last executing test programs: 3m37.871630846s ago: executing program 2 (id=72): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x1d00}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3m37.590926377s ago: executing program 2 (id=75): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xe6a}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 3m37.370639919s ago: executing program 2 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) syz_usb_connect(0x0, 0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) memfd_secret(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x1008c10, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x700, 0x0, 0x0, 0x40007, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x64, 0x0, 0x28, 0x4, 0x0, @broadcast, @multicast2}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000a40)="0b031260fe814e3ab5ce8f94061cffff", 0x10, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000a80)={'erspan0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000ac0)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) fsetxattr$security_selinux(r3, &(0x7f0000000b00), &(0x7f0000000b40)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x0) setsockopt(r3, 0x84, 0x14, &(0x7f0000000b80)="020000000980ffff", 0x8) openat$nmem0(0xffffffffffffff9c, 0x0, 0x8942, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000bc0)={'bridge0\x00', @ifru_ivalue=0x10}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c00)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3m36.086408977s ago: executing program 2 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x1f90, 0x0, @local}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r4], 0xfc}, 0x1, 0x0, 0x0, 0x20040804}, 0x48b5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x301800, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000002b0424b809566d53a29405f738be841d1f5813deb817b53bef178cef52167c76a66cd08bd03b7076394690ee267d309a49d2421a67501854b34ce879190100ad3849efd696ca41c8b2d3d2a76fe5b8f747d8", @ANYRES16=r2, @ANYBLOB="010000000000000080083b00000008000300", @ANYRES32=r3, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m36.08246688s ago: executing program 2 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000340)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2210088, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/trace_marker\x00', 0x1, 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) write(r1, 0x0, 0x100000) unshare(0x28000600) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x97068100, 0x0, 0x41, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000a013acbdf93dce48eed1703b3aa1bbca710b04d814c46c40607b46434db7ab294e8e1e7d3fef3b11342240d1d7f7a834695d814da8e45423ea6483105690b9441e3ead2c64bf165813c1e0cc00f0d72f3f94da0bbdfcea5bc5d48600aae6e3db0a7bab21b3837db24afef50372ada93dce4ac2e7876cdb4626dc309de8b2a2ca2966c7c6198dc2d988fb8c3e7c80e6730ded38f5c67c502f5c9f3a061ecf54a772d51d1a6759ae3833c2f244701c74ad023b5610467149131584e3b337fa1bbd57d7ffc5af4b8a8a912d6de3f9bf2eb79d6bc2ae6ffe8010bb8e9c247475ef8cd65d", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, &(0x7f00000008c0), &(0x7f0000000900)=r5}, 0x20) 3m35.970888907s ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x109000, 0x181) write(r3, &(0x7f0000000200)='1', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r5, 0x5601, 0x0) 3m32.451350622s ago: executing program 3 (id=136): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x82, 0x2, r1, 0x0, 0x0}) cachestat(r0, &(0x7f00000009c0)={0x840}, &(0x7f0000000a00), 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r1, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000880)=[@text32={0x20, &(0x7f00000008c0)="f20f3365f2a72e0fc7b2000000000f015a10c510c4e2fd307c0800f30f09f20f10a95d4e00006466f30fbcb30f000000b9800000c00f3235002000000f308ed0", 0x40}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000900)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0x29, 0x7, 0x7, 0x1, 0x15, "154645280b2f5e49"}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000500)={0x8, r2}) r8 = io_uring_setup(0x1aa7, &(0x7f0000000540)={0x0, 0xfb71, 0x38c1, 0x7, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x0, &(0x7f0000000800)}) io_uring_register$IORING_REGISTER_FILES(r8, 0x20, &(0x7f0000000840)=[r8], 0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000004000000b708000000000000dbaaf8fff1000000b50800006d0800007b8af0ff00000000bfa100000000000007010000f8ffff14bfa400000000000007040000f0ffffffb702000008de8c660722b47c51a2cde900000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/54, 0x36}) ioctl$XFS_IOC_GETBMAPA(r10, 0xc020582c, &(0x7f0000000000)={0x0, 0x1, 0x1ff, 0x2, 0xf96}) 3m32.254517258s ago: executing program 3 (id=143): ioperm(0x3, 0x4, 0x100000a) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/file0\x00', 0x173) (rerun: 32) ioperm(0x5, 0x5, 0x5) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs\x00', 0x1ff) syz_open_dev$dvb_frontend(&(0x7f0000000300), 0xffffffffffffff0a, 0x30100) (async) mount(0x0, &(0x7f00000001c0)='./tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs/instances/foo\x00', 0x1ff) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/instances/foo\x00', 0x200) (async) write(r0, &(0x7f0000000100)='3', 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './tracefs\x00'}) (async) r1 = openat(r0, &(0x7f0000000080)='./tracefs\x00', 0x5c5d02, 0x10b) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) 3m32.131264731s ago: executing program 3 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) exit(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x8084) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f00000005c0)=""/157, 0x9d}], 0x4}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)=""/198, 0xc6}], 0x1, &(0x7f0000000880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/98, 0x62}, {&(0x7f0000000ac0)=""/86, 0x56}, {&(0x7f0000000b40)=""/220, 0xdc}], 0x3, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/112, 0x70}, {&(0x7f0000000ec0)=""/112, 0x70}, {&(0x7f0000000f40)=""/121, 0x79}], 0x3, &(0x7f0000001000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/87, 0x57}, {&(0x7f0000001140)=""/92, 0x5c}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/67, 0x43}, {&(0x7f0000001300)=""/27, 0x1b}], 0x5}}], 0x5, 0x40002000, &(0x7f0000001500)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) socket$packet(0x11, 0x3, 0x300) 3m31.271031744s ago: executing program 3 (id=148): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00dis', 0xb) ioctl(r3, 0xc138fd0e, &(0x7f0000000400)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d7061746830") splice(r0, 0x0, r1, 0x0, 0x10d00, 0xf) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000180)={0x0, 0x0, 0x100, 0x7, 0x40, 0x8, 0x80, 0x2, 0xc0, 0x7, 0x100, 0xfffff71e, &(0x7f0000000040)=[0x2, 0xfffffff7], 0x2, &(0x7f0000000080)="b65cd41ddf301a4fce8e4bc044b7027abaabcae79d0491395c3522a15f9b8f3d68ea794f10acb02780501a8b5fb7cdb3caf102e498108638bdce3dfcfd2dbf41522c57c5fd05b030673dd31d537cb3032286aba3b253f53676a9beca898f2fa5674408b7713322d4ee14b52bd8a6df6a806b07295c148948522bf40f78f01c93446ce839d653db4b03611e90ca35d6dda520d51e6af2a368ed11efb4f4fe4f7d64ddf25a9d89f90f612c1428c591df55375034784446b3fdc64ea84367634b1c6fde042aa9436c942a303e64ca0a0a02130ea9b88b5fd878494206e317de79205ef25469b51c6b2e955156eb67efefc6ea21019124", 0xf5}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m31.161133305s ago: executing program 3 (id=150): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48) 3m30.821319559s ago: executing program 3 (id=154): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x1d000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3m30.787747627s ago: executing program 32 (id=154): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x1d000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3m20.971331554s ago: executing program 33 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x109000, 0x181) write(r3, &(0x7f0000000200)='1', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r5, 0x5601, 0x0) 3m8.060901645s ago: executing program 5 (id=421): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) openat$cgroup(r1, 0x0, 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x5}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) write(r2, &(0x7f00000000c0)="04b781800193", 0x6) 3m7.980255502s ago: executing program 5 (id=422): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.u'}, 0x15) 3m6.840961568s ago: executing program 5 (id=442): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m6.729175706s ago: executing program 5 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xc) 3m6.729041045s ago: executing program 5 (id=444): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000700)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 3m6.491249215s ago: executing program 5 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035000000000004002a00040046003000000000000000000209"], 0x84}}, 0x0) 3m6.483362175s ago: executing program 34 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035000000000004002a00040046003000000000000000000209"], 0x84}}, 0x0) 1m58.824038944s ago: executing program 6 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x0) pselect6(0x80, &(0x7f0000000280)={0xd, 0x0, 0x8001, 0x10}, 0x0, 0x0, 0x0, 0x0) 1m58.795731926s ago: executing program 6 (id=1263): syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 1m57.590605446s ago: executing program 6 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 1m57.590272524s ago: executing program 6 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m57.555378881s ago: executing program 6 (id=1317): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="190000000800aaaaaaaaaa110103", 0xe) 1m57.555098481s ago: executing program 6 (id=1319): mount(0x0, 0x0, 0x0, 0x208010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) 1m42.026630071s ago: executing program 35 (id=1319): mount(0x0, 0x0, 0x0, 0x208010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) 1.480089348s ago: executing program 4 (id=3813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002c00)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x200000002540, 0x200000002920, 0x200000002950], 0x0, 0x0, 0x0}, 0x510) 1.479829046s ago: executing program 4 (id=3814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88cf01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000001bc0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x3, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = io_uring_setup(0x115c, &(0x7f0000001f00)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001d80)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x3, 0x3, &(0x7f0000001e80)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000001ec0)=[r3], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000480)="baf80c66b80c553e8b66efbafc0cb80b00ef3e66f40f0134ba4200b86638efdbc00f20d86635200000000f22d866b95806000066b80000000066ba000000000f302ef0824b864fbaf80c66b8f434cd8d661513fc0c66ed0fc79c0400", 0x5c}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000019c0)={0x1, [{0x1, 0x108, 0x4, &(0x7f0000000000)="a044ec0fd09ce0675f0def5c5d0e7eb3ef3dcff3da4d6898d21d146af84ed841b8"}, {0x3, 0x368, 0xf0de, &(0x7f0000000040)="d1cc0167839f3a9cd9e3d8a45c52b50a70250e5825821cfa7cac5f06300b0397512529a1bc8cc68d4ee17a9c54790ab0b36fab9680e51f3b35057ad156b168730094d1a352aa90624ade23a77592722f2d2d4cb59a4a9acb5fbe6d2ff9841850ff646f9329a7c74118533d92d8"}, {0x0, 0x6e8, 0xf, &(0x7f00000000c0)="b283a237fa0db8e20a9afa78878ce19d57e526756cd0dc5cb7d3d5cb02a5364cb8e49bb486c0ad5827d768ef8a0c225fe72ecc5c5530d660b2cef9d582cd01816e384cb7c5ac81e90e9a4c078af1f1e76c393e947e65198ad17902e85e1bb5b99908c9f19e904c47f156a2f094aa90aa07b74b8c09113fa87884583015bdf0711cfcf7056509a8e49c9cde5aa4a5fc17347582d73e9336edf6f9b1a1fb409efe541c4babfc8ec955deaa4db6d66c990052ed2428d270df271ae720dd894e0acbfd0f36d7d6eca6fbc01cb34d6b94df015874533a4ab8758c0a16f8d441"}, {0x2, 0xf0, 0x6, &(0x7f00000001c0)="c1dd68858055eaa618aece9c0c93407cb3532d4cc231c4ed68bf4baecfa6"}, {0x0, 0x648, 0x6, &(0x7f0000000200)="ea45f5c87a2355b7e435f160487e876c646033fe4fd473ac1c8eb2b2e684b163d67e9e0015e4ce069f9af8d5526a9e30188f899ab6701bb1c90ccb2d4c47376c6836900e6bc05cddef804ef428505456d3b166ac072a485e8980cb5b7f4da5a45ee6376922c9d5439a1b50c91bcaeddc1a4b7707100857110a299cabe53fa6521ecd4b18f19b2ff496b93220f46137bbcd2aaabc3db73d12337a18b4412bf31cadbd47bfec053547829de20cb658099588af8c8f090653f8dc7aea8dc78c39b8b789428e719a970edd"}, {0x0, 0x100, 0x3, &(0x7f0000000400)="1b8aa79115b9ceba54e38194f5f0b9e6fd91beab886ab666faf13e1f225f810b"}, {0x0, 0x4f0, 0x0, &(0x7f0000000500)="d0334b42a1492326dec5a9fe4d355a0010f81772417d146ef08344f45f8f4102a0bc64c5a392787c3aee34e2f045beb3144a9e4b247079c403d67c4d7b778a65ace8fb9a24942ff8a8926664b053c2b40749c5ed63e337c301143b383290ddd714032bd83d14f6b45480e967f928dba3d57bbf990562f74ba3441b898816d390995e035a125417934902f295d5ea79be0b6ca99fc51ad9f94ba94f533ae9"}, {0x0, 0x260, 0x8, &(0x7f00000005c0)="e8a2de81cfffce35055c5636cc181c1bf238f3b9df04bbbd123e6c4c286e64aaf8f5f3ae600f9fcbcdefa5803c3f1395d8addc912ed19272f8064341ca69407efdafb920a8780c5305d417d3"}, {0x1, 0x2d0, 0x92, &(0x7f0000000640)="42286a782cf5b290bbc5903d655646bf5559991e64890d72ec1865bc3df30a064af45077d3c0fe772144e8809b6a619054c7c25455e4c06e89cc965d6d82b056328ba123ccf25098ad1168e049b05bb8a16ba0e29257c8bdf449"}, {0x3, 0xc0, 0x1, &(0x7f00000006c0)="4a3b75372a271287a3d1e3339c4e7eda3f79531ac0afea30"}, {0x2, 0x2e0, 0x4, &(0x7f0000000700)="55ce1fe11d22e62641fdb70a8576b7e8cbf8447c8b3d3cd3796ec1242aa78cd6686e39001da57394ec93bf5895ee60b50d88bcd5aaf198d85eb5745c31c575b522929f939fb6f1e99b3abd71d76f072c91e0fd868f084e4023b0007f"}, {0x3, 0x298, 0x40, &(0x7f0000000780)="b5ca97764369ce3b5e9dbb55e94c2ebd70086f9c1e8352c9f51de0884ec7f3312d42c61ff8d38ecff92b552b22d49be18d8c8fb8cc04c57d758c23488ee5856ddcc09a26697b0bb680cc04bb0d5c4c02f65c56"}, {0x1, 0x150, 0x2, &(0x7f0000000800)="a31e0183b6bf7f0a7cf52972ec2b652ac3b3b807a03adbbca08fc29205c623e10c31ee89189e3f3028af"}, {0x2, 0x3f8, 0x3, &(0x7f0000000840)="73a4d12a2feb2f609b424978cb23042bd45a625240fe52acd61adffb0dc0d06862dcc07aee5386992150e091a5d09711d3a93a8bf6dbb8c8c873c40e78a7b8688a0c5dc15e933a00d84ad0bbb07be51be66c8fd0565540b05fadcf8ff590f8966d3008718457f9e7f0ddee46eebd515647258c4d9d0a077d57b0d8b666fb1d"}, {0x2, 0x640, 0x1000, &(0x7f00000008c0)="ff6e97f68b1419de3c46b060441019824aa4f716ad53cd676ff64e9d9b4421c2492646e478d479f7a9ed126866ee915ef73c51f7f309f351cfc9ecdf6fe6e1110c8a00b3cf8250b627ea0d704dab5e1d1a98f4019d10f67382018f92ba3f79b49fe04a2ae054f5a1846e159c2149b008bca4452ead15d3d2df18b7049d642f70776d7997e7d432f0afd1be85dceda49ec778287abf5dbeb0df405c1ee63c1b39cd08143584524fcbcfe2c1730488ace3b4de79ca4a383c206446c79985acf284035b4b44854f02b8"}, {0x1, 0x8000, 0x800, &(0x7f00000009c0)="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"}]}) 1.191426059s ago: executing program 4 (id=3819): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 1.106913952s ago: executing program 4 (id=3821): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='7', 0x1) write(r0, 0x0, 0x0) 1.106843271s ago: executing program 4 (id=3822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 1.066603369s ago: executing program 7 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x20}}, 0x0) 1.066419644s ago: executing program 4 (id=3825): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x8942) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) 940.571053ms ago: executing program 7 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 940.258475ms ago: executing program 7 (id=3830): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000340)={0x2, 0x2, 0x7, 0x15e09aaa, 0x4d, 0x6}) openat$comedi(0xffffff9c, &(0x7f0000000380)='/dev/comedi1\x00', 0x183000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='aio\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='100', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 868.017788ms ago: executing program 7 (id=3832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8050) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x600000000000000) 680.168734ms ago: executing program 0 (id=3838): socket$inet6(0xa, 0xa, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000480)}, 0x31) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="1c0001000700aaaaaaaaaa1180", 0xd) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 618.229186ms ago: executing program 1 (id=3840): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48) 562.790263ms ago: executing program 1 (id=3841): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 548.591267ms ago: executing program 1 (id=3842): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000300)='7', 0x1) write(r0, 0x0, 0x0) 470.284085ms ago: executing program 0 (id=3843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 469.940095ms ago: executing program 1 (id=3844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002c00)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000002540, 0x200000002920, 0x200000002950], 0x0, 0x0, &(0x7f0000002540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) 469.85341ms ago: executing program 0 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) 469.591202ms ago: executing program 1 (id=3846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000100030000"], 0x20}}, 0x0) 409.887889ms ago: executing program 1 (id=3847): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r1, 0x4008c001, 0x0) 407.767972ms ago: executing program 0 (id=3855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) 340.555412ms ago: executing program 0 (id=3848): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 340.372898ms ago: executing program 0 (id=3849): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x8942) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) 215.778µs ago: executing program 7 (id=3850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0) 0s ago: executing program 7 (id=3851): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0xfffffffe, 0x15, 0x10, 0x100, &(0x7f0000000600)="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"}) socket$l2tp6(0xa, 0x2, 0x73) kernel console output (not intermixed with test programs): sb: error while querying for an remote control event. [ 242.134996][ T5082] m920x_read = error: -19 [ 242.135013][ T5082] dvb-usb: error while querying for an remote control event. [ 242.135039][ T5082] m920x_read = error: -19 [ 242.135047][ T5082] dvb-usb: error while querying for an remote control event. [ 242.184883][ T5806] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 242.214987][ T5822] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 242.254987][ T5814] m920x_read = error: -19 [ 242.255004][ T5814] dvb-usb: error while querying for an remote control event. [ 242.255034][ T5814] m920x_read = error: -19 [ 242.255042][ T5814] dvb-usb: error while querying for an remote control event. [ 242.335341][ T5806] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 242.336197][ T5806] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 242.336211][ T5806] usb 9-1: config 1 has no interface number 0 [ 242.337735][ T5806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.337747][ T5806] usb 9-1: Product: syz [ 242.337755][ T5806] usb 9-1: Manufacturer: syz [ 242.337763][ T5806] usb 9-1: SerialNumber: syz [ 242.341748][ T5806] usb 9-1: 3:1 : does not exist [ 242.341759][ T5806] usb 9-1: 3:2 : does not exist [ 242.364909][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 242.364995][ T5814] m920x_read = error: -19 [ 242.365008][ T5814] dvb-usb: error while querying for an remote control event. [ 242.365034][ T5814] m920x_read = error: -19 [ 242.365042][ T5814] dvb-usb: error while querying for an remote control event. [ 242.367598][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.368715][ T5822] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 242.368755][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.368776][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.368798][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.368819][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.368901][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.475087][ T5814] m920x_read = error: -19 [ 242.475109][ T5814] dvb-usb: error while querying for an remote control event. [ 242.475157][ T5814] m920x_read = error: -19 [ 242.475171][ T5814] dvb-usb: error while querying for an remote control event. [ 242.506839][T15759] FAULT_INJECTION: forcing a failure. [ 242.506839][T15759] name fail_futex, interval 1, probability 0, space 0, times 0 [ 242.506908][T15759] CPU: 1 UID: 0 PID: 15759 Comm: syz.1.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.506925][T15759] Tainted: [L]=SOFTLOCKUP [ 242.506929][T15759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.506936][T15759] Call Trace: [ 242.506940][T15759] [ 242.506946][T15759] dump_stack_lvl+0x100/0x190 [ 242.506966][T15759] should_fail_ex.cold+0x5/0xa [ 242.506982][T15759] get_futex_key+0x1d0/0x14f0 [ 242.507000][T15759] ? __pfx_get_futex_key+0x10/0x10 [ 242.507033][T15759] futex_wake+0xf4/0x5e0 [ 242.507048][T15759] ? __pfx_futex_wake+0x10/0x10 [ 242.507061][T15759] ? percpu_counter_add_batch+0xb9/0x230 [ 242.507080][T15759] ? errseq_sample+0x51/0x70 [ 242.507095][T15759] ? file_init_path+0x48e/0x670 [ 242.507113][T15759] do_futex+0x2b2/0x440 [ 242.507130][T15759] ? __pfx_do_futex+0x10/0x10 [ 242.507147][T15759] ? fd_install+0x223/0x580 [ 242.507167][T15759] __x64_sys_futex+0x34f/0x4d0 [ 242.507184][T15759] ? __sys_socket+0xac/0x260 [ 242.507199][T15759] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.507221][T15759] do_syscall_64+0x123/0x790 [ 242.507238][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.507250][T15759] RIP: 0033:0x7f998679e2d9 [ 242.507259][T15759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.507272][T15759] RSP: 002b:00007f99876e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.507288][T15759] RAX: ffffffffffffffda RBX: 00007f9986a25fa8 RCX: 00007f998679e2d9 [ 242.507299][T15759] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9986a25fac [ 242.507307][T15759] RBP: 00007f9986a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 242.507323][T15759] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 242.507334][T15759] R13: 00007f9986a26038 R14: 00007ffd7b052e70 R15: 00007ffd7b052f58 [ 242.507352][T15759] [ 242.509792][T15761] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 242.509811][T15761] device-mapper: ioctl: error adding target to table [ 242.539404][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3561'. [ 242.577612][ T5822] usb 5-1: GET_CAPABILITIES returned 0 [ 242.577636][ T5822] usbtmc 5-1:16.0: can't read capabilities [ 242.588712][ T5814] m920x_read = error: -19 [ 242.588725][ T5814] dvb-usb: error while querying for an remote control event. [ 242.588752][ T5814] m920x_read = error: -19 [ 242.588760][ T5814] dvb-usb: error while querying for an remote control event. [ 242.695133][ T5814] m920x_read = error: -19 [ 242.695148][ T5814] dvb-usb: error while querying for an remote control event. [ 242.695177][ T5814] m920x_read = error: -19 [ 242.695185][ T5814] dvb-usb: error while querying for an remote control event. [ 242.778226][T15742] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 242.779073][ T5822] usb 5-1: USB disconnect, device number 25 [ 242.794962][ T5806] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 242.801761][T15775] FAULT_INJECTION: forcing a failure. [ 242.801761][T15775] name failslab, interval 1, probability 0, space 0, times 0 [ 242.801784][T15775] CPU: 1 UID: 0 PID: 15775 Comm: syz.7.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.801799][T15775] Tainted: [L]=SOFTLOCKUP [ 242.801804][T15775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.801811][T15775] Call Trace: [ 242.801816][T15775] [ 242.801821][T15775] dump_stack_lvl+0x100/0x190 [ 242.801841][T15775] should_fail_ex.cold+0x5/0xa [ 242.801858][T15775] should_failslab+0xc2/0x120 [ 242.801875][T15775] kmem_cache_alloc_noprof+0x92/0x6a0 [ 242.801889][T15775] ? __fget_files+0x215/0x3d0 [ 242.801919][T15775] ? create_new_namespaces+0x30/0xac0 [ 242.801937][T15775] create_new_namespaces+0x30/0xac0 [ 242.801953][T15775] __do_sys_setns+0x213/0x1d90 [ 242.801968][T15775] ? fput+0x7c/0x100 [ 242.801984][T15775] ? __pfx___do_sys_setns+0x10/0x10 [ 242.801996][T15775] ? ksys_write+0x1ac/0x250 [ 242.802015][T15775] do_syscall_64+0x123/0x790 [ 242.802032][T15775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.802044][T15775] RIP: 0033:0x7f4206d9e2d9 [ 242.802054][T15775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.802065][T15775] RSP: 002b:00007f4204ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 242.802076][T15775] RAX: ffffffffffffffda RBX: 00007f4207025fa0 RCX: 00007f4206d9e2d9 [ 242.802083][T15775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 242.802090][T15775] RBP: 00007f4206e35888 R08: 0000000000000000 R09: 0000000000000000 [ 242.802097][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.802104][T15775] R13: 00007f4207026038 R14: 00007f4207025fa0 R15: 00007ffdda80c648 [ 242.802118][T15775] [ 242.820831][ T5814] m920x_read = error: -19 [ 242.820847][ T5814] dvb-usb: error while querying for an remote control event. [ 242.820874][ T5814] m920x_read = error: -19 [ 242.820882][ T5814] dvb-usb: error while querying for an remote control event. [ 242.934949][ T5814] m920x_read = error: -19 [ 242.934970][ T5814] dvb-usb: error while querying for an remote control event. [ 242.935016][ T5814] m920x_read = error: -19 [ 242.935029][ T5814] dvb-usb: error while querying for an remote control event. [ 242.945637][ T5806] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 242.947915][ T5806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.947953][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.969978][ T5806] as10x_usb: device has been detected [ 242.970545][ T5806] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 242.978758][ T5806] usb 6-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 242.986196][ T5806] as10x_usb: error during firmware upload part1 [ 242.986608][ T5806] Registered device Abilis Systems DVB-Titan [ 243.045059][ T5814] m920x_read = error: -19 [ 243.045076][ T5814] dvb-usb: error while querying for an remote control event. [ 243.045102][ T5814] m920x_read = error: -19 [ 243.045110][ T5814] dvb-usb: error while querying for an remote control event. [ 243.096035][ T5806] usb 9-1: USB disconnect, device number 48 [ 243.159841][T15765] netlink: 'syz.1.3562': attribute type 10 has an invalid length. [ 243.160619][T11684] usb 6-1: USB disconnect, device number 50 [ 243.165102][ T5814] m920x_read = error: -19 [ 243.165113][ T5814] dvb-usb: error while querying for an remote control event. [ 243.165141][ T5814] m920x_read = error: -19 [ 243.165149][ T5814] dvb-usb: error while querying for an remote control event. [ 243.169534][T11684] Unregistered device Abilis Systems DVB-Titan [ 243.170985][T11684] as10x_usb: device has been disconnected [ 243.184918][ T50] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 243.285017][ T5814] m920x_read = error: -19 [ 243.285033][ T5814] dvb-usb: error while querying for an remote control event. [ 243.285061][ T5814] m920x_read = error: -19 [ 243.285072][ T5814] dvb-usb: error while querying for an remote control event. [ 243.345454][ T50] usb 12-1: Using ep0 maxpacket: 8 [ 243.351862][ T50] usb 12-1: New USB device found, idVendor=0499, idProduct=1019, bcdDevice= 0.40 [ 243.352784][ T50] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 245, changing to 7 [ 243.356697][ T50] usb 12-1: string descriptor 0 read error: -22 [ 243.356794][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.366125][ T50] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.366471][ T50] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 243.369124][ T50] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.369468][ T50] snd-usb-audio 12-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 243.373212][ T50] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.395079][ T5814] m920x_read = error: -19 [ 243.395103][ T5814] dvb-usb: error while querying for an remote control event. [ 243.395156][ T5814] m920x_read = error: -19 [ 243.395172][ T5814] dvb-usb: error while querying for an remote control event. [ 243.413027][ T50] snd-usb-audio 12-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 243.505331][ T5814] m920x_read = error: -19 [ 243.505356][ T5814] dvb-usb: error while querying for an remote control event. [ 243.505405][ T5814] m920x_read = error: -19 [ 243.505419][ T5814] dvb-usb: error while querying for an remote control event. [ 243.565326][ T50] usb 12-1: USB disconnect, device number 19 [ 243.585718][ T5736] Bluetooth: hci1: command tx timeout [ 243.625059][ T5814] m920x_read = error: -19 [ 243.625084][ T5814] dvb-usb: error while querying for an remote control event. [ 243.625134][ T5814] m920x_read = error: -19 [ 243.625148][ T5814] dvb-usb: error while querying for an remote control event. [ 243.690197][T15862] netlink: 'syz.4.3570': attribute type 29 has an invalid length. [ 243.710629][T15864] netlink: 'syz.1.3571': attribute type 28 has an invalid length. [ 243.710652][T15864] netlink: 'syz.1.3571': attribute type 3 has an invalid length. [ 243.710664][T15864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3571'. [ 243.734990][ T5814] m920x_read = error: -19 [ 243.735006][ T5814] dvb-usb: error while querying for an remote control event. [ 243.735033][ T5814] m920x_read = error: -19 [ 243.735041][ T5814] dvb-usb: error while querying for an remote control event. [ 243.794922][T11684] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.842237][T15871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3574'. [ 243.844951][ T5814] m920x_read = error: -19 [ 243.844964][ T5814] dvb-usb: error while querying for an remote control event. [ 243.844991][ T5814] m920x_read = error: -19 [ 243.845000][ T5814] dvb-usb: error while querying for an remote control event. [ 243.944911][T11684] usb 5-1: Using ep0 maxpacket: 8 [ 243.945412][T11684] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 243.946188][T11684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.946200][T11684] usb 5-1: config 0 has no interfaces? [ 243.947703][T11684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.947717][T11684] usb 5-1: Product: syz [ 243.947725][T11684] usb 5-1: Manufacturer: syz [ 243.947733][T11684] usb 5-1: SerialNumber: syz [ 243.949168][T11684] usb 5-1: config 0 descriptor?? [ 243.959603][ T5814] m920x_read = error: -19 [ 243.959617][ T5814] dvb-usb: error while querying for an remote control event. [ 243.959644][ T5814] m920x_read = error: -19 [ 243.959652][ T5814] dvb-usb: error while querying for an remote control event. [ 244.065532][ T5814] m920x_read = error: -19 [ 244.065558][ T5814] dvb-usb: error while querying for an remote control event. [ 244.065611][ T5814] m920x_read = error: -19 [ 244.065626][ T5814] dvb-usb: error while querying for an remote control event. [ 244.175160][ T5814] m920x_read = error: -19 [ 244.175181][ T5814] dvb-usb: error while querying for an remote control event. [ 244.175228][ T5814] m920x_read = error: -19 [ 244.175241][ T5814] dvb-usb: error while querying for an remote control event. [ 244.285114][ T5814] m920x_read = error: -19 [ 244.285137][ T5814] dvb-usb: error while querying for an remote control event. [ 244.285180][ T5814] m920x_read = error: -19 [ 244.285195][ T5814] dvb-usb: error while querying for an remote control event. [ 244.395468][ T5814] m920x_read = error: -19 [ 244.395483][ T5814] dvb-usb: error while querying for an remote control event. [ 244.395512][ T5814] m920x_read = error: -19 [ 244.395520][ T5814] dvb-usb: error while querying for an remote control event. [ 244.424913][ T50] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 244.515085][ T5814] m920x_read = error: -19 [ 244.515105][ T5814] dvb-usb: error while querying for an remote control event. [ 244.515137][ T5814] m920x_read = error: -19 [ 244.515146][ T5814] dvb-usb: error while querying for an remote control event. [ 244.577060][ T50] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 244.578567][ T50] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.578594][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.584479][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 244.588818][ T50] as10x_usb: device has been detected [ 244.589119][ T50] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 244.601699][ T50] usb 12-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 244.605215][ T50] as10x_usb: error during firmware upload part1 [ 244.605635][ T50] Registered device Abilis Systems DVB-Titan [ 244.626863][ T5814] m920x_read = error: -19 [ 244.626892][ T5814] dvb-usb: error while querying for an remote control event. [ 244.626945][ T5814] m920x_read = error: -19 [ 244.626959][ T5814] dvb-usb: error while querying for an remote control event. [ 244.745248][ T5814] m920x_read = error: -19 [ 244.745265][ T5814] dvb-usb: error while querying for an remote control event. [ 244.745312][ T5814] m920x_read = error: -19 [ 244.745321][ T5814] dvb-usb: error while querying for an remote control event. [ 244.786346][T15883] netlink: 'syz.7.3577': attribute type 10 has an invalid length. [ 244.797348][T15883] team0 (unregistering): Port device team_slave_0 removed [ 244.800432][T15883] team0 (unregistering): Port device team_slave_1 removed [ 244.856983][ T5814] m920x_read = error: -19 [ 244.857000][ T5814] dvb-usb: error while querying for an remote control event. [ 244.857029][ T5814] m920x_read = error: -19 [ 244.857042][ T5814] dvb-usb: error while querying for an remote control event. [ 244.879594][ T50] usb 12-1: USB disconnect, device number 20 [ 244.893355][ T50] Unregistered device Abilis Systems DVB-Titan [ 244.894373][ T50] as10x_usb: device has been disconnected [ 244.915186][ T1041] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 244.975267][ T5814] m920x_read = error: -19 [ 244.975291][ T5814] dvb-usb: error while querying for an remote control event. [ 244.975346][ T5814] m920x_read = error: -19 [ 244.975360][ T5814] dvb-usb: error while querying for an remote control event. [ 245.085088][ T5814] m920x_read = error: -19 [ 245.085104][ T5814] dvb-usb: error while querying for an remote control event. [ 245.085130][ T5814] m920x_read = error: -19 [ 245.085139][ T5814] dvb-usb: error while querying for an remote control event. [ 245.085567][ T1041] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 245.086379][ T1041] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 245.086393][ T1041] usb 9-1: config 1 has no interface number 0 [ 245.087882][ T1041] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.087894][ T1041] usb 9-1: Product: syz [ 245.087902][ T1041] usb 9-1: Manufacturer: syz [ 245.087910][ T1041] usb 9-1: SerialNumber: syz [ 245.091925][ T1041] usb 9-1: 3:1 : does not exist [ 245.091937][ T1041] usb 9-1: 3:2 : does not exist [ 245.205736][ T5814] m920x_read = error: -19 [ 245.205762][ T5814] dvb-usb: error while querying for an remote control event. [ 245.205817][ T5814] m920x_read = error: -19 [ 245.205832][ T5814] dvb-usb: error while querying for an remote control event. [ 245.315152][ T5814] m920x_read = error: -19 [ 245.315177][ T5814] dvb-usb: error while querying for an remote control event. [ 245.315230][ T5814] m920x_read = error: -19 [ 245.315245][ T5814] dvb-usb: error while querying for an remote control event. [ 245.424293][T15940] gadgetfs: bound to dummy_udc driver [ 245.426764][ T5082] m920x_read = error: -19 [ 245.426784][ T5082] dvb-usb: error while querying for an remote control event. [ 245.426838][ T5082] m920x_read = error: -19 [ 245.426854][ T5082] dvb-usb: error while querying for an remote control event. [ 245.535207][ T5082] m920x_read = error: -19 [ 245.535228][ T5082] dvb-usb: error while querying for an remote control event. [ 245.535267][ T5082] m920x_read = error: -19 [ 245.535278][ T5082] dvb-usb: error while querying for an remote control event. [ 245.645262][ T5082] m920x_read = error: -19 [ 245.645306][ T5082] dvb-usb: error while querying for an remote control event. [ 245.645361][ T5082] m920x_read = error: -19 [ 245.645377][ T5082] dvb-usb: error while querying for an remote control event. [ 245.655546][T15947] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3584'. [ 245.665860][ T5814] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 245.666181][ C0] gadgetfs: connected [ 245.666480][ T5814] gadgetfs: disconnected [ 245.675287][ T5736] Bluetooth: hci1: command tx timeout [ 245.682756][T15940] FAULT_INJECTION: forcing a failure. [ 245.682756][T15940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.682775][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.7.3583 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.682790][T15940] Tainted: [L]=SOFTLOCKUP [ 245.682795][T15940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.682802][T15940] Call Trace: [ 245.682807][T15940] [ 245.682812][T15940] dump_stack_lvl+0x100/0x190 [ 245.682832][T15940] should_fail_ex.cold+0x5/0xa [ 245.682849][T15940] _copy_to_user+0x32/0xd0 [ 245.682866][T15940] simple_read_from_buffer+0xcb/0x170 [ 245.682884][T15940] proc_fail_nth_read+0x1af/0x230 [ 245.682902][T15940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.682919][T15940] ? rw_verify_area+0xce/0x6d0 [ 245.682932][T15940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.682949][T15940] vfs_read+0x1e4/0xb40 [ 245.682963][T15940] ? lock_acquire+0x1d1/0x380 [ 245.682976][T15940] ? __fget_files+0x34/0x3d0 [ 245.682996][T15940] ? __pfx_vfs_read+0x10/0x10 [ 245.683008][T15940] ? find_held_lock+0x2b/0x80 [ 245.683026][T15940] ? __fget_files+0x215/0x3d0 [ 245.683044][T15940] ? __fget_files+0x21f/0x3d0 [ 245.683064][T15940] ksys_read+0x12a/0x250 [ 245.683077][T15940] ? __pfx_ksys_read+0x10/0x10 [ 245.683095][T15940] do_syscall_64+0x123/0x790 [ 245.683113][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.683125][T15940] RIP: 0033:0x7f4206d5eb0e [ 245.683134][T15940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.683146][T15940] RSP: 002b:00007f4204ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.683157][T15940] RAX: ffffffffffffffda RBX: 00007f4204ff66c0 RCX: 00007f4206d5eb0e [ 245.683164][T15940] RDX: 000000000000000f RSI: 00007f4204ff60a0 RDI: 0000000000000004 [ 245.683171][T15940] RBP: 00007f4204ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.683177][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.683196][T15940] R13: 00007f4207026038 R14: 00007f4207025fa0 R15: 00007ffdda80c648 [ 245.683213][T15940] [ 245.755168][ T5082] m920x_read = error: -19 [ 245.755189][ T5082] dvb-usb: error while querying for an remote control event. [ 245.755244][ T5082] m920x_read = error: -19 [ 245.755259][ T5082] dvb-usb: error while querying for an remote control event. [ 245.767746][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 245.847582][T11684] usb 9-1: USB disconnect, device number 49 [ 245.849343][T15968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3590'. [ 245.868191][ T5877] m920x_read = error: -19 [ 245.868212][ T5877] dvb-usb: error while querying for an remote control event. [ 245.868263][ T5877] m920x_read = error: -19 [ 245.868438][ T5877] dvb-usb: error while querying for an remote control event. [ 245.975143][ T5877] m920x_read = error: -19 [ 245.975167][ T5877] dvb-usb: error while querying for an remote control event. [ 245.975217][ T5877] m920x_read = error: -19 [ 245.975232][ T5877] dvb-usb: error while querying for an remote control event. [ 246.085132][ T5877] m920x_read = error: -19 [ 246.085155][ T5877] dvb-usb: error while querying for an remote control event. [ 246.085206][ T5877] m920x_read = error: -19 [ 246.085219][ T5877] dvb-usb: error while querying for an remote control event. [ 246.085960][ T5082] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 246.205189][ T5877] m920x_read = error: -19 [ 246.205212][ T5877] dvb-usb: error while querying for an remote control event. [ 246.205263][ T5877] m920x_read = error: -19 [ 246.205299][ T5877] dvb-usb: error while querying for an remote control event. [ 246.235353][ T5082] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 246.236464][ T5082] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.236502][ T5082] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.243506][ T5082] as10x_usb: device has been detected [ 246.244090][ T5082] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 246.250634][ T5082] usb 12-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 246.253599][ T5082] as10x_usb: error during firmware upload part1 [ 246.254027][ T5082] Registered device Abilis Systems DVB-Titan [ 246.326135][ T5082] m920x_read = error: -19 [ 246.326158][ T5082] dvb-usb: error while querying for an remote control event. [ 246.326209][ T5082] m920x_read = error: -19 [ 246.326223][ T5082] dvb-usb: error while querying for an remote control event. [ 246.360898][ T1041] usb 5-1: USB disconnect, device number 26 [ 246.436671][ T5082] m920x_read = error: -19 [ 246.436694][ T5082] dvb-usb: error while querying for an remote control event. [ 246.436742][ T5082] m920x_read = error: -19 [ 246.436757][ T5082] dvb-usb: error while querying for an remote control event. [ 246.442485][T15967] netlink: 'syz.7.3591': attribute type 10 has an invalid length. [ 246.447657][T11684] usb 12-1: USB disconnect, device number 21 [ 246.464556][T11684] Unregistered device Abilis Systems DVB-Titan [ 246.467358][T11684] as10x_usb: device has been disconnected [ 246.478502][T16018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3594'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 246.544985][ T5082] m920x_read = error: -19 [ 246.545001][ T5082] dvb-usb: error while querying for an remote control event. [ 246.545030][ T5082] m920x_read = error: -19 [ 246.545038][ T5082] dvb-usb: error while querying for an remote control event. [ 246.632963][T16030] jffs2: notice: (16030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.655796][ T5814] m920x_read = error: -19 [ 246.655819][ T5814] dvb-usb: error while querying for an remote control event. [ 246.655871][ T5814] m920x_read = error: -19 [ 246.655886][ T5814] dvb-usb: error while querying for an remote control event. [ 246.689654][T16035] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 246.689673][T16035] device-mapper: ioctl: error adding target to table [ 246.757314][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 246.757333][ T43] audit: type=1400 audit(1791935050.975:1539): avc: denied { write } for pid=16029 comm="syz.4.3597" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.765861][ T5814] m920x_read = error: -19 [ 246.765875][ T5814] dvb-usb: error while querying for an remote control event. [ 246.765904][ T5814] m920x_read = error: -19 [ 246.765912][ T5814] dvb-usb: error while querying for an remote control event. [ 246.875196][ T5814] m920x_read = error: -19 [ 246.875220][ T5814] dvb-usb: error while querying for an remote control event. [ 246.875272][ T5814] m920x_read = error: -19 [ 246.875287][ T5814] dvb-usb: error while querying for an remote control event. [ 246.964986][T11684] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 246.985936][ T5814] m920x_read = error: -19 [ 246.985957][ T5814] dvb-usb: error while querying for an remote control event. [ 246.986005][ T5814] m920x_read = error: -19 [ 246.986019][ T5814] dvb-usb: error while querying for an remote control event. [ 247.105286][ T5082] m920x_read = error: -19 [ 247.105301][ T5082] dvb-usb: error while querying for an remote control event. [ 247.105330][ T5082] m920x_read = error: -19 [ 247.105338][ T5082] dvb-usb: error while querying for an remote control event. [ 247.135452][T11684] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 247.136385][T11684] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 247.136398][T11684] usb 6-1: config 1 has no interface number 0 [ 247.138365][T11684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.138378][T11684] usb 6-1: Product: syz [ 247.138387][T11684] usb 6-1: Manufacturer: syz [ 247.138394][T11684] usb 6-1: SerialNumber: syz [ 247.145672][T11684] usb 6-1: 3:1 : does not exist [ 247.145683][T11684] usb 6-1: 3:2 : does not exist [ 247.215328][ T5082] m920x_read = error: -19 [ 247.215344][ T5082] dvb-usb: error while querying for an remote control event. [ 247.215408][ T5082] m920x_read = error: -19 [ 247.215418][ T5082] dvb-usb: error while querying for an remote control event. [ 247.248011][T16001] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.325178][ T5814] m920x_read = error: -19 [ 247.325202][ T5814] dvb-usb: error while querying for an remote control event. [ 247.325253][ T5814] m920x_read = error: -19 [ 247.325292][ T5814] dvb-usb: error while querying for an remote control event. [ 247.445115][ T5814] m920x_read = error: -19 [ 247.445130][ T5814] dvb-usb: error while querying for an remote control event. [ 247.445160][ T5814] m920x_read = error: -19 [ 247.445168][ T5814] dvb-usb: error while querying for an remote control event. [ 247.474920][ T5082] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 247.524966][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3607'. [ 247.555243][ T5814] m920x_read = error: -19 [ 247.555264][ T5814] dvb-usb: error while querying for an remote control event. [ 247.555316][ T5814] m920x_read = error: -19 [ 247.555330][ T5814] dvb-usb: error while querying for an remote control event. [ 247.647040][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 247.655917][ T5082] usb 12-1: Using ep0 maxpacket: 8 [ 247.658980][ T5082] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 247.659799][ T5082] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.659811][ T5082] usb 12-1: config 0 has no interfaces? [ 247.661352][ T5082] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.661365][ T5082] usb 12-1: Product: syz [ 247.661372][ T5082] usb 12-1: Manufacturer: syz [ 247.661380][ T5082] usb 12-1: SerialNumber: syz [ 247.662700][ T5082] usb 12-1: config 0 descriptor?? [ 247.675551][ T5082] m920x_read = error: -19 [ 247.675563][ T5082] dvb-usb: error while querying for an remote control event. [ 247.675591][ T5082] m920x_read = error: -19 [ 247.675599][ T5082] dvb-usb: error while querying for an remote control event. [ 247.795049][ T5082] m920x_read = error: -19 [ 247.795116][ T5082] dvb-usb: error while querying for an remote control event. [ 247.795146][ T5082] m920x_read = error: -19 [ 247.795155][ T5082] dvb-usb: error while querying for an remote control event. [ 247.864926][ T5877] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 247.899327][ T5082] usb 6-1: USB disconnect, device number 52 [ 247.905436][ T5814] m920x_read = error: -19 [ 247.905456][ T5814] dvb-usb: error while querying for an remote control event. [ 247.905502][ T5814] m920x_read = error: -19 [ 247.905515][ T5814] dvb-usb: error while querying for an remote control event. [ 248.015967][ T5814] m920x_read = error: -19 [ 248.015984][ T5814] dvb-usb: error while querying for an remote control event. [ 248.016012][ T5814] m920x_read = error: -19 [ 248.016020][ T5814] dvb-usb: error while querying for an remote control event. [ 248.016783][ T5877] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 248.018197][ T5877] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.018235][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.027268][ T5877] as10x_usb: device has been detected [ 248.027878][ T5877] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 248.037564][ T5877] usb 9-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 248.046329][ T5877] as10x_usb: error during firmware upload part1 [ 248.046739][ T5877] Registered device Abilis Systems DVB-Titan [ 248.135165][ T5082] m920x_read = error: -19 [ 248.135191][ T5082] dvb-usb: error while querying for an remote control event. [ 248.135240][ T5082] m920x_read = error: -19 [ 248.135256][ T5082] dvb-usb: error while querying for an remote control event. [ 248.226509][T16085] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 248.229228][ T5822] usb 9-1: USB disconnect, device number 50 [ 248.247560][ T5822] Unregistered device Abilis Systems DVB-Titan [ 248.249149][ T5822] as10x_usb: device has been disconnected [ 248.255071][ T5877] m920x_read = error: -19 [ 248.255090][ T5877] dvb-usb: error while querying for an remote control event. [ 248.255138][ T5877] m920x_read = error: -19 [ 248.255150][ T5877] dvb-usb: error while querying for an remote control event. [ 248.365109][ T5877] m920x_read = error: -19 [ 248.365133][ T5877] dvb-usb: error while querying for an remote control event. [ 248.365185][ T5877] m920x_read = error: -19 [ 248.365202][ T5877] dvb-usb: error while querying for an remote control event. [ 248.475167][ T5877] m920x_read = error: -19 [ 248.475192][ T5877] dvb-usb: error while querying for an remote control event. [ 248.475243][ T5877] m920x_read = error: -19 [ 248.475259][ T5877] dvb-usb: error while querying for an remote control event. [ 248.482525][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3612'. [ 248.585295][ T5877] m920x_read = error: -19 [ 248.585318][ T5877] dvb-usb: error while querying for an remote control event. [ 248.585377][ T5877] m920x_read = error: -19 [ 248.585393][ T5877] dvb-usb: error while querying for an remote control event. [ 248.591207][ T43] audit: type=1400 audit(1791935052.805:1540): avc: denied { shutdown } for pid=16137 comm="syz.0.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.693464][T16144] trusted_key: encrypted_key: insufficient parameters specified [ 248.696549][ T5082] m920x_read = error: -19 [ 248.696569][ T5082] dvb-usb: error while querying for an remote control event. [ 248.696621][ T5082] m920x_read = error: -19 [ 248.696634][ T5082] dvb-usb: error while querying for an remote control event. [ 248.788455][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 248.788468][T16155] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 248.789930][T16155] netlink: 'syz.1.3619': attribute type 21 has an invalid length. [ 248.789942][T16155] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3619'. [ 248.789980][T16155] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 248.789987][T16155] netlink: 'syz.1.3619': attribute type 5 has an invalid length. [ 248.789993][T16155] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3619'. [ 248.804960][ T5877] m920x_read = error: -19 [ 248.804973][ T5877] dvb-usb: error while querying for an remote control event. [ 248.805002][ T5877] m920x_read = error: -19 [ 248.805010][ T5877] dvb-usb: error while querying for an remote control event. [ 248.879073][T16166] FAULT_INJECTION: forcing a failure. [ 248.879073][T16166] name failslab, interval 1, probability 0, space 0, times 0 [ 248.879096][T16166] CPU: 0 UID: 0 PID: 16166 Comm: syz.0.3622 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.879111][T16166] Tainted: [L]=SOFTLOCKUP [ 248.879116][T16166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.879123][T16166] Call Trace: [ 248.879127][T16166] [ 248.879132][T16166] dump_stack_lvl+0x100/0x190 [ 248.879152][T16166] should_fail_ex.cold+0x5/0xa [ 248.879169][T16166] should_failslab+0xc2/0x120 [ 248.879186][T16166] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 248.879202][T16166] ? __alloc_skb+0x140/0x710 [ 248.879222][T16166] __alloc_skb+0x140/0x710 [ 248.879239][T16166] ? __alloc_skb+0x5b7/0x710 [ 248.879256][T16166] ? __pfx___alloc_skb+0x10/0x10 [ 248.879277][T16166] hci_sock_sendmsg+0x1b27/0x26a0 [ 248.879295][T16166] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 248.879309][T16166] ? selinux_socket_sendmsg+0x198/0x2f0 [ 248.879328][T16166] sock_write_iter+0x53a/0x5b0 [ 248.879342][T16166] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 248.879355][T16166] ? __pfx_sock_write_iter+0x10/0x10 [ 248.879373][T16166] ? bpf_lsm_file_permission+0x9/0x10 [ 248.879393][T16166] ? security_file_permission+0x76/0x210 [ 248.879417][T16166] ? rw_verify_area+0xce/0x6d0 [ 248.879438][T16166] vfs_write+0x6af/0x1050 [ 248.879458][T16166] ? __pfx_sock_write_iter+0x10/0x10 [ 248.879481][T16166] ? __pfx_vfs_write+0x10/0x10 [ 248.879498][T16166] ? find_held_lock+0x2b/0x80 [ 248.879530][T16166] ksys_write+0x1f8/0x250 [ 248.879544][T16166] ? __pfx_ksys_write+0x10/0x10 [ 248.879562][T16166] do_syscall_64+0x123/0x790 [ 248.879580][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.879592][T16166] RIP: 0033:0x7fc97939e2d9 [ 248.879601][T16166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.879612][T16166] RSP: 002b:00007fc97a2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.879624][T16166] RAX: ffffffffffffffda RBX: 00007fc979625fa0 RCX: 00007fc97939e2d9 [ 248.879631][T16166] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000004 [ 248.879638][T16166] RBP: 00007fc97a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 248.879644][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.879651][T16166] R13: 00007fc979626038 R14: 00007fc979625fa0 R15: 00007fff0aaf36e8 [ 248.879666][T16166] [ 248.915143][ T5877] m920x_read = error: -19 [ 248.915158][ T5877] dvb-usb: error while querying for an remote control event. [ 248.915185][ T5877] m920x_read = error: -19 [ 248.915193][ T5877] dvb-usb: error while querying for an remote control event. [ 248.954447][T16168] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 248.994318][T16174] FAULT_INJECTION: forcing a failure. [ 248.994318][T16174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.994351][T16174] CPU: 2 UID: 0 PID: 16174 Comm: syz.0.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.994377][T16174] Tainted: [L]=SOFTLOCKUP [ 248.994385][T16174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.994396][T16174] Call Trace: [ 248.994404][T16174] [ 248.994412][T16174] dump_stack_lvl+0x100/0x190 [ 248.994444][T16174] should_fail_ex.cold+0x5/0xa [ 248.994471][T16174] _copy_from_iter+0x1f4/0x1690 [ 248.994500][T16174] ? __asan_memset+0x23/0x50 [ 248.994523][T16174] ? __pfx__copy_from_iter+0x10/0x10 [ 248.994549][T16174] ? __pfx___alloc_skb+0x10/0x10 [ 248.994588][T16174] netlink_sendmsg+0x808/0xda0 [ 248.994622][T16174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.994653][T16174] ? selinux_socket_sendmsg+0x198/0x2f0 [ 248.994683][T16174] ____sys_sendmsg+0xa4d/0xbe0 [ 248.994707][T16174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.994737][T16174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.994766][T16174] ? lock_acquire+0x1d1/0x380 [ 248.994804][T16174] ? get_pid_task+0x2a/0x250 [ 248.994834][T16174] ___sys_sendmsg+0x190/0x1e0 [ 248.994860][T16174] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.994885][T16174] ? get_pid_task+0x106/0x250 [ 248.994920][T16174] ? find_held_lock+0x2b/0x80 [ 248.994969][T16174] __sys_sendmsg+0x160/0x210 [ 248.994990][T16174] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.995023][T16174] do_syscall_64+0x123/0x790 [ 248.995052][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.995072][T16174] RIP: 0033:0x7fc97939e2d9 [ 248.995088][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.995106][T16174] RSP: 002b:00007fc97a2eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.995125][T16174] RAX: ffffffffffffffda RBX: 00007fc979625fa0 RCX: 00007fc97939e2d9 [ 248.995139][T16174] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 248.995151][T16174] RBP: 00007fc97a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 248.995162][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.995175][T16174] R13: 00007fc979626038 R14: 00007fc979625fa0 R15: 00007fff0aaf36e8 [ 248.995202][T16174] [ 249.017071][ T5806] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 249.025319][ T5877] m920x_read = error: -19 [ 249.025339][ T5877] dvb-usb: error while querying for an remote control event. [ 249.025393][ T5877] m920x_read = error: -19 [ 249.025407][ T5877] dvb-usb: error while querying for an remote control event. [ 249.135125][ T5877] m920x_read = error: -19 [ 249.135142][ T5877] dvb-usb: error while querying for an remote control event. [ 249.135171][ T5877] m920x_read = error: -19 [ 249.135179][ T5877] dvb-usb: error while querying for an remote control event. [ 249.175754][ T5806] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 249.176877][ T5806] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 249.176899][ T5806] usb 9-1: config 1 has no interface number 0 [ 249.179093][ T5806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.179113][ T5806] usb 9-1: Product: syz [ 249.179127][ T5806] usb 9-1: Manufacturer: syz [ 249.179140][ T5806] usb 9-1: SerialNumber: syz [ 249.185748][ T5806] usb 9-1: 3:1 : does not exist [ 249.185767][ T5806] usb 9-1: 3:2 : does not exist [ 249.244954][ T5877] m920x_read = error: -19 [ 249.244969][ T5877] dvb-usb: error while querying for an remote control event. [ 249.244998][ T5877] m920x_read = error: -19 [ 249.245006][ T5877] dvb-usb: error while querying for an remote control event. [ 249.275818][ T5822] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 249.354977][ T5877] m920x_read = error: -19 [ 249.354993][ T5877] dvb-usb: error while querying for an remote control event. [ 249.355019][ T5877] m920x_read = error: -19 [ 249.355028][ T5877] dvb-usb: error while querying for an remote control event. [ 249.395811][T16189] FAULT_INJECTION: forcing a failure. [ 249.395811][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 249.395832][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.1.3626 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.395847][T16189] Tainted: [L]=SOFTLOCKUP [ 249.395851][T16189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.395858][T16189] Call Trace: [ 249.395862][T16189] [ 249.395868][T16189] dump_stack_lvl+0x100/0x190 [ 249.395889][T16189] should_fail_ex.cold+0x5/0xa [ 249.395906][T16189] should_failslab+0xc2/0x120 [ 249.395924][T16189] __kvmalloc_node_noprof+0x113/0x9b0 [ 249.395939][T16189] ? __kmalloc_cache_noprof+0x281/0x6d0 [ 249.395952][T16189] ? percpu_ref_init+0xec/0x3f0 [ 249.395964][T16189] ? io_alloc_cache_init+0x38/0x170 [ 249.395979][T16189] io_alloc_cache_init+0x38/0x170 [ 249.395993][T16189] io_uring_setup.cold+0x46e/0x1c7e [ 249.396006][T16189] ? lock_acquire+0x1d1/0x380 [ 249.396019][T16189] ? avc_has_perm_noaudit+0x56/0x470 [ 249.396032][T16189] ? __pfx_io_uring_setup+0x10/0x10 [ 249.396047][T16189] ? find_held_lock+0x2b/0x80 [ 249.396063][T16189] ? avc_has_perm_noaudit+0x11e/0x470 [ 249.396075][T16189] ? avc_has_perm_noaudit+0x11e/0x470 [ 249.396095][T16189] ? __pfx___x64_sys_futex+0x10/0x10 [ 249.396112][T16189] ? ksys_write+0x1ac/0x250 [ 249.396125][T16189] ? __pfx_ksys_write+0x10/0x10 [ 249.396141][T16189] __x64_sys_io_uring_setup+0xc2/0x170 [ 249.396158][T16189] do_syscall_64+0x123/0x790 [ 249.396175][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.396187][T16189] RIP: 0033:0x7f998679e2d9 [ 249.396196][T16189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.396207][T16189] RSP: 002b:00007f99876e0fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 249.396218][T16189] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f998679e2d9 [ 249.396225][T16189] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00000000000030da [ 249.396232][T16189] RBP: 00007f9986835888 R08: 0000000000000000 R09: 0000000000000000 [ 249.396239][T16189] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 249.396247][T16189] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffd7b052f58 [ 249.396262][T16189] [ 249.435779][ T5822] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 249.436588][ T5822] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 249.436603][ T5822] usb 5-1: config 1 has no interface number 0 [ 249.438107][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.438120][ T5822] usb 5-1: Product: syz [ 249.438129][ T5822] usb 5-1: Manufacturer: syz [ 249.438137][ T5822] usb 5-1: SerialNumber: syz [ 249.446686][ T5822] usb 5-1: cannot find UAC_HEADER [ 249.465041][ T5082] m920x_read = error: -19 [ 249.465064][ T5082] dvb-usb: error while querying for an remote control event. [ 249.465204][ T5082] m920x_read = error: -19 [ 249.465221][ T5082] dvb-usb: error while querying for an remote control event. [ 249.468207][ T5822] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 249.489587][ T9518] udevd[9518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 249.575626][ T5082] m920x_read = error: -19 [ 249.575646][ T5082] dvb-usb: error while querying for an remote control event. [ 249.575684][ T5082] m920x_read = error: -19 [ 249.575695][ T5082] dvb-usb: error while querying for an remote control event. [ 249.634923][ T5877] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 249.685221][ T5082] m920x_read = error: -19 [ 249.685242][ T5082] dvb-usb: error while querying for an remote control event. [ 249.685298][ T5082] m920x_read = error: -19 [ 249.685307][ T5082] dvb-usb: error while querying for an remote control event. [ 249.784916][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 249.785791][ T5877] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.787084][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.787118][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.792162][ T5877] usb 6-1: config 0 descriptor?? [ 249.805099][ T5082] m920x_read = error: -19 [ 249.805113][ T5082] dvb-usb: error while querying for an remote control event. [ 249.805210][ T5082] m920x_read = error: -19 [ 249.805227][ T5082] dvb-usb: error while querying for an remote control event. [ 249.915021][ T5082] m920x_read = error: -19 [ 249.915037][ T5082] dvb-usb: error while querying for an remote control event. [ 249.915063][ T5082] m920x_read = error: -19 [ 249.915071][ T5082] dvb-usb: error while querying for an remote control event. [ 249.940173][ T5082] usb 9-1: USB disconnect, device number 51 [ 249.996025][ T5877] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 250.035147][ T5877] m920x_read = error: -19 [ 250.035163][ T5877] dvb-usb: error while querying for an remote control event. [ 250.035190][ T5877] m920x_read = error: -19 [ 250.035199][ T5877] dvb-usb: error while querying for an remote control event. [ 250.044165][ T5877] usb 12-1: USB disconnect, device number 22 [ 250.101395][T16226] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 250.146142][ T5082] m920x_read = error: -19 [ 250.146159][ T5082] dvb-usb: error while querying for an remote control event. [ 250.146186][ T5082] m920x_read = error: -19 [ 250.146194][ T5082] dvb-usb: error while querying for an remote control event. [ 250.152338][T16232] gadgetfs: bound to dummy_udc driver [ 250.216523][ T5822] wacom 0003:056A:003F.0011: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 250.255128][ T5082] m920x_read = error: -19 [ 250.255144][ T5082] dvb-usb: error while querying for an remote control event. [ 250.255171][ T5082] m920x_read = error: -19 [ 250.255179][ T5082] dvb-usb: error while querying for an remote control event. [ 250.309482][ T5877] usb 6-1: USB disconnect, device number 53 [ 250.367461][ T5814] m920x_read = error: -19 [ 250.367490][ T5814] dvb-usb: error while querying for an remote control event. [ 250.367543][ T5814] m920x_read = error: -19 [ 250.367559][ T5814] dvb-usb: error while querying for an remote control event. [ 250.385196][ T5082] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 250.385482][ C0] gadgetfs: connected [ 250.385693][ T5082] gadgetfs: disconnected [ 250.475665][ T10] m920x_read = error: -19 [ 250.475682][ T10] dvb-usb: error while querying for an remote control event. [ 250.475711][ T10] m920x_read = error: -19 [ 250.475719][ T10] dvb-usb: error while querying for an remote control event. [ 250.565531][T16265] can0: slcan on ptm0. [ 250.571939][T16265] FAULT_INJECTION: forcing a failure. [ 250.571939][T16265] name failslab, interval 1, probability 0, space 0, times 0 [ 250.571974][T16265] CPU: 1 UID: 0 PID: 16265 Comm: syz.4.3631 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.572002][T16265] Tainted: [L]=SOFTLOCKUP [ 250.572009][T16265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.572021][T16265] Call Trace: [ 250.572028][T16265] [ 250.572036][T16265] dump_stack_lvl+0x100/0x190 [ 250.572067][T16265] should_fail_ex.cold+0x5/0xa [ 250.572093][T16265] should_failslab+0xc2/0x120 [ 250.572118][T16265] __kmalloc_cache_noprof+0x91/0x6d0 [ 250.572139][T16265] ? alloc_vfsmnt+0x72/0x840 [ 250.572166][T16265] alloc_vfsmnt+0x72/0x840 [ 250.572189][T16265] clone_mnt+0x4b/0x9c0 [ 250.572210][T16265] ? _raw_spin_unlock+0x28/0x50 [ 250.572235][T16265] lock_mount_exact+0x187/0x890 [ 250.572264][T16265] create_new_namespace+0x353/0xeb0 [ 250.572289][T16265] ? __pfx_create_new_namespace+0x10/0x10 [ 250.572311][T16265] ? strncpy_from_user+0x19d/0x2d0 [ 250.572345][T16265] ? vfs_open_tree+0x8c0/0xaf0 [ 250.572362][T16265] vfs_open_tree+0x8c0/0xaf0 [ 250.572381][T16265] ? _raw_spin_unlock+0x28/0x50 [ 250.572402][T16265] ? __pfx_vfs_open_tree+0x10/0x10 [ 250.572428][T16265] __x64_sys_open_tree+0xa3/0x150 [ 250.572449][T16265] do_syscall_64+0x123/0x790 [ 250.572476][T16265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.572495][T16265] RIP: 0033:0x7f329019e2d9 [ 250.572510][T16265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.572531][T16265] RSP: 002b:00007f32910dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 250.572549][T16265] RAX: ffffffffffffffda RBX: 00007f3290425fa0 RCX: 00007f329019e2d9 [ 250.572562][T16265] RDX: 0000000000081802 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 250.572573][T16265] RBP: 00007f3290235888 R08: 0000000000000000 R09: 0000000000000000 [ 250.572584][T16265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.572595][T16265] R13: 00007f3290426038 R14: 00007f3290425fa0 R15: 00007ffc89b97778 [ 250.572621][T16265] [ 250.573366][ T43] audit: type=1400 audit(1791935054.785:1541): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.573467][ T43] audit: type=1400 audit(1791935054.785:1542): avc: denied { search } for pid=5442 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.573588][ T43] audit: type=1400 audit(1791935054.785:1543): avc: denied { search } for pid=5442 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.587068][ T5877] m920x_read = error: -19 [ 250.587090][ T5877] dvb-usb: error while querying for an remote control event. [ 250.587144][ T5877] m920x_read = error: -19 [ 250.587159][ T5877] dvb-usb: error while querying for an remote control event. [ 250.635735][T16264] can0 (unregistered): slcan off ptm0. [ 250.650402][ T43] audit: type=1400 audit(1791935054.865:1544): avc: denied { read } for pid=16274 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.650654][ T43] audit: type=1400 audit(1791935054.865:1545): avc: denied { read open } for pid=16274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.650833][ T43] audit: type=1400 audit(1791935054.865:1546): avc: denied { getattr } for pid=16274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.655033][ T1041] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 250.660882][ T43] audit: type=1400 audit(1791935054.875:1547): avc: denied { write } for pid=16273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.661102][ T43] audit: type=1400 audit(1791935054.875:1548): avc: denied { add_name } for pid=16273 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.697616][ T5877] m920x_read = error: -19 [ 250.697630][ T5877] dvb-usb: error while querying for an remote control event. [ 250.697657][ T5877] m920x_read = error: -19 [ 250.697666][ T5877] dvb-usb: error while querying for an remote control event. [ 250.742137][T16281] erspan0: entered promiscuous mode [ 250.805076][ T5814] m920x_read = error: -19 [ 250.805091][ T5814] dvb-usb: error while querying for an remote control event. [ 250.805120][ T5814] m920x_read = error: -19 [ 250.805128][ T5814] dvb-usb: error while querying for an remote control event. [ 250.806564][ T1041] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 250.807780][ T1041] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.807824][ T1041] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.811945][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3634'. [ 250.840580][ T1041] as10x_usb: device has been detected [ 250.841142][ T1041] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 250.853524][ T1041] usb 12-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 250.877872][ T1041] as10x_usb: error during firmware upload part1 [ 250.878386][ T1041] Registered device Abilis Systems DVB-Titan [ 250.917510][ T5814] m920x_read = error: -19 [ 250.917534][ T5814] dvb-usb: error while querying for an remote control event. [ 250.917626][ T5814] m920x_read = error: -19 [ 250.917660][ T5814] dvb-usb: error while querying for an remote control event. [ 251.020129][T16256] netlink: 'syz.7.3629': attribute type 10 has an invalid length. [ 251.022386][ T6383] usb 12-1: USB disconnect, device number 23 [ 251.031936][ T6383] Unregistered device Abilis Systems DVB-Titan [ 251.032898][ T6383] as10x_usb: device has been disconnected [ 251.038888][ T5814] m920x_read = error: -19 [ 251.038901][ T5814] dvb-usb: error while querying for an remote control event. [ 251.038936][ T5814] m920x_read = error: -19 [ 251.038944][ T5814] dvb-usb: error while querying for an remote control event. [ 251.056920][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3637'. [ 251.155118][ T5814] m920x_read = error: -19 [ 251.155135][ T5814] dvb-usb: error while querying for an remote control event. [ 251.155163][ T5814] m920x_read = error: -19 [ 251.155172][ T5814] dvb-usb: error while querying for an remote control event. [ 251.265211][ T5814] m920x_read = error: -19 [ 251.265236][ T5814] dvb-usb: error while querying for an remote control event. [ 251.265304][ T5814] m920x_read = error: -19 [ 251.265320][ T5814] dvb-usb: error while querying for an remote control event. [ 251.375300][ T5082] m920x_read = error: -19 [ 251.375321][ T5082] dvb-usb: error while querying for an remote control event. [ 251.375368][ T5082] m920x_read = error: -19 [ 251.375381][ T5082] dvb-usb: error while querying for an remote control event. [ 251.485131][ T5814] m920x_read = error: -19 [ 251.485168][ T5814] dvb-usb: error while querying for an remote control event. [ 251.485218][ T5814] m920x_read = error: -19 [ 251.485230][ T5814] dvb-usb: error while querying for an remote control event. [ 251.605803][ T5814] m920x_read = error: -19 [ 251.605826][ T5814] dvb-usb: error while querying for an remote control event. [ 251.605869][ T5814] m920x_read = error: -19 [ 251.605888][ T5814] dvb-usb: error while querying for an remote control event. [ 251.641688][T16336] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 251.641710][T16336] device-mapper: ioctl: error adding target to table [ 251.724996][ T5082] m920x_read = error: -19 [ 251.725014][ T5082] dvb-usb: error while querying for an remote control event. [ 251.725041][ T5082] m920x_read = error: -19 [ 251.725050][ T5082] dvb-usb: error while querying for an remote control event. [ 251.835020][ T5082] m920x_read = error: -19 [ 251.835037][ T5082] dvb-usb: error while querying for an remote control event. [ 251.835068][ T5082] m920x_read = error: -19 [ 251.835077][ T5082] dvb-usb: error while querying for an remote control event. [ 251.954962][ T5082] m920x_read = error: -19 [ 251.954978][ T5082] dvb-usb: error while querying for an remote control event. [ 251.955006][ T5082] m920x_read = error: -19 [ 251.955014][ T5082] dvb-usb: error while querying for an remote control event. [ 252.075145][ T5082] m920x_read = error: -19 [ 252.075160][ T5082] dvb-usb: error while querying for an remote control event. [ 252.075187][ T5082] m920x_read = error: -19 [ 252.075195][ T5082] dvb-usb: error while querying for an remote control event. [ 252.092830][T16366] gfs2: error -5 reading superblock [ 252.095017][ T5082] usb 5-1: USB disconnect, device number 27 [ 252.159481][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 252.159493][ T43] audit: type=1400 audit(1791935056.375:1554): avc: denied { connect } for pid=16375 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.164155][T16382] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3653'. [ 252.185209][ T5877] m920x_read = error: -19 [ 252.185224][ T5877] dvb-usb: error while querying for an remote control event. [ 252.185270][ T5877] m920x_read = error: -19 [ 252.185280][ T5877] dvb-usb: error while querying for an remote control event. [ 252.217081][ T43] audit: type=1400 audit(1791935056.435:1555): avc: denied { write } for pid=16384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.261396][ T43] audit: type=1400 audit(1791935056.475:1556): avc: denied { write } for pid=16398 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.295136][ T5082] m920x_read = error: -19 [ 252.295151][ T5082] dvb-usb: error while querying for an remote control event. [ 252.295212][ T5082] m920x_read = error: -19 [ 252.295223][ T5082] dvb-usb: error while querying for an remote control event. [ 252.356875][ T43] audit: type=1400 audit(1791935056.575:1557): avc: denied { write } for pid=16408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.404969][ T5082] m920x_read = error: -19 [ 252.404984][ T5082] dvb-usb: error while querying for an remote control event. [ 252.405012][ T5082] m920x_read = error: -19 [ 252.405021][ T5082] dvb-usb: error while querying for an remote control event. [ 252.406870][ T1041] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 252.410609][ T43] audit: type=1400 audit(1791935056.625:1558): avc: denied { write } for pid=16427 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.473157][ T43] audit: type=1400 audit(1791935056.685:1559): avc: denied { write } for pid=16429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.525119][ T5082] m920x_read = error: -19 [ 252.525135][ T5082] dvb-usb: error while querying for an remote control event. [ 252.525162][ T5082] m920x_read = error: -19 [ 252.525170][ T5082] dvb-usb: error while querying for an remote control event. [ 252.530328][ T43] audit: type=1400 audit(1791935056.745:1560): avc: denied { write } for pid=16432 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.570924][ T1041] usb 9-1: Using ep0 maxpacket: 8 [ 252.571723][ T1041] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.573205][ T1041] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 252.573266][ T1041] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.573287][ T1041] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.573307][ T1041] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.573327][ T1041] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.573360][ T1041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.635074][ T5082] m920x_read = error: -19 [ 252.635088][ T5082] dvb-usb: error while querying for an remote control event. [ 252.635116][ T5082] m920x_read = error: -19 [ 252.635111][ T5806] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 252.635124][ T5082] dvb-usb: error while querying for an remote control event. [ 252.755240][ T5082] m920x_read = error: -19 [ 252.755261][ T5082] dvb-usb: error while querying for an remote control event. [ 252.755291][ T5082] m920x_read = error: -19 [ 252.755299][ T5082] dvb-usb: error while querying for an remote control event. [ 252.782315][ T1041] usb 9-1: GET_CAPABILITIES returned 0 [ 252.782354][ T1041] usbtmc 9-1:16.0: can't read capabilities [ 252.805677][ T5806] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 252.806601][ T5806] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 252.806617][ T5806] usb 6-1: config 1 has no interface number 0 [ 252.808452][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.808472][ T5806] usb 6-1: Product: syz [ 252.808483][ T5806] usb 6-1: Manufacturer: syz [ 252.808496][ T5806] usb 6-1: SerialNumber: syz [ 252.815068][ T5806] usb 6-1: 3:1 : does not exist [ 252.815086][ T5806] usb 6-1: 3:2 : does not exist [ 252.875689][ T5877] m920x_read = error: -19 [ 252.875705][ T5877] dvb-usb: error while querying for an remote control event. [ 252.875733][ T5877] m920x_read = error: -19 [ 252.875741][ T5877] dvb-usb: error while querying for an remote control event. [ 252.924918][ T42] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 252.984263][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.984554][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.984590][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.984622][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.984653][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.985637][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.985677][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.985712][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.985746][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.985780][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.986014][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.986050][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.986087][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.986139][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.986177][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.987915][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.989664][ T1041] usb 9-1: USB disconnect, device number 52 [ 252.995075][ T5082] m920x_read = error: -19 [ 252.995095][ T5082] dvb-usb: error while querying for an remote control event. [ 252.995145][ T5082] m920x_read = error: -19 [ 252.995160][ T5082] dvb-usb: error while querying for an remote control event. [ 253.038241][T16377] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.038256][T16377] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 253.073842][T16377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.073857][T16377] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 253.077545][ T42] usb 12-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 253.078393][ T42] usb 12-1: config 1 has an invalid interface number: 3 but max is 0 [ 253.078413][ T42] usb 12-1: config 1 has no interface number 0 [ 253.084753][ T42] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.084775][ T42] usb 12-1: Product: syz [ 253.085340][ T42] usb 12-1: Manufacturer: syz [ 253.085356][ T42] usb 12-1: SerialNumber: syz [ 253.105307][ T5082] m920x_read = error: -19 [ 253.105331][ T5082] dvb-usb: error while querying for an remote control event. [ 253.105382][ T5082] m920x_read = error: -19 [ 253.105404][ T5082] dvb-usb: error while querying for an remote control event. [ 253.108226][ T42] usb 12-1: cannot find UAC_HEADER [ 253.148739][ T42] snd-usb-audio 12-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 253.155463][T16377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.155479][T16377] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 253.172149][ T9518] udevd[9518]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 253.215247][ T5814] m920x_read = error: -19 [ 253.215269][ T5814] dvb-usb: error while querying for an remote control event. [ 253.215313][ T5814] m920x_read = error: -19 [ 253.215327][ T5814] dvb-usb: error while querying for an remote control event. [ 253.325159][ T5814] m920x_read = error: -19 [ 253.325182][ T5814] dvb-usb: error while querying for an remote control event. [ 253.325228][ T5814] m920x_read = error: -19 [ 253.325262][ T5814] dvb-usb: error while querying for an remote control event. [ 253.381772][ T43] audit: type=1400 audit(1791935057.595:1561): avc: denied { map } for pid=16507 comm="syz.0.3664" path="socket:[58336]" dev="sockfs" ino=58336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.383148][ T43] audit: type=1400 audit(1791935057.595:1562): avc: denied { read accept } for pid=16507 comm="syz.0.3664" path="socket:[58336]" dev="sockfs" ino=58336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.445118][ T5814] m920x_read = error: -19 [ 253.445142][ T5814] dvb-usb: error while querying for an remote control event. [ 253.445190][ T5814] m920x_read = error: -19 [ 253.445205][ T5814] dvb-usb: error while querying for an remote control event. [ 253.506257][ T43] audit: type=1400 audit(1791935057.715:1563): avc: denied { setattr } for pid=16515 comm="syz.0.3666" name="SMC" dev="sockfs" ino=57327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.555228][ T5814] m920x_read = error: -19 [ 253.555251][ T5814] dvb-usb: error while querying for an remote control event. [ 253.555304][ T5814] m920x_read = error: -19 [ 253.555319][ T5814] dvb-usb: error while querying for an remote control event. [ 253.558459][T16521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 253.561151][T16520] overlayfs: conflicting lowerdir path [ 253.563891][T16521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 253.570533][T16521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 253.573095][T16520] overlayfs: conflicting lowerdir path [ 253.586749][T16520] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 253.586768][T16520] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 253.596657][T16520] overlayfs: conflicting lowerdir path [ 253.604772][ T5814] usb 6-1: USB disconnect, device number 54 [ 253.606681][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3669'. [ 253.610823][T16520] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 253.610841][T16520] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 253.618965][T16520] overlayfs: conflicting lowerdir path [ 253.665785][ T5877] m920x_read = error: -19 [ 253.665800][ T5877] dvb-usb: error while querying for an remote control event. [ 253.665827][ T5877] m920x_read = error: -19 [ 253.665835][ T5877] dvb-usb: error while querying for an remote control event. [ 253.720539][T16548] trusted_key: encrypted_key: keylen parameter is missing [ 253.775214][ T5082] m920x_read = error: -19 [ 253.775239][ T5082] dvb-usb: error while querying for an remote control event. [ 253.775292][ T5082] m920x_read = error: -19 [ 253.775307][ T5082] dvb-usb: error while querying for an remote control event. [ 253.895052][ T5814] m920x_read = error: -19 [ 253.895067][ T5814] dvb-usb: error while querying for an remote control event. [ 253.895095][ T5814] m920x_read = error: -19 [ 253.895103][ T5814] dvb-usb: error while querying for an remote control event. [ 253.944534][T16576] FAULT_INJECTION: forcing a failure. [ 253.944534][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 253.944566][T16576] CPU: 1 UID: 0 PID: 16576 Comm: syz.0.3678 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.944591][T16576] Tainted: [L]=SOFTLOCKUP [ 253.944599][T16576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.944610][T16576] Call Trace: [ 253.944618][T16576] [ 253.944626][T16576] dump_stack_lvl+0x100/0x190 [ 253.944659][T16576] should_fail_ex.cold+0x5/0xa [ 253.944687][T16576] should_failslab+0xc2/0x120 [ 253.944717][T16576] __kmalloc_cache_noprof+0x91/0x6d0 [ 253.944735][T16576] ? kfree+0x22b/0x6d0 [ 253.944751][T16576] ? vgem_open+0x43/0xe0 [ 253.944778][T16576] ? __pfx_vgem_open+0x10/0x10 [ 253.944826][T16576] vgem_open+0x43/0xe0 [ 253.944847][T16576] drm_file_alloc+0x623/0xb40 [ 253.944872][T16576] drm_open_helper+0x1fc/0x540 [ 253.944897][T16576] drm_open+0x1a0/0x3e0 [ 253.944919][T16576] ? __pfx_drm_open+0x10/0x10 [ 253.944946][T16576] drm_stub_open+0x20f/0x380 [ 253.944968][T16576] ? __pfx_drm_stub_open+0x10/0x10 [ 253.944989][T16576] chrdev_open+0x234/0x6a0 [ 253.945017][T16576] ? __pfx_chrdev_open+0x10/0x10 [ 253.945045][T16576] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 253.945072][T16576] do_dentry_open+0x6ab/0x14d0 [ 253.945096][T16576] ? __pfx_chrdev_open+0x10/0x10 [ 253.945127][T16576] vfs_open+0x82/0x3f0 [ 253.945159][T16576] path_openat+0x19fa/0x2440 [ 253.945190][T16576] ? __pfx_path_openat+0x10/0x10 [ 253.945224][T16576] do_file_open+0x20e/0x430 [ 253.945280][T16576] ? __pfx_do_file_open+0x10/0x10 [ 253.945324][T16576] ? _raw_spin_unlock+0x28/0x50 [ 253.945350][T16576] ? alloc_fd+0x471/0x7a0 [ 253.945386][T16576] do_sys_openat2+0x10f/0x1e0 [ 253.945406][T16576] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.945433][T16576] __x64_sys_openat+0x12d/0x210 [ 253.945452][T16576] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.945481][T16576] do_syscall_64+0x123/0x790 [ 253.945511][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.945530][T16576] RIP: 0033:0x7fc97935eb0e [ 253.945547][T16576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.945564][T16576] RSP: 002b:00007fc97a2eab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.945584][T16576] RAX: ffffffffffffffda RBX: 00007fc97a2eb6c0 RCX: 00007fc97935eb0e [ 253.945598][T16576] RDX: 0000000000000000 RSI: 00007fc97a2eac00 RDI: ffffffffffffff9c [ 253.945611][T16576] RBP: 00007fc97a2eac00 R08: 0000000000000000 R09: 0000000000000000 [ 253.945623][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 253.945634][T16576] R13: 00007fc979626038 R14: 00007fc979625fa0 R15: 00007fff0aaf36e8 [ 253.945660][T16576] [ 254.013462][T16580] binder_alloc: 16579: binder_alloc_buf, no vma [ 254.013720][T16580] binder: 16579:16580 ioctl 8010671f 