last executing test programs: 1m7.358410456s ago: executing program 0 (id=2211): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$search(0xa, r1, 0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0) 1m7.300179523s ago: executing program 0 (id=2215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'bond_slave_0\x00', &(0x7f0000000700)=@ethtool_channels={0x3c, 0x2, 0xbf60, 0x1, 0x6, 0x4, 0xffffff7f, 0x3, 0x9}}) 1m7.24023148s ago: executing program 0 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004803400010000000001200002800c00", 0x4e}], 0x1}, 0x0) 1m7.239423307s ago: executing program 0 (id=2222): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x2, 0x10) write(r1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="32ee9a6d685ef9d27d3afb383b2acd7862b4b17081c05ffebbad82a2f4aef8f12fb73bca4d1ed199e8058d3340f1ca85be675b5d39456fcff191c2974bbbe8", 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x22201, 0x0) write(r2, &(0x7f0000000480)='dummy_', 0x6) mkdir(&(0x7f0000000540)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='mnt\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='a '], 0xa) 1m7.170215188s ago: executing program 0 (id=2224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db458"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000600), 0x8, 0x10, &(0x7f0000000640), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000880)="b90103600033f0000000000008001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.12042329s ago: executing program 0 (id=2226): r0 = syz_open_dev$dri(&(0x7f0000000d40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000d80)={0x0, &(0x7f0000000dc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000e00)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000e80)={r2, 0x2, 0x3, 0x4, &(0x7f0000000640)=[{0x8, 0x6, 0x200, 0x804}, {0x0, 0x200, 0x5, 0x6}, {0x9, 0x9, 0x0, 0x6}, {0x1, 0xa2, 0x0, 0x45}]}) 52.131369724s ago: executing program 32 (id=2226): r0 = syz_open_dev$dri(&(0x7f0000000d40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000d80)={0x0, &(0x7f0000000dc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000e00)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000e80)={r2, 0x2, 0x3, 0x4, &(0x7f0000000640)=[{0x8, 0x6, 0x200, 0x804}, {0x0, 0x200, 0x5, 0x6}, {0x9, 0x9, 0x0, 0x6}, {0x1, 0xa2, 0x0, 0x45}]}) 43.040253515s ago: executing program 3 (id=2596): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000004540)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000004580)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000045c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000004600)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000046c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000004700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004740)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000004780)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004400)={0x1, &(0x7f0000004440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 43.039844305s ago: executing program 3 (id=2598): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001940)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001a00)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r1, &(0x7f0000001a80)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 42.990220217s ago: executing program 3 (id=2600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 42.989772217s ago: executing program 3 (id=2601): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40186f40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev_mnt\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40046f05, &(0x7f0000000680)) 42.747200405s ago: executing program 3 (id=2605): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 41.580254832s ago: executing program 3 (id=2625): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x5, 0x1, 0x4, 0x1, 0x1, 0x8}) 26.559594964s ago: executing program 33 (id=2625): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x5, 0x1, 0x4, 0x1, 0x1, 0x8}) 7.680114399s ago: executing program 5 (id=3194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a", 0x6}, {&(0x7f0000000580)="63e7368651", 0x5}, {&(0x7f0000000500)="de21cff472aa580c2e", 0x9}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f900133", 0x2d}], 0x4) 7.439397113s ago: executing program 5 (id=3197): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setfsgid(0xee00) write$sysctl(r0, &(0x7f0000000d80)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f0000000100)='2\x00', 0x2) 6.167117162s ago: executing program 5 (id=3220): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x20}, 0x30, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='0', 0x1) syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) landlock_restrict_self(r0, 0x0) 6.091355422s ago: executing program 5 (id=3223): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 6.02963131s ago: executing program 5 (id=3226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001940)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000001980)='./proc\x00', 0x32) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r2, &(0x7f0000001a80)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.898903274s ago: executing program 5 (id=3229): r0 = syz_open_dev$dri(&(0x7f0000006dc0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000006e00)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000006e40)={&(0x7f0000006e80)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000006ec0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000006f00)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r3 = syz_open_dev$dri(&(0x7f00000006c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000001240)={0x4000000, 0x5, 0x3}) 5.230160627s ago: executing program 4 (id=3240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000c300)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f000000c340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000c380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) read$snddsp(r1, &(0x7f000000c480)=""/167, 0xa7) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f000000c540)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f000000c580)=""/189, 0xbd, 0x0, 0x0}, &(0x7f000000c640)=0x40) 5.230004027s ago: executing program 4 (id=3241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003000400110000000000020007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.159680898s ago: executing program 4 (id=3242): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000a40)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x7, 0x3b, 0x40}, @ipv4=@igmp={{0x0, 0x4, 0x3, 0x5, 0x0, 0x67, 0x0, 0x7f, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x30}, {[@rr={0x7, 0x0, 0x7e, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @multicast1, @broadcast, @broadcast, @local, @empty, @broadcast]}, @end, @lsrr={0x83, 0x0, 0xfb, [@multicast1, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x9, @multicast1]}, @end]}}, {0x17, 0xb, 0x0, @rand_addr=0x64010102, "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"}}}, 0x30) 5.01901967s ago: executing program 4 (id=3243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000580)='7', 0x1) read$char_usb(r2, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="2318e7") 2.669707635s ago: executing program 4 (id=3256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000009d00)={&(0x7f0000009d40)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f000000a000)={&(0x7f000000a040)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 2.669499516s ago: executing program 4 (id=3257): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad00013100102030109022400010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, &(0x7f0000002200)=""/4151, 0x1037, 0xa8cf) 749.928991ms ago: executing program 2 (id=3269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f000000c340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000c380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f000000c3c0)={0x0, 0x0, &(0x7f000000c400)=[{&(0x7f000000c440)="c962", 0x2}], 0x1}, 0x4004045) read$snddsp(r1, &(0x7f000000c480)=""/167, 0xa7) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f000000c540)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f000000c580)=""/189, 0xbd, 0x0, 0x0}, &(0x7f000000c640)=0x40) 678.422935ms ago: executing program 2 (id=3270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000001400)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 606.572012ms ago: executing program 2 (id=3273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000001000)={0xc0, 0x0, 0x8000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000001080)={0x1fd, 0x1c0, 0x140, 0x0}) 452.624779ms ago: executing program 2 (id=3275): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f00000002c0)={0x0, 0x1, 0x101d, 0xffffffffffffffff, 0x0, 0x0}) 399.632761ms ago: executing program 1 (id=3276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 399.508797ms ago: executing program 2 (id=3277): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000200)=0x1803, 0x4) 399.345719ms ago: executing program 2 (id=3278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r4, 0x6, 0x9fd, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000500)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "ca00", 0x28, 0x29, 0x1, @remote, @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @fragment={0xb2, 0x0, 0x4, 0x0, 0x0, 0x11, 0x68}, @dstopts={0x73, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 399.042938ms ago: executing program 1 (id=3279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f000000c340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000c380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f000000c3c0)={0x0, 0x0, &(0x7f000000c400)=[{&(0x7f000000c440)="c962", 0x2}], 0x1}, 0x4004045) read$snddsp(r1, &(0x7f000000c480)=""/167, 0xa7) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f000000c540)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f000000c580)=""/189, 0xbd, 0x0, 0x0}, &(0x7f000000c640)=0x40) 319.864494ms ago: executing program 1 (id=3280): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2, &(0x7f0000000140)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x7}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r1, r2, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) 219.653759ms ago: executing program 1 (id=3281): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 128.614192ms ago: executing program 1 (id=3282): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'unacknowledged_bad_blocks\x00'}}, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2200c3a, 0x0) write$md_sysfs(r2, &(0x7f00000003c0)=@str='1', 0x1) 0s ago: executing program 1 (id=3283): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setfsgid(0xee00) write$sysctl(r0, &(0x7f0000000d80)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000100)='2\x00', 0x2) kernel console output (not intermixed with test programs): e [ 189.384410][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.384452][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.421507][ T2327] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 189.623158][T11904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.653341][T11904] veth0_vlan: entered promiscuous mode [ 189.656684][T11904] veth1_vlan: entered promiscuous mode [ 189.673965][T11904] veth0_macvtap: entered promiscuous mode [ 189.676189][T11904] veth1_macvtap: entered promiscuous mode [ 189.685667][T11904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.694307][T11904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.729753][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.729819][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.729838][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.729857][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.772834][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.772842][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.819341][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.819351][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.547216][ T5743] Bluetooth: hci2: command tx timeout [ 190.635107][T12091] syzkaller0: entered promiscuous mode [ 190.635115][T12091] syzkaller0: entered allmulticast mode [ 191.026862][ T5743] Bluetooth: hci5: command tx timeout [ 191.555765][T12158] syzkaller0: entered promiscuous mode [ 191.555773][T12158] syzkaller0: entered allmulticast mode [ 191.669893][ T2327] usb 8-1: USB disconnect, device number 27 [ 192.182420][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 192.537061][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 192.626890][ T5743] Bluetooth: hci2: command tx timeout [ 192.710775][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 192.714157][ T24] usb 6-1: config 0 has no interfaces? [ 192.714186][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.715474][ T24] usb 6-1: config 0 descriptor?? [ 192.819202][T12215] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 192.819220][T12215] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 192.918984][ T24] usb 6-1: USB disconnect, device number 30 [ 193.119100][ T5743] Bluetooth: hci5: command tx timeout [ 193.236609][T12234] syzkaller0: entered promiscuous mode [ 193.236618][T12234] syzkaller0: entered allmulticast mode [ 193.339745][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2599'. [ 193.659915][T12265] syzkaller0: entered promiscuous mode [ 193.659924][T12265] syzkaller0: entered allmulticast mode [ 193.827892][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.849416][ T58] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 193.906970][ C3] net_ratelimit: 309 callbacks suppressed [ 194.006885][ T2327] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 194.010267][T12280] ubi: mtd0 is already attached to ubi0 [ 194.017560][ T58] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.018725][ T58] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 194.018762][ T58] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.018785][ T58] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.018829][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.024956][ T58] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.025307][ T58] usb 8-1: invalid MIDI out EP 0 [ 194.167631][ T2327] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 194.168208][ T2327] usb 7-1: config 0 has no interfaces? [ 194.168359][ T2327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.170565][ T2327] usb 7-1: config 0 descriptor?? [ 194.295989][ T58] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 194.310913][ T58] usb 8-1: USB disconnect, device number 28 [ 194.348119][T12292] syzkaller0: entered promiscuous mode [ 194.348128][T12292] syzkaller0: entered allmulticast mode [ 194.376065][ T2327] usb 7-1: USB disconnect, device number 22 [ 194.474186][T12296] tipc: Started in network mode [ 194.474202][T12296] tipc: Node identity 526c4ff62092, cluster identity 4711 [ 194.474272][T12296] tipc: Enabled bearer , priority 0 [ 194.474805][T12296] syzkaller0: entered promiscuous mode [ 194.474814][T12296] syzkaller0: entered allmulticast mode [ 194.477643][T12296] tipc: Resetting bearer [ 194.478737][T12295] tipc: Resetting bearer [ 194.489300][T12295] tipc: Disabling bearer [ 194.607005][T11854] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 194.767652][T11854] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 194.768589][T11854] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 194.768607][T11854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.768619][T11854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.768631][T11854] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 194.769665][T11854] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 194.769675][T11854] usb 9-1: Manufacturer: syz [ 194.770991][T11854] usb 9-1: config 0 descriptor?? [ 194.896757][T12307] FAULT_INJECTION: forcing a failure. [ 194.896757][T12307] name failslab, interval 1, probability 0, space 0, times 0 [ 194.896867][T12307] CPU: 3 UID: 0 PID: 12307 Comm: syz.1.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.896888][T12307] Tainted: [L]=SOFTLOCKUP [ 194.896892][T12307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.896899][T12307] Call Trace: [ 194.896903][T12307] [ 194.896908][T12307] dump_stack_lvl+0x100/0x190 [ 194.896928][T12307] should_fail_ex.cold+0x5/0xa [ 194.896944][T12307] should_failslab+0xc2/0x120 [ 194.896962][T12307] __kmalloc_cache_noprof+0x91/0x6d0 [ 194.896976][T12307] ? alloc_fs_context+0x57/0xf40 [ 194.896995][T12307] alloc_fs_context+0x57/0xf40 [ 194.897018][T12307] mq_init_ns+0x16e/0x820 [ 194.897040][T12307] copy_ipcs+0x3d8/0x7e0 [ 194.897061][T12307] create_new_namespaces+0x20a/0xac0 [ 194.897083][T12307] ? security_capable+0x80/0x260 [ 194.897106][T12307] unshare_nsproxy_namespaces+0xf6/0x210 [ 194.897133][T12307] ksys_unshare+0x44f/0x980 [ 194.897181][T12307] ? __pfx_ksys_unshare+0x10/0x10 [ 194.897208][T12307] ? __might_fault+0xc5/0x140 [ 194.897237][T12307] __ia32_sys_unshare+0x30/0x40 [ 194.897264][T12307] __do_fast_syscall_32+0x14b/0x8c0 [ 194.897288][T12307] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.897315][T12307] do_fast_syscall_32+0x32/0x70 [ 194.897338][T12307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.897359][T12307] RIP: 0023:0xf7ff4fbc [ 194.897374][T12307] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 194.897390][T12307] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 194.897408][T12307] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 194.897419][T12307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.897426][T12307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.897433][T12307] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.897444][T12307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.897468][T12307] [ 194.898506][T12307] FAULT_INJECTION: forcing a failure. [ 194.898506][T12307] name fail_futex, interval 1, probability 0, space 0, times 0 [ 194.898527][T12307] CPU: 3 UID: 0 PID: 12307 Comm: syz.1.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.898550][T12307] Tainted: [L]=SOFTLOCKUP [ 194.898557][T12307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.898567][T12307] Call Trace: [ 194.898573][T12307] [ 194.898580][T12307] dump_stack_lvl+0x100/0x190 [ 194.898606][T12307] should_fail_ex.cold+0x5/0xa [ 194.898624][T12307] get_futex_key+0x1c9/0x13e0 [ 194.898645][T12307] ? __pfx_get_futex_key+0x10/0x10 [ 194.898660][T12307] ? find_held_lock+0x2b/0x80 [ 194.898677][T12307] ? get_pid_task+0xfc/0x250 [ 194.898694][T12307] ? get_pid_task+0xfc/0x250 [ 194.898711][T12307] futex_wake+0xf4/0x5e0 [ 194.898732][T12307] ? find_held_lock+0x2b/0x80 [ 194.898755][T12307] ? __pfx_futex_wake+0x10/0x10 [ 194.898779][T12307] ? rcu_read_lock_any_held+0x6a/0x90 [ 194.898797][T12307] ? find_held_lock+0x2b/0x80 [ 194.898811][T12307] ? ksys_write+0x190/0x250 [ 194.898832][T12307] ? ksys_write+0x190/0x250 [ 194.898856][T12307] do_futex+0x2b2/0x440 [ 194.898893][T12307] ? __pfx_do_futex+0x10/0x10 [ 194.898913][T12307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.898941][T12307] __ia32_sys_futex_time32+0x2f4/0x470 [ 194.898965][T12307] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 194.898987][T12307] ? __might_fault+0xc5/0x140 [ 194.899006][T12307] __do_fast_syscall_32+0x14b/0x8c0 [ 194.899029][T12307] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.899052][T12307] do_fast_syscall_32+0x32/0x70 [ 194.899074][T12307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.899090][T12307] RIP: 0023:0xf7ff4fbc [ 194.899104][T12307] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 194.899119][T12307] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 194.899135][T12307] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 194.899146][T12307] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 194.899157][T12307] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 194.899164][T12307] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.899172][T12307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.899195][T12307] [ 194.942341][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'. [ 194.995905][T12307] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.062360][T12307] FAULT_INJECTION: forcing a failure. [ 195.062360][T12307] name failslab, interval 1, probability 0, space 0, times 0 [ 195.062389][T12307] CPU: 3 UID: 0 PID: 12307 Comm: syz.1.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.062414][T12307] Tainted: [L]=SOFTLOCKUP [ 195.062421][T12307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.062432][T12307] Call Trace: [ 195.062439][T12307] [ 195.062447][T12307] dump_stack_lvl+0x100/0x190 [ 195.062470][T12307] should_fail_ex.cold+0x5/0xa [ 195.062495][T12307] should_failslab+0xc2/0x120 [ 195.062522][T12307] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 195.062550][T12307] ? kstrdup_const+0x63/0x80 [ 195.062576][T12307] kstrdup+0x51/0xe0 [ 195.062591][T12307] kstrdup_const+0x63/0x80 [ 195.062611][T12307] __kernfs_new_node+0x9b/0xa10 [ 195.062635][T12307] ? __pfx___kernfs_new_node+0x10/0x10 [ 195.062657][T12307] ? lock_acquire+0x1d1/0x380 [ 195.062680][T12307] ? kernfs_root+0x23/0x2a0 [ 195.062702][T12307] ? find_held_lock+0x2b/0x80 [ 195.062719][T12307] ? kernfs_root+0xee/0x2a0 [ 195.062750][T12307] ? kernfs_root+0xee/0x2a0 [ 195.062782][T12307] kernfs_new_node+0x194/0x200 [ 195.062803][T12307] ? __pfx_kernfs_new_node+0x10/0x10 [ 195.062821][T12307] ? kernfs_add_one+0x213/0xb40 [ 195.062840][T12307] __kernfs_create_file+0x53/0x350 [ 195.062866][T12307] sysfs_add_file_mode_ns+0x207/0x3c0 [ 195.062898][T12307] internal_create_group+0x593/0xfb0 [ 195.062932][T12307] ? __pfx_internal_create_group+0x10/0x10 [ 195.062953][T12307] ? __pfx_kobject_add+0x10/0x10 [ 195.062983][T12307] internal_create_groups+0x9d/0x150 [ 195.063012][T12307] ib_setup_port_attrs+0x41f/0x600 [ 195.063053][T12307] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 195.063081][T12307] ? __init_waitqueue_head+0xca/0x150 [ 195.063126][T12307] add_one_compat_dev+0x5ae/0x820 [ 195.063158][T12307] rdma_dev_init_net+0x305/0x580 [ 195.063191][T12307] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 195.063208][T12307] ? __kmalloc_noprof+0x350/0x840 [ 195.063236][T12307] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 195.063254][T12307] ops_init+0x1e2/0x5f0 [ 195.063276][T12307] setup_net+0x118/0x3a0 [ 195.063289][T12307] ? __pfx_setup_net+0x10/0x10 [ 195.063309][T12307] ? bpf_lsm_namespace_init+0x9/0x10 [ 195.063349][T12307] copy_net_ns+0x340/0x7a0 [ 195.063373][T12307] create_new_namespaces+0x3ea/0xac0 [ 195.063400][T12307] unshare_nsproxy_namespaces+0xf6/0x210 [ 195.063426][T12307] ksys_unshare+0x44f/0x980 [ 195.063452][T12307] ? __pfx_ksys_unshare+0x10/0x10 [ 195.063482][T12307] ? __might_fault+0xc5/0x140 [ 195.063509][T12307] __ia32_sys_unshare+0x30/0x40 [ 195.063530][T12307] __do_fast_syscall_32+0x14b/0x8c0 [ 195.063553][T12307] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.063577][T12307] do_fast_syscall_32+0x32/0x70 [ 195.063601][T12307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.063623][T12307] RIP: 0023:0xf7ff4fbc [ 195.063633][T12307] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 195.063650][T12307] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 195.063668][T12307] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 195.063679][T12307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.063689][T12307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.063699][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.063710][T12307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.063735][T12307] [ 195.182487][T12315] syzkaller0: entered promiscuous mode [ 195.182502][T12315] syzkaller0: entered allmulticast mode [ 195.187157][ T5743] Bluetooth: hci5: command tx timeout [ 195.190544][T12310] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.193186][T11854] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 195.196477][T11854] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 195.825845][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2636'. [ 195.933248][T12338] syzkaller0: entered promiscuous mode [ 195.933263][T12338] syzkaller0: entered allmulticast mode [ 196.526993][ T2327] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 196.687431][ T2327] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 196.687932][ T2327] usb 6-1: config 0 has no interfaces? [ 196.687959][ T2327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.690042][ T2327] usb 6-1: config 0 descriptor?? [ 196.894530][ T2327] usb 6-1: USB disconnect, device number 31 [ 196.961798][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 197.042996][T12357] syzkaller0: entered promiscuous mode [ 197.043005][T12357] syzkaller0: entered allmulticast mode [ 197.348811][ T41] usb 9-1: USB disconnect, device number 2 [ 197.403415][T12371] 9p: Bad value for 'wfdno' [ 197.439251][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 197.459185][T12377] syzkaller0: entered promiscuous mode [ 197.459194][T12377] syzkaller0: entered allmulticast mode [ 197.746955][ T5882] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 197.855156][T12403] syzkaller0: entered promiscuous mode [ 197.855165][T12403] syzkaller0: entered allmulticast mode [ 197.899675][ T5882] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.900968][ T5882] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.900999][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.901018][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.901037][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.902019][ T5882] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.902036][ T5882] usb 7-1: Manufacturer: syz [ 197.905110][ T5882] usb 7-1: config 0 descriptor?? [ 197.977602][ T2327] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 198.137656][ T2327] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 198.138098][ T2327] usb 6-1: config 0 has no interfaces? [ 198.138126][ T2327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.139358][ T2327] usb 6-1: config 0 descriptor?? [ 198.197063][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 198.315173][ T5882] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 198.320985][ T5882] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 198.347488][ T34] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 198.348671][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 198.348697][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.348716][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.351016][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.351032][ T34] usb 9-1: Product: syz [ 198.351045][ T34] usb 9-1: Manufacturer: syz [ 198.351057][ T34] usb 9-1: SerialNumber: syz [ 198.354611][ T34] usb 9-1: config 0 descriptor?? [ 198.373543][ T50] usb 6-1: USB disconnect, device number 32 [ 198.562787][ T34] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 198.827888][ T58] usb 9-1: USB disconnect, device number 3 [ 198.947057][ C0] net_ratelimit: 186 callbacks suppressed [ 199.154576][T12419] 9p: Bad value for 'wfdno' [ 199.486915][T11854] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 199.617438][ T5882] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 199.657363][T11854] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.658357][T11854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.658379][T11854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.658423][T11854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.660570][T11854] usb 6-1: config 0 descriptor?? [ 199.767462][ T5882] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 199.767932][ T5882] usb 9-1: config 0 has no interfaces? [ 199.767959][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.769363][ T5882] usb 9-1: config 0 descriptor?? [ 199.868716][T11854] usbhid 6-1:0.0: can't add hid device: -71 [ 199.868819][T11854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 199.871611][T11854] usb 6-1: USB disconnect, device number 33 [ 200.004321][ T5882] usb 9-1: USB disconnect, device number 4 [ 200.336913][T11854] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 200.497066][T11854] usb 6-1: Using ep0 maxpacket: 32 [ 200.497550][T11854] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 200.498573][T11854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.498587][T11854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.498614][T11854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.500721][T11854] usb 6-1: config 0 descriptor?? [ 200.505695][T11854] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 200.517269][T11854] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 200.551897][ T58] usb 7-1: USB disconnect, device number 23 [ 200.799491][T12446] 9p: Bad value for 'wfdno' [ 201.076981][ T58] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 201.086975][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 201.228256][ T58] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 201.228760][ T58] usb 9-1: config 0 has no interfaces? [ 201.228788][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.230048][ T58] usb 9-1: config 0 descriptor?? [ 201.247655][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.248784][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.248817][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.248830][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.248842][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.249724][ T24] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.249734][ T24] usb 7-1: Manufacturer: syz [ 201.250905][ T24] usb 7-1: config 0 descriptor?? [ 201.467430][ T34] usb 9-1: USB disconnect, device number 5 [ 201.661733][ T24] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 201.664118][ T24] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 202.247167][ T1349] usb 6-1: USB disconnect, device number 34 [ 202.267483][ T1349] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 202.356761][T12471] 9p: Bad value for 'wfdno' [ 202.667129][T11854] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 202.827483][T11854] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 202.827994][T11854] usb 9-1: config 0 has no interfaces? [ 202.828020][T11854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.830090][T11854] usb 9-1: config 0 descriptor?? [ 202.887044][ T1349] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 203.037399][ T1349] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.038331][ T1349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.038361][ T1349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.039707][ T1349] usb 6-1: config 0 descriptor?? [ 203.086004][T11854] usb 9-1: USB disconnect, device number 6 [ 203.253382][ T1349] usbhid 6-1:0.0: can't add hid device: -71 [ 203.253479][ T1349] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 203.257030][ T1349] usb 6-1: USB disconnect, device number 35 [ 203.656288][T12493] 9p: Bad value for 'rfdno' [ 204.067145][ C2] net_ratelimit: 122 callbacks suppressed [ 204.101339][T11854] usb 7-1: USB disconnect, device number 24 [ 204.186609][T12509] syzkaller0: entered promiscuous mode [ 204.186622][T12509] syzkaller0: entered allmulticast mode [ 204.284757][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 204.389875][T12517] fuse: Bad value for 'fd' [ 204.616956][T11854] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 204.755742][T12535] syzkaller0: entered promiscuous mode [ 204.755751][T12535] syzkaller0: entered allmulticast mode [ 204.779411][T11854] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.780238][T11854] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.780255][T11854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.780269][T11854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.780280][T11854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.781135][T11854] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.781145][T11854] usb 7-1: Manufacturer: syz [ 204.782831][T11854] usb 7-1: config 0 descriptor?? [ 204.855566][T12538] fuse: Bad value for 'fd' [ 205.074906][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2729'. [ 205.190861][T11854] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 205.205978][T11854] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 205.606890][ T2327] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 205.757428][ T2327] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.758425][ T2327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.758455][ T2327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.760143][ T2327] usb 6-1: config 0 descriptor?? [ 205.970954][ T2327] usbhid 6-1:0.0: can't add hid device: -71 [ 205.971021][ T2327] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 205.973628][ T2327] usb 6-1: USB disconnect, device number 36 [ 206.129090][T12557] ubi: mtd0 is already attached to ubi0 [ 206.198272][T12559] FAULT_INJECTION: forcing a failure. [ 206.198272][T12559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.198293][T12559] CPU: 2 UID: 0 PID: 12559 Comm: syz.4.2734 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.198313][T12559] Tainted: [L]=SOFTLOCKUP [ 206.198317][T12559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.198324][T12559] Call Trace: [ 206.198329][T12559] [ 206.198334][T12559] dump_stack_lvl+0x100/0x190 [ 206.198355][T12559] should_fail_ex.cold+0x5/0xa [ 206.198370][T12559] get_futex_key+0x1c9/0x13e0 [ 206.198385][T12559] ? __pfx_get_futex_key+0x10/0x10 [ 206.198395][T12559] ? futex_wake+0x4ea/0x5e0 [ 206.198415][T12559] futex_wake+0xf4/0x5e0 [ 206.198430][T12559] ? __pfx_futex_wake+0x10/0x10 [ 206.198446][T12559] ? rcu_read_lock_any_held+0x6a/0x90 [ 206.198459][T12559] ? find_held_lock+0x2b/0x80 [ 206.198470][T12559] ? ksys_write+0x190/0x250 [ 206.198484][T12559] ? ksys_write+0x190/0x250 [ 206.198500][T12559] do_futex+0x2b2/0x440 [ 206.198513][T12559] ? __pfx_do_futex+0x10/0x10 [ 206.198528][T12559] __ia32_sys_futex_time32+0x2f4/0x470 [ 206.198543][T12559] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 206.198557][T12559] ? __might_fault+0xc5/0x140 [ 206.198573][T12559] __do_fast_syscall_32+0x14b/0x8c0 [ 206.198591][T12559] do_fast_syscall_32+0x32/0x70 [ 206.198605][T12559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.198620][T12559] RIP: 0023:0xf7f64fbc [ 206.198629][T12559] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 206.198640][T12559] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 206.198651][T12559] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 206.198658][T12559] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 206.198665][T12559] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 206.198672][T12559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.198678][T12559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.198692][T12559] [ 206.305350][T12562] syzkaller0: entered promiscuous mode [ 206.305364][T12562] syzkaller0: entered allmulticast mode [ 206.413912][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 207.313568][T12580] 9p: Bad value for 'wfdno' [ 207.360692][T12582] syzkaller0: entered promiscuous mode [ 207.360701][T12582] syzkaller0: entered allmulticast mode [ 207.367357][ T50] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 207.527421][ T50] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.528981][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.529028][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.531549][ T50] usb 9-1: config 0 descriptor?? [ 207.550565][ T24] usb 7-1: USB disconnect, device number 25 [ 207.713980][T12587] ubi: mtd0 is already attached to ubi0 [ 207.745383][ T50] usbhid 9-1:0.0: can't add hid device: -71 [ 207.745485][ T50] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 207.751228][ T50] usb 9-1: USB disconnect, device number 7 [ 207.858729][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2748'. [ 208.176937][ T5882] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 208.262252][T12601] 9p: Bad value for 'wfdno' [ 208.328974][ T5882] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.332140][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.332170][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.333768][ T5882] usb 9-1: config 0 descriptor?? [ 208.483561][T12607] syzkaller0: entered promiscuous mode [ 208.483570][T12607] syzkaller0: entered allmulticast mode [ 208.743929][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 208.743992][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 208.752648][ T5882] usb 9-1: USB disconnect, device number 8 [ 208.872562][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 209.128122][T12624] 9p: Bad value for 'wfdno' [ 209.186899][ C1] net_ratelimit: 105 callbacks suppressed [ 209.233449][T12628] syzkaller0: entered promiscuous mode [ 209.233464][T12628] syzkaller0: entered allmulticast mode [ 209.478578][T12643] ubi: mtd0 is already attached to ubi0 [ 209.484498][T12645] 9p: Bad value for 'wfdno' [ 209.778340][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 209.819980][T12662] 9p: Bad value for 'wfdno' [ 209.872701][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.875341][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.876402][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.888287][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.888940][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.947508][ T29] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.948501][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.948552][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.952758][ T29] usb 9-1: config 0 descriptor?? [ 209.982607][T12677] ubi: mtd0 is already attached to ubi0 [ 210.171920][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 210.172023][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 210.178892][ T29] usb 9-1: USB disconnect, device number 9 [ 210.203558][T12667] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.252147][T12698] syzkaller0: entered promiscuous mode [ 210.252162][T12698] syzkaller0: entered allmulticast mode [ 210.347362][ T2327] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 210.498902][ T2327] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 210.499619][ T2327] usb 6-1: config 0 has no interfaces? [ 210.499664][ T2327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.509072][ T2327] usb 6-1: config 0 descriptor?? [ 210.542917][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.542994][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.543085][T12667] bridge_slave_0: entered allmulticast mode [ 210.543797][T12667] bridge_slave_0: entered promiscuous mode [ 210.555040][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.555116][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.555197][T12667] bridge_slave_1: entered allmulticast mode [ 210.555969][T12667] bridge_slave_1: entered promiscuous mode [ 210.590941][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.592769][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.611035][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2797'. [ 210.625416][T12667] team0: Port device team_slave_0 added [ 210.627450][T12667] team0: Port device team_slave_1 added [ 210.652368][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.652375][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.652389][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.653335][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.653341][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.653354][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.687031][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 210.707985][T12667] hsr_slave_0: entered promiscuous mode [ 210.708955][T12667] hsr_slave_1: entered promiscuous mode [ 210.715740][ T34] usb 6-1: USB disconnect, device number 37 [ 210.838080][ T29] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.839979][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.840027][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.843939][ T29] usb 9-1: config 0 descriptor?? [ 210.950974][T12667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.955967][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.956657][T12667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.964863][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.966555][T12667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.975382][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.976381][T12667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.985013][T12667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.004669][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.004754][T12667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.005002][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.005113][T12667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.061232][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.070305][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.071028][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.079727][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.089859][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.089935][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.095230][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.095312][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.250864][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 211.250968][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 211.252680][ T29] usb 9-1: USB disconnect, device number 10 [ 211.477983][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2806'. [ 211.537642][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.682936][T12775] FAULT_INJECTION: forcing a failure. [ 211.682936][T12775] name fail_futex, interval 1, probability 0, space 0, times 0 [ 211.682970][T12775] CPU: 0 UID: 0 PID: 12775 Comm: syz.1.2812 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.682997][T12775] Tainted: [L]=SOFTLOCKUP [ 211.683005][T12775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.683016][T12775] Call Trace: [ 211.683024][T12775] [ 211.683032][T12775] dump_stack_lvl+0x100/0x190 [ 211.683065][T12775] should_fail_ex.cold+0x5/0xa [ 211.683107][T12775] get_futex_key+0x1c9/0x13e0 [ 211.683132][T12775] ? __pfx_get_futex_key+0x10/0x10 [ 211.683156][T12775] ? wakeup_preempt_fair+0x4a0/0xf60 [ 211.683191][T12775] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 211.683229][T12775] futex_wait_setup+0x91/0x540 [ 211.683264][T12775] __futex_wait+0x19f/0x360 [ 211.683293][T12775] ? __pfx___futex_wait+0x10/0x10 [ 211.683318][T12775] ? __pfx_try_to_wake_up+0x10/0x10 [ 211.683343][T12775] ? futex_hash+0x311/0x400 [ 211.683375][T12775] ? __pfx_futex_wake_mark+0x10/0x10 [ 211.683405][T12775] ? find_held_lock+0x2b/0x80 [ 211.683424][T12775] ? futex_wake+0x4ea/0x5e0 [ 211.683456][T12775] futex_wait+0xe6/0x370 [ 211.683481][T12775] ? __pfx_futex_wait+0x10/0x10 [ 211.683516][T12775] ? rcu_read_lock_any_held+0x6a/0x90 [ 211.683538][T12775] ? find_held_lock+0x2b/0x80 [ 211.683557][T12775] ? ksys_write+0x190/0x250 [ 211.683581][T12775] ? ksys_write+0x190/0x250 [ 211.683609][T12775] do_futex+0x265/0x440 [ 211.683631][T12775] ? __pfx_do_futex+0x10/0x10 [ 211.683659][T12775] __ia32_sys_futex_time32+0x2f4/0x470 [ 211.683686][T12775] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 211.683710][T12775] ? __might_fault+0xc5/0x140 [ 211.683738][T12775] __do_fast_syscall_32+0x14b/0x8c0 [ 211.683769][T12775] do_fast_syscall_32+0x32/0x70 [ 211.683794][T12775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.683819][T12775] RIP: 0023:0xf7ff4fbc [ 211.683836][T12775] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.683854][T12775] RSP: 002b:00000000f54a65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 211.683874][T12775] RAX: ffffffffffffffda RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 211.683886][T12775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 211.683898][T12775] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 211.683909][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.683921][T12775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.683947][T12775] [ 211.779427][T12667] veth0_vlan: entered promiscuous mode [ 211.791795][T12667] veth1_vlan: entered promiscuous mode [ 211.818817][T12667] veth0_macvtap: entered promiscuous mode [ 211.823845][T12667] veth1_macvtap: entered promiscuous mode [ 211.857674][T12667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.863844][T12782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'. [ 211.864252][T12667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.866902][ T50] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 211.907020][ T5745] Bluetooth: hci3: command tx timeout [ 211.927359][ T5810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.927394][ T5810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.927423][ T5810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.927452][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.954919][T12784] syzkaller0: entered promiscuous mode [ 211.954934][T12784] syzkaller0: entered allmulticast mode [ 212.017490][ T50] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 212.017917][ T50] usb 7-1: config 0 has no interfaces? [ 212.017943][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.021696][ T50] usb 7-1: config 0 descriptor?? [ 212.024622][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.024633][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.069884][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.069897][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.173586][T12790] No fuse device found [ 212.173610][T12790] No fuse device found [ 212.173624][T12790] No fuse device found [ 212.173639][T12790] No fuse device found [ 212.173653][T12790] No fuse device found [ 212.173667][T12790] No fuse device found [ 212.173681][T12790] No fuse device found [ 212.173695][T12790] No fuse device found [ 212.173709][T12790] No fuse device found [ 212.173722][T12790] No fuse device found [ 212.193985][T12800] device-mapper: table: 248:6: multipath: error getting device (-EBUSY) [ 212.193998][T12800] device-mapper: ioctl: error adding target to table [ 212.228062][ T34] usb 7-1: USB disconnect, device number 26 [ 212.333463][T12814] tipc: Enabled bearer , priority 0 [ 212.352344][T12813] tipc: Disabling bearer [ 212.421410][T12824] FAULT_INJECTION: forcing a failure. [ 212.421410][T12824] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.421431][T12824] CPU: 3 UID: 0 PID: 12824 Comm: syz.1.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.421448][T12824] Tainted: [L]=SOFTLOCKUP [ 212.421452][T12824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.421459][T12824] Call Trace: [ 212.421464][T12824] [ 212.421469][T12824] dump_stack_lvl+0x100/0x190 [ 212.421492][T12824] should_fail_ex.cold+0x5/0xa [ 212.421509][T12824] get_futex_key+0x1c9/0x13e0 [ 212.421525][T12824] ? __pfx_get_futex_key+0x10/0x10 [ 212.421536][T12824] ? futex_wake+0x4ea/0x5e0 [ 212.421555][T12824] futex_wake+0xf4/0x5e0 [ 212.421572][T12824] ? __pfx_futex_wake+0x10/0x10 [ 212.421590][T12824] ? rcu_read_lock_any_held+0x6a/0x90 [ 212.421604][T12824] ? find_held_lock+0x2b/0x80 [ 212.421616][T12824] ? ksys_write+0x190/0x250 [ 212.421632][T12824] ? ksys_write+0x190/0x250 [ 212.421649][T12824] do_futex+0x2b2/0x440 [ 212.421663][T12824] ? __pfx_do_futex+0x10/0x10 [ 212.421679][T12824] __ia32_sys_futex_time32+0x2f4/0x470 [ 212.421696][T12824] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 212.421710][T12824] ? __might_fault+0xc5/0x140 [ 212.421728][T12824] __do_fast_syscall_32+0x14b/0x8c0 [ 212.421748][T12824] do_fast_syscall_32+0x32/0x70 [ 212.421764][T12824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.421781][T12824] RIP: 0023:0xf7ff4fbc [ 212.421795][T12824] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 212.421812][T12824] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 212.421830][T12824] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 212.421842][T12824] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 212.421853][T12824] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 212.421864][T12824] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.421871][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.421886][T12824] [ 212.523525][T12831] device-mapper: table: 248:6: multipath: error getting device (-EBUSY) [ 212.523546][T12831] device-mapper: ioctl: error adding target to table [ 212.785413][T12851] FAULT_INJECTION: forcing a failure. [ 212.785413][T12851] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.785510][T12851] CPU: 3 UID: 0 PID: 12851 Comm: syz.1.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.785527][T12851] Tainted: [L]=SOFTLOCKUP [ 212.785531][T12851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.785538][T12851] Call Trace: [ 212.785543][T12851] [ 212.785549][T12851] dump_stack_lvl+0x100/0x190 [ 212.785570][T12851] should_fail_ex.cold+0x5/0xa [ 212.785587][T12851] get_futex_key+0x1c9/0x13e0 [ 212.785602][T12851] ? __pfx_get_futex_key+0x10/0x10 [ 212.785611][T12851] ? futex_wake+0x4ea/0x5e0 [ 212.785628][T12851] futex_wake+0xf4/0x5e0 [ 212.785644][T12851] ? __pfx_futex_wake+0x10/0x10 [ 212.785659][T12851] ? rcu_read_lock_any_held+0x6a/0x90 [ 212.785673][T12851] ? find_held_lock+0x2b/0x80 [ 212.785684][T12851] ? ksys_write+0x190/0x250 [ 212.785713][T12851] ? ksys_write+0x190/0x250 [ 212.785730][T12851] do_futex+0x2b2/0x440 [ 212.785743][T12851] ? __pfx_do_futex+0x10/0x10 [ 212.785759][T12851] __ia32_sys_futex_time32+0x2f4/0x470 [ 212.785774][T12851] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 212.785788][T12851] ? __might_fault+0xc5/0x140 [ 212.785806][T12851] __do_fast_syscall_32+0x14b/0x8c0 [ 212.785824][T12851] do_fast_syscall_32+0x32/0x70 [ 212.785839][T12851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.785854][T12851] RIP: 0023:0xf7ff4fbc [ 212.785863][T12851] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 212.785874][T12851] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 212.785885][T12851] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 212.785893][T12851] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 212.785901][T12851] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 212.785908][T12851] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.785915][T12851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.785929][T12851] [ 213.093982][T12871] syzkaller0: entered promiscuous mode [ 213.093991][T12871] syzkaller0: entered allmulticast mode [ 213.131320][T12873] tipc: Started in network mode [ 213.131333][T12873] tipc: Node identity f236bfc2859, cluster identity 4711 [ 213.131403][T12873] tipc: Enabled bearer , priority 0 [ 213.141114][T12872] tipc: Disabling bearer [ 213.181123][T12876] FAULT_INJECTION: forcing a failure. [ 213.181123][T12876] name fail_futex, interval 1, probability 0, space 0, times 0 [ 213.181143][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.4.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.181158][T12876] Tainted: [L]=SOFTLOCKUP [ 213.181163][T12876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.181170][T12876] Call Trace: [ 213.181175][T12876] [ 213.181180][T12876] dump_stack_lvl+0x100/0x190 [ 213.181200][T12876] should_fail_ex.cold+0x5/0xa [ 213.181216][T12876] get_futex_key+0x1c9/0x13e0 [ 213.181236][T12876] ? __pfx_get_futex_key+0x10/0x10 [ 213.181246][T12876] ? futex_wake+0x4ea/0x5e0 [ 213.181264][T12876] futex_wake+0xf4/0x5e0 [ 213.181280][T12876] ? __pfx_futex_wake+0x10/0x10 [ 213.181296][T12876] ? rcu_read_lock_any_held+0x6a/0x90 [ 213.181309][T12876] ? find_held_lock+0x2b/0x80 [ 213.181322][T12876] ? ksys_write+0x190/0x250 [ 213.181336][T12876] ? ksys_write+0x190/0x250 [ 213.181351][T12876] do_futex+0x2b2/0x440 [ 213.181364][T12876] ? __pfx_do_futex+0x10/0x10 [ 213.181379][T12876] __ia32_sys_futex_time32+0x2f4/0x470 [ 213.181395][T12876] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 213.181409][T12876] ? __might_fault+0xc5/0x140 [ 213.181425][T12876] __do_fast_syscall_32+0x14b/0x8c0 [ 213.181443][T12876] do_fast_syscall_32+0x32/0x70 [ 213.181458][T12876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.181473][T12876] RIP: 0023:0xf7f64fbc [ 213.181482][T12876] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 213.181493][T12876] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 213.181505][T12876] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 213.181512][T12876] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 213.181519][T12876] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 213.181526][T12876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.181532][T12876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.181547][T12876] [ 213.277598][ T5839] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 213.427618][ T5839] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 213.428129][ T5839] usb 6-1: config 0 has no interfaces? [ 213.428157][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.431418][ T5839] usb 6-1: config 0 descriptor?? [ 213.635176][ T5832] usb 6-1: USB disconnect, device number 38 [ 213.862530][T12898] ubi: mtd0 is already attached to ubi0 [ 213.975619][T12903] FAULT_INJECTION: forcing a failure. [ 213.975619][T12903] name fail_futex, interval 1, probability 0, space 0, times 0 [ 213.975640][T12903] CPU: 3 UID: 0 PID: 12903 Comm: syz.2.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.975656][T12903] Tainted: [L]=SOFTLOCKUP [ 213.975665][T12903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.975672][T12903] Call Trace: [ 213.975676][T12903] [ 213.975682][T12903] dump_stack_lvl+0x100/0x190 [ 213.975702][T12903] should_fail_ex.cold+0x5/0xa [ 213.975719][T12903] get_futex_key+0x1c9/0x13e0 [ 213.975733][T12903] ? __pfx_get_futex_key+0x10/0x10 [ 213.975744][T12903] ? futex_wake+0x4ea/0x5e0 [ 213.975762][T12903] futex_wake+0xf4/0x5e0 [ 213.975777][T12903] ? __pfx_futex_wake+0x10/0x10 [ 213.975793][T12903] ? rcu_read_lock_any_held+0x6a/0x90 [ 213.975805][T12903] ? find_held_lock+0x2b/0x80 [ 213.975817][T12903] ? ksys_write+0x190/0x250 [ 213.975832][T12903] ? ksys_write+0x190/0x250 [ 213.975848][T12903] do_futex+0x2b2/0x440 [ 213.975862][T12903] ? __pfx_do_futex+0x10/0x10 [ 213.975877][T12903] __ia32_sys_futex_time32+0x2f4/0x470 [ 213.975893][T12903] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 213.975907][T12903] ? __might_fault+0xc5/0x140 [ 213.975923][T12903] __do_fast_syscall_32+0x14b/0x8c0 [ 213.975940][T12903] do_fast_syscall_32+0x32/0x70 [ 213.975955][T12903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.975969][T12903] RIP: 0023:0xf7f04fbc [ 213.975979][T12903] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 213.975990][T12903] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 213.976002][T12903] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 213.976010][T12903] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 213.976017][T12903] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 213.976024][T12903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.976031][T12903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.976047][T12903] [ 214.214156][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 214.226846][ C1] net_ratelimit: 340 callbacks suppressed [ 214.227007][T12935] syzkaller0: entered promiscuous mode [ 214.227016][T12935] syzkaller0: entered allmulticast mode [ 214.280058][T12940] FAULT_INJECTION: forcing a failure. [ 214.280058][T12940] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.280078][T12940] CPU: 3 UID: 0 PID: 12940 Comm: syz.5.2881 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.280093][T12940] Tainted: [L]=SOFTLOCKUP [ 214.280097][T12940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.280104][T12940] Call Trace: [ 214.280108][T12940] [ 214.280114][T12940] dump_stack_lvl+0x100/0x190 [ 214.280133][T12940] should_fail_ex.cold+0x5/0xa [ 214.280149][T12940] get_futex_key+0x1c9/0x13e0 [ 214.280164][T12940] ? __pfx_get_futex_key+0x10/0x10 [ 214.280173][T12940] ? futex_wake+0x4ea/0x5e0 [ 214.280190][T12940] futex_wake+0xf4/0x5e0 [ 214.280206][T12940] ? __pfx_futex_wake+0x10/0x10 [ 214.280221][T12940] ? rcu_read_lock_any_held+0x6a/0x90 [ 214.280234][T12940] ? find_held_lock+0x2b/0x80 [ 214.280245][T12940] ? ksys_write+0x190/0x250 [ 214.280259][T12940] ? ksys_write+0x190/0x250 [ 214.280276][T12940] do_futex+0x2b2/0x440 [ 214.280289][T12940] ? __pfx_do_futex+0x10/0x10 [ 214.280304][T12940] __ia32_sys_futex_time32+0x2f4/0x470 [ 214.280320][T12940] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 214.280334][T12940] ? __might_fault+0xc5/0x140 [ 214.280350][T12940] __do_fast_syscall_32+0x14b/0x8c0 [ 214.280375][T12940] do_fast_syscall_32+0x32/0x70 [ 214.280397][T12940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.280417][T12940] RIP: 0023:0xf741efbc [ 214.280429][T12940] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 214.280440][T12940] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 214.280451][T12940] RAX: ffffffffffffffda RBX: 00000000f7444f8c RCX: 0000000000000081 [ 214.280458][T12940] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 214.280465][T12940] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 214.280472][T12940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.280478][T12940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.280492][T12940] [ 214.627081][ T5745] Bluetooth: hci3: command tx timeout [ 214.698647][ T1349] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 214.740917][T12970] fuse: Bad value for 'fd' [ 214.867567][ T1349] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 214.867981][ T1349] usb 10-1: config 0 has no interfaces? [ 214.868008][ T1349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.869556][ T1349] usb 10-1: config 0 descriptor?? [ 215.033816][T12992] device-mapper: table: 248:6: multipath: error getting device (-EBUSY) [ 215.033829][T12992] device-mapper: ioctl: error adding target to table [ 215.076469][T11854] usb 10-1: USB disconnect, device number 2 [ 215.354776][T13006] tipc: Started in network mode [ 215.354789][T13006] tipc: Node identity 1abbf1e36061, cluster identity 4711 [ 215.354865][T13006] tipc: Enabled bearer , priority 0 [ 215.374483][T13005] tipc: Disabling bearer [ 215.439832][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 215.439848][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 215.505483][T13015] syzkaller0: entered promiscuous mode [ 215.505493][T13015] syzkaller0: entered allmulticast mode [ 215.961185][T13050] FAULT_INJECTION: forcing a failure. [ 215.961185][T13050] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.961204][T13050] CPU: 0 UID: 0 PID: 13050 Comm: syz.2.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.961220][T13050] Tainted: [L]=SOFTLOCKUP [ 215.961224][T13050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.961231][T13050] Call Trace: [ 215.961235][T13050] [ 215.961240][T13050] dump_stack_lvl+0x100/0x190 [ 215.961261][T13050] should_fail_ex.cold+0x5/0xa [ 215.961279][T13050] get_futex_key+0x1c9/0x13e0 [ 215.961293][T13050] ? __pfx_get_futex_key+0x10/0x10 [ 215.961302][T13050] ? futex_wake+0x4ea/0x5e0 [ 215.961319][T13050] futex_wake+0xf4/0x5e0 [ 215.961335][T13050] ? __pfx_futex_wake+0x10/0x10 [ 215.961352][T13050] ? rcu_read_lock_any_held+0x6a/0x90 [ 215.961364][T13050] ? find_held_lock+0x2b/0x80 [ 215.961376][T13050] ? ksys_write+0x190/0x250 [ 215.961390][T13050] ? ksys_write+0x190/0x250 [ 215.961406][T13050] do_futex+0x2b2/0x440 [ 215.961418][T13050] ? __pfx_do_futex+0x10/0x10 [ 215.961433][T13050] __ia32_sys_futex_time32+0x2f4/0x470 [ 215.961449][T13050] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 215.961464][T13050] ? __might_fault+0xc5/0x140 [ 215.961480][T13050] __do_fast_syscall_32+0x14b/0x8c0 [ 215.961498][T13050] do_fast_syscall_32+0x32/0x70 [ 215.961513][T13050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.961528][T13050] RIP: 0023:0xf7f04fbc [ 215.961538][T13050] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 215.961549][T13050] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 215.961561][T13050] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 215.961569][T13050] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 215.961577][T13050] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 215.961585][T13050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.961591][T13050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.961605][T13050] [ 215.982081][ T5832] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 216.076918][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 216.128532][ T5832] usb 9-1: device descriptor read/64, error -71 [ 216.174049][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 216.249858][ T29] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 216.250415][ T29] usb 10-1: config 0 has no interfaces? [ 216.250447][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.251643][ T29] usb 10-1: config 0 descriptor?? [ 216.323025][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.363378][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.366951][ T5832] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 216.444247][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.453825][ T1349] usb 10-1: USB disconnect, device number 3 [ 216.497036][ T5832] usb 9-1: device descriptor read/64, error -71 [ 216.515329][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.621516][ T5832] usb usb9-port1: attempt power cycle [ 216.640101][ T13] bridge_slave_1: left allmulticast mode [ 216.640113][ T13] bridge_slave_1: left promiscuous mode [ 216.640243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.645528][ T13] bridge_slave_0: left allmulticast mode [ 216.645546][ T13] bridge_slave_0: left promiscuous mode [ 216.645716][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.717078][ T5745] Bluetooth: hci3: command tx timeout [ 216.891920][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.899585][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.909941][ T13] bond0 (unregistering): Released all slaves [ 216.924914][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 216.943932][T13096] syzkaller0: entered promiscuous mode [ 216.943946][T13096] syzkaller0: entered allmulticast mode [ 216.977021][ T5832] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 216.979917][ T13] tipc: Left network mode [ 217.005205][ T5832] usb 9-1: device descriptor read/8, error -71 [ 217.235069][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.259346][ T5832] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 217.280247][ T5832] usb 9-1: device descriptor read/8, error -71 [ 217.378419][T13120] fuse_uring_cmd: 3150 callbacks suppressed [ 217.378431][T13120] No fuse device found [ 217.378451][T13120] No fuse device found [ 217.378466][T13120] No fuse device found [ 217.378480][T13120] No fuse device found [ 217.378494][T13120] No fuse device found [ 217.378508][T13120] No fuse device found [ 217.378521][T13120] No fuse device found [ 217.378535][T13120] No fuse device found [ 217.378549][T13120] No fuse device found [ 217.378563][T13120] No fuse device found [ 217.394483][ T5832] usb usb9-port1: unable to enumerate USB device [ 217.514593][ T13] hsr_slave_0: left promiscuous mode [ 217.515552][ T13] hsr_slave_1: left promiscuous mode [ 217.516020][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.516030][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.516662][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.516671][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.550893][ T13] veth1_macvtap: left promiscuous mode [ 217.551400][ T13] veth0_macvtap: left promiscuous mode [ 217.551511][ T13] veth1_vlan: left promiscuous mode [ 217.551607][ T13] veth0_vlan: left promiscuous mode [ 217.786020][ T13] team0 (unregistering): Port device team_slave_1 removed [ 217.807471][ T13] team0 (unregistering): Port device team_slave_0 removed [ 217.962365][T13132] tipc: Enabling of bearer rejected, failed to enable media [ 217.963629][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 218.203856][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.759438][T13199] xt_l2tp: v2 tid > 0xffff: 1114116 [ 218.931014][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2981'. [ 219.075327][T13229] tipc: Enabling of bearer rejected, failed to enable media [ 219.267091][ C0] net_ratelimit: 136 callbacks suppressed [ 219.273654][T13260] 9p: p9: multiple sources not supported [ 219.312261][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2999'. [ 219.408717][T13274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.691199][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 219.737235][ T5832] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 219.907218][ T5832] usb 10-1: Using ep0 maxpacket: 16 [ 219.908045][ T5832] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 219.911386][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 219.913708][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.913726][ T5832] usb 10-1: Product: syz [ 219.913739][ T5832] usb 10-1: Manufacturer: syz [ 219.913752][ T5832] usb 10-1: SerialNumber: syz [ 219.931929][ T5832] usb 10-1: config 0 descriptor?? [ 219.939920][ T5832] hub 10-1:0.0: bad descriptor, ignoring hub [ 219.939931][ T5832] hub 10-1:0.0: probe with driver hub failed with error -5 [ 219.941131][ T5832] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.240395][ T1043] usb 10-1: USB disconnect, device number 4 [ 220.322574][T13314] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.323099][T13314] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.399076][T13314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.402618][T13314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.419865][T13323] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 220.801166][T13316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.812754][T13316] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.862774][T13316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.942408][T13316] wireguard: wg0: Could not create IPv4 socket [ 220.947257][T11914] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.947282][T11914] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.947301][T11914] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.947319][T11914] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.948681][T13335] tipc: Enabling of bearer rejected, failed to enable media [ 220.964894][T13348] batman_adv: batadv0: Adding interface: syzkaller0 [ 220.964937][T13348] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.965028][T13348] batman_adv: batadv0: Interface activated: syzkaller0 [ 220.980246][T13345] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 220.991212][T13345] batman_adv: batadv0: Removing interface: syzkaller0 [ 221.035870][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 221.441108][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 221.771528][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3047'. [ 222.183426][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.206127][T13410] batman_adv: batadv0: Adding interface: syzkaller0 [ 222.206135][T13410] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.206151][T13410] batman_adv: batadv0: Interface activated: syzkaller0 [ 222.212877][T13409] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 222.238839][T13409] batman_adv: batadv0: Removing interface: syzkaller0 [ 222.352422][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 222.488390][T13432] tipc: Enabled bearer , priority 0 [ 222.489324][T13432] syzkaller0: entered promiscuous mode [ 222.489333][T13432] syzkaller0: entered allmulticast mode [ 222.495034][T13432] tipc: Resetting bearer [ 222.496483][T13431] tipc: Resetting bearer [ 222.509572][T13431] tipc: Disabling bearer [ 222.674467][T13440] FAULT_INJECTION: forcing a failure. [ 222.674467][T13440] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.674488][T13440] CPU: 0 UID: 0 PID: 13440 Comm: syz.2.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.674504][T13440] Tainted: [L]=SOFTLOCKUP [ 222.674509][T13440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.674515][T13440] Call Trace: [ 222.674520][T13440] [ 222.674526][T13440] dump_stack_lvl+0x100/0x190 [ 222.674547][T13440] should_fail_ex.cold+0x5/0xa [ 222.674567][T13440] get_futex_key+0x1c9/0x13e0 [ 222.674581][T13440] ? __pfx_get_futex_key+0x10/0x10 [ 222.674590][T13440] ? futex_wake+0x4ea/0x5e0 [ 222.674607][T13440] futex_wake+0xf4/0x5e0 [ 222.674623][T13440] ? __pfx_futex_wake+0x10/0x10 [ 222.674640][T13440] ? rcu_read_lock_any_held+0x6a/0x90 [ 222.674652][T13440] ? find_held_lock+0x2b/0x80 [ 222.674664][T13440] ? ksys_write+0x190/0x250 [ 222.674678][T13440] ? ksys_write+0x190/0x250 [ 222.674694][T13440] do_futex+0x2b2/0x440 [ 222.674706][T13440] ? __pfx_do_futex+0x10/0x10 [ 222.674722][T13440] __ia32_sys_futex_time32+0x2f4/0x470 [ 222.674737][T13440] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 222.674751][T13440] ? __might_fault+0xc5/0x140 [ 222.674768][T13440] __do_fast_syscall_32+0x14b/0x8c0 [ 222.674786][T13440] do_fast_syscall_32+0x32/0x70 [ 222.674801][T13440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.674815][T13440] RIP: 0023:0xf7f04fbc [ 222.674825][T13440] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 222.674836][T13440] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 222.674847][T13440] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 222.674854][T13440] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 222.674861][T13440] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 222.674868][T13440] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.674874][T13440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.674888][T13440] [ 222.684295][T13439] batman_adv: batadv0: Adding interface: syzkaller0 [ 222.684301][T13439] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.684319][T13439] batman_adv: batadv0: Interface activated: syzkaller0 [ 222.687717][T13437] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 222.703940][T13437] batman_adv: batadv0: Removing interface: syzkaller0 [ 222.915591][T13450] tipc: Enabled bearer , priority 0 [ 222.915976][T13450] syzkaller0: entered promiscuous mode [ 222.915986][T13450] syzkaller0: entered allmulticast mode [ 222.919109][T13450] tipc: Resetting bearer [ 222.920414][T13449] tipc: Resetting bearer [ 222.939207][T13449] tipc: Disabling bearer [ 222.957587][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 223.001813][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 223.006905][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 223.076989][ T1349] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 223.148824][ T24] usb 10-1: device descriptor read/64, error -71 [ 223.227734][ T1349] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 223.228426][ T1349] usb 7-1: config 0 has no interfaces? [ 223.228470][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.233919][ T1349] usb 7-1: config 0 descriptor?? [ 223.259009][T13464] batman_adv: batadv0: Adding interface: syzkaller0 [ 223.259016][T13464] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.259032][T13464] batman_adv: batadv0: Interface activated: syzkaller0 [ 223.261819][T13463] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 223.282686][T13463] batman_adv: batadv0: Removing interface: syzkaller0 [ 223.381619][T13468] FAULT_INJECTION: forcing a failure. [ 223.381619][T13468] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.381650][T13468] CPU: 3 UID: 0 PID: 13468 Comm: syz.4.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.381674][T13468] Tainted: [L]=SOFTLOCKUP [ 223.381681][T13468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.381691][T13468] Call Trace: [ 223.381699][T13468] [ 223.381709][T13468] dump_stack_lvl+0x100/0x190 [ 223.381742][T13468] should_fail_ex.cold+0x5/0xa [ 223.381768][T13468] get_futex_key+0x1c9/0x13e0 [ 223.381791][T13468] ? __pfx_get_futex_key+0x10/0x10 [ 223.381807][T13468] ? futex_wake+0x4ea/0x5e0 [ 223.381835][T13468] futex_wake+0xf4/0x5e0 [ 223.381860][T13468] ? __pfx_futex_wake+0x10/0x10 [ 223.381890][T13468] ? rcu_read_lock_any_held+0x6a/0x90 [ 223.381910][T13468] ? find_held_lock+0x2b/0x80 [ 223.381927][T13468] ? ksys_write+0x190/0x250 [ 223.381948][T13468] ? ksys_write+0x190/0x250 [ 223.381971][T13468] do_futex+0x2b2/0x440 [ 223.381991][T13468] ? __pfx_do_futex+0x10/0x10 [ 223.382016][T13468] __ia32_sys_futex_time32+0x2f4/0x470 [ 223.382046][T13468] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 223.382069][T13468] ? __might_fault+0xc5/0x140 [ 223.382094][T13468] __do_fast_syscall_32+0x14b/0x8c0 [ 223.382122][T13468] do_fast_syscall_32+0x32/0x70 [ 223.382145][T13468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.382176][T13468] RIP: 0023:0xf7f64fbc [ 223.382195][T13468] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.382214][T13468] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 223.382234][T13468] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 223.382245][T13468] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 223.382257][T13468] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 223.382268][T13468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.382279][T13468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.382304][T13468] [ 223.416998][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 223.460933][ T41] usb 7-1: USB disconnect, device number 27 [ 223.546942][ T24] usb 10-1: device descriptor read/64, error -71 [ 223.657368][ T24] usb usb10-port1: attempt power cycle [ 224.016981][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 224.047379][ T24] usb 10-1: device descriptor read/8, error -71 [ 224.047643][T13488] batman_adv: batadv0: Adding interface: syzkaller0 [ 224.047649][T13488] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.047666][T13488] batman_adv: batadv0: Interface activated: syzkaller0 [ 224.049482][T13487] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 224.059316][T13487] batman_adv: batadv0: Removing interface: syzkaller0 [ 224.074430][T13490] FAULT_INJECTION: forcing a failure. [ 224.074430][T13490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.074455][T13490] CPU: 0 UID: 0 PID: 13490 Comm: syz.2.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.074472][T13490] Tainted: [L]=SOFTLOCKUP [ 224.074477][T13490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.074484][T13490] Call Trace: [ 224.074489][T13490] [ 224.074495][T13490] dump_stack_lvl+0x100/0x190 [ 224.074515][T13490] should_fail_ex.cold+0x5/0xa [ 224.074532][T13490] get_futex_key+0x1c9/0x13e0 [ 224.074546][T13490] ? __pfx_get_futex_key+0x10/0x10 [ 224.074556][T13490] ? futex_wake+0x4ea/0x5e0 [ 224.074574][T13490] futex_wake+0xf4/0x5e0 [ 224.074589][T13490] ? __pfx_futex_wake+0x10/0x10 [ 224.074605][T13490] ? rcu_read_lock_any_held+0x6a/0x90 [ 224.074618][T13490] ? find_held_lock+0x2b/0x80 [ 224.074632][T13490] ? ksys_write+0x190/0x250 [ 224.074645][T13490] ? ksys_write+0x190/0x250 [ 224.074660][T13490] do_futex+0x2b2/0x440 [ 224.074672][T13490] ? __pfx_do_futex+0x10/0x10 [ 224.074687][T13490] __ia32_sys_futex_time32+0x2f4/0x470 [ 224.074703][T13490] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 224.074717][T13490] ? __might_fault+0xc5/0x140 [ 224.074733][T13490] __do_fast_syscall_32+0x14b/0x8c0 [ 224.074751][T13490] do_fast_syscall_32+0x32/0x70 [ 224.074766][T13490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.074780][T13490] RIP: 0023:0xf7f04fbc [ 224.074790][T13490] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 224.074800][T13490] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 224.074813][T13490] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 224.074821][T13490] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 224.074828][T13490] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 224.074834][T13490] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.074841][T13490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.074855][T13490] [ 224.166484][T13500] tipc: Enabled bearer , priority 0 [ 224.167486][T13500] syzkaller0: entered promiscuous mode [ 224.167496][T13500] syzkaller0: entered allmulticast mode [ 224.170677][T13500] tipc: Resetting bearer [ 224.176385][T13499] tipc: Resetting bearer [ 224.187807][T13499] tipc: Disabling bearer [ 224.272463][T13508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3099'. [ 224.286903][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 224.306857][ C1] net_ratelimit: 100 callbacks suppressed [ 224.309142][ T24] usb 10-1: device descriptor read/8, error -71 [ 224.416571][T13517] FAULT_INJECTION: forcing a failure. [ 224.416571][T13517] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.416590][T13517] CPU: 0 UID: 0 PID: 13517 Comm: syz.4.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.416606][T13517] Tainted: [L]=SOFTLOCKUP [ 224.416610][T13517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.416617][T13517] Call Trace: [ 224.416622][T13517] [ 224.416627][T13517] dump_stack_lvl+0x100/0x190 [ 224.416646][T13517] should_fail_ex.cold+0x5/0xa [ 224.416662][T13517] get_futex_key+0x1c9/0x13e0 [ 224.416678][T13517] ? __pfx_get_futex_key+0x10/0x10 [ 224.416691][T13517] ? futex_wake+0x4ea/0x5e0 [ 224.416710][T13517] futex_wake+0xf4/0x5e0 [ 224.416726][T13517] ? __pfx_futex_wake+0x10/0x10 [ 224.416742][T13517] ? rcu_read_lock_any_held+0x6a/0x90 [ 224.416755][T13517] ? find_held_lock+0x2b/0x80 [ 224.416769][T13517] ? ksys_write+0x190/0x250 [ 224.416796][T13517] ? ksys_write+0x190/0x250 [ 224.416811][T13517] do_futex+0x2b2/0x440 [ 224.416824][T13517] ? __pfx_do_futex+0x10/0x10 [ 224.416840][T13517] __ia32_sys_futex_time32+0x2f4/0x470 [ 224.416856][T13517] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 224.416871][T13517] ? __might_fault+0xc5/0x140 [ 224.416888][T13517] __do_fast_syscall_32+0x14b/0x8c0 [ 224.416905][T13517] do_fast_syscall_32+0x32/0x70 [ 224.416920][T13517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.416934][T13517] RIP: 0023:0xf7f64fbc [ 224.416944][T13517] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 224.416954][T13517] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 224.416965][T13517] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 224.416972][T13517] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 224.416979][T13517] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 224.416987][T13517] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.416994][T13517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.417009][T13517] [ 224.427040][ T24] usb usb10-port1: unable to enumerate USB device [ 224.457048][ T5827] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 224.607956][ T5827] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.609213][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.609265][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.611926][ T5827] usb 6-1: config 0 descriptor?? [ 224.766134][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 224.822669][ T5827] usbhid 6-1:0.0: can't add hid device: -71 [ 224.822782][ T5827] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 224.824023][T13533] udc dummy_udc.0: failed to start g1: -19 [ 224.824955][T13533] UDC core: g1: couldn't find an available UDC or it's busy [ 224.832161][ T5827] usb 6-1: USB disconnect, device number 39 [ 224.871995][T13537] tipc: Enabled bearer , priority 0 [ 224.872402][T13537] syzkaller0: entered promiscuous mode [ 224.872418][T13537] syzkaller0: entered allmulticast mode [ 224.876710][T13537] tipc: Resetting bearer [ 224.881730][T13536] tipc: Resetting bearer [ 224.895038][T13536] tipc: Disabling bearer [ 225.023448][T13551] FAULT_INJECTION: forcing a failure. [ 225.023448][T13551] name failslab, interval 1, probability 0, space 0, times 0 [ 225.023467][T13551] CPU: 2 UID: 0 PID: 13551 Comm: syz.2.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.023483][T13551] Tainted: [L]=SOFTLOCKUP [ 225.023487][T13551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.023494][T13551] Call Trace: [ 225.023498][T13551] [ 225.023503][T13551] dump_stack_lvl+0x100/0x190 [ 225.023524][T13551] should_fail_ex.cold+0x5/0xa [ 225.023540][T13551] should_failslab+0xc2/0x120 [ 225.023558][T13551] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.023572][T13551] ? alloc_fs_context+0x57/0xf40 [ 225.023587][T13551] alloc_fs_context+0x57/0xf40 [ 225.023601][T13551] mq_init_ns+0x16e/0x820 [ 225.023617][T13551] copy_ipcs+0x3d8/0x7e0 [ 225.023630][T13551] create_new_namespaces+0x20a/0xac0 [ 225.023647][T13551] ? security_capable+0x80/0x260 [ 225.023661][T13551] unshare_nsproxy_namespaces+0xf6/0x210 [ 225.023678][T13551] ksys_unshare+0x44f/0x980 [ 225.023695][T13551] ? __pfx_ksys_unshare+0x10/0x10 [ 225.023713][T13551] ? __might_fault+0xc5/0x140 [ 225.023730][T13551] __ia32_sys_unshare+0x30/0x40 [ 225.023748][T13551] __do_fast_syscall_32+0x14b/0x8c0 [ 225.023762][T13551] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.023777][T13551] do_fast_syscall_32+0x32/0x70 [ 225.023792][T13551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.023806][T13551] RIP: 0023:0xf7f04fbc [ 225.023815][T13551] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.023826][T13551] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 225.023837][T13551] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 225.023844][T13551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.023850][T13551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.023857][T13551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.023883][T13551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.023899][T13551] [ 225.024703][T13551] FAULT_INJECTION: forcing a failure. [ 225.024703][T13551] name fail_futex, interval 1, probability 0, space 0, times 0 [ 225.024720][T13551] CPU: 2 UID: 0 PID: 13551 Comm: syz.2.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.024735][T13551] Tainted: [L]=SOFTLOCKUP [ 225.024739][T13551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.024745][T13551] Call Trace: [ 225.024749][T13551] [ 225.024754][T13551] dump_stack_lvl+0x100/0x190 [ 225.024772][T13551] should_fail_ex.cold+0x5/0xa [ 225.024787][T13551] get_futex_key+0x1c9/0x13e0 [ 225.024801][T13551] ? __pfx_get_futex_key+0x10/0x10 [ 225.024812][T13551] ? futex_wake+0x4ea/0x5e0 [ 225.024828][T13551] futex_wake+0xf4/0x5e0 [ 225.024843][T13551] ? __pfx_futex_wake+0x10/0x10 [ 225.024858][T13551] ? rcu_read_lock_any_held+0x6a/0x90 [ 225.024871][T13551] ? find_held_lock+0x2b/0x80 [ 225.024881][T13551] ? ksys_write+0x190/0x250 [ 225.024895][T13551] ? ksys_write+0x190/0x250 [ 225.024909][T13551] do_futex+0x2b2/0x440 [ 225.024921][T13551] ? __pfx_do_futex+0x10/0x10 [ 225.024937][T13551] __ia32_sys_futex_time32+0x2f4/0x470 [ 225.024952][T13551] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 225.024965][T13551] ? __might_fault+0xc5/0x140 [ 225.024981][T13551] __do_fast_syscall_32+0x14b/0x8c0 [ 225.024995][T13551] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.025009][T13551] do_fast_syscall_32+0x32/0x70 [ 225.025052][T13551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.025066][T13551] RIP: 0023:0xf7f04fbc [ 225.025075][T13551] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.025085][T13551] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 225.025095][T13551] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 225.025102][T13551] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 225.025109][T13551] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 225.025115][T13551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.025121][T13551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.025139][T13551] [ 225.114878][T13551] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.141070][T13551] FAULT_INJECTION: forcing a failure. [ 225.141070][T13551] name failslab, interval 1, probability 0, space 0, times 0 [ 225.141092][T13551] CPU: 2 UID: 0 PID: 13551 Comm: syz.2.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.141107][T13551] Tainted: [L]=SOFTLOCKUP [ 225.141112][T13551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.141118][T13551] Call Trace: [ 225.141127][T13551] [ 225.141132][T13551] dump_stack_lvl+0x100/0x190 [ 225.141152][T13551] should_fail_ex.cold+0x5/0xa [ 225.141168][T13551] should_failslab+0xc2/0x120 [ 225.141187][T13551] kmem_cache_alloc_noprof+0x92/0x6a0 [ 225.141203][T13551] ? __asan_memcpy+0x3c/0x60 [ 225.141216][T13551] ? __kernfs_new_node+0xd2/0xa10 [ 225.141232][T13551] __kernfs_new_node+0xd2/0xa10 [ 225.141246][T13551] ? __pfx___kernfs_new_node+0x10/0x10 [ 225.141259][T13551] ? lock_acquire+0x1d1/0x380 [ 225.141274][T13551] ? kernfs_root+0x23/0x2a0 [ 225.141291][T13551] ? find_held_lock+0x2b/0x80 [ 225.141302][T13551] ? kernfs_root+0xee/0x2a0 [ 225.141318][T13551] ? kernfs_root+0xee/0x2a0 [ 225.141338][T13551] kernfs_new_node+0x194/0x200 [ 225.141351][T13551] ? __pfx_kernfs_new_node+0x10/0x10 [ 225.141375][T13551] ? kernfs_add_one+0x213/0xb40 [ 225.141391][T13551] __kernfs_create_file+0x53/0x350 [ 225.141408][T13551] sysfs_add_file_mode_ns+0x207/0x3c0 [ 225.141428][T13551] internal_create_group+0x593/0xfb0 [ 225.141449][T13551] ? __pfx_internal_create_group+0x10/0x10 [ 225.141466][T13551] ? __pfx_kobject_add+0x10/0x10 [ 225.141484][T13551] internal_create_groups+0x9d/0x150 [ 225.141503][T13551] setup_port+0x409/0x16e0 [ 225.141524][T13551] ? __pfx_setup_port+0x10/0x10 [ 225.141538][T13551] ? do_raw_spin_unlock+0x145/0x1e0 [ 225.141558][T13551] ? rxe_get_link_layer+0x64/0xc0 [ 225.141587][T13551] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 225.141601][T13551] ? rdma_port_get_link_layer+0x57/0xe0 [ 225.141620][T13551] ib_setup_port_attrs+0x201/0x600 [ 225.141637][T13551] ? kobject_put+0xb9/0x640 [ 225.141656][T13551] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 225.141675][T13551] ? __init_waitqueue_head+0xca/0x150 [ 225.141695][T13551] add_one_compat_dev+0x5ae/0x820 [ 225.141716][T13551] rdma_dev_init_net+0x305/0x580 [ 225.141726][T13551] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 225.141737][T13551] ? __kmalloc_noprof+0x350/0x840 [ 225.141754][T13551] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 225.141765][T13551] ops_init+0x1e2/0x5f0 [ 225.141780][T13551] setup_net+0x118/0x3a0 [ 225.141798][T13551] ? __pfx_setup_net+0x10/0x10 [ 225.141817][T13551] ? bpf_lsm_namespace_init+0x9/0x10 [ 225.141844][T13551] copy_net_ns+0x340/0x7a0 [ 225.141868][T13551] create_new_namespaces+0x3ea/0xac0 [ 225.141898][T13551] unshare_nsproxy_namespaces+0xf6/0x210 [ 225.141916][T13551] ksys_unshare+0x44f/0x980 [ 225.141934][T13551] ? __pfx_ksys_unshare+0x10/0x10 [ 225.141953][T13551] ? __might_fault+0xc5/0x140 [ 225.141969][T13551] __ia32_sys_unshare+0x30/0x40 [ 225.141986][T13551] __do_fast_syscall_32+0x14b/0x8c0 [ 225.142001][T13551] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.142016][T13551] do_fast_syscall_32+0x32/0x70 [ 225.142031][T13551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.142046][T13551] RIP: 0023:0xf7f04fbc [ 225.142056][T13551] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.142067][T13551] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 225.142079][T13551] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 225.142086][T13551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.142092][T13551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.142099][T13551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.142106][T13551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.142126][T13551] [ 225.143282][T13558] comedi comedi1: comedi_config --init_data is deprecated [ 225.249462][T13562] tipc: Enabled bearer , priority 0 [ 225.249908][T13562] syzkaller0: entered promiscuous mode [ 225.249917][T13562] syzkaller0: entered allmulticast mode [ 225.252562][T13562] tipc: Resetting bearer [ 225.254819][T13561] tipc: Resetting bearer [ 225.257055][ T5882] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 225.267222][T13561] tipc: Disabling bearer [ 225.407788][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 225.408313][ T5882] usb 6-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 225.409310][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.409340][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.411873][ T5882] usb 6-1: config 0 descriptor?? [ 225.415811][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3127'. [ 225.462067][T13574] batman_adv: batadv0: Adding interface: syzkaller0 [ 225.462077][T13574] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.462099][T13574] batman_adv: batadv0: Interface activated: syzkaller0 [ 225.464500][T13573] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 225.482632][T13573] batman_adv: batadv0: Removing interface: syzkaller0 [ 225.504597][T13578] FAULT_INJECTION: forcing a failure. [ 225.504597][T13578] name fail_futex, interval 1, probability 0, space 0, times 0 [ 225.504617][T13578] CPU: 1 UID: 0 PID: 13578 Comm: syz.2.3131 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.504633][T13578] Tainted: [L]=SOFTLOCKUP [ 225.504637][T13578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.504643][T13578] Call Trace: [ 225.504648][T13578] [ 225.504654][T13578] dump_stack_lvl+0x100/0x190 [ 225.504673][T13578] should_fail_ex.cold+0x5/0xa [ 225.504689][T13578] get_futex_key+0x1c9/0x13e0 [ 225.504703][T13578] ? __pfx_get_futex_key+0x10/0x10 [ 225.504715][T13578] ? futex_wake+0x4ea/0x5e0 [ 225.504734][T13578] futex_wake+0xf4/0x5e0 [ 225.504755][T13578] ? __pfx_futex_wake+0x10/0x10 [ 225.504771][T13578] ? rcu_read_lock_any_held+0x6a/0x90 [ 225.504783][T13578] ? find_held_lock+0x2b/0x80 [ 225.504796][T13578] ? ksys_write+0x190/0x250 [ 225.504809][T13578] ? ksys_write+0x190/0x250 [ 225.504825][T13578] do_futex+0x2b2/0x440 [ 225.504839][T13578] ? __pfx_do_futex+0x10/0x10 [ 225.504855][T13578] __ia32_sys_futex_time32+0x2f4/0x470 [ 225.504871][T13578] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 225.504886][T13578] ? __might_fault+0xc5/0x140 [ 225.504902][T13578] __do_fast_syscall_32+0x14b/0x8c0 [ 225.504920][T13578] do_fast_syscall_32+0x32/0x70 [ 225.504935][T13578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.504949][T13578] RIP: 0023:0xf7f04fbc [ 225.504959][T13578] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.504969][T13578] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 225.504981][T13578] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 225.504988][T13578] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 225.504995][T13578] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 225.505002][T13578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.505008][T13578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.505044][T13578] [ 225.726688][T13594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 225.748123][T13596] batman_adv: batadv0: Adding interface: syzkaller0 [ 225.748130][T13596] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.748147][T13596] batman_adv: batadv0: Interface activated: syzkaller0 [ 225.750766][T13595] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 225.771020][T13595] batman_adv: batadv0: Removing interface: syzkaller0 [ 225.826073][ T5882] usbhid 6-1:0.0: can't add hid device: -71 [ 225.826150][ T5882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.831660][ T5882] usb 6-1: USB disconnect, device number 40 [ 225.963203][T13609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3146'. [ 226.086915][ T1043] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 226.236933][ T1043] usb 9-1: Using ep0 maxpacket: 32 [ 226.237831][ T1043] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 226.238668][ T1043] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 226.238689][ T1043] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 226.238702][ T1043] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.238715][ T1043] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 226.240438][ T1043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.240448][ T1043] usb 9-1: Product: syz [ 226.240455][ T1043] usb 9-1: Manufacturer: syz [ 226.240463][ T1043] usb 9-1: SerialNumber: syz [ 226.245544][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 226.247807][ T1043] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input9 [ 226.371587][T13618] tipc: Enabled bearer , priority 0 [ 226.372165][T13618] syzkaller0: entered promiscuous mode [ 226.372180][T13618] syzkaller0: entered allmulticast mode [ 226.375818][T13618] tipc: Resetting bearer [ 226.380840][T13617] tipc: Resetting bearer [ 226.394465][T13617] tipc: Disabling bearer [ 226.462625][T13624] batman_adv: batadv0: Adding interface: syzkaller0 [ 226.462632][T13624] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.462652][T13624] batman_adv: batadv0: Interface activated: syzkaller0 [ 226.464400][T13623] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 226.470306][ T1043] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 226.470316][ T1043] (id 0x00) [ 226.495041][T13623] batman_adv: batadv0: Removing interface: syzkaller0 [ 226.537686][ T1043] rc_core: IR keymap rc-imon-pad not found [ 226.537697][ T1043] Registered IR keymap rc-empty [ 226.537754][ T1043] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 226.537762][ T1043] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 226.595902][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3158'. [ 226.668477][ T1043] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 226.669653][ T1043] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input10 [ 226.675331][ T1043] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:15> initialized [ 226.815180][T13656] batman_adv: batadv0: Adding interface: syzkaller0 [ 226.815186][T13656] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.815210][T13656] batman_adv: batadv0: Interface activated: syzkaller0 [ 226.816673][T13655] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 226.832698][T13655] batman_adv: batadv0: Removing interface: syzkaller0 [ 227.383321][T13670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.543955][T13670] md/raid1:md2: active with 1 out of 2 mirrors [ 227.544741][T13670] md2: detected capacity change from 0 to 1024 [ 227.577811][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 227.577830][ T5745] CPU: 2 UID: 0 PID: 5745 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.577858][ T5745] Tainted: [L]=SOFTLOCKUP [ 227.577866][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.577880][ T5745] Workqueue: hci3 hci_rx_work [ 227.577902][ T5745] Call Trace: [ 227.577910][ T5745] [ 227.577919][ T5745] dump_stack_lvl+0x100/0x190 [ 227.577952][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 227.578002][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 227.578034][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.578060][ T5745] ? find_held_lock+0x2b/0x80 [ 227.578081][ T5745] ? kobject_add_internal+0x25f/0x930 [ 227.578101][ T5745] ? kobject_add_internal+0x25f/0x930 [ 227.578127][ T5745] kobject_add_internal+0x2c8/0x930 [ 227.578152][ T5745] kobject_add+0x16a/0x1e0 [ 227.578172][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 227.578190][ T5745] ? class_to_subsys+0x10f/0x150 [ 227.578230][ T5745] ? kobject_put+0xb9/0x640 [ 227.578260][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 227.578290][ T5745] device_add+0x294/0x1970 [ 227.578311][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 227.578335][ T5745] ? __pfx_device_add+0x10/0x10 [ 227.578356][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 227.578386][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 227.578412][ T5745] le_conn_complete_evt+0x122f/0x2130 [ 227.578440][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.578469][ T5745] hci_le_conn_complete_evt+0x23c/0x3a0 [ 227.578492][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 227.578520][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 227.578548][ T5745] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 227.578574][ T5745] hci_event_packet+0x51c/0xcd0 [ 227.578596][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.578620][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 227.578647][ T5745] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.578678][ T5745] hci_rx_work+0x451/0xfc0 [ 227.578703][ T5745] process_one_work+0xac7/0x1b10 [ 227.578738][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 227.578762][ T5745] ? lock_acquire+0x1d1/0x380 [ 227.578795][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 227.578816][ T5745] worker_thread+0x5ef/0xe50 [ 227.578849][ T5745] ? kthread+0x13a/0x450 [ 227.578867][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 227.578887][ T5745] kthread+0x373/0x450 [ 227.578906][ T5745] ? __pfx_kthread+0x10/0x10 [ 227.578927][ T5745] ret_from_fork+0x730/0xd60 [ 227.578947][ T5745] ? save_fpregs_to_fpstate+0x19c/0x270 [ 227.578972][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 227.578991][ T5745] ? rcu_is_watching+0x13/0xc0 [ 227.579012][ T5745] ? __switch_to+0x800/0x10e0 [ 227.579072][ T5745] ? __pfx_kthread+0x10/0x10 [ 227.579096][ T5745] ret_from_fork_asm+0x1a/0x30 [ 227.579132][ T5745] [ 227.579189][ T5745] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.581646][ T5745] Bluetooth: hci3: failed to register connection device [ 227.598621][T13677] md: recover of RAID array md2 [ 227.625458][T13677] md: md2: recover done. [ 227.751352][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 227.845254][T13693] FAULT_INJECTION: forcing a failure. [ 227.845254][T13693] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.845286][T13693] CPU: 1 UID: 0 PID: 13693 Comm: syz.2.3181 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.845312][T13693] Tainted: [L]=SOFTLOCKUP [ 227.845319][T13693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.845331][T13693] Call Trace: [ 227.845338][T13693] [ 227.845347][T13693] dump_stack_lvl+0x100/0x190 [ 227.845378][T13693] should_fail_ex.cold+0x5/0xa [ 227.845403][T13693] get_futex_key+0x1c9/0x13e0 [ 227.845423][T13693] ? __pfx_get_futex_key+0x10/0x10 [ 227.845439][T13693] ? futex_wake+0x4ea/0x5e0 [ 227.845465][T13693] futex_wake+0xf4/0x5e0 [ 227.845486][T13693] ? __pfx_futex_wake+0x10/0x10 [ 227.845508][T13693] ? rcu_read_lock_any_held+0x6a/0x90 [ 227.845525][T13693] ? find_held_lock+0x2b/0x80 [ 227.845542][T13693] ? ksys_write+0x190/0x250 [ 227.845561][T13693] ? ksys_write+0x190/0x250 [ 227.845585][T13693] do_futex+0x2b2/0x440 [ 227.845604][T13693] ? __pfx_do_futex+0x10/0x10 [ 227.845627][T13693] __ia32_sys_futex_time32+0x2f4/0x470 [ 227.845662][T13693] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 227.845687][T13693] ? __might_fault+0xc5/0x140 [ 227.845709][T13693] __do_fast_syscall_32+0x14b/0x8c0 [ 227.845733][T13693] do_fast_syscall_32+0x32/0x70 [ 227.845753][T13693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.845774][T13693] RIP: 0023:0xf7f04fbc [ 227.845788][T13693] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.845803][T13693] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 227.845821][T13693] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 227.845834][T13693] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 227.845844][T13693] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 227.845853][T13693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.845862][T13693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.845882][T13693] [ 227.862762][T13695] tipc: Enabled bearer , priority 0 [ 227.863774][T13695] syzkaller0: entered promiscuous mode [ 227.863786][T13695] syzkaller0: entered allmulticast mode [ 227.866694][T13695] tipc: Resetting bearer [ 227.871132][T13694] tipc: Resetting bearer [ 227.881190][T13694] tipc: Disabling bearer [ 227.982788][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3184'. [ 228.288234][T13714] netlink: 'syz.5.3189': attribute type 1 has an invalid length. [ 228.288290][T13714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3189'. [ 228.288300][T13714] nbd: illegal input index 65544 [ 228.337794][T13716] FAULT_INJECTION: forcing a failure. [ 228.337794][T13716] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.337824][T13716] CPU: 2 UID: 0 PID: 13716 Comm: syz.5.3190 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.337848][T13716] Tainted: [L]=SOFTLOCKUP [ 228.337855][T13716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.337866][T13716] Call Trace: [ 228.337874][T13716] [ 228.337882][T13716] dump_stack_lvl+0x100/0x190 [ 228.337913][T13716] should_fail_ex.cold+0x5/0xa [ 228.337939][T13716] get_futex_key+0x1c9/0x13e0 [ 228.337960][T13716] ? __pfx_get_futex_key+0x10/0x10 [ 228.337976][T13716] ? futex_wake+0x4ea/0x5e0 [ 228.338003][T13716] futex_wake+0xf4/0x5e0 [ 228.338028][T13716] ? __pfx_futex_wake+0x10/0x10 [ 228.338062][T13716] ? rcu_read_lock_any_held+0x6a/0x90 [ 228.338083][T13716] ? find_held_lock+0x2b/0x80 [ 228.338103][T13716] ? ksys_write+0x190/0x250 [ 228.338126][T13716] ? ksys_write+0x190/0x250 [ 228.338150][T13716] do_futex+0x2b2/0x440 [ 228.338169][T13716] ? __pfx_do_futex+0x10/0x10 [ 228.338194][T13716] __ia32_sys_futex_time32+0x2f4/0x470 [ 228.338219][T13716] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 228.338241][T13716] ? __might_fault+0xc5/0x140 [ 228.338268][T13716] __do_fast_syscall_32+0x14b/0x8c0 [ 228.338296][T13716] do_fast_syscall_32+0x32/0x70 [ 228.338319][T13716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.338341][T13716] RIP: 0023:0xf741efbc [ 228.338357][T13716] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.338379][T13716] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 228.338402][T13716] RAX: ffffffffffffffda RBX: 00000000f7444f8c RCX: 0000000000000081 [ 228.338418][T13716] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 228.338431][T13716] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 228.338442][T13716] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.338457][T13716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.338481][T13716] [ 228.556901][T13722] batman_adv: batadv0: Adding interface: syzkaller0 [ 228.556907][T13722] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.556924][T13722] batman_adv: batadv0: Interface activated: syzkaller0 [ 228.570834][T13721] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 228.583451][T13721] batman_adv: batadv0: Removing interface: syzkaller0 [ 228.860214][T13604] imon:send_packet: task interrupted [ 228.860222][T13604] imon:send_packet: packet tx failed (-512) [ 228.860245][T13604] imon:vfd_write: send packet #0 failed [ 228.888672][ T1043] usb 9-1: USB disconnect, device number 15 [ 229.089998][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 229.248038][ T41] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 229.356841][ C3] net_ratelimit: 132 callbacks suppressed [ 229.357247][T13770] syzkaller1: entered promiscuous mode [ 229.357263][T13770] syzkaller1: entered allmulticast mode [ 229.382846][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3208'. [ 229.407694][ T41] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 229.408304][ T41] usb 10-1: config 0 has no interfaces? [ 229.408347][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.411942][ T41] usb 10-1: config 0 descriptor?? [ 229.436928][ T1043] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 229.517126][T13774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 229.518923][T13774] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 229.587030][ T1043] usb 6-1: Using ep0 maxpacket: 32 [ 229.588601][ T1043] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 229.590339][ T1043] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 229.590361][ T1043] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 229.590376][ T1043] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.590390][ T1043] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 229.592213][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.592225][ T1043] usb 6-1: Product: syz [ 229.592233][ T1043] usb 6-1: Manufacturer: syz [ 229.592241][ T1043] usb 6-1: SerialNumber: syz [ 229.599273][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 229.602435][ T1043] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11 [ 229.620932][ T9] usb 10-1: USB disconnect, device number 9 [ 229.651693][ T1162] IPVS: starting estimator thread 0... [ 229.736879][T13778] IPVS: using max 44 ests per chain, 105600 per kthread [ 229.816928][ T1043] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 229.816940][ T1043] (id 0x00) [ 229.866868][ T1043] rc_core: IR keymap rc-imon-pad not found [ 229.866880][ T1043] Registered IR keymap rc-empty [ 229.866941][ T1043] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 229.866950][ T1043] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 230.018289][ T1043] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 230.019366][ T1043] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input12 [ 230.024296][ T1043] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:41> initialized [ 230.314135][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 230.343435][T13820] FAULT_INJECTION: forcing a failure. [ 230.343435][T13820] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.343454][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.5.3226 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.343470][T13820] Tainted: [L]=SOFTLOCKUP [ 230.343474][T13820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.343481][T13820] Call Trace: [ 230.343485][T13820] [ 230.343491][T13820] dump_stack_lvl+0x100/0x190 [ 230.343511][T13820] should_fail_ex.cold+0x5/0xa [ 230.343527][T13820] get_futex_key+0x1c9/0x13e0 [ 230.343542][T13820] ? __pfx_get_futex_key+0x10/0x10 [ 230.343553][T13820] ? futex_wake+0x4ea/0x5e0 [ 230.343570][T13820] futex_wake+0xf4/0x5e0 [ 230.343585][T13820] ? __pfx_futex_wake+0x10/0x10 [ 230.343601][T13820] ? rcu_read_lock_any_held+0x6a/0x90 [ 230.343613][T13820] ? find_held_lock+0x2b/0x80 [ 230.343625][T13820] ? ksys_write+0x190/0x250 [ 230.343639][T13820] ? ksys_write+0x190/0x250 [ 230.343654][T13820] do_futex+0x2b2/0x440 [ 230.343667][T13820] ? __pfx_do_futex+0x10/0x10 [ 230.343682][T13820] __ia32_sys_futex_time32+0x2f4/0x470 [ 230.343698][T13820] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 230.343712][T13820] ? __might_fault+0xc5/0x140 [ 230.343728][T13820] __do_fast_syscall_32+0x14b/0x8c0 [ 230.343745][T13820] do_fast_syscall_32+0x32/0x70 [ 230.343760][T13820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.343774][T13820] RIP: 0023:0xf741efbc [ 230.343784][T13820] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 230.343794][T13820] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 230.343806][T13820] RAX: ffffffffffffffda RBX: 00000000f7444f8c RCX: 0000000000000081 [ 230.343815][T13820] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 230.343822][T13820] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 230.343829][T13820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.343836][T13820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.343852][T13820] [ 230.489533][T13827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.662434][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3234'. [ 230.727641][T13827] md: pers->run() failed ... [ 230.891219][T13850] FAULT_INJECTION: forcing a failure. [ 230.891219][T13850] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.891288][T13850] CPU: 2 UID: 0 PID: 13850 Comm: syz.4.3237 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.891304][T13850] Tainted: [L]=SOFTLOCKUP [ 230.891308][T13850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.891315][T13850] Call Trace: [ 230.891320][T13850] [ 230.891325][T13850] dump_stack_lvl+0x100/0x190 [ 230.891345][T13850] should_fail_ex.cold+0x5/0xa [ 230.891361][T13850] get_futex_key+0x1c9/0x13e0 [ 230.891375][T13850] ? __pfx_get_futex_key+0x10/0x10 [ 230.891386][T13850] ? futex_wake+0x4ea/0x5e0 [ 230.891417][T13850] futex_wake+0xf4/0x5e0 [ 230.891432][T13850] ? __pfx_futex_wake+0x10/0x10 [ 230.891448][T13850] ? rcu_read_lock_any_held+0x6a/0x90 [ 230.891462][T13850] ? find_held_lock+0x2b/0x80 [ 230.891475][T13850] ? ksys_write+0x190/0x250 [ 230.891489][T13850] ? ksys_write+0x190/0x250 [ 230.891504][T13850] do_futex+0x2b2/0x440 [ 230.891517][T13850] ? __pfx_do_futex+0x10/0x10 [ 230.891532][T13850] __ia32_sys_futex_time32+0x2f4/0x470 [ 230.891548][T13850] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 230.891562][T13850] ? __might_fault+0xc5/0x140 [ 230.891578][T13850] __do_fast_syscall_32+0x14b/0x8c0 [ 230.891596][T13850] do_fast_syscall_32+0x32/0x70 [ 230.891611][T13850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.891626][T13850] RIP: 0023:0xf7f64fbc [ 230.891636][T13850] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 230.891646][T13850] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 230.891663][T13850] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 230.891670][T13850] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 230.891678][T13850] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 230.891685][T13850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.891693][T13850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.891708][T13850] [ 231.558587][ T5882] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 231.707725][ T5882] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.709714][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.709764][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.712189][ T5882] usb 9-1: config 0 descriptor?? [ 231.920347][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 231.920419][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 231.921575][ T5882] usb 9-1: USB disconnect, device number 16 [ 232.199529][T13761] imon:send_packet: task interrupted [ 232.199536][T13761] imon:send_packet: packet tx failed (-512) [ 232.199560][T13761] imon:vfd_write: send packet #0 failed [ 232.218411][ T5882] usb 6-1: USB disconnect, device number 41 [ 232.255952][T13870] batman_adv: batadv0: Adding interface: syzkaller0 [ 232.255959][T13870] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.255975][T13870] batman_adv: batadv0: Interface activated: syzkaller0 [ 232.272256][T13869] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 232.282226][T13869] batman_adv: batadv0: Removing interface: syzkaller0 [ 232.356942][ T853] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 232.530091][ T853] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.530997][ T853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.531035][ T853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.533060][ T853] usb 9-1: config 0 descriptor?? [ 232.588820][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 232.916922][ T5882] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 233.067624][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 233.068933][ T5882] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 233.070288][ T5882] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 233.070325][ T5882] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 233.070347][ T5882] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.070370][ T5882] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 233.073077][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.073097][ T5882] usb 6-1: Product: syz [ 233.073112][ T5882] usb 6-1: Manufacturer: syz [ 233.073128][ T5882] usb 6-1: SerialNumber: syz [ 233.083826][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 233.092383][ T5882] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input13 [ 233.138920][ T853] usbhid 9-1:0.0: can't add hid device: -71 [ 233.138988][ T853] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 233.141836][ T853] usb 9-1: USB disconnect, device number 17 [ 233.296954][ T5882] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 233.296974][ T5882] (id 0x00) [ 233.349080][ T5882] rc_core: IR keymap rc-imon-pad not found [ 233.349099][ T5882] Registered IR keymap rc-empty [ 233.349239][ T5882] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 233.349255][ T5882] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 233.509952][ T5882] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 233.511729][ T5882] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input14 [ 233.516470][ T5882] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:42> initialized [ 233.538058][T13891] md: couldn't update array info. -22 [ 233.597780][T13891] md: could not open device unknown-block(1,4). [ 233.597830][T13891] md: md_import_device returned -16 [ 233.597908][T13892] md: could not open device unknown-block(1,5). [ 233.597936][T13892] md: md_import_device returned -16 [ 233.667287][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 233.836935][ T5827] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 233.986935][ T1349] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 233.987490][ T5827] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.990003][ T5827] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 233.990024][ T5827] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.991148][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.991165][ T5827] usb 7-1: SerialNumber: syz [ 233.997268][T13891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.147365][ T1349] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 234.148243][ T1349] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.148255][ T1349] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.150039][ T1349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.150049][ T1349] usb 9-1: Product: syz [ 234.150056][ T1349] usb 9-1: Manufacturer: syz [ 234.150064][ T1349] usb 9-1: SerialNumber: syz [ 234.151487][ T1349] usb 9-1: config 0 descriptor?? [ 234.219997][T13891] md2: detected capacity change from 1024 to 0 [ 234.220006][T13891] md: md2 stopped. [ 234.232097][ T5827] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 234.237991][ T5827] usb 7-1: USB disconnect, device number 28 [ 234.546899][ C3] net_ratelimit: 70 callbacks suppressed [ 234.848356][T13905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.957889][T13905] md: could not open device unknown-block(1,4). [ 234.957979][T13905] md: error, md_import_device() returned -16 [ 234.958631][T13905] md: md2 stopped. [ 235.099440][T13912] smbdirect: ib_dev[rxe0] renamed to [syz0] [ 235.286119][T13914] FAULT_INJECTION: forcing a failure. [ 235.286119][T13914] name failslab, interval 1, probability 0, space 0, times 0 [ 235.286143][T13914] CPU: 2 UID: 0 PID: 13914 Comm: syz.2.3264 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.286158][T13914] Tainted: [L]=SOFTLOCKUP [ 235.286162][T13914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.286169][T13914] Call Trace: [ 235.286173][T13914] [ 235.286178][T13914] dump_stack_lvl+0x100/0x190 [ 235.286213][T13914] should_fail_ex.cold+0x5/0xa [ 235.286239][T13914] should_failslab+0xc2/0x120 [ 235.286264][T13914] __kmalloc_cache_noprof+0x91/0x6d0 [ 235.286287][T13914] ? pty_common_install+0x10e/0xb30 [ 235.286334][T13914] pty_common_install+0x10e/0xb30 [ 235.286359][T13914] ? __pfx_pty_unix98_install+0x10/0x10 [ 235.286383][T13914] tty_init_dev.part.0+0x9e/0x470 [ 235.286416][T13914] tty_init_dev+0x60/0x80 [ 235.286443][T13914] ? __pfx_ptmx_open+0x10/0x10 [ 235.286463][T13914] ptmx_open+0x128/0x360 [ 235.286483][T13914] ? __pfx_ptmx_open+0x10/0x10 [ 235.286503][T13914] chrdev_open+0x234/0x6a0 [ 235.286527][T13914] ? __pfx_apparmor_file_open+0x10/0x10 [ 235.286547][T13914] ? __pfx_chrdev_open+0x10/0x10 [ 235.286575][T13914] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 235.286599][T13914] do_dentry_open+0x674/0x1470 [ 235.286615][T13914] ? __pfx_chrdev_open+0x10/0x10 [ 235.286634][T13914] vfs_open_consume+0xcc/0x460 [ 235.286647][T13914] path_openat+0x1547/0x23f0 [ 235.286666][T13914] ? __pfx_path_openat+0x10/0x10 [ 235.286686][T13914] do_file_open+0x20e/0x430 [ 235.286703][T13914] ? __pfx_do_file_open+0x10/0x10 [ 235.286731][T13914] ? _raw_spin_unlock+0x28/0x50 [ 235.286743][T13914] ? alloc_fd+0x471/0x7a0 [ 235.286763][T13914] do_sys_openat2+0x163/0x1d0 [ 235.286774][T13914] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.286791][T13914] __ia32_compat_sys_openat+0x12d/0x210 [ 235.286803][T13914] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 235.286821][T13914] __do_fast_syscall_32+0x14b/0x8c0 [ 235.286839][T13914] do_fast_syscall_32+0x32/0x70 [ 235.286854][T13914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.286868][T13914] RIP: 0023:0xf7f04fbc [ 235.286879][T13914] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 235.286890][T13914] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 235.286901][T13914] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 000000008001d9c0 [ 235.286908][T13914] RDX: 0000000000121301 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.286915][T13914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.286922][T13914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 235.286929][T13914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.286944][T13914] [ 235.680145][T13886] imon:send_packet: task interrupted [ 235.680153][T13886] imon:send_packet: packet tx failed (-512) [ 235.680174][T13886] imon:vfd_write: send packet #0 failed [ 235.691208][ T853] usb 6-1: USB disconnect, device number 42 [ 235.757921][T13932] syzkaller0: entered promiscuous mode [ 235.757934][T13932] syzkaller0: entered allmulticast mode [ 236.002544][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'. [ 236.236215][T13959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.317103][T13959] md: could not open device unknown-block(1,3). [ 236.748051][T13895] ================================================================== [ 236.748067][T13895] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 236.748101][T13895] Read of size 8 at addr ffff88802af6b0c8 by task syz.4.3257/13895 [ 236.748116][T13895] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.748129][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.4.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.748154][T13895] Tainted: [L]=SOFTLOCKUP [ 236.748161][T13895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.748180][T13895] Call Trace: [ 236.748187][T13895] [ 236.748195][T13895] dump_stack_lvl+0x100/0x190 [ 236.748222][T13895] print_report+0x13d/0x4b0 [ 236.748249][T13895] ? __virt_addr_valid+0x239/0x430 [ 236.748280][T13895] ? __dynamic_dev_dbg+0x2fc/0x310 [ 236.748305][T13895] kasan_report+0xdf/0x1c0 [ 236.748333][T13895] ? __dynamic_dev_dbg+0x2fc/0x310 [ 236.748363][T13895] __dynamic_dev_dbg+0x2fc/0x310 [ 236.748389][T13895] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 236.748415][T13895] ? __mutex_lock+0x267/0x1c10 [ 236.748439][T13895] ? display_close+0x43/0x150 [ 236.748478][T13895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.748509][T13895] ? locks_remove_file+0xd1/0x600 [ 236.748530][T13895] ? __pfx_locks_remove_file+0x10/0x10 [ 236.748551][T13895] display_close+0x103/0x150 [ 236.748570][T13895] ? __pfx_display_close+0x10/0x10 [ 236.748589][T13895] __fput+0x3fb/0xb50 [ 236.748620][T13895] fput_close_sync+0x118/0x250 [ 236.748637][T13895] ? __pfx_fput_close_sync+0x10/0x10 [ 236.748659][T13895] filp_close_sync+0x75/0xa0 [ 236.748677][T13895] put_files_struct+0x1f7/0x390 [ 236.748726][T13895] exit_files+0x85/0xb0 [ 236.748752][T13895] do_exit+0x896/0x2a00 [ 236.748770][T13895] ? find_held_lock+0x2b/0x80 [ 236.748790][T13895] ? __pfx_do_exit+0x10/0x10 [ 236.748808][T13895] ? do_raw_spin_lock+0x128/0x260 [ 236.748835][T13895] ? find_held_lock+0x2b/0x80 [ 236.748853][T13895] ? get_signal+0x7db/0x21d0 [ 236.748879][T13895] do_group_exit+0xd5/0x2a0 [ 236.748898][T13895] get_signal+0x1ebd/0x21d0 [ 236.748923][T13895] ? __asan_memset+0x23/0x50 [ 236.748944][T13895] ? __hrtimer_setup+0x208/0x330 [ 236.748988][T13895] ? __pfx_get_signal+0x10/0x10 [ 236.749013][T13895] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 236.749038][T13895] arch_do_signal_or_restart+0x91/0x7a0 [ 236.749065][T13895] ? get_old_timespec32+0xda/0x130 [ 236.749091][T13895] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.749120][T13895] ? __ia32_sys_clock_nanosleep_time32+0x363/0x480 [ 236.749151][T13895] exit_to_user_mode_loop+0x139/0x700 [ 236.749187][T13895] ? rcu_is_watching+0x13/0xc0 [ 236.749207][T13895] do_int80_emulation+0x555/0x650 [ 236.749233][T13895] asm_int80_emulation+0x1a/0x20 [ 236.749252][T13895] RIP: 0023:0xf71577ab [ 236.749265][T13895] Code: Unable to access opcode bytes at 0xf7157781. [ 236.749274][T13895] RSP: 002b:00000000ff9ce17c EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 236.749293][T13895] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 236.749305][T13895] RDX: 00000000ff9ce214 RSI: 00000000ff9ce20c RDI: 0000000000000000 [ 236.749318][T13895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.749328][T13895] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 236.749340][T13895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.749357][T13895] [ 236.749364][T13895] [ 236.749369][T13895] Allocated by task 5882: [ 236.749377][T13895] kasan_save_stack+0x30/0x50 [ 236.749401][T13895] kasan_save_track+0x14/0x30 [ 236.749423][T13895] __kasan_kmalloc+0xaa/0xb0 [ 236.749445][T13895] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 236.749464][T13895] usb_set_configuration+0x10d0/0x1dc0 [ 236.749497][T13895] usb_generic_driver_probe+0xa1/0xe0 [ 236.749521][T13895] usb_probe_device+0xef/0x400 [ 236.749538][T13895] really_probe+0x241/0xa60 [ 236.749562][T13895] __driver_probe_device+0x210/0x460 [ 236.749584][T13895] driver_probe_device+0x4a/0x140 [ 236.749608][T13895] __device_attach_driver+0x1df/0x320 [ 236.749632][T13895] bus_for_each_drv+0x159/0x1e0 [ 236.749651][T13895] __device_attach+0x1e4/0x4d0 [ 236.749674][T13895] device_initial_probe+0xaf/0xd0 [ 236.749699][T13895] bus_probe_device+0x64/0x160 [ 236.749719][T13895] device_add+0x121d/0x1970 [ 236.749734][T13895] usb_new_device.part.0+0xcc2/0x1686 [ 236.749771][T13895] hub_event.cold+0x1e3/0xe90 [ 236.749793][T13895] process_one_work+0xac7/0x1b10 [ 236.749812][T13895] worker_thread+0x5ef/0xe50 [ 236.749830][T13895] kthread+0x373/0x450 [ 236.749844][T13895] ret_from_fork+0x730/0xd60 [ 236.749860][T13895] ret_from_fork_asm+0x1a/0x30 [ 236.749877][T13895] [ 236.749881][T13895] Freed by task 853: [ 236.749890][T13895] kasan_save_stack+0x30/0x50 [ 236.749912][T13895] kasan_save_track+0x14/0x30 [ 236.749934][T13895] kasan_save_free_info+0x3b/0x70 [ 236.749952][T13895] __kasan_slab_free+0x5f/0x80 [ 236.749976][T13895] kfree+0x22b/0x6d0 [ 236.749991][T13895] device_release+0xd2/0x270 [ 236.750013][T13895] kobject_put+0x1f7/0x640 [ 236.750038][T13895] put_device+0x1f/0x30 [ 236.750055][T13895] usb_disable_device+0x44a/0x810 [ 236.750071][T13895] usb_disconnect+0x2e2/0x9a0 [ 236.750086][T13895] hub_event+0x1bb1/0x4420 [ 236.750100][T13895] process_one_work+0xac7/0x1b10 [ 236.750118][T13895] worker_thread+0x5ef/0xe50 [ 236.750135][T13895] kthread+0x373/0x450 [ 236.750150][T13895] ret_from_fork+0x730/0xd60 [ 236.750164][T13895] ret_from_fork_asm+0x1a/0x30 [ 236.750186][T13895] [ 236.750191][T13895] The buggy address belongs to the object at ffff88802af6b000 [ 236.750191][T13895] which belongs to the cache kmalloc-2k of size 2048 [ 236.750205][T13895] The buggy address is located 200 bytes inside of [ 236.750205][T13895] freed 2048-byte region [ffff88802af6b000, ffff88802af6b800) [ 236.750222][T13895] [ 236.750226][T13895] The buggy address belongs to the physical page: [ 236.750234][T13895] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2af68 [ 236.750251][T13895] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 236.750265][T13895] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 236.750281][T13895] page_type: f5(slab) [ 236.750297][T13895] raw: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 236.750313][T13895] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 236.750329][T13895] head: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 236.750345][T13895] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 236.750361][T13895] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 236.750377][T13895] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 236.750387][T13895] page dumped because: kasan: bad access detected [ 236.750396][T13895] page_owner tracks the page as allocated [ 236.750402][T13895] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5744, tgid 5744 (syz-executor), ts 40599493562 [ 236.750431][T13895] post_alloc_hook+0xfd/0x120 [ 236.750448][T13895] get_page_from_freelist+0x110d/0x35d0 [ 236.750468][T13895] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 236.750489][T13895] new_slab+0xa9/0x6e0 [ 236.750506][T13895] refill_objects+0xe3/0x410 [ 236.750524][T13895] __pcs_replace_empty_main+0x35e/0x650 [ 236.750542][T13895] __kmalloc_node_track_caller_noprof+0x6a3/0x870 [ 236.750565][T13895] kmalloc_reserve+0xe8/0x350 [ 236.750585][T13895] pskb_expand_head+0x249/0x10e0 [ 236.750609][T13895] netlink_trim+0x22d/0x2f0 [ 236.750628][T13895] netlink_broadcast_filtered+0x6d/0xfd0 [ 236.750650][T13895] nlmsg_notify+0xb1/0x290 [ 236.750672][T13895] rtmsg_ifinfo+0x177/0x1b0 [ 236.750691][T13895] netif_state_change+0x17f/0x380 [ 236.750709][T13895] netif_set_operstate+0x108/0x180 [ 236.750732][T13895] hsr_check_carrier_and_operstate+0x253/0x720 [ 236.750750][T13895] page last free pid 113 tgid 113 ts 40169363861 stack trace: [ 236.750762][T13895] free_unref_folios+0xa4a/0x1790 [ 236.750780][T13895] shrink_folio_list+0x4552/0x5e30 [ 236.750805][T13895] evict_folios+0x348/0x1650 [ 236.750829][T13895] try_to_shrink_lruvec+0x366/0x830 [ 236.750854][T13895] shrink_one+0x307/0x850 [ 236.750877][T13895] shrink_node+0x2b1b/0x4310 [ 236.750892][T13895] balance_pgdat+0xb20/0x1f00 [ 236.750908][T13895] kswapd+0x556/0xb50 [ 236.750922][T13895] kthread+0x373/0x450 [ 236.750937][T13895] ret_from_fork+0x730/0xd60 [ 236.750952][T13895] ret_from_fork_asm+0x1a/0x30 [ 236.750968][T13895] [ 236.750973][T13895] Memory state around the buggy address: [ 236.750982][T13895] ffff88802af6af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.750995][T13895] ffff88802af6b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.751008][T13895] >ffff88802af6b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.751019][T13895] ^ [ 236.751029][T13895] ffff88802af6b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.751042][T13895] ffff88802af6b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.751052][T13895] ================================================================== [ 236.751108][T13895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 237.085005][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.4.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.088944][T13895] Tainted: [L]=SOFTLOCKUP [ 237.090570][T13895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.094132][T13895] Call Trace: [ 237.095244][T13895] [ 237.096206][T13895] dump_stack_lvl+0x100/0x190 [ 237.097916][T13895] vpanic+0x553/0x970 [ 237.099529][T13895] ? __pfx_vpanic+0x10/0x10 [ 237.101285][T13895] ? mark_held_locks+0x40/0x70 [ 237.103028][T13895] ? irqentry_exit+0x202/0xab0 [ 237.104760][T13895] ? __dynamic_dev_dbg+0x2fc/0x310 [ 237.106715][T13895] panic+0xd1/0xe0 [ 237.108052][T13895] ? __pfx_panic+0x10/0x10 [ 237.109750][T13895] ? __dynamic_dev_dbg+0x2fc/0x310 [ 237.111633][T13895] ? preempt_schedule+0x57/0xd0 [ 237.113598][T13895] check_panic_on_warn.cold+0x19/0x34 [ 237.115521][T13895] end_report.part.0+0x3a/0x90 [ 237.117624][T13895] kasan_report.cold+0xe/0x18 [ 237.119372][T13895] ? __dynamic_dev_dbg+0x2fc/0x310 [ 237.121376][T13895] __dynamic_dev_dbg+0x2fc/0x310 [ 237.123370][T13895] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 237.125607][T13895] ? __mutex_lock+0x267/0x1c10 [ 237.127544][T13895] ? display_close+0x43/0x150 [ 237.129428][T13895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.131714][T13895] ? locks_remove_file+0xd1/0x600 [ 237.133213][T13895] ? __pfx_locks_remove_file+0x10/0x10 [ 237.134931][T13895] display_close+0x103/0x150 [ 237.136481][T13895] ? __pfx_display_close+0x10/0x10 [ 237.138374][T13895] __fput+0x3fb/0xb50 [ 237.139630][T13895] fput_close_sync+0x118/0x250 [ 237.141084][T13895] ? __pfx_fput_close_sync+0x10/0x10 [ 237.142679][T13895] filp_close_sync+0x75/0xa0 [ 237.144342][T13895] put_files_struct+0x1f7/0x390 [ 237.146205][T13895] exit_files+0x85/0xb0 [ 237.148025][T13895] do_exit+0x896/0x2a00 [ 237.149811][T13895] ? find_held_lock+0x2b/0x80 [ 237.151352][T13895] ? __pfx_do_exit+0x10/0x10 [ 237.152801][T13895] ? do_raw_spin_lock+0x128/0x260 [ 237.154424][T13895] ? find_held_lock+0x2b/0x80 [ 237.156020][T13895] ? get_signal+0x7db/0x21d0 [ 237.157680][T13895] do_group_exit+0xd5/0x2a0 [ 237.159199][T13895] get_signal+0x1ebd/0x21d0 [ 237.160650][T13895] ? __asan_memset+0x23/0x50 [ 237.162356][T13895] ? __hrtimer_setup+0x208/0x330 [ 237.164417][T13895] ? __pfx_get_signal+0x10/0x10 [ 237.166376][T13895] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 237.168544][T13895] arch_do_signal_or_restart+0x91/0x7a0 [ 237.170345][T13895] ? get_old_timespec32+0xda/0x130 [ 237.172012][T13895] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.173984][T13895] ? __ia32_sys_clock_nanosleep_time32+0x363/0x480 [ 237.176042][T13895] exit_to_user_mode_loop+0x139/0x700 [ 237.177809][T13895] ? rcu_is_watching+0x13/0xc0 [ 237.179333][T13895] do_int80_emulation+0x555/0x650 [ 237.180945][T13895] asm_int80_emulation+0x1a/0x20 [ 237.182557][T13895] RIP: 0023:0xf71577ab [ 237.183905][T13895] Code: Unable to access opcode bytes at 0xf7157781. [ 237.186004][T13895] RSP: 002b:00000000ff9ce17c EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 237.188651][T13895] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 237.191161][T13895] RDX: 00000000ff9ce214 RSI: 00000000ff9ce20c RDI: 0000000000000000 [ 237.193750][T13895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.196335][T13895] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 237.198896][T13895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.201407][T13895] [ 237.203110][T13895] Kernel Offset: disabled [ 237.204494][T13895] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:22:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000009 RCX=ffffffff85372c38 RDX=000000000000000a RSI=0000000000000010 RDI=0000000000000001 RBP=ffffc90003e573f8 RSP=ffffc90003e57198 R8 =0000000000000001 R9 =0000000000000008 R10=000000000000000a R11=0000000000000000 R12=000000000000000a R13=ffffc90003e57250 R14=ffff8880706be9c7 R15=0000000000000439 RIP=ffffffff820beb30 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f20409b9300 ffffffff 00c00000 GS =0000 ffff88809572f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e03b9aaec8 CR3=000000004c410000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1d8e0689740246bb 4b78413f718a9451 1d8e0689740246bb 4b78413f718a9451 1d8e0689740246bb 4b78413f718a9451 1d8e0689740246bb 4b78413f718a9451 ZMM18=af936b190e0fd056 b3a1e12246a8dbff af936b190e0fd056 b3a1e12246a8dbff af936b190e0fd056 b3a1e12246a8dbff af936b190e0fd056 b3a1e12246a8dbff ZMM19=9611000000000000 0000000000000004 9611000000000000 0000000000000003 9611000000000000 0000000000000002 9611000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb080eb6035e0200 0eb4036240808080 82000eb2036d6172 2d76656401ffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff1080e a4032f646d2f01ff fffffffffffffff7 080e9c0360208080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8082000e9a03646d 2f6b636f6c622f73 79732f01ffffffff ffffffffe5080e80 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0362408080808200 0eb2036d61722d76 656401ffffffffff fffffff1080ea403 ZMM25=ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ccd5aa04ccd5aa04 ZMM26=68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d 68b09f7d68b09f7d ZMM27=f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf f3ff86bff3ff86bf ZMM28=000001900000018f 0000018e0000018d 0000018c0000018b 0000018a00000189 0000018800000187 0000018600000185 0000018400000183 0000018200000181 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3c1400003c140000 3c1400003c140000 3c1400003c140000 3c1400003c140000 3c1400003c140000 3c1400003c140000 3c1400003c140000 3c1400003c140000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b37385 RDI=ffffffff9cc893c0 RBP=ffffffff9cc89380 RSP=ffffc9002283ef98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000061 R14=0000000000000003 R15=ffffc9002283f2b0 RIP=ffffffff85b373af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809582f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fea190 CR3=000000005e585000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc900052b8400 RCX=00000000000002dc RDX=ffff8880255e8000 RSI=ffffc90004931c90 RDI=ffffc900052b8c90 RBP=0000000000001400 RSP=ffffc900061871e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc90004931400 R13=0000000000000000 R14=ffffc900052b8400 R15=0000000000001400 RIP=ffffffff8562d527 RFL=00010206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809592f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f322ff8 CR3=000000005dabb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000020ce67 RBX=ffff88801e302580 RCX=ffffffff8bd53325 RDX=0000000000000001 RSI=ffffffff8e3e5f3b RDI=ffffffff8c628980 RBP=ffffed1003c604b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed1005666825 R10=ffff88802b33412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bd517bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a2f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7268e10 CR3=000000007669e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000