15775] ? __pfx_do_file_open+0x10/0x10 [ 600.930709][T15775] ? rcu_is_watching+0x13/0xc0 [ 600.932191][T15775] file_open_name+0x1c3/0x3e0 [ 600.933666][T15775] ? __pfx_file_open_name+0x10/0x10 [ 600.935257][T15775] ? do_getname_kernel+0x5d/0x250 [ 600.936845][T15775] ? __asan_memcpy+0x3c/0x60 [ 600.938322][T15775] ? do_getname_kernel+0x1be/0x250 [ 600.939948][T15775] filp_open+0x2e/0x50 [ 600.941267][T15775] nvmet_file_ns_enable+0x95/0x420 [ 600.942864][T15775] nvmet_ns_enable+0x43b/0x650 [ 600.944368][T15775] nvmet_ns_enable_store+0x11e/0x160 [ 600.946024][T15775] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 600.947870][T15775] ? configfs_write_iter+0x388/0x4e0 [ 600.949575][T15775] configfs_write_iter+0x302/0x4e0 [ 600.951188][T15775] vfs_write+0x6af/0x1050 [ 600.952553][T15775] ? __pfx_configfs_write_iter+0x10/0x10 [ 600.954317][T15775] ? __pfx_vfs_write+0x10/0x10 [ 600.955853][T15775] ? find_held_lock+0x2b/0x80 [ 600.957466][T15775] ksys_write+0x12a/0x250 [ 600.959168][T15775] ? __pfx_ksys_write+0x10/0x10 [ 600.960761][T15775] ? trace_syscall_enter+0xcc/0x120 [ 600.962398][T15775] __do_fast_syscall_32+0x13a/0x8b0 [ 600.964045][T15775] do_fast_syscall_32+0x32/0x70 [ 600.965584][T15775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.967745][T15775] RIP: 0023:0xf7fd5fec [ 600.969050][T15775] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 600.971394][T15775] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 600.974880][T15775] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 600.978153][T15775] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.981469][T15775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.984724][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.987904][T15775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.991210][T15775] [ 601.006505][ T5141] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 601.006912][ T5141] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 601.011288][T15775] nvmet: failed to open file ./file0: (-2) [ 601.037690][T13949] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 601.037901][T13940] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 601.037951][T13949] (NULL device *): queue 0 connect admin queue failed (-6). [ 601.037967][T13949] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 601.037981][T13949] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 601.038012][T15775] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys", hostnqn: nqn.2014-08.org.nvmexpress:uuid:7cf6f327-f79e-45b5-a786-ea5163dad18e [ 601.191727][T15762] gadgetfs: suspended from state 3 [ 601.191997][ T30] usb 5-1: USB disconnect, device number 14 [ 601.196086][T15762] gadgetfs: disconnected [ 603.211850][T13937] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 603.212415][T13949] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 603.212500][T13937] (NULL device *): queue 0 connect admin queue failed (-6). [ 603.212519][T13937] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 603.212534][T13937] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 605.476924][T13949] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 605.477755][T13947] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 605.477803][T13949] (NULL device *): queue 0 connect admin queue failed (-6). [ 605.477816][T13949] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 605.477825][T13949] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 607.720385][T13943] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 607.720611][T13949] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 607.720647][T13943] (NULL device *): queue 0 connect admin queue failed (-6). [ 607.720658][T13943] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 607.720675][T13943] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 609.977162][T13943] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 609.977251][T13937] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 609.977298][T13943] (NULL device *): queue 0 connect admin queue failed (-6). [ 609.977315][T13943] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 609.977330][T13943] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds