last executing test programs: 54.423638569s ago: executing program 1 (id=501): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.30124751s ago: executing program 1 (id=502): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000b40)="1a00c74253a55a00", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000c00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000c40)=0x600) 54.248772713s ago: executing program 1 (id=503): unshare(0x28000600) r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x4, 0x1) 54.247267635s ago: executing program 1 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 54.185318815s ago: executing program 1 (id=506): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.901385912s ago: executing program 1 (id=509): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x1, 0x41) 53.852154057s ago: executing program 32 (id=509): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x1, 0x41) 2.718343136s ago: executing program 2 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x41840) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) 2.660561916s ago: executing program 2 (id=1087): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x7f97, 0x13581, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r0, 0x55, 0x84a23, 0xf, 0x0, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r1, &(0x7f0000000140)=""/26, 0x1a, 0x0) 2.501137737s ago: executing program 3 (id=1089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.440918368s ago: executing program 3 (id=1091): syz_open_dev$evdev(0x0, 0x0, 0x2002) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180), 0x4) 2.370806151s ago: executing program 3 (id=1093): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x90, 'crypt\x00', {'aes-cbc-lmk', 0x20, @hex32=[0x61, 0x32, 0x39, 0x64, 0x66, 0x35, 0x36, 0x32, 0x63, 0x38, 0x39, 0x39, 0x61, 0x34, 0x30, 0x30, 0x63, 0x30, 0x61, 0x66, 0x30, 0x38, 0x35, 0x35, 0x64, 0x35, 0x37, 0x33, 0x61, 0x61, 0x66, 0x34, 0x33, 0x39, 0x64, 0x37, 0x39, 0x62, 0x63, 0x63, 0x37, 0x34, 0x66, 0x61, 0x38, 0x31, 0x37, 0x35, 0x62, 0x36, 0x39, 0x64, 0x63, 0x62, 0x31, 0x38, 0x37, 0x66, 0x64, 0x30, 0x63, 0x62, 0x30, 0x32], 0x20, '16', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '8191'}, ' 0'}}]}) io_setup(0xfffffffb, &(0x7f00000001c0)) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) 2.370594422s ago: executing program 2 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x6, 0xa03, 0x3, 0x983, 0x200ff}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}]}}}]}, 0x64}}, 0x4000080) 2.300102068s ago: executing program 2 (id=1097): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.178423719s ago: executing program 2 (id=1100): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x458d, 0x20500) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, {0x9, 0x4, 0x1, 0x5}}) 2.080248252s ago: executing program 2 (id=1101): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000cc0)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000d00)='i', 0x1, 0x8001, 0x0, 0x0) pipe2(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffffffe, 0x2) 1.7309411s ago: executing program 3 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) open(&(0x7f0000002640)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1.390457428s ago: executing program 3 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002300)='./file0\x00', &(0x7f00000023c0), 0x0, &(0x7f0000004580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x0, 0x2c) 1.269648918s ago: executing program 3 (id=1127): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c90012000e00050017420a008000000200020a0040"], 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x2000080}, 0x4000020) 1.03023792s ago: executing program 0 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000007c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000080, 0x0, 0x4007}]}) 879.627789ms ago: executing program 0 (id=1135): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="11", 0x1}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x40015) 879.4577ms ago: executing program 0 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x1c, 0x0, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) 811.339952ms ago: executing program 0 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500"], 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 811.088592ms ago: executing program 0 (id=1138): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x141a42, 0x15) pwrite64(r0, &(0x7f0000000440)='\b', 0xfffffe64, 0x9000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 661.190205ms ago: executing program 0 (id=1139): syz_usb_connect(0x5, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) 380.515529ms ago: executing program 4 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 320.459046ms ago: executing program 4 (id=1142): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='+1', 0x2) write$cgroup_int(r0, &(0x7f0000000280)=0x9, 0x12) 320.264494ms ago: executing program 4 (id=1143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) 61.133746ms ago: executing program 4 (id=1144): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0x4f, 0x3, 0xbb, 0x80, 0x2, 0xfe, 0x8, 0x8, 0x6, 0x1}, {0x6, 0xa6f2, 0x6, 0x48, 0x5, 0xfb, 0x64, 0x87, 0xb, 0x9, 0xb, 0x6, 0xffffffffffffffff}, {0x1fd, 0x7, 0xd, 0x21, 0x25, 0x3, 0x1, 0x6, 0x83, 0x15, 0x1, 0x1, 0x80000000004}], 0x5}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff0200000000000000"], 0x0) ptrace(0x10, r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 264.194µs ago: executing program 4 (id=1145): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x6]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 0s ago: executing program 4 (id=1146): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x600, 0x1, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000440)=[r3, r3, r4], &(0x7f0000000480), 0x0, 0x2}) kernel console output (not intermixed with test programs): 74.571260][ T7310] loop5: AHDI p1 p3 p4 [ 74.571270][ T7310] loop5: partition table partially beyond EOD, truncated [ 74.571381][ T7310] loop5: p1 size 100663296 extends beyond EOD, truncated [ 74.574833][ T7310] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 74.601888][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 74.605742][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 74.680826][ T7320] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3f00 [ 74.813290][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.983169][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 74.983760][ T42] usb 9-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 74.985799][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.985823][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.985840][ T42] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 74.985871][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.988372][ T42] usb 9-1: config 0 descriptor?? [ 75.025488][ T927] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.173367][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.193856][ T927] usb 7-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 75.194672][ T927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.194730][ T927] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.197517][ T927] usb 7-1: string descriptor 0 read error: -22 [ 75.197573][ T927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.205474][ T927] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null)) [ 75.205713][ T927] etas_es58x 7-1:1.0: could not retrieve the product info string [ 75.335163][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 75.344167][ T24] usb 8-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 75.356206][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.356223][ T24] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.356282][ T24] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.356295][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 75.356311][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.358277][ T24] usb 8-1: config 0 descriptor?? [ 75.419858][ T5503] etas_es58x 7-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 75.420319][ C2] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 75.422945][ T42] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0005/input/input9 [ 75.429127][ C2] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 75.430285][ C2] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 75.430536][ C2] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 75.430758][ C2] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 75.430844][ T5503] etas_es58x 7-1:1.0 can1: es58x_open: Could not open the network device: -EMSGSIZE [ 75.445685][ T2333] usb 7-1: USB disconnect, device number 5 [ 75.454289][ T2333] etas_es58x 7-1:1.0: Disconnecting (null) (null) [ 75.455269][ T7344] raw_sendmsg: syz.0.562 forgot to set AF_INET. Fix it! [ 75.506236][ T42] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0005/input/input10 [ 75.595504][ T42] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 75.630894][ T7352] e1000e 0000:00:02.0 eth1: removed PHC [ 75.729979][ T5875] usb 9-1: USB disconnect, device number 2 [ 75.746478][ T7352] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 75.783867][ T24] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:046D:C623.0006/input/input11 [ 75.906228][ T24] logitech 0003:046D:C623.0006: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 75.985553][ T24] usb 8-1: USB disconnect, device number 6 [ 76.102656][ T7355] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 76.111410][ T7355] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 76.111491][ T7355] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 76.111564][ T7355] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 76.111633][ T7355] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 76.111821][ T7355] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 76.112157][ T7355] pci 0000:00:02.0: enabling Extended Tags [ 76.133254][ T5151] Bluetooth: hci0: command tx timeout [ 76.137214][ T7355] pci 0000:00:02.0: Adding to iommu group 2 [ 76.153971][ T7355] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 76.154004][ T7355] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 76.155770][ T7355] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 76.157842][ T7355] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 76.158958][ T7355] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 76.219738][ T7355] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 76.302521][ T7355] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 76.315364][ T41] cfg80211: failed to load regulatory.db [ 76.403944][ T7355] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 76.403963][ T7355] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 76.404169][ T7355] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 76.425457][ T7393] batadv_slave_1: entered promiscuous mode [ 76.426771][ T7392] batadv_slave_1: left promiscuous mode [ 76.491916][ T7400] FAULT_INJECTION: forcing a failure. [ 76.491916][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 76.491946][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.491972][ T7400] Tainted: [L]=SOFTLOCKUP [ 76.491979][ T7400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.491991][ T7400] Call Trace: [ 76.491998][ T7400] [ 76.492006][ T7400] dump_stack_lvl+0x100/0x190 [ 76.492041][ T7400] should_fail_ex.cold+0x5/0xa [ 76.492070][ T7400] should_failslab+0xc2/0x120 [ 76.492093][ T7400] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 76.492123][ T7400] ? __d_alloc+0x34/0xad0 [ 76.492150][ T7400] __d_alloc+0x34/0xad0 [ 76.492176][ T7400] __d_alloc_parallel+0x105/0x15e0 [ 76.492209][ T7400] ? lock_acquire+0x1d1/0x380 [ 76.492230][ T7400] ? __d_lookup+0x73/0x4a0 [ 76.492247][ T7400] ? find_held_lock+0x2b/0x80 [ 76.492273][ T7400] ? __d_lookup+0x25c/0x4a0 [ 76.492290][ T7400] ? __pfx___d_alloc_parallel+0x10/0x10 [ 76.492323][ T7400] ? __d_lookup+0x266/0x4a0 [ 76.492344][ T7400] ? d_lookup+0xe7/0x190 [ 76.492365][ T7400] proc_fill_cache+0x225/0x3a0 [ 76.492423][ T7400] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 76.492449][ T7400] ? __pfx_proc_fill_cache+0x10/0x10 [ 76.492478][ T7400] ? _raw_spin_unlock+0x28/0x50 [ 76.492509][ T7400] proc_readfd_common+0x1ef/0x5f0 [ 76.492532][ T7400] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 76.492555][ T7400] ? __pfx_proc_readfd_common+0x10/0x10 [ 76.492578][ T7400] ? down_read_killable+0x358/0x520 [ 76.492607][ T7400] ? __pfx_down_read_killable+0x10/0x10 [ 76.492640][ T7400] ? xfs_buf_inode_iodone+0xe0/0xe40 [ 76.492684][ T7400] iterate_dir+0x2ba/0xc10 [ 76.492708][ T7400] __ia32_sys_getdents64+0x13a/0x2c0 [ 76.492731][ T7400] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 76.492753][ T7400] ? __pfx_filldir64+0x10/0x10 [ 76.492782][ T7400] __do_fast_syscall_32+0x14b/0x8c0 [ 76.492807][ T7400] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.492833][ T7400] do_fast_syscall_32+0x32/0x70 [ 76.492860][ T7400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.492884][ T7400] RIP: 0023:0xf745efbc [ 76.492899][ T7400] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.492917][ T7400] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 76.492936][ T7400] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 76.492971][ T7400] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.492981][ T7400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.492993][ T7400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.493004][ T7400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.493027][ T7400] [ 76.561059][ T7406] syzkaller1: entered promiscuous mode [ 76.561072][ T7406] syzkaller1: entered allmulticast mode [ 76.733360][ T50] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 76.894558][ T50] usb 7-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 76.895195][ T50] usb 7-1: config 0 has no interfaces? [ 76.898253][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 76.898273][ T50] usb 7-1: Product: syz [ 76.898284][ T50] usb 7-1: Manufacturer: syz [ 76.898296][ T50] usb 7-1: SerialNumber: syz [ 76.907335][ T50] usb 7-1: config 0 descriptor?? [ 77.031679][ T7449] FAULT_INJECTION: forcing a failure. [ 77.031679][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 77.031706][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.4.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.031725][ T7449] Tainted: [L]=SOFTLOCKUP [ 77.031730][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.031738][ T7449] Call Trace: [ 77.031743][ T7449] [ 77.031749][ T7449] dump_stack_lvl+0x100/0x190 [ 77.031775][ T7449] should_fail_ex.cold+0x5/0xa [ 77.031798][ T7449] should_failslab+0xc2/0x120 [ 77.031816][ T7449] __kvmalloc_node_noprof+0x113/0x9b0 [ 77.031833][ T7449] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 77.031854][ T7449] ? io_uring_setup.cold+0x1f4/0x1c0e [ 77.031872][ T7449] io_uring_setup.cold+0x1f4/0x1c0e [ 77.031887][ T7449] ? rw_verify_area+0xce/0x6d0 [ 77.031908][ T7449] ? __pfx_io_uring_setup+0x10/0x10 [ 77.031932][ T7449] ? __lock_acquire+0x5c0/0x1f40 [ 77.031960][ T7449] ? find_held_lock+0x2b/0x80 [ 77.031978][ T7449] ? __might_fault+0xc5/0x140 [ 77.031993][ T7449] ? __might_fault+0xc5/0x140 [ 77.032013][ T7449] __ia32_sys_io_uring_setup+0xc2/0x170 [ 77.032034][ T7449] __do_fast_syscall_32+0x14b/0x8c0 [ 77.032055][ T7449] do_fast_syscall_32+0x32/0x70 [ 77.032074][ T7449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.032091][ T7449] RIP: 0023:0xf747efbc [ 77.032103][ T7449] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.032115][ T7449] RSP: 002b:00000000f54964bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 77.032131][ T7449] RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 0000000080000340 [ 77.032141][ T7449] RDX: 00000000f7201997 RSI: 000000000qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 0000001 RDI: 00000000f549653c [ 77.032147][ T7449] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.032153][ T7449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.032159][ T7449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.032172][ T7449] [ 77.145021][ T50] usb 7-1: USB disconnect, device number 6 [ 77.200885][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.592'. [ 77.202044][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 77.202063][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. syzkaller syzkaller login: [ 77.236378][ T7465] FAULT_INJECTION: forcing a failure. [ 77.236378][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 77.236398][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.4.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.236413][ T7465] Tainted: [L]=SOFTLOCKUP [ 77.236417][ T7465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.236436][ T7465] Call Trace: [ 77.236440][ T7465] [ 77.236445][ T7465] dump_stack_lvl+0x100/0x190 [ 77.236466][ T7465] should_fail_ex.cold+0x5/0xa [ 77.236483][ T7465] should_failslab+0xc2/0x120 [ 77.236497][ T7465] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.236518][ T7465] ? lock_acquire+0x1d1/0x380 [ 77.236534][ T7465] ? sk_prot_alloc+0x60/0x2a0 [ 77.236556][ T7465] sk_prot_alloc+0x60/0x2a0 [ 77.236579][ T7465] sk_alloc+0x36/0xe80 [ 77.236604][ T7465] unix_create1+0xa6/0x700 [ 77.236629][ T7465] unix_stream_connect+0x524/0x1b60 [ 77.236661][ T7465] ? __pfx_unix_stream_connect+0x10/0x10 [ 77.236692][ T7465] ? apparmor_socket_connect+0x116/0x1f0 [ 77.236713][ T7465] __sys_connect_file+0x146/0x1a0 [ 77.236729][ T7465] __sys_connect+0x141/0x170 [ 77.236742][ T7465] ? __pfx___sys_connect+0x10/0x10 [ 77.236761][ T7465] ? __might_fault+0xc5/0x140 [ 77.236775][ T7465] ? __might_fault+0xc5/0x140 [ 77.236793][ T7465] __ia32_sys_connect+0x71/0xb0 [ 77.236807][ T7465] __do_fast_syscall_32+0x14b/0x8c0 [ 77.236823][ T7465] do_fast_syscall_32+0x32/0x70 [ 77.236837][ T7465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.236851][ T7465] RIP: 0023:0xf747efbc [ 77.236860][ T7465] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.236870][ T7465] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 77.236881][ T7465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 77.236888][ T7465] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 77.236894][ T7465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.236899][ T7465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.236905][ T7465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.236919][ T7465] [ 77.470581][ T5503] 8021q: adding VLAN 0 to HW filter on device eth1 [ 77.816922][ T7498] FAULT_INJECTION: forcing a failure. [ 77.816922][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 77.816949][ T7498] CPU: 2 UID: 0 PID: 7498 Comm: syz.0.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.816973][ T7498] Tainted: [L]=SOFTLOCKUP [ 77.816980][ T7498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.816991][ T7498] Call Trace: [ 77.816997][ T7498] [ 77.817003][ T7498] dump_stack_lvl+0x100/0x190 [ 77.817034][ T7498] should_fail_ex.cold+0x5/0xa [ 77.817060][ T7498] should_failslab+0xc2/0x120 [ 77.817081][ T7498] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.817108][ T7498] ? cred_alloc_blank+0x1c/0xa0 [ 77.817139][ T7498] cred_alloc_blank+0x1c/0xa0 [ 77.817164][ T7498] keyctl_session_to_parent+0x55/0xae0 [ 77.817184][ T7498] ? __might_fault+0xc5/0x140 [ 77.817207][ T7498] __ia32_compat_sys_keyctl+0x34c/0x550 [ 77.817235][ T7498] __do_fast_syscall_32+0x14b/0x8c0 [ 77.817262][ T7498] do_fast_syscall_32+0x32/0x70 [ 77.817284][ T7498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.817304][ T7498] RIP: 0023:0xf745efbc [ 77.817317][ T7498] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.817331][ T7498] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 77.817347][ T7498] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000000000000 [ 77.817356][ T7498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.817367][ T7498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.817376][ T7498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.817385][ T7498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.817408][ T7498] [ 78.188180][ T24] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 78.214585][ T5151] Bluetooth: hci0: command tx timeout [ 79.654327][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 80.293222][ T5151] Bluetooth: hci0: command tx timeout [ 95.531830][ T7594] FAULT_INJECTION: forcing a failure. [ 95.531830][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 95.531860][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.0.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.531886][ T7594] Tainted: [L]=SOFTLOCKUP [ 95.531894][ T7594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.531906][ T7594] Call Trace: [ 95.531913][ T7594] [ 95.531921][ T7594] dump_stack_lvl+0x100/0x190 [ 95.531952][ T7594] should_fail_ex.cold+0x5/0xa [ 95.531981][ T7594] should_failslab+0xc2/0x120 [ 95.532004][ T7594] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 95.532034][ T7594] ? find_held_lock+0x2b/0x80 [ 95.532060][ T7594] ? alloc_io_context+0x21/0x2f0 [ 95.532089][ T7594] alloc_io_context+0x21/0x2f0 [ 95.532111][ T7594] set_task_ioprio+0x499/0x670 [ 95.532137][ T7594] __do_sys_ioprio_set+0x597/0xb30 [ 95.532155][ T7594] ? __do_sys_ioprio_set+0x419/0xb30 [ 95.532181][ T7594] __do_fast_syscall_32+0x14b/0x8c0 [ 95.532211][ T7594] do_fast_syscall_32+0x32/0x70 [ 95.532236][ T7594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.532259][ T7594] RIP: 0023:0xf745efbc [ 95.532274][ T7594] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.532290][ T7594] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000121 [ 95.532310][ T7594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 95.532321][ T7594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.532331][ T7594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.532341][ T7594] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.532352][ T7594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.532378][ T7594] [ 95.655710][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.656356][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.163682][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 96.313943][ T50] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.317121][ T50] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 96.317162][ T50] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 96.317178][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.319254][ T50] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.319269][ T50] usb 8-1: Product: syz [ 96.319280][ T50] usb 8-1: Manufacturer: syz [ 96.319290][ T50] usb 8-1: SerialNumber: syz [ 96.320639][ T50] usb 8-1: config 0 descriptor?? [ 96.322620][ T50] hub 8-1:0.0: bad descriptor, ignoring hub [ 96.322638][ T50] hub 8-1:0.0: probe with driver hub failed with error -5 [ 96.340568][ T50] usb 8-1: selecting invalid altsetting 0 [ 96.386377][ T1043] libceph: connect (1)[c::]:6789 error -101 [ 96.386603][ T1043] libceph: mon0 (1)[c::]:6789 connect error [ 96.424565][ T7628] ceph: No mds server is up or the cluster is laggy [ 96.597282][ T1291] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.598787][ T7640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.600385][ T7640] block device autoloading is deprecated and will be removed. [ 96.657542][ T7640] md: invalid raid superblock magic on ram1 [ 96.657561][ T7640] md: ram1 does not have a valid v0.0 superblock, not importing! [ 96.657690][ T7640] md: md_import_device returned -22 [ 96.743162][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 96.893985][ T24] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 96.895371][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.895411][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.897573][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.897592][ T24] usb 9-1: Product: syz [ 96.897604][ T24] usb 9-1: Manufacturer: syz [ 96.897616][ T24] usb 9-1: SerialNumber: syz [ 97.246270][ T34] usb 8-1: USB disconnect, device number 7 [ 97.414463][ T34] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 97.563894][ T34] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.564405][ T34] usb 8-1: config 0 has no interfaces? [ 97.564841][ T34] usb 8-1: config 0 has no interfaces? [ 97.565261][ T34] usb 8-1: config 0 has no interfaces? [ 97.567693][ T34] usb 8-1: string descriptor 0 read error: -22 [ 97.567749][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.568923][ T34] usb 8-1: config 0 descriptor?? [ 97.777677][ T34] usb 8-1: USB disconnect, device number 8 [ 98.321758][ T7645] svc: failed to register nfsdv3 RPC service (errno 97). [ 98.321774][ T7645] svc: failed to register nfsaclv3 RPC service (errno 97). [ 98.613215][ T68] Bluetooth: hci4: command 0x1003 tx timeout [ 98.613306][ T5151] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.184206][ T7651] usb 1-1: USB disconnect, device number 2 [ 99.341616][ T7665] loop5: detected capacity change from 0 to 7 [ 99.342969][ T7665] Dev loop5: unable to read RDB block 7 [ 99.343000][ T7665] loop5: unable to read partition table [ 99.343553][ T7665] loop5: partition table beyond EOD, truncated [ 99.343589][ T7665] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.426641][ T5885] usb 9-1: USB disconnect, device number 3 [ 99.913305][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.064412][ T5885] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.065419][ T5885] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 100.065475][ T5885] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.065494][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.069764][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.069788][ T5885] usb 5-1: Product: syz [ 100.069802][ T5885] usb 5-1: Manufacturer: syz [ 100.069827][ T5885] usb 5-1: SerialNumber: syz [ 100.071973][ T5885] usb 5-1: config 0 descriptor?? [ 100.076145][ T5885] hub 5-1:0.0: bad descriptor, ignoring hub [ 100.076167][ T5885] hub 5-1:0.0: probe with driver hub failed with error -5 [ 100.081236][ T5885] usb 5-1: selecting invalid altsetting 0 [ 100.253070][ T7705] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd13 [ 100.565634][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 100.993746][ T7683] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 101.154993][ T7683] usb 5-1: device firmware changed [ 101.156595][ T5875] usb 5-1: USB disconnect, device number 5 [ 101.333237][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.404016][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 101.493875][ T5875] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 101.496647][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.496661][ T5875] usb 5-1: Product: syz [ 101.496669][ T5875] usb 5-1: Manufacturer: syz [ 101.496676][ T5875] usb 5-1: SerialNumber: syz [ 101.517456][ T1043] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.734745][ T5885] usb 5-1: USB disconnect, device number 6 [ 101.883228][ T41] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 102.044084][ T41] usb 7-1: New USB device found: idVendor=0919, idProduct=3333, bcdDevice=0.40 [ 102.044689][ T41] usb 7-1: config 0 has no interfaces? [ 102.044716][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.046509][ T41] usb 7-1: config 0 descriptor?? [ 102.254760][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.255186][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.263433][ T5875] usb 7-1: USB disconnect, device number 7 [ 102.423795][ T7752] input: syz0 as /devices/virtual/input/input12 [ 102.447440][ T7633] udevd[7633]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 102.543786][ T1043] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 102.543871][ T1043] ath9k_htc: Failed to initialize the device [ 102.546713][ T5885] usb 5-1: ath9k_htc: USB layer deinitialized [ 102.703300][ T5875] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 102.859056][ T5875] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 102.862034][ T5875] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.862058][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.873230][ T5875] hub 7-1:1.0: bad descriptor, ignoring hub [ 102.873244][ T5875] hub 7-1:1.0: probe with driver hub failed with error -5 [ 102.878230][ T5875] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 102.901041][ T7790] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 102.946718][ T7794] Bluetooth: MGMT ver 1.23 [ 103.175829][ T7807] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 103.175853][ T7807] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 103.175908][ T7807] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 103.378726][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 103.420014][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 103.641295][ T7840] overlayfs: failed to decode file handle (len=1, type=251, flags=0, err=-22) [ 104.238358][ T42] usb 7-1: USB disconnect, device number 8 [ 104.240734][ T42] idmouse 7-1:1.0: disconnected [ 104.380767][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.380821][ T7859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.380984][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.381031][ T7859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.399183][ T2333] libceph: connect (1)[c::]:6789 error -101 [ 104.399276][ T2333] libceph: mon0 (1)[c::]:6789 connect error [ 104.425757][ T7858] ceph: No mds server is up or the cluster is laggy [ 104.775243][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 104.821230][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 104.821376][ T7874] block nbd0: Unsupported socket: should be TCP or UNIX. [ 105.021009][ T7888] file system registered [ 105.021731][ T7888] unloading [ 105.153217][ T50] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 105.317542][ T50] usb 8-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 105.318584][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.318604][ T50] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.328904][ T50] usb 8-1: string descriptor 0 read error: -22 [ 105.328996][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.336215][ T50] etas_es58x 8-1:1.0: Starting (null) (null) (Serial Number (null)) [ 105.336335][ T50] etas_es58x 8-1:1.0: could not retrieve the product info string [ 105.500017][ T7908] Need at least one configuration in g1. [ 105.500307][ T7908] udc dummy_udc.0: failed to start g1: -22 [ 105.500324][ T7908] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 105.500993][ T7908] UDC core: g1: couldn't find an available UDC or it's busy [ 105.554046][ T50] usb 8-1: USB disconnect, device number 9 [ 105.555286][ T50] etas_es58x 8-1:1.0: Disconnecting (null) (null) [ 105.672862][ T7923] input: syz1 as /devices/virtual/input/input13 [ 106.592263][ T7970] Need at least one configuration in g1. [ 106.592357][ T7970] udc dummy_udc.0: failed to start g1: -22 [ 106.592376][ T7970] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 106.594312][ T7970] UDC core: g1: couldn't find an available UDC or it's busy [ 106.953243][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.103598][ T41] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 107.104489][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.104503][ T41] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.107613][ T41] usb 5-1: string descriptor 0 read error: -22 [ 107.107667][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.115852][ T41] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 107.115929][ T41] etas_es58x 5-1:1.0: could not retrieve the product info string [ 107.311030][ T8005] UDC core: g1: couldn't find an available UDC or it's busy [ 107.333791][ T5503] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 107.334022][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 107.334213][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 107.334408][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 107.334625][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 107.334812][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 107.334851][ T5503] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 107.335727][ T5885] usb 5-1: USB disconnect, device number 7 [ 107.336750][ T5885] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 108.019630][ T8052] FAULT_INJECTION: forcing a failure. [ 108.019630][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 108.019650][ T8052] CPU: 3 UID: 0 PID: 8052 Comm: syz.0.773 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.019665][ T8052] Tainted: [L]=SOFTLOCKUP [ 108.019669][ T8052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.019674][ T8052] Call Trace: [ 108.019679][ T8052] [ 108.019683][ T8052] dump_stack_lvl+0x100/0x190 [ 108.019703][ T8052] should_fail_ex.cold+0x5/0xa [ 108.019720][ T8052] should_failslab+0xc2/0x120 [ 108.019734][ T8052] __kmalloc_cache_noprof+0x91/0x6d0 [ 108.019749][ T8052] ? __lock_acquire+0x5c0/0x1f40 [ 108.019760][ T8052] ? tipc_nametbl_insert_publ+0x5a/0x1570 [ 108.019781][ T8052] tipc_nametbl_insert_publ+0x5a/0x1570 [ 108.019798][ T8052] ? do_raw_spin_lock+0x128/0x260 [ 108.019811][ T8052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.019827][ T8052] tipc_nametbl_publish+0x18b/0x300 [ 108.019845][ T8052] tipc_sk_publish+0x1d8/0x430 [ 108.019861][ T8052] ? __pfx_tipc_sk_publish+0x10/0x10 [ 108.019882][ T8052] ? __local_bh_enable_ip+0xa5/0x120 [ 108.019896][ T8052] tipc_sk_bind+0x16f/0x380 [ 108.019907][ T8052] tipc_bind+0x18d/0x280 [ 108.019917][ T8052] __sys_bind+0x1a9/0x260 [ 108.019933][ T8052] ? __pfx___sys_bind+0x10/0x10 [ 108.019950][ T8052] ? __might_fault+0xc5/0x140 [ 108.019962][ T8052] ? __might_fault+0xc5/0x140 [ 108.019977][ T8052] __ia32_sys_bind+0x71/0xb0 [ 108.019989][ T8052] __do_fast_syscall_32+0x14b/0x8c0 [ 108.020006][ T8052] do_fast_syscall_32+0x32/0x70 [ 108.020026][ T8052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.020047][ T8052] RIP: 0023:0xf745efbc [ 108.020069][ T8052] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.020086][ T8052] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 108.020106][ T8052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 108.020116][ T8052] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.020127][ T8052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.020157][ T8052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.020167][ T8052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.020191][ T8052] [ 108.238956][ T194] IPVS: starting estimator thread 0... [ 108.271839][ T8071] FAULT_INJECTION: forcing a failure. [ 108.271839][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 108.271859][ T8071] CPU: 0 UID: 0 PID: 8071 Comm: syz.0.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.271876][ T8071] Tainted: [L]=SOFTLOCKUP [ 108.271880][ T8071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.271887][ T8071] Call Trace: [ 108.271891][ T8071] [ 108.271895][ T8071] dump_stack_lvl+0x100/0x190 [ 108.271918][ T8071] should_fail_ex.cold+0x5/0xa [ 108.271934][ T8071] should_failslab+0xc2/0x120 [ 108.271949][ T8071] kmem_cache_alloc_noprof+0x92/0x6a0 [ 108.271967][ T8071] ? __kernfs_new_node+0xd2/0xa10 [ 108.271987][ T8071] __kernfs_new_node+0xd2/0xa10 [ 108.272004][ T8071] ? __pfx___kernfs_new_node+0x10/0x10 [ 108.272021][ T8071] ? lock_acquire+0x1d1/0x380 [ 108.272032][ T8071] ? kernfs_root+0x23/0x2a0 [ 108.272046][ T8071] ? find_held_lock+0x2b/0x80 [ 108.272065][ T8071] ? kernfs_root+0xee/0x2a0 [ 108.272079][ T8071] ? kernfs_root+0xee/0x2a0 [ 108.272096][ T8071] kernfs_new_node+0x194/0x200 [ 108.272113][ T8071] ? __pfx_kernfs_new_node+0x10/0x10 [ 108.272131][ T8071] ? kernfs_add_one+0x213/0xb40 [ 108.272145][ T8071] __kernfs_create_file+0x53/0x350 [ 108.272159][ T8071] sysfs_add_file_mode_ns+0x207/0x3c0 [ 108.272179][ T8071] internal_create_group+0x593/0xfb0 [ 108.272199][ T8071] ? __pfx_internal_create_group+0x10/0x10 [ 108.272217][ T8071] ? kernfs_create_link+0x1f1/0x280 [ 108.272233][ T8071] internal_create_groups+0x9d/0x150 [ 108.272250][ T8071] device_add+0xf60/0x1970 [ 108.272307][ T8071] ? __pfx_device_add+0x10/0x10 [ 108.272318][ T8071] ? lockdep_init_map_type+0x5c/0x250 [ 108.272331][ T8071] ? __init_waitqueue_head+0xca/0x150 [ 108.272352][ T8071] netdev_register_kobject+0x1df/0x410 [ 108.272369][ T8071] register_netdevice+0x1313/0x26b0 [ 108.272383][ T8071] ? __pfx_register_netdevice+0x10/0x10 [ 108.272395][ T8071] ? dev_addr_mod+0x14f/0x2c0 [ 108.272410][ T8071] ip6gre_newlink_common.isra.0+0x153/0x350 [ 108.272426][ T8071] ? __pfx_ip6gre_newlink_common.isra.0+0x10/0x10 [ 108.272439][ T8071] ? net_generic+0xf4/0x2a0 [ 108.272450][ T8071] ? ip6gre_tunnel_find+0x35c/0x540 [ 108.272465][ T8071] ip6erspan_newlink+0x196/0x410 [ 108.272479][ T8071] ? __pfx_ip6erspan_newlink+0x10/0x10 [ 108.272491][ T8071] rtnl_newlink+0x1697/0x2620 [ 108.272507][ T8071] ? __pfx_rtnl_newlink+0x10/0x10 [ 108.272518][ T8071] ? rcu_is_watching+0x13/0xc0 [ 108.272534][ T8071] ? kasan_quarantine_put+0x104/0x240 [ 108.272547][ T8071] ? kfree_skbmem+0x19a/0x210 [ 108.272566][ T8071] ? __dev_queue_xmit+0xa2e/0x48d0 [ 108.272582][ T8071] ? lock_acquire+0x1d1/0x380 [ 108.272592][ T8071] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 108.272602][ T8071] ? find_held_lock+0x2b/0x80 [ 108.272616][ T8071] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 108.272626][ T8071] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 108.272637][ T8071] ? __pfx_rtnl_newlink+0x10/0x10 [ 108.272648][ T8071] rtnetlink_rcv_msg+0x95e/0xe90 [ 108.272660][ T8071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.272678][ T8071] netlink_rcv_skb+0x159/0x420 [ 108.272694][ T8071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.272706][ T8071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.272727][ T8071] ? netlink_deliver_tap+0x1ae/0xb50 [ 108.272744][ T8071] netlink_unicast+0x668/0x950 [ 108.272761][ T8071] ? __pfx_netlink_unicast+0x10/0x10 [ 108.272781][ T8071] netlink_sendmsg+0x9ac/0x10c0 [ 108.272798][ T8071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.272817][ T8071] ? apparmor_socket_sendmsg+0x165/0x280 [ 108.272833][ T8071] ? ____sys_sendmsg+0xa99/0xc30 [ 108.272844][ T8071] ____sys_sendmsg+0xa99/0xc30 [ 108.272854][ T8071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.272871][ T8071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.272889][ T8071] ___sys_sendmsg+0x190/0x1e0 [ 108.272902][ T8071] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.272914][ T8071] ? futex_wait+0x11e/0x370 [ 108.272931][ T8071] ? find_held_lock+0x2b/0x80 [ 108.272954][ T8071] __sys_sendmsg+0x160/0x210 [ 108.272969][ T8071] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.272992][ T8071] __do_fast_syscall_32+0x14b/0x8c0 [ 108.273009][ T8071] do_fast_syscall_32+0x32/0x70 [ 108.273023][ T8071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.273037][ T8071] RIP: 0023:0xf745efbc [ 108.273046][ T8071] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.273056][ T8071] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 108.273073][ T8071] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 108.273081][ T8071] RDX: 0000000000009080 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.273087][ T8071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.273094][ T8071] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.273101][ T8071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.273116][ T8071] [ 108.323462][ T8069] IPVS: using max 43 ests per chain, 103200 per kthread [ 108.358699][ T8073] FAULT_INJECTION: forcing a failure. [ 108.358699][ T8073] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.358718][ T8073] CPU: 2 UID: 0 PID: 8073 Comm: syz.0.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.358732][ T8073] Tainted: [L]=SOFTLOCKUP [ 108.358735][ T8073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.358741][ T8073] Call Trace: [ 108.358744][ T8073] [ 108.358748][ T8073] dump_stack_lvl+0x100/0x190 [ 108.358769][ T8073] should_fail_ex.cold+0x5/0xa [ 108.358786][ T8073] get_futex_key+0x1c9/0x13e0 [ 108.358803][ T8073] ? __pfx_get_futex_key+0x10/0x10 [ 108.358817][ T8073] ? rcu_is_watching+0x13/0xc0 [ 108.358834][ T8073] futex_wake+0xf4/0x5e0 [ 108.358847][ T8073] ? __pfx_futex_wake+0x10/0x10 [ 108.358857][ T8073] ? do_fcntl+0x80c/0x16c0 [ 108.358872][ T8073] ? __pfx_do_fcntl+0x10/0x10 [ 108.358886][ T8073] ? __fget_files+0x215/0x3d0 [ 108.358902][ T8073] do_futex+0x2b2/0x440 [ 108.358918][ T8073] ? __pfx_do_futex+0x10/0x10 [ 108.358932][ T8073] ? fput+0x7c/0x100 [ 108.358944][ T8073] ? do_compat_fcntl64+0x232/0x720 [ 108.358960][ T8073] __ia32_sys_futex_time32+0x2f4/0x470 [ 108.358978][ T8073] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 108.358994][ T8073] ? __might_fault+0xc5/0x140 [ 108.359011][ T8073] __do_fast_syscall_32+0x14b/0x8c0 [ 108.359029][ T8073] do_fast_syscall_32+0x32/0x70 [ 108.359042][ T8073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.359056][ T8073] RIP: 0023:0xf745efbc [ 108.359064][ T8073] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.359081][ T8073] RSP: 002b:00000000f54765cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 108.359092][ T8073] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 108.359099][ T8073] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 108.359106][ T8073] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 108.359113][ T8073] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.359120][ T8073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.359134][ T8073] [ 108.373853][ T8075] FAULT_INJECTION: forcing a failure. [ 108.373853][ T8075] name failslab, interval 1, probability 0, space 0, times 0 [ 108.373870][ T8075] CPU: 2 UID: 0 PID: 8075 Comm: syz.4.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.373885][ T8075] Tainted: [L]=SOFTLOCKUP [ 108.373890][ T8075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.373896][ T8075] Call Trace: [ 108.373900][ T8075] [ 108.373905][ T8075] dump_stack_lvl+0x100/0x190 [ 108.373926][ T8075] should_fail_ex.cold+0x5/0xa [ 108.373942][ T8075] should_failslab+0xc2/0x120 [ 108.373955][ T8075] __kmalloc_noprof+0xfc/0x840 [ 108.373966][ T8075] ? constrain_params_by_rules+0x175/0xd20 [ 108.373999][ T8075] constrain_params_by_rules+0x175/0xd20 [ 108.374015][ T8075] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 108.374029][ T8075] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 108.374044][ T8075] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 108.374059][ T8075] ? kasan_save_stack+0x30/0x50 [ 108.374070][ T8075] ? kasan_save_track+0x14/0x30 [ 108.374088][ T8075] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 108.374102][ T8075] ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 108.374117][ T8075] ? snd_pcm_oss_poll+0x404/0xae0 [ 108.374129][ T8075] ? do_sys_poll+0x6e5/0xf00 [ 108.374146][ T8075] ? snd_interval_refine+0x2d0/0x580 [ 108.374159][ T8075] snd_pcm_hw_refine+0x82a/0xb40 [ 108.374175][ T8075] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 108.374195][ T8075] ? kasan_save_track+0x14/0x30 [ 108.374206][ T8075] ? __kasan_kmalloc+0xaa/0xb0 [ 108.374219][ T8075] snd_pcm_hw_param_first+0x2b0/0x680 [ 108.374237][ T8075] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 108.374252][ T8075] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.374266][ T8075] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 108.374279][ T8075] ? snd_pcm_oss_change_params_locked+0xa00/0x39f0 [ 108.374292][ T8075] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 108.374306][ T8075] ? kfree+0x22b/0x6d0 [ 108.374321][ T8075] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 108.374336][ T8075] ? trace_contention_end+0x77/0x160 [ 108.374353][ T8075] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 108.374367][ T8075] ? __pfx___mutex_lock+0x10/0x10 [ 108.374380][ T8075] ? __mutex_lock+0x267/0x1c10 [ 108.374393][ T8075] ? find_held_lock+0x2b/0x80 [ 108.374411][ T8075] ? __mutex_unlock_slowpath+0x35d/0x930 [ 108.374427][ T8075] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 108.374442][ T8075] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 108.374489][ T8075] snd_pcm_oss_poll+0x404/0xae0 [ 108.374504][ T8075] ? __pfx___pollwait+0x10/0x10 [ 108.374516][ T8075] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 108.374530][ T8075] ? __fget_files+0x21f/0x3d0 [ 108.374546][ T8075] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 108.374560][ T8075] do_sys_poll+0x6e5/0xf00 [ 108.374571][ T8075] ? rcu_is_watching+0x13/0xc0 [ 108.374592][ T8075] ? __pfx_do_sys_poll+0x10/0x10 [ 108.374618][ T8075] ? __pfx___pollwait+0x10/0x10 [ 108.374630][ T8075] ? __pfx_pollwake+0x10/0x10 [ 108.374663][ T8075] ? set_compat_user_sigmask+0x1d9/0x260 [ 108.374679][ T8075] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 108.374695][ T8075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.374711][ T8075] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 108.374726][ T8075] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 108.374740][ T8075] ? __might_fault+0xc5/0x140 [ 108.374756][ T8075] __do_fast_syscall_32+0x14b/0x8c0 [ 108.374772][ T8075] do_fast_syscall_32+0x32/0x70 [ 108.374787][ T8075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.374800][ T8075] RIP: 0023:0xf747efbc [ 108.374809][ T8075] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.374819][ T8075] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 108.374829][ T8075] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000002 [ 108.374836][ T8075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.374842][ T8075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.374847][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.374853][ T8075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.374866][ T8075] [ 108.491087][ T8079] bridge0: port 1(team0) entered disabled state [ 108.754648][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.754686][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.754714][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.754739][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.224919][ T8140] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.227370][ T8140] bond1: (slave lo): Enslaving as an active interface with an up link [ 109.227584][ T8140] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 109.243595][ T8143] netlink: 472 bytes leftover after parsing attributes in process `syz.4.810'. [ 110.512167][ T8222] FAULT_INJECTION: forcing a failure. [ 110.512167][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 110.512194][ T8222] CPU: 0 UID: 0 PID: 8222 Comm: syz.4.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.512217][ T8222] Tainted: [L]=SOFTLOCKUP [ 110.512224][ T8222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.512234][ T8222] Call Trace: [ 110.512240][ T8222] [ 110.512248][ T8222] dump_stack_lvl+0x100/0x190 [ 110.512278][ T8222] should_fail_ex.cold+0x5/0xa [ 110.512302][ T8222] should_failslab+0xc2/0x120 [ 110.512323][ T8222] __kmalloc_cache_noprof+0x91/0x6d0 [ 110.512347][ T8222] ? alloc_ucounts+0x13d/0x5c0 [ 110.512376][ T8222] alloc_ucounts+0x13d/0x5c0 [ 110.512398][ T8222] ? __pfx_alloc_ucounts+0x10/0x10 [ 110.512426][ T8222] set_cred_ucounts+0xcd/0x200 [ 110.512457][ T8222] __sys_setresuid+0x5fe/0x1310 [ 110.512539][ T8222] __do_fast_syscall_32+0x14b/0x8c0 [ 110.512568][ T8222] do_fast_syscall_32+0x32/0x70 [ 110.512607][ T8222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.512628][ T8222] RIP: 0023:0xf747efbc [ 110.512690][ T8222] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 110.512708][ T8222] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a4 [ 110.512725][ T8222] RAX: ffffffffffffffda RBX: 000000000000ee01 RCX: 000000000000ee01 [ 110.512737][ T8222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.512747][ T8222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.512758][ T8222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.512768][ T8222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.512791][ T8222] [ 110.928794][ T8248] bond1: option mode: unable to set because the bond device has slaves [ 110.931678][ T8248] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 111.503214][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 111.553252][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.674052][ T24] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 111.674977][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.675001][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.675025][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.675038][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.675057][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.676231][ T24] usb 8-1: config 0 descriptor?? [ 111.714160][ T29] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 111.715366][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.715406][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.724433][ T29] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 111.724653][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 111.724714][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 111.726362][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 111.726430][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 111.731299][ T29] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 111.732692][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 111.732768][ T29] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.737448][ T29] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 syzkaller syzkaller login: [ 112.045607][ T50] usb 5-1: USB disconnect, device number 8 [ 112.052728][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 112.057644][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 112.057947][ T50] keyspan 5-1:1.0: device disconnected [ 112.140025][ T24] hid_parser_main: 5 callbacks suppressed [ 112.140039][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140052][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140063][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140074][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140085][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140096][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140107][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140118][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.140129][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 112.144653][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.343146][ T42] usb 8-1: USB disconnect, device number 10 [ 112.758271][ T8322] Set syz1 is full, maxelem 6117 reached [ 112.842734][ T8329] FAULT_INJECTION: forcing a failure. [ 112.842734][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 112.842754][ T8329] CPU: 2 UID: 0 PID: 8329 Comm: syz.0.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.842770][ T8329] Tainted: [L]=SOFTLOCKUP [ 112.842774][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.842782][ T8329] Call Trace: [ 112.842785][ T8329] [ 112.842790][ T8329] dump_stack_lvl+0x100/0x190 [ 112.842818][ T8329] should_fail_ex.cold+0x5/0xa [ 112.842842][ T8329] should_failslab+0xc2/0x120 [ 112.842865][ T8329] __kvmalloc_node_noprof+0x113/0x9b0 [ 112.842886][ T8329] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 112.842922][ T8329] v4l2_ctrl_new+0x4a6/0x23a0 [ 112.842938][ T8329] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 112.842953][ T8329] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 112.842968][ T8329] v4l2_ctrl_new_custom+0x41b/0xa20 [ 112.842989][ T8329] ? __pfx_v4l2_ctrl_new_custom+0x10/0x10 [ 112.843005][ T8329] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 112.843020][ T8329] ? media_request_object_init+0x105/0x180 [ 112.843041][ T8329] vicodec_open+0xc36/0xf70 [ 112.843066][ T8329] ? kobject_get_unless_zero+0x101/0x200 [ 112.843098][ T8329] v4l2_open+0x1d2/0x490 [ 112.843110][ T8329] ? __pfx_v4l2_open+0x10/0x10 [ 112.843124][ T8329] chrdev_open+0x234/0x6a0 [ 112.843143][ T8329] ? __pfx_apparmor_file_open+0x10/0x10 [ 112.843171][ T8329] ? __pfx_chrdev_open+0x10/0x10 [ 112.843195][ T8329] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.843221][ T8329] do_dentry_open+0x674/0x1470 [ 112.843232][ T8329] ? __pfx_chrdev_open+0x10/0x10 [ 112.843247][ T8329] vfs_open_consume+0xcc/0x460 [ 112.843263][ T8329] path_openat+0x1547/0x23f0 [ 112.843278][ T8329] ? __pfx_path_openat+0x10/0x10 [ 112.843294][ T8329] do_file_open+0x20e/0x430 [ 112.843307][ T8329] ? __pfx_do_file_open+0x10/0x10 [ 112.843330][ T8329] ? _raw_spin_unlock+0x28/0x50 [ 112.843341][ T8329] ? alloc_fd+0x471/0x7a0 [ 112.843357][ T8329] do_sys_openat2+0x163/0x1d0 [ 112.843371][ T8329] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.843392][ T8329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.843420][ T8329] __ia32_compat_sys_openat+0x12d/0x210 [ 112.843446][ T8329] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.843479][ T8329] __do_fast_syscall_32+0x14b/0x8c0 [ 112.843504][ T8329] do_fast_syscall_32+0x32/0x70 [ 112.843545][ T8329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.843566][ T8329] RIP: 0023:0xf745efbc [ 112.843582][ T8329] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 112.843599][ T8329] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 112.843616][ T8329] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 112.843625][ T8329] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.843631][ T8329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.843637][ T8329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.843643][ T8329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.843657][ T8329] [ 113.089216][ T8343] overlayfs: workdir and upperdir must reside under the same mount [ 113.526806][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 113.526827][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 113.530773][ T8373] gretap0: entered promiscuous mode [ 113.532306][ T8373] gretap0: left promiscuous mode [ 113.578124][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 113.578147][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 113.581416][ T8374] gretap0: entered promiscuous mode [ 113.583520][ T8374] gretap0: left promiscuous mode [ 113.923251][ T42] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 114.084959][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 114.084980][ T42] usb 7-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 114.085978][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 114.087793][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.087804][ T42] usb 7-1: Product: syz [ 114.087811][ T42] usb 7-1: Manufacturer: syz [ 114.087818][ T42] usb 7-1: SerialNumber: syz [ 114.093499][ T42] oti6858 7-1:1.0: oti6858 converter detected [ 114.095730][ T42] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 114.132862][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806158e800: rx timeout, send abort [ 114.134866][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88806158e800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.189693][ T8382] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 114.268063][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 114.779268][ T8395] FAULT_INJECTION: forcing a failure. [ 114.779268][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 114.779296][ T8395] CPU: 3 UID: 0 PID: 8395 Comm: syz.4.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.779311][ T8395] Tainted: [L]=SOFTLOCKUP [ 114.779314][ T8395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.779320][ T8395] Call Trace: [ 114.779324][ T8395] [ 114.779329][ T8395] dump_stack_lvl+0x100/0x190 [ 114.779348][ T8395] should_fail_ex.cold+0x5/0xa [ 114.779364][ T8395] should_failslab+0xc2/0x120 [ 114.779379][ T8395] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.779393][ T8395] ? ramfs_init_fs_context+0x43/0x100 [ 114.779412][ T8395] ramfs_init_fs_context+0x43/0x100 [ 114.779426][ T8395] alloc_fs_context+0x607/0xf40 [ 114.779443][ T8395] __ia32_sys_fsopen+0x16d/0x2d0 [ 114.779459][ T8395] __do_fast_syscall_32+0x14b/0x8c0 [ 114.779477][ T8395] do_fast_syscall_32+0x32/0x70 [ 114.779492][ T8395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.779504][ T8395] RIP: 0023:0xf747efbc [ 114.779513][ T8395] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.779522][ T8395] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 114.779533][ T8395] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 114.779540][ T8395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.779546][ T8395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.779551][ T8395] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.779557][ T8395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.779571][ T8395] [ 115.313267][ T42] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 115.441675][ T8420] FAULT_INJECTION: forcing a failure. [ 115.441675][ T8420] name failslab, interval 1, probability 0, space 0, times 0 [ 115.441695][ T8420] CPU: 2 UID: 0 PID: 8420 Comm: syz.0.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.441709][ T8420] Tainted: [L]=SOFTLOCKUP [ 115.441713][ T8420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.441736][ T8420] Call Trace: [ 115.441740][ T8420] [ 115.441745][ T8420] dump_stack_lvl+0x100/0x190 [ 115.441767][ T8420] should_fail_ex.cold+0x5/0xa [ 115.441785][ T8420] should_failslab+0xc2/0x120 [ 115.441800][ T8420] __kvmalloc_node_noprof+0x113/0x9b0 [ 115.441812][ T8420] ? do_getxattr+0xbb/0x3c0 [ 115.441827][ T8420] do_getxattr+0xbb/0x3c0 [ 115.441841][ T8420] filename_getxattr+0xee/0x1a0 [ 115.441855][ T8420] ? __pfx_filename_getxattr+0x10/0x10 [ 115.441870][ T8420] ? do_getname+0x191/0x390 [ 115.441887][ T8420] path_getxattrat+0x20d/0x430 [ 115.441902][ T8420] ? __pfx_path_getxattrat+0x10/0x10 [ 115.441915][ T8420] ? find_held_lock+0x2b/0x80 [ 115.441929][ T8420] ? ksys_write+0x190/0x250 [ 115.441963][ T8420] ? __might_fault+0xc5/0x140 [ 115.441978][ T8420] ? __might_fault+0xc5/0x140 [ 115.441996][ T8420] __do_fast_syscall_32+0x14b/0x8c0 [ 115.442014][ T8420] do_fast_syscall_32+0x32/0x70 [ 115.442029][ T8420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.442043][ T8420] RIP: 0023:0xf745efbc [ 115.442053][ T8420] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 115.442063][ T8420] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e5 [ 115.442073][ T8420] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000800002c0 [ 115.442080][ T8420] RDX: 0000000080000280 RSI: 0000000000000011 RDI: 0000000000000000 [ 115.442086][ T8420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.442091][ T8420] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.442097][ T8420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.442110][ T8420] [ 115.470464][ T42] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 115.472149][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.472243][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 115.472263][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 115.472293][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.897547][ T42] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 115.897582][ T42] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 115.897588][ T42] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 115.916269][ T42] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 115.921786][ T42] usb 8-1: USB disconnect, device number 11 [ 116.394976][ T8448] CacheFiles: Failed to register: -95 [ 116.397576][ T8448] Cache volume key already in use (9p,syz,) [ 116.694783][ T24] usb 7-1: USB disconnect, device number 9 [ 116.707863][ T24] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 116.708459][ T24] oti6858 7-1:1.0: device disconnected [ 116.846509][ T8463] ref_ctr_offset mismatch. inode: 0x492 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 117.135398][ T8480] input: syz1 as /devices/virtual/input/input14 [ 117.194819][ T8486] FAULT_INJECTION: forcing a failure. [ 117.194819][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 117.194838][ T8486] CPU: 2 UID: 0 PID: 8486 Comm: syz.0.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.194853][ T8486] Tainted: [L]=SOFTLOCKUP [ 117.194857][ T8486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.194863][ T8486] Call Trace: [ 117.194867][ T8486] [ 117.194871][ T8486] dump_stack_lvl+0x100/0x190 [ 117.194891][ T8486] should_fail_ex.cold+0x5/0xa [ 117.194906][ T8486] should_failslab+0xc2/0x120 [ 117.194920][ T8486] kmem_cache_alloc_noprof+0x92/0x6a0 [ 117.194946][ T8486] ? key_alloc+0x3c5/0x1310 [ 117.194974][ T8486] key_alloc+0x3c5/0x1310 [ 117.195005][ T8486] ? __pfx_key_alloc+0x10/0x10 [ 117.195029][ T8486] ? lsm_blob_alloc+0x68/0x90 [ 117.195046][ T8486] keyring_alloc+0x44/0xc0 [ 117.195063][ T8486] install_thread_keyring_to_cred+0xc1/0x140 [ 117.195078][ T8486] keyctl_set_reqkey_keyring+0xce/0x1c0 [ 117.195091][ T8486] __ia32_compat_sys_keyctl+0x360/0x550 [ 117.195108][ T8486] __do_fast_syscall_32+0x14b/0x8c0 [ 117.195125][ T8486] do_fast_syscall_32+0x32/0x70 [ 117.195139][ T8486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.195152][ T8486] RIP: 0023:0xf745efbc [ 117.195162][ T8486] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 117.195171][ T8486] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 117.195183][ T8486] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000000000001 [ 117.195190][ T8486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.195196][ T8486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.195202][ T8486] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.195208][ T8486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.195221][ T8486] [ 117.789859][ T43] audit: type=1326 audit(1793731437.873:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.3.965" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fbc code=0x0 [ 117.861752][ T8509] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 118.243243][ T6380] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.246082][ T8530] FAULT_INJECTION: forcing a failure. [ 118.246082][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.246099][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.2.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.246113][ T8530] Tainted: [L]=SOFTLOCKUP [ 118.246117][ T8530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.246124][ T8530] Call Trace: [ 118.246128][ T8530] [ 118.246133][ T8530] dump_stack_lvl+0x100/0x190 [ 118.246153][ T8530] should_fail_ex.cold+0x5/0xa [ 118.246170][ T8530] _copy_to_user+0x32/0xd0 [ 118.246187][ T8530] bpf_verifier_vlog+0x496/0x6d0 [ 118.246219][ T8530] btf_verifier_log+0x16b/0x180 [ 118.246234][ T8530] ? __pfx_btf_verifier_log+0x10/0x10 [ 118.246248][ T8530] ? trace_kmalloc+0xeb/0x110 [ 118.246262][ T8530] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 118.246274][ T8530] ? btf_check_all_metas+0x676/0x9e0 [ 118.246289][ T8530] ? rcu_is_watching+0x13/0xc0 [ 118.246305][ T8530] ? btf_check_all_metas+0x676/0x9e0 [ 118.246320][ T8530] ? kfree+0x1e5/0x6d0 [ 118.246335][ T8530] btf_check_all_metas+0x791/0x9e0 [ 118.246355][ T8530] btf_new_fd+0xa90/0x39d0 [ 118.246370][ T8530] ? __lock_acquire+0x5c0/0x1f40 [ 118.246384][ T8530] ? lock_acquire+0x1d1/0x380 [ 118.246397][ T8530] ? __pfx_btf_new_fd+0x10/0x10 [ 118.246438][ T8530] ? rcu_is_watching+0x13/0xc0 [ 118.246458][ T8530] ? apparmor_capable+0x1d7/0x4d0 [ 118.246480][ T8530] ? bpf_lsm_capable+0x9/0x10 [ 118.246497][ T8530] ? security_capable+0x80/0x260 [ 118.246510][ T8530] ? ns_capable+0xcd/0xf0 [ 118.246527][ T8530] __sys_bpf+0x2400/0x4b60 [ 118.246541][ T8530] ? __pfx___sys_bpf+0x10/0x10 [ 118.246550][ T8530] ? find_held_lock+0x2b/0x80 [ 118.246566][ T8530] ? futex_wake+0x4ea/0x5e0 [ 118.246588][ T8530] ? rcu_read_lock_any_held+0x6a/0x90 [ 118.246606][ T8530] ? find_held_lock+0x2b/0x80 [ 118.246620][ T8530] ? ksys_write+0x190/0x250 [ 118.246630][ T8530] ? ksys_write+0x190/0x250 [ 118.246650][ T8530] ? lock_acquire+0x1d1/0x380 [ 118.246660][ T8530] ? __might_fault+0xc5/0x140 [ 118.246673][ T8530] ? find_held_lock+0x2b/0x80 [ 118.246689][ T8530] ? __ia32_sys_bpf+0xcc/0x170 [ 118.246699][ T8530] __ia32_sys_bpf+0xcc/0x170 [ 118.246710][ T8530] ? __might_fault+0x111/0x140 [ 118.246723][ T8530] __do_fast_syscall_32+0x14b/0x8c0 [ 118.246740][ T8530] do_fast_syscall_32+0x32/0x70 [ 118.246754][ T8530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.246768][ T8530] RIP: 0023:0xf73defbc [ 118.246776][ T8530] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.246787][ T8530] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 118.246798][ T8530] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001380 [ 118.246804][ T8530] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.246810][ T8530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.246816][ T8530] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.246822][ T8530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.246836][ T8530] [ 118.403778][ T6380] usb 5-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 118.404663][ T6380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.404677][ T6380] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.404694][ T6380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.620458][ T5885] usb 5-1: USB disconnect, device number 9 [ 118.687332][ T8536] usb3503 0-0008: unknown mode is requested [ 118.687351][ T8536] usb3503 0-0008: usb3503_probe: probed in standby mode [ 118.699465][ T8536] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 118.701239][ T8536] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 118.927022][ T8553] FAULT_INJECTION: forcing a failure. [ 118.927022][ T8553] name failslab, interval 1, probability 0, space 0, times 0 [ 118.927047][ T8553] CPU: 2 UID: 0 PID: 8553 Comm: syz.4.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.927071][ T8553] Tainted: [L]=SOFTLOCKUP [ 118.927078][ T8553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.927088][ T8553] Call Trace: [ 118.927095][ T8553] [ 118.927103][ T8553] dump_stack_lvl+0x100/0x190 [ 118.927137][ T8553] should_fail_ex.cold+0x5/0xa [ 118.927163][ T8553] should_failslab+0xc2/0x120 [ 118.927185][ T8553] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.927209][ T8553] ? __might_fault+0xc5/0x140 [ 118.927230][ T8553] ? alloc_bprm+0x86/0x9d0 [ 118.927252][ T8553] alloc_bprm+0x86/0x9d0 [ 118.927269][ T8553] do_execveat_common.isra.0+0x194/0x580 [ 118.927289][ T8553] ? do_getname+0x191/0x390 [ 118.927314][ T8553] __ia32_compat_sys_execve+0x9c/0xd0 [ 118.927335][ T8553] __do_fast_syscall_32+0x14b/0x8c0 [ 118.927363][ T8553] do_fast_syscall_32+0x32/0x70 [ 118.927385][ T8553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.927407][ T8553] RIP: 0023:0xf747efbc [ 118.927422][ T8553] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.927438][ T8553] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 118.927457][ T8553] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 118.927469][ T8553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.927479][ T8553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.927489][ T8553] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.927499][ T8553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.927523][ T8553] [ 119.146922][ T8570] jffs2: notice: (8570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.226213][ T8582] loop2: detected capacity change from 0 to 7 [ 119.228903][ T8582] Dev loop2: unable to read RDB block 7 [ 119.228919][ T8582] loop2: AHDI p1 p2 p3 [ 119.228929][ T8582] loop2: partition table partially beyond EOD, truncated [ 119.229032][ T8582] loop2: p1 start 1601398130 is beyond EOD, truncated [ 119.229042][ T8582] loop2: p2 start 1702059890 is beyond EOD, truncated [ 119.303870][ T8591] FAULT_INJECTION: forcing a failure. [ 119.303870][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 119.303889][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.3.1001 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.303903][ T8591] Tainted: [L]=SOFTLOCKUP [ 119.303907][ T8591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.303912][ T8591] Call Trace: [ 119.303916][ T8591] [ 119.303920][ T8591] dump_stack_lvl+0x100/0x190 [ 119.303941][ T8591] should_fail_ex.cold+0x5/0xa [ 119.303958][ T8591] should_failslab+0xc2/0x120 [ 119.303973][ T8591] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.303989][ T8591] ? __lock_acquire+0x5c0/0x1f40 [ 119.304001][ T8591] ? sk_prot_alloc+0x60/0x2a0 [ 119.304016][ T8591] sk_prot_alloc+0x60/0x2a0 [ 119.304029][ T8591] sk_alloc+0x36/0xe80 [ 119.304044][ T8591] __vsock_create.constprop.0+0x3c/0xbd0 [ 119.304056][ T8591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.304071][ T8591] vsock_create+0x126/0x510 [ 119.304085][ T8591] __sock_create+0x339/0x860 [ 119.304100][ T8591] __sys_socket+0x14d/0x260 [ 119.304111][ T8591] ? __pfx___sys_socket+0x10/0x10 [ 119.304123][ T8591] ? __might_fault+0xc5/0x140 [ 119.304138][ T8591] __ia32_sys_socket+0x72/0xb0 [ 119.304150][ T8591] __do_fast_syscall_32+0x14b/0x8c0 [ 119.304166][ T8591] do_fast_syscall_32+0x32/0x70 [ 119.304180][ T8591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.304193][ T8591] RIP: 0023:0xf7fb8fbc [ 119.304202][ T8591] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.304211][ T8591] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 119.304222][ T8591] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 0000000000000001 [ 119.304228][ T8591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.304234][ T8591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.304240][ T8591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.304245][ T8591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.304259][ T8591] [ 119.334729][ T8594] FAULT_INJECTION: forcing a failure. [ 119.334729][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 119.334758][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.2.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.334784][ T8594] Tainted: [L]=SOFTLOCKUP [ 119.334790][ T8594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.334802][ T8594] Call Trace: [ 119.334810][ T8594] [ 119.334818][ T8594] dump_stack_lvl+0x100/0x190 [ 119.334851][ T8594] should_fail_ex.cold+0x5/0xa [ 119.334878][ T8594] should_failslab+0xc2/0x120 [ 119.334899][ T8594] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.334930][ T8594] ? __kernfs_new_node+0xd2/0xa10 [ 119.334962][ T8594] __kernfs_new_node+0xd2/0xa10 [ 119.334995][ T8594] ? __pfx___kernfs_new_node+0x10/0x10 [ 119.335024][ T8594] ? lock_acquire+0x1d1/0x380 [ 119.335044][ T8594] ? kernfs_root+0x23/0x2a0 [ 119.335069][ T8594] ? find_held_lock+0x2b/0x80 [ 119.335093][ T8594] ? kernfs_root+0xee/0x2a0 [ 119.335114][ T8594] ? kernfs_root+0xee/0x2a0 [ 119.335141][ T8594] kernfs_new_node+0x194/0x200 [ 119.335166][ T8594] ? __pfx_kernfs_new_node+0x10/0x10 [ 119.335193][ T8594] ? kernfs_add_one+0x213/0xb40 [ 119.335214][ T8594] __kernfs_create_file+0x53/0x350 [ 119.335237][ T8594] sysfs_add_file_mode_ns+0x207/0x3c0 [ 119.335264][ T8594] sysfs_merge_group+0x194/0x340 [ 119.335289][ T8594] ? __pfx_sysfs_merge_group+0x10/0x10 [ 119.335311][ T8594] ? bus_add_device+0x2e2/0x6c0 [ 119.335337][ T8594] ? __pfx_bus_add_device+0x10/0x10 [ 119.335361][ T8594] ? __pfx_dev_add_physical_location+0x10/0x10 [ 119.335390][ T8594] dpm_sysfs_add+0x237/0x280 [ 119.335413][ T8594] device_add+0x9f4/0x1970 [ 119.335436][ T8594] ? __pfx_device_add+0x10/0x10 [ 119.335465][ T8594] nfc_register_device+0x41/0x3e0 [ 119.335495][ T8594] nci_register_device+0x7f1/0xb80 [ 119.335528][ T8594] ? __pfx_nci_register_device+0x10/0x10 [ 119.335555][ T8594] ? lockdep_init_map_type+0x5c/0x250 [ 119.335603][ T8594] virtual_ncidev_open+0x141/0x220 [ 119.335651][ T8594] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 119.335673][ T8594] misc_open+0x26d/0x450 [ 119.335706][ T8594] ? __pfx_misc_open+0x10/0x10 [ 119.335726][ T8594] chrdev_open+0x234/0x6a0 [ 119.335749][ T8594] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.335774][ T8594] ? __pfx_chrdev_open+0x10/0x10 [ 119.335798][ T8594] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 119.335831][ T8594] do_dentry_open+0x674/0x1470 [ 119.335852][ T8594] ? __pfx_chrdev_open+0x10/0x10 [ 119.335883][ T8594] vfs_open_consume+0xcc/0x460 [ 119.335914][ T8594] path_openat+0x1547/0x23f0 [ 119.335944][ T8594] ? __pfx_path_openat+0x10/0x10 [ 119.335975][ T8594] do_file_open+0x20e/0x430 [ 119.335999][ T8594] ? __pfx_do_file_open+0x10/0x10 [ 119.336037][ T8594] ? _raw_spin_unlock+0x28/0x50 [ 119.336056][ T8594] ? alloc_fd+0x471/0x7a0 [ 119.336083][ T8594] do_sys_openat2+0x163/0x1d0 [ 119.336107][ T8594] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.336141][ T8594] __ia32_compat_sys_openat+0x12d/0x210 [ 119.336169][ T8594] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 119.336206][ T8594] __do_fast_syscall_32+0x14b/0x8c0 [ 119.336235][ T8594] do_fast_syscall_32+0x32/0x70 [ 119.336260][ T8594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.336280][ T8594] RIP: 0023:0xf73defbc [ 119.336296][ T8594] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.336313][ T8594] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 119.336332][ T8594] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 119.336344][ T8594] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.336356][ T8594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.336367][ T8594] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.336379][ T8594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.336406][ T8594] [ 119.472920][ T8607] FAULT_INJECTION: forcing a failure. [ 119.472920][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 119.472947][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.4.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.472961][ T8607] Tainted: [L]=SOFTLOCKUP [ 119.472965][ T8607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.472971][ T8607] Call Trace: [ 119.472975][ T8607] [ 119.472979][ T8607] dump_stack_lvl+0x100/0x190 [ 119.472999][ T8607] should_fail_ex.cold+0x5/0xa [ 119.473014][ T8607] should_failslab+0xc2/0x120 [ 119.473031][ T8607] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.473054][ T8607] ? d_instantiate+0x8a/0xb0 [ 119.473091][ T8607] ? alloc_empty_file+0x5b/0x1c0 [ 119.473121][ T8607] alloc_empty_file+0x5b/0x1c0 [ 119.473146][ T8607] alloc_file_pseudo+0x17e/0x290 [ 119.473172][ T8607] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 119.473192][ T8607] ? alloc_fd+0x471/0x7a0 [ 119.473212][ T8607] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.473238][ T8607] __anon_inode_getfile+0xe8/0x280 [ 119.473258][ T8607] anon_inode_getfile_fmode+0x37/0xa0 [ 119.473276][ T8607] __do_sys_timerfd_create+0x31b/0x3f0 [ 119.473291][ T8607] ? __might_fault+0x111/0x140 [ 119.473313][ T8607] __do_fast_syscall_32+0x14b/0x8c0 [ 119.473341][ T8607] do_fast_syscall_32+0x32/0x70 [ 119.473367][ T8607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.473392][ T8607] RIP: 0023:0xf747efbc [ 119.473410][ T8607] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.473424][ T8607] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000142 [ 119.473443][ T8607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 119.473455][ T8607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.473464][ T8607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.473474][ T8607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.473485][ T8607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.473508][ T8607] [ 119.563011][ T8614] pim6reg1: entered promiscuous mode [ 119.563031][ T8614] pim6reg1: entered allmulticast mode [ 119.614440][ T8616] input: syz0 as /devices/virtual/input/input15 [ 120.531357][ T8632] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1637868996 (6551475984 ns) > initial count (5800035516 ns). Using initial count to start timer. [ 120.626121][ T8642] FAULT_INJECTION: forcing a failure. [ 120.626121][ T8642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.626143][ T8642] CPU: 1 UID: 0 PID: 8642 Comm: syz.3.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.626156][ T8642] Tainted: [L]=SOFTLOCKUP [ 120.626160][ T8642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.626167][ T8642] Call Trace: [ 120.626171][ T8642] [ 120.626175][ T8642] dump_stack_lvl+0x100/0x190 [ 120.626196][ T8642] should_fail_ex.cold+0x5/0xa [ 120.626213][ T8642] _copy_from_user+0x2e/0xd0 [ 120.626230][ T8642] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 120.626248][ T8642] bpf_vlog_finalize+0x2bf/0x360 [ 120.626263][ T8642] bpf_log_attr_finalize+0x86/0x1a0 [ 120.626277][ T8642] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 120.626297][ T8642] btf_new_fd+0x712/0x39d0 [ 120.626313][ T8642] ? __lock_acquire+0x5c0/0x1f40 [ 120.626327][ T8642] ? lock_acquire+0x1d1/0x380 [ 120.626341][ T8642] ? __pfx_btf_new_fd+0x10/0x10 [ 120.626357][ T8642] ? rcu_is_watching+0x13/0xc0 [ 120.626372][ T8642] ? apparmor_capable+0x1d7/0x4d0 [ 120.626386][ T8642] ? bpf_lsm_capable+0x9/0x10 [ 120.626424][ T8642] ? security_capable+0x80/0x260 [ 120.626438][ T8642] ? ns_capable+0xcd/0xf0 [ 120.626457][ T8642] __sys_bpf+0x2400/0x4b60 [ 120.626472][ T8642] ? __pfx___sys_bpf+0x10/0x10 [ 120.626482][ T8642] ? find_held_lock+0x2b/0x80 [ 120.626498][ T8642] ? futex_wake+0x4ea/0x5e0 [ 120.626519][ T8642] ? rcu_read_lock_any_held+0x6a/0x90 [ 120.626537][ T8642] ? find_held_lock+0x2b/0x80 [ 120.626556][ T8642] ? ksys_write+0x190/0x250 [ 120.626571][ T8642] ? ksys_write+0x190/0x250 [ 120.626603][ T8642] ? lock_acquire+0x1d1/0x380 [ 120.626624][ T8642] ? __might_fault+0xc5/0x140 [ 120.626653][ T8642] ? find_held_lock+0x2b/0x80 [ 120.626680][ T8642] ? __ia32_sys_bpf+0xcc/0x170 [ 120.626695][ T8642] __ia32_sys_bpf+0xcc/0x170 [ 120.626711][ T8642] ? __might_fault+0x111/0x140 [ 120.626728][ T8642] __do_fast_syscall_32+0x14b/0x8c0 [ 120.626755][ T8642] do_fast_syscall_32+0x32/0x70 [ 120.626776][ T8642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.626795][ T8642] RIP: 0023:0xf7fb8fbc [ 120.626809][ T8642] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.626825][ T8642] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 120.626844][ T8642] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000d80 [ 120.626855][ T8642] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.626864][ T8642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.626872][ T8642] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.626881][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.626902][ T8642] [ 121.185478][ T6380] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 121.223286][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.354752][ T6380] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 121.355641][ T6380] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 121.355660][ T6380] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.357121][ T6380] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.357136][ T6380] usb 9-1: SerialNumber: syz [ 121.359504][ T8664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.384398][ T41] usb 5-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 121.385287][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.385329][ T41] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 121.385345][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.386518][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.386530][ T41] usb 5-1: Product: syz [ 121.386538][ T41] usb 5-1: Manufacturer: syz [ 121.388866][ T8672] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 121.390517][ T41] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 121.398951][ T41] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 121.566112][ T8664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.608249][ T5875] usb 5-1: USB disconnect, device number 10 [ 121.620943][ T5875] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 121.621917][ T5875] garmin_gps 5-1:1.0: device disconnected [ 121.794168][ T8710] FAULT_INJECTION: forcing a failure. [ 121.794168][ T8710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.794187][ T8710] CPU: 3 UID: 0 PID: 8710 Comm: syz.3.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.794203][ T8710] Tainted: [L]=SOFTLOCKUP [ 121.794207][ T8710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.794213][ T8710] Call Trace: [ 121.794218][ T8710] [ 121.794223][ T8710] dump_stack_lvl+0x100/0x190 [ 121.794256][ T8710] should_fail_ex.cold+0x5/0xa [ 121.794273][ T8710] should_fail_alloc_page+0xeb/0x140 [ 121.794289][ T8710] prepare_alloc_pages+0x1f0/0x5b0 [ 121.794304][ T8710] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 121.794320][ T8710] ? sr_do_ioctl+0x21a/0x7a0 [ 121.794333][ T8710] ? sr_read_tocentry.isra.0+0x182/0x540 [ 121.794348][ T8710] ? sr_audio_ioctl+0x113/0x2f0 [ 121.794362][ T8710] ? cdrom_count_tracks+0x3e1/0x840 [ 121.794413][ T8710] ? cdrom_open+0xa8a/0x2760 [ 121.794433][ T8710] ? blkdev_get_whole+0x99/0x290 [ 121.794451][ T8710] ? bdev_open+0x2cd/0xe50 [ 121.794477][ T8710] ? blkdev_open+0x34e/0x4f0 [ 121.794498][ T8710] ? do_dentry_open+0x674/0x1470 [ 121.794519][ T8710] ? vfs_open_consume+0xcc/0x460 [ 121.794540][ T8710] ? path_openat+0x1547/0x23f0 [ 121.794555][ T8710] ? do_file_open+0x20e/0x430 [ 121.794565][ T8710] ? do_sys_openat2+0x163/0x1d0 [ 121.794578][ T8710] ? __ia32_compat_sys_openat+0x12d/0x210 [ 121.794593][ T8710] ? __do_fast_syscall_32+0x14b/0x8c0 [ 121.794606][ T8710] ? do_fast_syscall_32+0x32/0x70 [ 121.794619][ T8710] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.794635][ T8710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.794676][ T8710] ? trace_kmem_cache_alloc+0xdd/0x100 [ 121.794688][ T8710] ? __kasan_slab_alloc+0x89/0x90 [ 121.794700][ T8710] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 121.794716][ T8710] ? bio_associate_blkg+0xcf/0x730 [ 121.794732][ T8710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.794748][ T8710] ? policy_nodemask+0xed/0x5e0 [ 121.794762][ T8710] alloc_pages_mpol+0x201/0x560 [ 121.794776][ T8710] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.794791][ T8710] ? __pfx___debug_object_init+0x10/0x10 [ 121.794805][ T8710] alloc_pages_noprof+0x1a/0x160 [ 121.794820][ T8710] blk_rq_map_kern+0x4d3/0x820 [ 121.794837][ T8710] scsi_execute_cmd+0xba1/0xe50 [ 121.794858][ T8710] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 121.794877][ T8710] sr_do_ioctl+0x21a/0x7a0 [ 121.794894][ T8710] ? __pfx_sr_do_ioctl+0x10/0x10 [ 121.794918][ T8710] ? kasan_save_track+0x14/0x30 [ 121.794932][ T8710] ? sr_read_tochdr.isra.0+0x1a0/0x280 [ 121.794946][ T8710] ? sr_read_tocentry.isra.0+0xad/0x540 [ 121.794963][ T8710] sr_read_tocentry.isra.0+0x182/0x540 [ 121.794981][ T8710] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 121.794999][ T8710] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 121.795017][ T8710] sr_audio_ioctl+0x113/0x2f0 [ 121.795030][ T8710] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 121.795045][ T8710] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 121.795064][ T8710] cdrom_count_tracks+0x3e1/0x840 [ 121.795079][ T8710] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 121.795090][ T8710] ? __pfx_sr_drive_status+0x10/0x10 [ 121.795104][ T8710] ? sd_zbc_report_zones+0x341/0x1120 [ 121.795121][ T8710] cdrom_open+0xa8a/0x2760 [ 121.795135][ T8710] ? __pfx_cdrom_open+0x10/0x10 [ 121.795148][ T8710] ? rcu_is_watching+0x13/0xc0 [ 121.795162][ T8710] ? trace_contention_end+0x126/0x160 [ 121.795175][ T8710] ? __mutex_lock+0x267/0x1c10 [ 121.795189][ T8710] ? sr_block_open+0xbc/0x180 [ 121.795202][ T8710] ? lock_acquire+0x1d1/0x380 [ 121.795214][ T8710] ? __pfx___mutex_lock+0x10/0x10 [ 121.795229][ T8710] ? mark_held_locks+0x40/0x70 [ 121.795240][ T8710] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.795254][ T8710] ? __pfx_disk_check_media_change+0x10/0x10 [ 121.795270][ T8710] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.795283][ T8710] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.795298][ T8710] sr_block_open+0xc8/0x180 [ 121.795311][ T8710] ? __pfx_sr_block_open+0x10/0x10 [ 121.795325][ T8710] blkdev_get_whole+0x99/0x290 [ 121.795338][ T8710] bdev_open+0x2cd/0xe50 [ 121.795353][ T8710] blkdev_open+0x34e/0x4f0 [ 121.795368][ T8710] do_dentry_open+0x674/0x1470 [ 121.795380][ T8710] ? __pfx_blkdev_open+0x10/0x10 [ 121.795396][ T8710] vfs_open_consume+0xcc/0x460 [ 121.795417][ T8710] path_openat+0x1547/0x23f0 [ 121.795432][ T8710] ? __pfx_path_openat+0x10/0x10 [ 121.795449][ T8710] do_file_open+0x20e/0x430 [ 121.795463][ T8710] ? __pfx_do_file_open+0x10/0x10 [ 121.795492][ T8710] ? _raw_spin_unlock+0x28/0x50 [ 121.795504][ T8710] ? alloc_fd+0x471/0x7a0 [ 121.795523][ T8710] do_sys_openat2+0x163/0x1d0 [ 121.795538][ T8710] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.795565][ T8710] __ia32_compat_sys_openat+0x12d/0x210 [ 121.795588][ T8710] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 121.795620][ T8710] __do_fast_syscall_32+0x14b/0x8c0 [ 121.795648][ T8710] do_fast_syscall_32+0x32/0x70 [ 121.795672][ T8710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.795691][ T8710] RIP: 0023:0xf7fb8fbc [ 121.795701][ T8710] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.795712][ T8710] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 121.795724][ T8710] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 121.795732][ T8710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.795738][ T8710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.795745][ T8710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.795751][ T8710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.795766][ T8710] [ 121.986686][ T6380] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 122.139682][ T8732] FAULT_INJECTION: forcing a failure. [ 122.139682][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 122.139716][ T8732] CPU: 2 UID: 0 PID: 8732 Comm: syz.2.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.139739][ T8732] Tainted: [L]=SOFTLOCKUP [ 122.139746][ T8732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.139755][ T8732] Call Trace: [ 122.139761][ T8732] [ 122.139767][ T8732] dump_stack_lvl+0x100/0x190 [ 122.139798][ T8732] should_fail_ex.cold+0x5/0xa [ 122.139824][ T8732] should_failslab+0xc2/0x120 [ 122.139844][ T8732] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 122.139871][ T8732] ? start_dirop+0x79/0xb0 [ 122.139889][ T8732] ? alloc_inode+0x68/0x250 [ 122.139923][ T8732] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 122.139969][ T8732] alloc_inode+0x68/0x250 [ 122.139997][ T8732] new_inode+0x22/0x1c0 [ 122.140028][ T8732] __debugfs_create_file+0xfb/0x500 [ 122.140054][ T8732] debugfs_create_file_unsafe+0x3c/0x50 [ 122.140078][ T8732] ptp_open+0x3b8/0x510 [ 122.140104][ T8732] ? __pfx_ptp_open+0x10/0x10 [ 122.140127][ T8732] ? do_raw_spin_lock+0x128/0x260 [ 122.140151][ T8732] ? posix_clock_open+0xc8/0x290 [ 122.140179][ T8732] ? __pfx_ptp_open+0x10/0x10 [ 122.140198][ T8732] posix_clock_open+0x17b/0x290 [ 122.140223][ T8732] ? __pfx_posix_clock_open+0x10/0x10 [ 122.140247][ T8732] chrdev_open+0x234/0x6a0 [ 122.140271][ T8732] ? __pfx_chrdev_open+0x10/0x10 [ 122.140294][ T8732] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 122.140326][ T8732] do_dentry_open+0x674/0x1470 [ 122.140348][ T8732] ? __pfx_chrdev_open+0x10/0x10 [ 122.140379][ T8732] vfs_open_consume+0xcc/0x460 [ 122.140410][ T8732] path_openat+0x1547/0x23f0 [ 122.140437][ T8732] ? __pfx_path_openat+0x10/0x10 [ 122.140468][ T8732] do_file_open+0x20e/0x430 [ 122.140493][ T8732] ? __pfx_do_file_open+0x10/0x10 [ 122.140535][ T8732] ? _raw_spin_unlock+0x28/0x50 [ 122.140556][ T8732] ? alloc_fd+0x471/0x7a0 [ 122.140587][ T8732] do_sys_openat2+0x163/0x1d0 [ 122.140613][ T8732] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.140650][ T8732] __ia32_compat_sys_openat+0x12d/0x210 [ 122.140679][ T8732] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 122.140718][ T8732] __do_fast_syscall_32+0x14b/0x8c0 [ 122.140748][ T8732] do_fast_syscall_32+0x32/0x70 [ 122.140775][ T8732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.140798][ T8732] RIP: 0023:0xf73defbc [ 122.140814][ T8732] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.140832][ T8732] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 122.140852][ T8732] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800014c0 [ 122.140865][ T8732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.140876][ T8732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.140886][ T8732] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.140897][ T8732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.140929][ T8732] [ 122.140939][ T8732] debugfs: out of free dentries, can not create file 'mask' [ 122.165418][ T8734] FAULT_INJECTION: forcing a failure. [ 122.165418][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 122.165446][ T8734] CPU: 2 UID: 0 PID: 8734 Comm: syz.0.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.165471][ T8734] Tainted: [L]=SOFTLOCKUP [ 122.165478][ T8734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.165489][ T8734] Call Trace: [ 122.165495][ T8734] [ 122.165504][ T8734] dump_stack_lvl+0x100/0x190 [ 122.165537][ T8734] should_fail_ex.cold+0x5/0xa [ 122.165566][ T8734] should_failslab+0xc2/0x120 [ 122.165590][ T8734] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.165621][ T8734] ? flock_lock_inode+0xdb6/0x12d0 [ 122.165652][ T8734] flock_lock_inode+0xdb6/0x12d0 [ 122.165683][ T8734] ? __pfx_flock_lock_inode+0x10/0x10 [ 122.165709][ T8734] ? __pfx___might_resched+0x10/0x10 [ 122.165740][ T8734] ? lock_acquire+0x1d1/0x380 [ 122.165762][ T8734] locks_lock_inode_wait+0x114/0x480 [ 122.165790][ T8734] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 122.165821][ T8734] ? apparmor_file_lock+0x21b/0x500 [ 122.165847][ T8734] ? lockdep_init_map_type+0x5c/0x250 [ 122.165873][ T8734] __do_sys_flock+0x460/0x4d0 [ 122.165900][ T8734] ? __pfx___do_sys_flock+0x10/0x10 [ 122.165952][ T8734] ? __might_fault+0xc5/0x140 [ 122.165976][ T8734] ? __might_fault+0xc5/0x140 [ 122.166008][ T8734] __do_fast_syscall_32+0x14b/0x8c0 [ 122.166039][ T8734] do_fast_syscall_32+0x32/0x70 [ 122.166065][ T8734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.166088][ T8734] RIP: 0023:0xf745efbc [ 122.166103][ T8734] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.166120][ T8734] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000008f [ 122.166140][ T8734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 122.166152][ T8734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.166163][ T8734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.166174][ T8734] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.166185][ T8734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.166211][ T8734] [ 122.180039][ T5875] usb 9-1: USB disconnect, device number 4 [ 122.181054][ T5875] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 122.345494][ T8740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.345640][ T8740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.345767][ T8740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.345891][ T8740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.345958][ T8740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.355940][ T8740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.658850][ T8764] FAULT_INJECTION: forcing a failure. [ 122.658850][ T8764] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.658880][ T8764] CPU: 3 UID: 0 PID: 8764 Comm: syz.2.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.658906][ T8764] Tainted: [L]=SOFTLOCKUP [ 122.658912][ T8764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.658922][ T8764] Call Trace: [ 122.658928][ T8764] [ 122.658936][ T8764] dump_stack_lvl+0x100/0x190 [ 122.658977][ T8764] should_fail_ex.cold+0x5/0xa [ 122.659004][ T8764] get_futex_key+0xf5d/0x13e0 [ 122.659033][ T8764] ? __pfx_get_futex_key+0x10/0x10 [ 122.659057][ T8764] ? futex_unqueue+0x29/0x2c0 [ 122.659081][ T8764] ? find_held_lock+0x2b/0x80 [ 122.659108][ T8764] futex_wait_requeue_pi+0x207/0x900 [ 122.659130][ T8764] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 122.659148][ T8764] ? __futex_wait+0x2ac/0x360 [ 122.659168][ T8764] ? __pfx___futex_wait+0x10/0x10 [ 122.659185][ T8764] ? __pfx_try_to_wake_up+0x10/0x10 [ 122.659203][ T8764] ? futex_hash+0x311/0x400 [ 122.659247][ T8764] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.659272][ T8764] ? rcu_read_lock_any_held+0x6a/0x90 [ 122.659298][ T8764] ? find_held_lock+0x2b/0x80 [ 122.659321][ T8764] ? ksys_write+0x190/0x250 [ 122.659339][ T8764] ? ksys_write+0x190/0x250 [ 122.659359][ T8764] do_futex+0x414/0x440 [ 122.659385][ T8764] ? __pfx_do_futex+0x10/0x10 [ 122.659411][ T8764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.659440][ T8764] __ia32_sys_futex_time32+0x2f4/0x470 [ 122.659472][ T8764] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 122.659503][ T8764] ? __might_fault+0xc5/0x140 [ 122.659534][ T8764] __do_fast_syscall_32+0x14b/0x8c0 [ 122.659563][ T8764] do_fast_syscall_32+0x32/0x70 [ 122.659588][ T8764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.659609][ T8764] RIP: 0023:0xf73defbc [ 122.659623][ T8764] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.659640][ T8764] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 122.659657][ T8764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000000000b [ 122.659668][ T8764] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000000 [ 122.659678][ T8764] RBP: 0000000000000403 R08: 0000000000000000 R09: 0000000000000000 [ 122.659688][ T8764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.659699][ T8764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.659722][ T8764] [ 123.001467][ T8785] FAULT_INJECTION: forcing a failure. [ 123.001467][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 123.001495][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.2.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.001518][ T8785] Tainted: [L]=SOFTLOCKUP [ 123.001524][ T8785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.001533][ T8785] Call Trace: [ 123.001539][ T8785] [ 123.001546][ T8785] dump_stack_lvl+0x100/0x190 [ 123.001592][ T8785] should_fail_ex.cold+0x5/0xa [ 123.001619][ T8785] should_failslab+0xc2/0x120 [ 123.001640][ T8785] __kmalloc_node_noprof+0xff/0x870 [ 123.001665][ T8785] ? __get_vm_area_node+0x1ff/0x350 [ 123.001683][ T8785] ? __get_vm_area_node+0x22b/0x350 [ 123.001700][ T8785] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 123.001725][ T8785] __vmalloc_node_range_noprof+0x424/0x1440 [ 123.001752][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.001779][ T8785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.001797][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 123.001817][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 123.001834][ T8785] ? __update_idle_core+0x5a/0x650 [ 123.001858][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.001876][ T8785] __vmalloc_node_noprof+0xad/0xf0 [ 123.001894][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.001927][ T8785] __vmalloc_noprof+0xa3/0x120 [ 123.001946][ T8785] ? __pfx___vmalloc_noprof+0x10/0x10 [ 123.001968][ T8785] ? rcu_is_watching+0x13/0xc0 [ 123.001994][ T8785] ? apparmor_capable+0x1d7/0x4d0 [ 123.002017][ T8785] bpf_prog_alloc_no_stats+0x58/0x690 [ 123.002038][ T8785] ? security_capable+0x80/0x260 [ 123.002058][ T8785] bpf_prog_alloc+0x3b/0x200 [ 123.002077][ T8785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.002098][ T8785] bpf_prog_load+0x4a3/0x2b20 [ 123.002120][ T8785] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.002135][ T8785] ? lock_acquire+0x1d1/0x380 [ 123.002170][ T8785] __sys_bpf+0x146f/0x4b60 [ 123.002192][ T8785] ? __pfx___sys_bpf+0x10/0x10 [ 123.002208][ T8785] ? find_held_lock+0x2b/0x80 [ 123.002229][ T8785] ? futex_wake+0x4ea/0x5e0 [ 123.002261][ T8785] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.002286][ T8785] ? find_held_lock+0x2b/0x80 [ 123.002308][ T8785] ? ksys_write+0x190/0x250 [ 123.002325][ T8785] ? ksys_write+0x190/0x250 [ 123.002357][ T8785] ? lock_acquire+0x1d1/0x380 [ 123.002374][ T8785] ? __might_fault+0xc5/0x140 [ 123.002421][ T8785] ? find_held_lock+0x2b/0x80 [ 123.002448][ T8785] ? __ia32_sys_bpf+0xcc/0x170 [ 123.002465][ T8785] __ia32_sys_bpf+0xcc/0x170 [ 123.002482][ T8785] ? __might_fault+0x111/0x140 [ 123.002503][ T8785] __do_fast_syscall_32+0x14b/0x8c0 [ 123.002531][ T8785] do_fast_syscall_32+0x32/0x70 [ 123.002555][ T8785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.002575][ T8785] RIP: 0023:0xf73defbc [ 123.002589][ T8785] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 123.002604][ T8785] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 123.002621][ T8785] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 123.002632][ T8785] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.002642][ T8785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.002651][ T8785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.002660][ T8785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.002683][ T8785] [ 123.002874][ T8785] syz.2.1080: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.003065][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.2.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.003094][ T8785] Tainted: [L]=SOFTLOCKUP [ 123.003098][ T8785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.003104][ T8785] Call Trace: [ 123.003109][ T8785] [ 123.003113][ T8785] dump_stack_lvl+0x100/0x190 [ 123.003130][ T8785] warn_alloc.cold+0x9e/0xb2 [ 123.003144][ T8785] ? __pfx_warn_alloc+0x10/0x10 [ 123.003161][ T8785] ? dump_stack_lvl+0x17c/0x190 [ 123.003177][ T8785] ? rcu_is_watching+0x13/0xc0 [ 123.003192][ T8785] ? __kasan_kmalloc+0x8a/0xb0 [ 123.003203][ T8785] ? __kmalloc_node_noprof+0x360/0x870 [ 123.003218][ T8785] ? __get_vm_area_node+0x1ff/0x350 [ 123.003228][ T8785] ? __get_vm_area_node+0x22b/0x350 [ 123.003239][ T8785] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 123.003254][ T8785] __vmalloc_node_range_noprof+0x107c/0x1440 [ 123.003275][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.003300][ T8785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.003320][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 123.003336][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 123.003354][ T8785] ? __update_idle_core+0x5a/0x650 [ 123.003378][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.003397][ T8785] __vmalloc_node_noprof+0xad/0xf0 [ 123.003415][ T8785] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 123.003437][ T8785] __vmalloc_noprof+0xa3/0x120 [ 123.003455][ T8785] ? __pfx___vmalloc_noprof+0x10/0x10 [ 123.003476][ T8785] ? rcu_is_watching+0x13/0xc0 [ 123.003499][ T8785] ? apparmor_capable+0x1d7/0x4d0 [ 123.003521][ T8785] bpf_prog_alloc_no_stats+0x58/0x690 [ 123.003541][ T8785] ? security_capable+0x80/0x260 [ 123.003560][ T8785] bpf_prog_alloc+0x3b/0x200 [ 123.003572][ T8785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.003587][ T8785] bpf_prog_load+0x4a3/0x2b20 [ 123.003609][ T8785] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.003624][ T8785] ? lock_acquire+0x1d1/0x380 [ 123.003659][ T8785] __sys_bpf+0x146f/0x4b60 [ 123.003673][ T8785] ? __pfx___sys_bpf+0x10/0x10 [ 123.003683][ T8785] ? find_held_lock+0x2b/0x80 [ 123.003696][ T8785] ? futex_wake+0x4ea/0x5e0 [ 123.003716][ T8785] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.003731][ T8785] ? find_held_lock+0x2b/0x80 [ 123.003744][ T8785] ? ksys_write+0x190/0x250 [ 123.003754][ T8785] ? ksys_write+0x190/0x250 [ 123.003774][ T8785] ? lock_acquire+0x1d1/0x380 [ 123.003784][ T8785] ? __might_fault+0xc5/0x140 [ 123.003796][ T8785] ? find_held_lock+0x2b/0x80 [ 123.003812][ T8785] ? __ia32_sys_bpf+0xcc/0x170 [ 123.003822][ T8785] __ia32_sys_bpf+0xcc/0x170 [ 123.003838][ T8785] ? __might_fault+0x111/0x140 [ 123.003859][ T8785] __do_fast_syscall_32+0x14b/0x8c0 [ 123.003886][ T8785] do_fast_syscall_32+0x32/0x70 [ 123.003915][ T8785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.003935][ T8785] RIP: 0023:0xf73defbc [ 123.003950][ T8785] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 123.003967][ T8785] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 123.003985][ T8785] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 123.003997][ T8785] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.004003][ T8785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.004008][ T8785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.004014][ T8785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.004035][ T8785] [ 123.005022][ T8785] Mem-Info: [ 123.005032][ T8785] active_anon:5584 inactive_anon:1 isolated_anon:0 [ 123.005032][ T8785] active_file:458 inactive_file:60513 isolated_file:0 [ 123.005032][ T8785] unevictable:3025 dirty:377 writeback:0 [ 123.005032][ T8785] slab_reclaimable:9177 slab_unreclaimable:57446 [ 123.005032][ T8785] mapped:24319 shmem:1500 pagetables:1250 [ 123.005032][ T8785] sec_pagetables:304 bounce:0 [ 123.005032][ T8785] kernel_misc_reclaimable:0 [ 123.005032][ T8785] free:19518 free_pcp:12891 free_cma:0 [ 123.005076][ T8785] Node 0 active_anon:56kB inactive_anon:4kB active_file:68kB inactive_file:768kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1128kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.005122][ T8785] Node 1 active_anon:22280kB inactive_anon:0kB active_file:1764kB inactive_file:241284kB unevictable:10100kB isolated(anon):0kB isolated(file):0kB mapped:97220kB dirty:1504kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5536kB pagetables:3872kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.005165][ T8785] Node 0 DMA free:2440kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:52kB free_cma:0kB [ 123.005208][ T8785] lowmem_reserve[]: 0 256 256 256 256 [ 123.005235][ T8785] Node 0 DMA32 free:13556kB boost:0kB min:12720kB low:15900kB high:19080kB reserved_highatomic:0kB free_highatomic:0kB active_anon:56kB inactive_anon:4kB active_file:68kB inactive_file:768kB unevictable:2000kB writepending:4kB zspages:0kB present:1032196kB managed:262372kB mlocked:0kB bounce:0kB free_pcp:12212kB local_pcp:3308kB free_cma:0kB [ 123.005278][ T8785] lowmem_reserve[]: 0 0 0 0 0 [ 123.005305][ T8785] Node 1 DMA32 free:62076kB boost:0kB min:45980kB low:57472kB high:68964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22280kB inactive_anon:0kB active_file:1764kB inactive_file:241284kB unevictable:10100kB writepending:1504kB zspages:3008kB present:1048432kB managed:948208kB mlocked:8100kB bounce:0kB free_pcp:38960kB local_pcp:8344kB free_cma:0kB [ 123.005351][ T8785] lowmem_reserve[]: 0 0 0 0 0 [ 123.005376][ T8785] Node 0 DMA: 44*4kB (UM) 9*8kB (U) 9*16kB (U) 22*32kB (UM) 5*64kB (UM) 0*128kB 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2440kB [ 123.005478][ T8785] Node 0 DMA32: 3*4kB (UME) 31*8kB (E) 3*16kB (UM) 44*32kB (UME) 35*64kB (UME) 17*128kB (UME) 9*256kB (UME) 10*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 13556kB [ 123.005586][ T8785] Node 1 DMA32: 153*4kB (UME) 61*8kB (UE) 86*16kB (UME) 20*32kB (UME) 48*64kB (UME) 37*128kB (UME) 18*256kB (UM) 15*512kB (UME) 8*1024kB (UME) 3*2048kB (M) 6*4096kB (UM) = 62124kB [ 123.005710][ T8785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.005723][ T8785] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.005736][ T8785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.005748][ T8785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.005759][ T8785] 62648 total pagecache pages [ 123.005764][ T8785] 181 pages in swap cache [ 123.005770][ T8785] Free swap = 119624kB [ 123.005776][ T8785] Total swap = 124996kB [ 123.005782][ T8785] 524155 pages RAM [ 123.005787][ T8785] 0 pages HighMem/MovableOnly [ 123.005792][ T8785] 217670 pages reserved [ 123.005796][ T8785] 0 pages cma reserved [ 123.212634][ T8802] FAULT_INJECTION: forcing a failure. [ 123.212634][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 123.212663][ T8802] CPU: 3 UID: 0 PID: 8802 Comm: syz.3.1088 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.212687][ T8802] Tainted: [L]=SOFTLOCKUP [ 123.212694][ T8802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.212705][ T8802] Call Trace: [ 123.212710][ T8802] [ 123.212717][ T8802] dump_stack_lvl+0x100/0x190 [ 123.212751][ T8802] should_fail_ex.cold+0x5/0xa [ 123.212774][ T8802] should_failslab+0xc2/0x120 [ 123.212797][ T8802] __kmalloc_cache_noprof+0x91/0x6d0 [ 123.212829][ T8802] ? alloc_ucounts+0x13d/0x5c0 [ 123.212858][ T8802] alloc_ucounts+0x13d/0x5c0 [ 123.212881][ T8802] ? __pfx_alloc_ucounts+0x10/0x10 [ 123.212912][ T8802] set_cred_ucounts+0xcd/0x200 [ 123.212941][ T8802] __sys_setuid+0x29e/0x430 [ 123.212970][ T8802] __do_fast_syscall_32+0x14b/0x8c0 [ 123.213000][ T8802] do_fast_syscall_32+0x32/0x70 [ 123.213025][ T8802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.213048][ T8802] RIP: 0023:0xf7fb8fbc [ 123.213064][ T8802] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 123.213104][ T8802] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000017 [ 123.213123][ T8802] RAX: ffffffffffffffda RBX: 000000000000ee01 RCX: 0000000000000000 [ 123.213135][ T8802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.213145][ T8802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.213155][ T8802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.213165][ T8802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.213189][ T8802] [ 123.285938][ T8806] loop6: detected capacity change from 0 to 2640 [ 123.288523][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288551][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288566][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288580][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288594][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288618][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288644][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288660][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288668][ T8806] ldm_validate_partition_table(): Disk read failed. [ 123.288681][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288696][ T8806] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.288718][ T8806] Dev loop6: unable to read RDB block 0 [ 123.288800][ T8806] loop6: unable to read partition table [ 123.288946][ T8806] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 123.438463][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 123.449607][ T8812] device-mapper: table: 248:1: ram6 too small for target: start=8191, len=8192, dev_size=8192 [ 123.449624][ T8812] device-mapper: core: Cannot calculate initial queue limits [ 123.449629][ T8812] device-mapper: ioctl: unable to set up device queue for new table. [ 123.532284][ T8825] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 123.560443][ T8825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.579598][ T8825] bond2: (slave geneve2): making interface the new active one [ 123.580442][ T8825] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 123.605835][ T5875] hid-generic 0000:0008:0000.0008: unknown main item tag 0x0 [ 123.608174][ T5875] hid-generic 0000:0008:0000.0008: unknown main item tag 0x0 [ 123.615891][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.615917][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.615936][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.615953][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.617763][ T5875] hid-generic 0000:0008:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.830673][ T8847] FAULT_INJECTION: forcing a failure. [ 123.830673][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 123.830694][ T8847] CPU: 3 UID: 0 PID: 8847 Comm: syz.0.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.830709][ T8847] Tainted: [L]=SOFTLOCKUP [ 123.830713][ T8847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.830719][ T8847] Call Trace: [ 123.830723][ T8847] [ 123.830727][ T8847] dump_stack_lvl+0x100/0x190 [ 123.830748][ T8847] should_fail_ex.cold+0x5/0xa [ 123.830766][ T8847] should_failslab+0xc2/0x120 [ 123.830778][ T8847] __kmalloc_noprof+0xfc/0x840 [ 123.830789][ T8847] ? fl_create+0x182/0xcf0 [ 123.830808][ T8847] fl_create+0x182/0xcf0 [ 123.830828][ T8847] ? __pfx_fl_create+0x10/0x10 [ 123.830843][ T8847] ? __lock_acquire+0x5c0/0x1f40 [ 123.830864][ T8847] ? lock_acquire+0x1d1/0x380 [ 123.830875][ T8847] ? __might_fault+0xc5/0x140 [ 123.830897][ T8847] ipv6_flowlabel_opt+0x548/0x3330 [ 123.830924][ T8847] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 123.830940][ T8847] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 123.830957][ T8847] ? __local_bh_enable_ip+0xa5/0x120 [ 123.830971][ T8847] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 123.830985][ T8847] do_ipv6_setsockopt+0x2b80/0x3a00 [ 123.831002][ T8847] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 123.831017][ T8847] ? aa_inet_opt_perm+0x307/0x8e0 [ 123.831029][ T8847] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.831041][ T8847] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 123.831052][ T8847] ? __pfx_futex_hash+0x10/0x10 [ 123.831065][ T8847] ? __pfx_get_futex_key+0x10/0x10 [ 123.831078][ T8847] ? get_pid_task+0xfc/0x250 [ 123.831091][ T8847] ? get_pid_task+0xfc/0x250 [ 123.831106][ T8847] ? futex_wait+0x11e/0x370 [ 123.831118][ T8847] ? __lock_acquire+0x5c0/0x1f40 [ 123.831133][ T8847] ? ipv6_setsockopt+0xcb/0x170 [ 123.831146][ T8847] ipv6_setsockopt+0xcb/0x170 [ 123.831162][ T8847] rawv6_setsockopt+0xee/0x5a0 [ 123.831175][ T8847] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 123.831186][ T8847] ? aa_sock_opt_perm+0x114/0x1e0 [ 123.831198][ T8847] ? sock_common_setsockopt+0x2e/0xf0 [ 123.831210][ T8847] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 123.831221][ T8847] do_sock_setsockopt+0xf3/0x1d0 [ 123.831233][ T8847] __sys_setsockopt+0x119/0x190 [ 123.831250][ T8847] __ia32_sys_setsockopt+0xbc/0x160 [ 123.831263][ T8847] ? __might_fault+0x111/0x140 [ 123.831276][ T8847] __do_fast_syscall_32+0x14b/0x8c0 [ 123.831292][ T8847] do_fast_syscall_32+0x32/0x70 [ 123.831306][ T8847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.831319][ T8847] RIP: 0023:0xf745efbc [ 123.831328][ T8847] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 123.831338][ T8847] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 123.831348][ T8847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 123.831355][ T8847] RDX: 0000000000000020 RSI: 0000000080000f00 RDI: 000000000000002c [ 123.831361][ T8847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.831367][ T8847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.831372][ T8847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.831386][ T8847] [ 123.932974][ T8851] bridge1: entered promiscuous mode [ 123.933020][ T8851] bridge1: entered allmulticast mode [ 124.042146][ T8857] jffs2: notice: (8857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.223782][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1116'. [ 124.320118][ T8877] FAULT_INJECTION: forcing a failure. [ 124.320118][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 124.320148][ T8877] CPU: 3 UID: 0 PID: 8877 Comm: syz.0.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.320174][ T8877] Tainted: [L]=SOFTLOCKUP [ 124.320181][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.320192][ T8877] Call Trace: [ 124.320199][ T8877] [ 124.320207][ T8877] dump_stack_lvl+0x100/0x190 [ 124.320256][ T8877] should_fail_ex.cold+0x5/0xa [ 124.320287][ T8877] should_failslab+0xc2/0x120 [ 124.320310][ T8877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 124.320339][ T8877] ? net_alloc_generic+0x1e/0x70 [ 124.320370][ T8877] ? copy_net_ns+0xe3/0x7a0 [ 124.320394][ T8877] copy_net_ns+0xe3/0x7a0 [ 124.320411][ T8877] ? copy_cgroup_ns+0x64/0x970 [ 124.320439][ T8877] create_new_namespaces+0x3ea/0xac0 [ 124.320472][ T8877] unshare_nsproxy_namespaces+0xf6/0x210 [ 124.320495][ T8877] ksys_unshare+0x44f/0x980 [ 124.320518][ T8877] ? __pfx_ksys_unshare+0x10/0x10 [ 124.320540][ T8877] ? __might_fault+0xc5/0x140 [ 124.320570][ T8877] __ia32_sys_unshare+0x30/0x40 [ 124.320591][ T8877] __do_fast_syscall_32+0x14b/0x8c0 [ 124.320614][ T8877] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.320638][ T8877] do_fast_syscall_32+0x32/0x70 [ 124.320662][ T8877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.320684][ T8877] RIP: 0023:0xf745efbc [ 124.320699][ T8877] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 124.320716][ T8877] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 124.320736][ T8877] RAX: ffffffffffffffda RBX: 0000000060040000 RCX: 0000000000000000 [ 124.320747][ T8877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.320759][ T8877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.320770][ T8877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.320780][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.320804][ T8877] [ 124.373236][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.373294][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.373317][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.373340][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.393541][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 124.500645][ T5151] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 124.756624][ T8908] FAULT_INJECTION: forcing a failure. [ 124.756624][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 124.756657][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.4.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.756682][ T8908] Tainted: [L]=SOFTLOCKUP [ 124.756689][ T8908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.756700][ T8908] Call Trace: [ 124.756707][ T8908] [ 124.756714][ T8908] dump_stack_lvl+0x100/0x190 [ 124.756768][ T8908] should_fail_ex.cold+0x5/0xa [ 124.756797][ T8908] should_failslab+0xc2/0x120 [ 124.756822][ T8908] __kmalloc_noprof+0xfc/0x840 [ 124.756842][ T8908] ? __list_lru_init+0x100/0x530 [ 124.756867][ T8908] __list_lru_init+0x100/0x530 [ 124.756890][ T8908] shmem_fill_super+0x723/0x1410 [ 124.756923][ T8908] ? __pfx_shmem_fill_super+0x10/0x10 [ 124.756952][ T8908] ? shmem_next_opt+0xbc/0x120 [ 124.756978][ T8908] ? rcu_is_watching+0x13/0xc0 [ 124.757005][ T8908] ? apparmor_capable+0x1d7/0x4d0 [ 124.757034][ T8908] ? __pfx_shmem_fill_super+0x10/0x10 [ 124.757062][ T8908] get_tree_nodev+0xe3/0x190 [ 124.757083][ T8908] vfs_get_tree+0x92/0x320 [ 124.757111][ T8908] path_mount+0x7d0/0x2850 [ 124.757141][ T8908] ? __pfx_path_mount+0x10/0x10 [ 124.757165][ T8908] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.757192][ T8908] ? putname+0xb1/0x110 [ 124.757213][ T8908] ? kmem_cache_free+0x127/0x6c0 [ 124.757246][ T8908] ? __ia32_sys_mount+0x292/0x310 [ 124.757269][ T8908] __ia32_sys_mount+0x292/0x310 [ 124.757294][ T8908] ? __pfx___ia32_sys_mount+0x10/0x10 [ 124.757327][ T8908] __do_fast_syscall_32+0x14b/0x8c0 [ 124.757354][ T8908] do_fast_syscall_32+0x32/0x70 [ 124.757378][ T8908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.757398][ T8908] RIP: 0023:0xf747efbc [ 124.757412][ T8908] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 124.757429][ T8908] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 124.757446][ T8908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 124.757458][ T8908] RDX: 0000000080000800 RSI: 0000000001000000 RDI: 0000000080000840 [ 124.757469][ T8908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.757480][ T8908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.757491][ T8908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.757516][ T8908] [ 125.363174][ T41] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.514124][ T41] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 125.515011][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.515035][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.520329][ T41] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 125.520505][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 125.520569][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 125.521307][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 125.521341][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 125.523494][ T41] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 125.524194][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.524229][ T41] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.524944][ T41] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ ** replaying previous printk message ** [ 125.792928][ T194] ================================================================== [ 125.792942][ T194] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 125.792978][ T194] Read of size 1 at addr ffff88802a6bac09 by task kworker/u33:6/194 [ 125.792992][ T194] [ 125.793003][ T194] CPU: 1 UID: 0 PID: 194 Comm: kworker/u33:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.793027][ T194] Tainted: [L]=SOFTLOCKUP [ 125.793033][ T194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.793046][ T194] Workqueue: events_unbound commit_work [ 125.793063][ T194] Call Trace: [ 125.793083][ T194] [ 125.793092][ T194] dump_stack_lvl+0x100/0x190 [ 125.793117][ T194] print_report+0x13d/0x4b0 [ 125.793145][ T194] ? __virt_addr_valid+0x239/0x430 [ 125.793165][ T194] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 125.793191][ T194] kasan_report+0xdf/0x1c0 [ 125.793212][ T194] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 125.793241][ T194] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 125.793267][ T194] ? preempt_schedule+0x57/0xd0 [ 125.793288][ T194] ? preempt_schedule_thunk+0x16/0x40 [ 125.793309][ T194] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 125.793336][ T194] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 125.793355][ T194] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 125.793401][ T194] drm_atomic_helper_commit_tail+0xff/0x130 [ 125.793433][ T194] commit_tail.isra.0+0x33e/0x420 [ 125.793461][ T194] process_one_work+0xac7/0x1b10 [ 125.793490][ T194] ? __pfx_process_one_work+0x10/0x10 [ 125.793514][ T194] ? lock_acquire+0x1d1/0x380 [ 125.793535][ T194] ? __pfx_commit_work+0x10/0x10 [ 125.793551][ T194] worker_thread+0x5ef/0xe50 [ 125.793577][ T194] ? __pfx_worker_thread+0x10/0x10 [ 125.793601][ T194] ? kthread+0x13a/0x450 [ 125.793621][ T194] ? __pfx_worker_thread+0x10/0x10 [ 125.793644][ T194] kthread+0x373/0x450 [ 125.793664][ T194] ? __pfx_kthread+0x10/0x10 [ 125.793686][ T194] ret_from_fork+0x730/0xd60 [ 125.793705][ T194] ? __pfx_ret_from_fork+0x10/0x10 [ 125.793724][ T194] ? __switch_to+0x800/0x10e0 [ 125.793748][ T194] ? __pfx_kthread+0x10/0x10 [ 125.793770][ T194] ret_from_fork_asm+0x1a/0x30 [ 125.793793][ T194] [ 125.793799][ T194] [ 125.793803][ T194] Allocated by task 8940: [ 125.793811][ T194] kasan_save_stack+0x30/0x50 [ 125.793826][ T194] kasan_save_track+0x14/0x30 [ 125.793841][ T194] __kasan_kmalloc+0xaa/0xb0 [ 125.793855][ T194] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 125.793876][ T194] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 125.793893][ T194] drm_atomic_get_crtc_state+0x1de/0x690 [ 125.793912][ T194] drm_atomic_set_property+0x165/0x4030 [ 125.793930][ T194] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 125.793949][ T194] drm_ioctl_kernel+0x1f3/0x3e0 [ 125.793966][ T194] drm_ioctl+0x5e6/0xc60 [ 125.793983][ T194] drm_compat_ioctl+0x386/0x4c0 [ 125.793995][ T194] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 125.794016][ T194] __do_fast_syscall_32+0x14b/0x8c0 [ 125.794035][ T194] do_fast_syscall_32+0x32/0x70 [ 125.794052][ T194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.794068][ T194] [ 125.794071][ T194] Freed by task 41: [ 125.794079][ T194] kasan_save_stack+0x30/0x50 [ 125.794092][ T194] kasan_save_track+0x14/0x30 [ 125.794105][ T194] kasan_save_free_info+0x3b/0x70 [ 125.794122][ T194] __kasan_slab_free+0x5f/0x80 [ 125.794138][ T194] kfree+0x22b/0x6d0 [ 125.794154][ T194] drm_atomic_commit_default_clear+0x4aa/0x1140 [ 125.794172][ T194] __drm_atomic_commit_free+0x185/0x2f0 [ 125.794192][ T194] drm_atomic_helper_dirtyfb+0x578/0x790 [ 125.794208][ T194] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 125.794226][ T194] drm_fb_helper_damage_work+0x4c8/0xab0 [ 125.794247][ T194] process_one_work+0xac7/0x1b10 [ 125.794264][ T194] worker_thread+0x5ef/0xe50 [ 125.794283][ T194] kthread+0x373/0x450 [ 125.794301][ T194] ret_from_fork+0x730/0xd60 [ 125.794316][ T194] ret_from_fork_asm+0x1a/0x30 [ 125.794329][ T194] [ 125.794333][ T194] The buggy address belongs to the object at ffff88802a6bac00 [ 125.794333][ T194] which belongs to the cache kmalloc-512 of size 512 [ 125.794343][ T194] The buggy address is located 9 bytes inside of [ 125.794343][ T194] freed 512-byte region [ffff88802a6bac00, ffff88802a6bae00) [ 125.794357][ T194] [ 125.794360][ T194] The buggy address belongs to the physical page: [ 125.794367][ T194] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a6b8 [ 125.794407][ T194] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.794422][ T194] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 125.794435][ T194] page_type: f5(slab) [ 125.794449][ T194] raw: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 125.794463][ T194] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 125.794478][ T194] head: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 125.794495][ T194] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 125.794509][ T194] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 125.794523][ T194] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 125.794532][ T194] page dumped because: kasan: bad access detected [ 125.794539][ T194] page_owner tracks the page as allocated [ 125.794544][ T194] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5178, tgid 5178 (S01syslogd), ts 12599865556 [ 125.794569][ T194] post_alloc_hook+0xfd/0x120 [ 125.794589][ T194] get_page_from_freelist+0x1113/0x35e0 [ 125.794611][ T194] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 125.794633][ T194] new_slab+0xb1/0x6d0 [ 125.794652][ T194] refill_objects+0xe3/0x410 [ 125.794672][ T194] __pcs_replace_empty_main+0x35e/0x650 [ 125.794692][ T194] __kmalloc_noprof+0x677/0x840 [ 125.794705][ T194] tomoyo_init_log+0x114d/0x1f80 [ 125.794729][ T194] tomoyo_supervisor+0x506/0x1340 [ 125.794744][ T194] tomoyo_path_permission+0x270/0x3b0 [ 125.794763][ T194] tomoyo_check_open_permission+0x37f/0x3c0 [ 125.794784][ T194] tomoyo_file_open+0x6b/0x90 [ 125.794799][ T194] security_file_open+0xb5/0x1e0 [ 125.794821][ T194] do_dentry_open+0x552/0x1470 [ 125.794837][ T194] vfs_open_consume+0xcc/0x460 [ 125.794856][ T194] path_openat+0x1547/0x23f0 [ 125.794873][ T194] page last free pid 5178 tgid 5178 ts 12582224491 stack trace: [ 125.794882][ T194] __free_frozen_pages+0x7b4/0x1110 [ 125.794900][ T194] qlist_free_all+0x47/0xf0 [ 125.794912][ T194] kasan_quarantine_reduce+0x1a0/0x1f0 [ 125.794926][ T194] __kasan_slab_alloc+0x69/0x90 [ 125.794942][ T194] __kmalloc_noprof+0x2cc/0x840 [ 125.794955][ T194] tomoyo_supervisor+0x65d/0x1340 [ 125.794970][ T194] tomoyo_execute_permission+0x38e/0x4b0 [ 125.794989][ T194] tomoyo_find_next_domain+0x38d/0x2010 [ 125.795007][ T194] tomoyo_bprm_check_security+0x12d/0x1d0 [ 125.795024][ T194] security_bprm_check+0x87/0x1e0 [ 125.795040][ T194] bprm_execve+0x80b/0x1940 [ 125.795053][ T194] do_execveat_common.isra.0+0x49d/0x580 [ 125.795067][ T194] __x64_sys_execve+0x93/0xd0 [ 125.795081][ T194] do_syscall_64+0x121/0x770 [ 125.795100][ T194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.795115][ T194] [ 125.795118][ T194] Memory state around the buggy address: [ 125.795126][ T194] ffff88802a6bab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.795137][ T194] ffff88802a6bab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.795148][ T194] >ffff88802a6bac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.795156][ T194] ^ [ 125.795165][ T194] ffff88802a6bac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.795176][ T194] ffff88802a6bad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.795184][ T194] ================================================================== [ 125.795566][ T194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.044944][ T194] CPU: 0 UID: 0 PID: 194 Comm: kworker/u33:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.048171][ T194] Tainted: [L]=SOFTLOCKUP [ 126.049429][ T194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.052430][ T194] Workqueue: events_unbound commit_work [ 126.054065][ T194] Call Trace: [ 126.055076][ T194] [ 126.055985][ T194] dump_stack_lvl+0x100/0x190 [ 126.057393][ T194] vpanic+0x2dc/0x6f8 [ 126.058613][ T194] panic+0xd1/0xe0 [ 126.059753][ T194] ? __pfx_panic+0x10/0x10 [ 126.061118][ T194] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 126.063298][ T194] ? preempt_schedule+0x57/0xd0 [ 126.064746][ T194] check_panic_on_warn.cold+0x19/0x34 [ 126.066306][ T194] end_report.part.0+0x3a/0x90 [ 126.067744][ T194] kasan_report.cold+0xe/0x18 [ 126.069139][ T194] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 126.071329][ T194] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 126.073366][ T194] ? preempt_schedule+0x57/0xd0 [ 126.074819][ T194] ? preempt_schedule_thunk+0x16/0x40 [ 126.076654][ T194] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 126.079666][ T194] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 126.081340][ T194] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 126.083235][ T194] drm_atomic_helper_commit_tail+0xff/0x130 [ 126.084938][ T194] commit_tail.isra.0+0x33e/0x420 [ 126.086523][ T194] process_one_work+0xac7/0x1b10 [ 126.088020][ T194] ? __pfx_process_one_work+0x10/0x10 [ 126.089643][ T194] ? lock_acquire+0x1d1/0x380 [ 126.091252][ T194] ? __pfx_commit_work+0x10/0x10 [ 126.092757][ T194] worker_thread+0x5ef/0xe50 [ 126.094140][ T194] ? __pfx_worker_thread+0x10/0x10 [ 126.095646][ T194] ? kthread+0x13a/0x450 [ 126.096955][ T194] ? __pfx_worker_thread+0x10/0x10 [ 126.098481][ T194] kthread+0x373/0x450 [ 126.099683][ T194] ? __pfx_kthread+0x10/0x10 [ 126.101062][ T194] ret_from_fork+0x730/0xd60 [ 126.102453][ T194] ? __pfx_ret_from_fork+0x10/0x10 [ 126.103969][ T194] ? __switch_to+0x800/0x10e0 [ 126.105404][ T194] ? __pfx_kthread+0x10/0x10 [ 126.106861][ T194] ret_from_fork_asm+0x1a/0x30 [ 126.108297][ T194] [ 126.109916][ T194] Kernel Offset: disabled [ 126.111251][ T194] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:39:50 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c112f5 RDI=ffffffff9cf3d5a0 RBP=ffffffff9cf3d560 RSP=ffffc9000106f288 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=6132303838386652 R12=0000000000000000 R13=000000000000006b R14=000000000000000b R15=ffffc9000106f5a0 RIP=ffffffff85c1131f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809527e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c431f11 CR3=0000000070da5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801f338000 RSI=ffffffff81ebdcfe RDI=0000000000000001 RBP=ffffc900006bfda8 RSP=ffffc900006bfa38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=3d3d3d3d3d3d3d3d R12=0000000000000000 R13=1ffff920000d7f52 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820dd506 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809537e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff88091c10 CR3=0000000067ea6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802aa84b00 RSI=ffffffff8201020e RDI=0000000000000005 RBP=ffff88802ae445e0 RSP=ffffc90006c578a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005550c13 R13=0000000000000003 R14=ffffed10055c88bd R15=0000000000000001 RIP=ffffffff82010210 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809547e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72bfc8c CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000007 DR1=00000000ffffffff DR2=400000000001001e DR3=fffffffffffffff6 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=ffec52dc EBX=f740eff4 ECX=000f4240 EDX=00000000 ESI=00000000 EDI=00000000 EBP=ffec5398 ESP=ffec52bc EIP=f71f95d0 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 565aa4c0 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561007567000 CR3=000000004f208000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000