200000001780 returned -22 [ 254.015169][ T5814] m920x_read = error: -19 [ 254.015181][ T5814] dvb-usb: error while querying for an remote control event. [ 254.015209][ T5814] m920x_read = error: -19 [ 254.015217][ T5814] dvb-usb: error while querying for an remote control event. [ 254.100951][T16580] syz.0.3680 (16580): drop_caches: 2 [ 254.135079][ T5814] m920x_read = error: -19 [ 254.135100][ T5814] dvb-usb: error while querying for an remote control event. [ 254.135139][ T5814] m920x_read = error: -19 [ 254.135152][ T5814] dvb-usb: error while querying for an remote control event. [ 254.154871][ T1041] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 254.160805][T16586] gadgetfs: bound to dummy_udc driver [ 254.245067][ T5814] m920x_read = error: -19 [ 254.245090][ T5814] dvb-usb: error while querying for an remote control event. [ 254.245134][ T5814] m920x_read = error: -19 [ 254.245148][ T5814] dvb-usb: error while querying for an remote control event. [ 254.305783][ T1041] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 254.306559][ T1041] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.306583][ T1041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.316641][ T1041] as10x_usb: device has been detected [ 254.317191][ T1041] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 254.326307][ T1041] usb 9-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 254.342293][ T1041] as10x_usb: error during firmware upload part1 [ 254.342677][ T1041] Registered device Abilis Systems DVB-Titan [ 254.365183][ T5814] m920x_read = error: -19 [ 254.365200][ T5814] dvb-usb: error while querying for an remote control event. [ 254.365227][ T5814] m920x_read = error: -19 [ 254.365261][ T5814] dvb-usb: error while querying for an remote control event. [ 254.404998][T11684] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 254.405211][ C3] gadgetfs: connected [ 254.405329][T11684] gadgetfs: disconnected [ 254.475347][ T5814] m920x_read = error: -19 [ 254.475370][ T5814] dvb-usb: error while querying for an remote control event. [ 254.475430][ T5814] m920x_read = error: -19 [ 254.475445][ T5814] dvb-usb: error while querying for an remote control event. [ 254.514764][T16571] netlink: 'syz.4.3677': attribute type 10 has an invalid length. [ 254.516600][ T5814] usb 9-1: USB disconnect, device number 53 [ 254.529344][ T5814] Unregistered device Abilis Systems DVB-Titan [ 254.530671][ T5814] as10x_usb: device has been disconnected [ 254.535995][T16621] netlink: 'syz.1.3685': attribute type 10 has an invalid length. [ 254.541819][T16621] macvlan1: entered promiscuous mode [ 254.541839][T16621] macvlan1: entered allmulticast mode [ 254.543409][T16621] veth1_vlan: entered allmulticast mode [ 254.547518][T16621] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 254.585486][ T5082] m920x_read = error: -19 [ 254.585551][ T5082] dvb-usb: error while querying for an remote control event. [ 254.585604][ T5082] m920x_read = error: -19 [ 254.585620][ T5082] dvb-usb: error while querying for an remote control event. [ 254.695310][ T5082] m920x_read = error: -19 [ 254.695333][ T5082] dvb-usb: error while querying for an remote control event. [ 254.695385][ T5082] m920x_read = error: -19 [ 254.695400][ T5082] dvb-usb: error while querying for an remote control event. [ 254.815806][ T5814] m920x_read = error: -19 [ 254.815830][ T5814] dvb-usb: error while querying for an remote control event. [ 254.815877][ T5814] m920x_read = error: -19 [ 254.815892][ T5814] dvb-usb: error while querying for an remote control event. [ 254.904878][T11684] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 254.936989][ T5814] m920x_read = error: -19 [ 254.937013][ T5814] dvb-usb: error while querying for an remote control event. [ 254.937063][ T5814] m920x_read = error: -19 [ 254.937079][ T5814] dvb-usb: error while querying for an remote control event. [ 255.045073][ T5082] m920x_read = error: -19 [ 255.045096][ T5082] dvb-usb: error while querying for an remote control event. [ 255.045142][ T5082] m920x_read = error: -19 [ 255.045158][ T5082] dvb-usb: error while querying for an remote control event. [ 255.065131][T11684] usb 5-1: Using ep0 maxpacket: 8 [ 255.065438][T16674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 255.065468][T16674] netlink: 'syz.4.3689': attribute type 12 has an invalid length. [ 255.065745][T11684] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 255.069059][T11684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.069080][T11684] usb 5-1: Product: syz [ 255.069094][T11684] usb 5-1: Manufacturer: syz [ 255.069108][T11684] usb 5-1: SerialNumber: syz [ 255.070743][T11684] usb 5-1: config 0 descriptor?? [ 255.085023][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.085062][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.085091][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.085119][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.120940][T16681] FAULT_INJECTION: forcing a failure. [ 255.120940][T16681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.120962][T16681] CPU: 1 UID: 0 PID: 16681 Comm: syz.4.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.120978][T16681] Tainted: [L]=SOFTLOCKUP [ 255.120982][T16681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.120989][T16681] Call Trace: [ 255.120993][T16681] [ 255.120998][T16681] dump_stack_lvl+0x100/0x190 [ 255.121018][T16681] should_fail_ex.cold+0x5/0xa [ 255.121034][T16681] _copy_from_user+0x2e/0xd0 [ 255.121051][T16681] copy_msghdr_from_user+0x9f/0x4c0 [ 255.121067][T16681] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 255.121084][T16681] ? _kstrtoull+0x144/0x200 [ 255.121095][T16681] ? __pfx__kstrtoull+0x10/0x10 [ 255.121108][T16681] ___sys_sendmsg+0x106/0x1e0 [ 255.121124][T16681] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.121144][T16681] ? __fget_files+0x34/0x3d0 [ 255.121169][T16681] __sys_sendmmsg+0x20c/0x440 [ 255.121183][T16681] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.121194][T16681] ? ksys_write+0x190/0x250 [ 255.121217][T16681] ? fput+0x7c/0x100 [ 255.121256][T16681] ? ksys_write+0x1ac/0x250 [ 255.121270][T16681] ? __pfx_ksys_write+0x10/0x10 [ 255.121286][T16681] __x64_sys_sendmmsg+0x9c/0x100 [ 255.121297][T16681] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.121314][T16681] do_syscall_64+0x123/0x790 [ 255.121331][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.121343][T16681] RIP: 0033:0x7f329019e2d9 [ 255.121352][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.121363][T16681] RSP: 002b:00007f32910dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.121374][T16681] RAX: ffffffffffffffda RBX: 00007f3290425fa0 RCX: 00007f329019e2d9 [ 255.121381][T16681] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 255.121388][T16681] RBP: 00007f32910dc090 R08: 0000000000000000 R09: 0000000000000000 [ 255.121395][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.121402][T16681] R13: 00007f3290426038 R14: 00007f3290425fa0 R15: 00007ffc89b97778 [ 255.121416][T16681] [ 255.155326][ T5082] m920x_read = error: -19 [ 255.155347][ T5082] dvb-usb: error while querying for an remote control event. [ 255.155396][ T5082] m920x_read = error: -19 [ 255.155410][ T5082] dvb-usb: error while querying for an remote control event. [ 255.164713][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 255.164779][T16683] netlink: 'syz.4.3691': attribute type 12 has an invalid length. [ 255.229971][T16685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3692'. [ 255.265140][ T5814] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 255.265399][ T5082] m920x_read = error: -19 [ 255.265415][ T5082] dvb-usb: error while querying for an remote control event. [ 255.265461][ T5082] m920x_read = error: -19 [ 255.265477][ T5082] dvb-usb: error while querying for an remote control event. [ 255.273442][T11684] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.280329][T11684] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 255.282502][T11684] usb 5-1: USB disconnect, device number 29 [ 255.340269][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.340352][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.340427][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.340496][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.340567][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.340637][T16699] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 255.375032][ T5082] m920x_read = error: -19 [ 255.375056][ T5082] dvb-usb: error while querying for an remote control event. [ 255.375104][ T5082] m920x_read = error: -19 [ 255.375118][ T5082] dvb-usb: error while querying for an remote control event. [ 255.414935][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 255.415649][ T5814] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 255.417066][ T5814] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.418881][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.418901][ T5814] usb 6-1: Product: syz [ 255.418912][ T5814] usb 6-1: Manufacturer: syz [ 255.418923][ T5814] usb 6-1: SerialNumber: syz [ 255.421287][ T5814] usb 6-1: config 0 descriptor?? [ 255.438358][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.438406][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.495044][ T5082] m920x_read = error: -19 [ 255.495063][ T5082] dvb-usb: error while querying for an remote control event. [ 255.495110][ T5082] m920x_read = error: -19 [ 255.495124][ T5082] dvb-usb: error while querying for an remote control event. [ 255.605085][ T5082] m920x_read = error: -19 [ 255.605109][ T5082] dvb-usb: error while querying for an remote control event. [ 255.605162][ T5082] m920x_read = error: -19 [ 255.605177][ T5082] dvb-usb: error while querying for an remote control event. [ 255.715233][ T5082] m920x_read = error: -19 [ 255.715256][ T5082] dvb-usb: error while querying for an remote control event. [ 255.715308][ T5082] m920x_read = error: -19 [ 255.715322][ T5082] dvb-usb: error while querying for an remote control event. [ 255.750315][T11684] usb 12-1: USB disconnect, device number 24 [ 255.825435][ T5082] m920x_read = error: -19 [ 255.825458][ T5082] dvb-usb: error while querying for an remote control event. [ 255.825553][ T5082] m920x_read = error: -19 [ 255.825568][ T5082] dvb-usb: error while querying for an remote control event. [ 255.861108][T16719] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3699'. [ 255.879902][T16727] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 255.879926][T16727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.879950][T16727] overlayfs: conflicting lowerdir path [ 255.881491][T16727] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 255.881512][T16727] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 255.935348][ T5814] m920x_read = error: -19 [ 255.935371][ T5814] dvb-usb: error while querying for an remote control event. [ 255.935431][ T5814] m920x_read = error: -19 [ 255.935446][ T5814] dvb-usb: error while querying for an remote control event. [ 256.045120][ T5814] m920x_read = error: -19 [ 256.045136][ T5814] dvb-usb: error while querying for an remote control event. [ 256.045167][ T5814] m920x_read = error: -19 [ 256.045175][ T5814] dvb-usb: error while querying for an remote control event. [ 256.165131][ T5814] m920x_read = error: -19 [ 256.165154][ T5814] dvb-usb: error while querying for an remote control event. [ 256.165207][ T5814] m920x_read = error: -19 [ 256.165221][ T5814] dvb-usb: error while querying for an remote control event. [ 256.187198][T16768] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 256.187213][T16768] device-mapper: ioctl: error adding target to table [ 256.275542][ T5814] m920x_read = error: -19 [ 256.275558][ T5814] dvb-usb: error while querying for an remote control event. [ 256.275587][ T5814] m920x_read = error: -19 [ 256.275595][ T5814] dvb-usb: error while querying for an remote control event. [ 256.334947][T11684] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 256.341794][T16783] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3721'. [ 256.385043][ T5814] m920x_read = error: -19 [ 256.385058][ T5814] dvb-usb: error while querying for an remote control event. [ 256.385086][ T5814] m920x_read = error: -19 [ 256.385098][ T5814] dvb-usb: error while querying for an remote control event. [ 256.486079][T11684] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 256.487138][T11684] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 256.487158][T11684] usb 5-1: config 1 has no interface number 0 [ 256.489241][T11684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.489260][T11684] usb 5-1: Product: syz [ 256.489274][T11684] usb 5-1: Manufacturer: syz [ 256.489286][T11684] usb 5-1: SerialNumber: syz [ 256.497050][T11684] usb 5-1: 3:1 : does not exist [ 256.497069][T11684] usb 5-1: 3:2 : does not exist [ 256.497891][ T5814] m920x_read = error: -19 [ 256.497903][ T5814] dvb-usb: error while querying for an remote control event. [ 256.497932][ T5814] m920x_read = error: -19 [ 256.497940][ T5814] dvb-usb: error while querying for an remote control event. [ 256.605035][ T5082] m920x_read = error: -19 [ 256.605051][ T5082] dvb-usb: error while querying for an remote control event. [ 256.605077][ T5082] m920x_read = error: -19 [ 256.605085][ T5082] dvb-usb: error while querying for an remote control event. [ 256.715086][ T5814] m920x_read = error: -19 [ 256.715110][ T5814] dvb-usb: error while querying for an remote control event. [ 256.715706][ T5814] m920x_read = error: -19 [ 256.715721][ T5814] dvb-usb: error while querying for an remote control event. [ 256.825164][ T5814] m920x_read = error: -19 [ 256.825189][ T5814] dvb-usb: error while querying for an remote control event. [ 256.825308][ T5814] m920x_read = error: -19 [ 256.825325][ T5814] dvb-usb: error while querying for an remote control event. [ 256.945447][ T5082] m920x_read = error: -19 [ 256.945473][ T5082] dvb-usb: error while querying for an remote control event. [ 256.945570][ T5082] m920x_read = error: -19 [ 256.945584][ T5082] dvb-usb: error while querying for an remote control event. [ 257.054991][ T5082] m920x_read = error: -19 [ 257.055007][ T5082] dvb-usb: error while querying for an remote control event. [ 257.055078][ T5082] m920x_read = error: -19 [ 257.055088][ T5082] dvb-usb: error while querying for an remote control event. [ 257.165249][ T5082] m920x_read = error: -19 [ 257.165301][ T5082] dvb-usb: error while querying for an remote control event. [ 257.165332][ T5082] m920x_read = error: -19 [ 257.165341][ T5082] dvb-usb: error while querying for an remote control event. [ 257.248969][ T5082] usb 5-1: USB disconnect, device number 30 [ 257.285368][ T5814] m920x_read = error: -19 [ 257.285388][ T5814] dvb-usb: error while querying for an remote control event. [ 257.285438][ T5814] m920x_read = error: -19 [ 257.285454][ T5814] dvb-usb: error while querying for an remote control event. [ 257.395346][ T5814] m920x_read = error: -19 [ 257.395362][ T5814] dvb-usb: error while querying for an remote control event. [ 257.395391][ T5814] m920x_read = error: -19 [ 257.395399][ T5814] dvb-usb: error while querying for an remote control event. [ 257.506340][ T5082] m920x_read = error: -19 [ 257.506357][ T5082] dvb-usb: error while querying for an remote control event. [ 257.506394][ T5082] m920x_read = error: -19 [ 257.506402][ T5082] dvb-usb: error while querying for an remote control event. [ 257.625256][ T5082] m920x_read = error: -19 [ 257.625272][ T5082] dvb-usb: error while querying for an remote control event. [ 257.625302][ T5082] m920x_read = error: -19 [ 257.625310][ T5082] dvb-usb: error while querying for an remote control event. [ 257.745459][ T5082] m920x_read = error: -19 [ 257.745483][ T5082] dvb-usb: error while querying for an remote control event. [ 257.745587][ T5082] m920x_read = error: -19 [ 257.745603][ T5082] dvb-usb: error while querying for an remote control event. [ 257.823104][ T1041] usb 6-1: USB disconnect, device number 55 [ 257.837367][T16823] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 257.837388][T16823] device-mapper: ioctl: error adding target to table [ 257.859838][ T5082] m920x_read = error: -19 [ 257.859860][ T5082] dvb-usb: error while querying for an remote control event. [ 257.859913][ T5082] m920x_read = error: -19 [ 257.859928][ T5082] dvb-usb: error while querying for an remote control event. [ 257.914232][T16832] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 257.959139][T16832] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 257.976480][ T5814] m920x_read = error: -19 [ 257.976495][ T5814] dvb-usb: error while querying for an remote control event. [ 257.976553][ T5814] m920x_read = error: -19 [ 257.976563][ T5814] dvb-usb: error while querying for an remote control event. [ 258.061990][T16858] FAULT_INJECTION: forcing a failure. [ 258.061990][T16858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.062022][T16858] CPU: 3 UID: 0 PID: 16858 Comm: syz.0.3736 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.062046][T16858] Tainted: [L]=SOFTLOCKUP [ 258.062052][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.062063][T16858] Call Trace: [ 258.062069][T16858] [ 258.062078][T16858] dump_stack_lvl+0x100/0x190 [ 258.062122][T16858] should_fail_ex.cold+0x5/0xa [ 258.062143][T16858] ? prepare_alloc_pages+0x16d/0x5b0 [ 258.062178][T16858] should_fail_alloc_page+0xeb/0x140 [ 258.062207][T16858] prepare_alloc_pages+0x1f0/0x5b0 [ 258.062237][T16858] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 258.062260][T16858] ? __pfx_get_page_from_freelist+0x10/0x10 [ 258.062282][T16858] ? prepare_alloc_pages+0x1f0/0x5b0 [ 258.062308][T16858] ? is_bpf_text_address+0x94/0x1a0 [ 258.062338][T16858] ? rcu_is_watching+0x13/0xc0 [ 258.062365][T16858] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 258.062391][T16858] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.062419][T16858] ? stack_trace_save+0x8e/0xc0 [ 258.062437][T16858] ? __pfx_stack_trace_save+0x10/0x10 [ 258.062456][T16858] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.062477][T16858] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.062497][T16858] ? is_bpf_text_address+0x94/0x1a0 [ 258.062529][T16858] ? kasan_save_track+0x14/0x30 [ 258.062552][T16858] ? __kasan_slab_alloc+0x89/0x90 [ 258.062580][T16858] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 258.062602][T16858] ? alloc_vmap_area+0x1814/0x2bb0 [ 258.062625][T16858] ? __get_vm_area_node+0x1ed/0x350 [ 258.062649][T16858] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 258.062676][T16858] ? __vmalloc_node_noprof+0xad/0xf0 [ 258.062701][T16858] ? __vmalloc_noprof+0xa3/0x120 [ 258.062727][T16858] ? do_replace+0x1c6/0x490 [ 258.062748][T16858] ? do_ebt_set_ctl+0x55a/0x670 [ 258.062766][T16858] ? nf_setsockopt+0x8d/0xf0 [ 258.062785][T16858] ? ip_setsockopt+0xcb/0xf0 [ 258.062809][T16858] ? tcp_setsockopt+0xa7/0x100 [ 258.062825][T16858] ? do_sock_setsockopt+0xf3/0x1d0 [ 258.062844][T16858] ? __sys_setsockopt+0x195/0x220 [ 258.062867][T16858] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 258.062895][T16858] ? policy_nodemask+0xed/0x4f0 [ 258.062929][T16858] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 258.062955][T16858] __kasan_populate_vmalloc+0xf0/0x210 [ 258.062973][T16858] alloc_vmap_area+0x95d/0x2bb0 [ 258.062992][T16858] ? kasan_save_track+0x14/0x30 [ 258.063006][T16858] ? __kasan_kmalloc+0xaa/0xb0 [ 258.063021][T16858] ? __pfx_alloc_vmap_area+0x10/0x10 [ 258.063043][T16858] ? __get_vm_area_node+0x124/0x350 [ 258.063069][T16858] __get_vm_area_node+0x1ed/0x350 [ 258.063100][T16858] __vmalloc_node_range_noprof+0x268/0x1420 [ 258.063128][T16858] ? do_replace+0x1c6/0x490 [ 258.063145][T16858] ? is_bpf_text_address+0x25/0x1a0 [ 258.063172][T16858] ? find_held_lock+0x2b/0x80 [ 258.063198][T16858] ? is_bpf_text_address+0x8a/0x1a0 [ 258.063223][T16858] ? is_bpf_text_address+0x8a/0x1a0 [ 258.063249][T16858] ? bpf_ksym_find+0x128/0x1c0 [ 258.063268][T16858] ? do_replace+0x1c6/0x490 [ 258.063293][T16858] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.063348][T16858] ? do_replace+0x1c6/0x490 [ 258.063369][T16858] __vmalloc_node_noprof+0xad/0xf0 [ 258.063396][T16858] ? do_replace+0x1c6/0x490 [ 258.063417][T16858] __vmalloc_noprof+0xa3/0x120 [ 258.063444][T16858] ? __pfx___vmalloc_noprof+0x10/0x10 [ 258.063480][T16858] do_replace+0x1c6/0x490 [ 258.063500][T16858] ? __pfx_do_replace+0x10/0x10 [ 258.063530][T16858] ? bpf_lsm_capable+0x9/0x10 [ 258.063548][T16858] ? security_capable+0x80/0x260 [ 258.063573][T16858] do_ebt_set_ctl+0x55a/0x670 [ 258.063594][T16858] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 258.063616][T16858] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 258.063649][T16858] ? nf_sockopt_find.isra.0+0x222/0x290 [ 258.063673][T16858] nf_setsockopt+0x8d/0xf0 [ 258.063695][T16858] ip_setsockopt+0xcb/0xf0 [ 258.063724][T16858] tcp_setsockopt+0xa7/0x100 [ 258.063742][T16858] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 258.063766][T16858] do_sock_setsockopt+0xf3/0x1d0 [ 258.063791][T16858] __sys_setsockopt+0x195/0x220 [ 258.063814][T16858] __x64_sys_setsockopt+0xbd/0x160 [ 258.063830][T16858] ? do_syscall_64+0xae/0x790 [ 258.063861][T16858] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.063886][T16858] do_syscall_64+0x123/0x790 [ 258.063918][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.063936][T16858] RIP: 0033:0x7fc97939e2d9 [ 258.063951][T16858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.063964][T16858] RSP: 002b:00007fc97a2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.063976][T16858] RAX: ffffffffffffffda RBX: 00007fc979625fa0 RCX: 00007fc97939e2d9 [ 258.063983][T16858] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.063990][T16858] RBP: 00007fc97a2eb090 R08: 0000000000000618 R09: 0000000000000000 [ 258.063997][T16858] R10: 0000200000002c00 R11: 0000000000000246 R12: 0000000000000001 [ 258.064003][T16858] R13: 00007fc979626038 R14: 00007fc979625fa0 R15: 00007fff0aaf36e8 [ 258.064018][T16858] [ 258.064085][T16858] warn_alloc: 3 callbacks suppressed [ 258.064092][T16858] syz.0.3736: vmalloc error: size 640, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.064125][T16858] CPU: 3 UID: 0 PID: 16858 Comm: syz.0.3736 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.064140][T16858] Tainted: [L]=SOFTLOCKUP [ 258.064144][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.064151][T16858] Call Trace: [ 258.064155][T16858] [ 258.064159][T16858] dump_stack_lvl+0x100/0x190 [ 258.064177][T16858] warn_alloc.cold+0x9e/0xb2 [ 258.064190][T16858] ? __pfx_warn_alloc+0x10/0x10 [ 258.064202][T16858] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.064219][T16858] ? __get_vm_area_node+0x2f0/0x350 [ 258.064237][T16858] ? __get_vm_area_node+0x22b/0x350 [ 258.064256][T16858] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 258.064273][T16858] ? is_bpf_text_address+0x25/0x1a0 [ 258.064289][T16858] ? find_held_lock+0x2b/0x80 [ 258.064305][T16858] ? is_bpf_text_address+0x8a/0x1a0 [ 258.064321][T16858] ? is_bpf_text_address+0x8a/0x1a0 [ 258.064337][T16858] ? bpf_ksym_find+0x128/0x1c0 [ 258.064348][T16858] ? do_replace+0x1c6/0x490 [ 258.064362][T16858] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.064393][T16858] ? do_replace+0x1c6/0x490 [ 258.064410][T16858] __vmalloc_node_noprof+0xad/0xf0 [ 258.064435][T16858] ? do_replace+0x1c6/0x490 [ 258.064456][T16858] __vmalloc_noprof+0xa3/0x120 [ 258.064482][T16858] ? __pfx___vmalloc_noprof+0x10/0x10 [ 258.064517][T16858] do_replace+0x1c6/0x490 [ 258.064537][T16858] ? __pfx_do_replace+0x10/0x10 [ 258.064566][T16858] ? bpf_lsm_capable+0x9/0x10 [ 258.064582][T16858] ? security_capable+0x80/0x260 [ 258.064607][T16858] do_ebt_set_ctl+0x55a/0x670 [ 258.064630][T16858] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 258.064652][T16858] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 258.064684][T16858] ? nf_sockopt_find.isra.0+0x222/0x290 [ 258.064708][T16858] nf_setsockopt+0x8d/0xf0 [ 258.064730][T16858] ip_setsockopt+0xcb/0xf0 [ 258.064759][T16858] tcp_setsockopt+0xa7/0x100 [ 258.064777][T16858] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 258.064819][T16858] do_sock_setsockopt+0xf3/0x1d0 [ 258.064844][T16858] __sys_setsockopt+0x195/0x220 [ 258.064868][T16858] __x64_sys_setsockopt+0xbd/0x160 [ 258.064885][T16858] ? do_syscall_64+0xae/0x790 [ 258.064914][T16858] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.064939][T16858] do_syscall_64+0x123/0x790 [ 258.064967][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.064986][T16858] RIP: 0033:0x7fc97939e2d9 [ 258.065001][T16858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.065018][T16858] RSP: 002b:00007fc97a2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.065035][T16858] RAX: ffffffffffffffda RBX: 00007fc979625fa0 RCX: 00007fc97939e2d9 [ 258.065047][T16858] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.065058][T16858] RBP: 00007fc97a2eb090 R08: 0000000000000618 R09: 0000000000000000 [ 258.065069][T16858] R10: 0000200000002c00 R11: 0000000000000246 R12: 0000000000000001 [ 258.065080][T16858] R13: 00007fc979626038 R14: 00007fc979625fa0 R15: 00007fff0aaf36e8 [ 258.065106][T16858] [ 258.066276][T16858] Mem-Info: [ 258.066288][T16858] active_anon:7249 inactive_anon:4524 isolated_anon:0 [ 258.066288][T16858] active_file:3897 inactive_file:26945 isolated_file:0 [ 258.066288][T16858] unevictable:1000 dirty:190 writeback:0 [ 258.066288][T16858] slab_reclaimable:8414 slab_unreclaimable:89617 [ 258.066288][T16858] mapped:32727 shmem:3988 pagetables:1588 [ 258.066288][T16858] sec_pagetables:305 bounce:0 [ 258.066288][T16858] kernel_misc_reclaimable:0 [ 258.066288][T16858] free:389024 free_pcp:8380 free_cma:0 [ 258.066332][T16858] Node 0 active_anon:26316kB inactive_anon:18092kB active_file:14172kB inactive_file:97232kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:84584kB dirty:748kB writeback:0kB shmem:13944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16000kB pagetables:5932kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.066378][T16858] Node 1 active_anon:2680kB inactive_anon:4kB active_file:1416kB inactive_file:10548kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:46324kB dirty:12kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:420kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.066422][T16858] Node 0 DMA free:8804kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:264kB active_file:0kB inactive_file:2780kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 258.066468][T16858] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 258.066498][T16858] Node 0 DMA32 free:209380kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26304kB inactive_anon:17828kB active_file:14172kB inactive_file:94452kB unevictable:2000kB writepending:748kB zspages:268kB present:2080628kB managed:1233668kB mlocked:0kB bounce:0kB free_pcp:26592kB local_pcp:7280kB free_cma:0kB [ 258.066548][T16858] lowmem_reserve[]: 0 0 0 0 0 [ 258.066577][T16858] Node 1 Normal free:1337912kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2680kB inactive_anon:4kB active_file:1416kB inactive_file:10548kB unevictable:2000kB writepending:12kB zspages:2556kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6772kB local_pcp:1332kB free_cma:0kB [ 258.066626][T16858] lowmem_reserve[]: 0 0 0 0 0 [ 258.066654][T16858] Node 0 DMA: 77*4kB (UME) 58*8kB (UME) 32*16kB (UME) 29*32kB (UME) 13*64kB (UM) 11*128kB (UME) 7*256kB (UME) 3*512kB (UE) 1*1024kB (M) 0*2048kB 0*4096kB = 8804kB [ 258.066784][T16858] Node 0 DMA32: 802*4kB (UME) 547*8kB (UME) 169*16kB (U) 9*32kB (UM) 2*64kB (UM) 135*128kB (UM) 122*256kB (UM) 83*512kB (UME) 57*1024kB (UM) 16*2048kB (UM) 4*4096kB (UM) = 209232kB [ 258.066925][T16858] Node 1 Normal: 80*4kB (ME) 197*8kB (UME) 127*16kB (UME) 183*32kB (UME) 168*64kB (UME) 152*128kB (UME) 112*256kB (UME) 53*512kB (UME) 55*1024kB (UME) 45*2048kB (UME) 267*4096kB (UM) = 1337912kB [ 258.067054][T16858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.067063][T16858] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.067071][T16858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.067079][T16858] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.067087][T16858] 34918 total pagecache pages [ 258.067091][T16858] 90 pages in swap cache [ 258.067095][T16858] Free swap = 117300kB [ 258.067099][T16858] Total swap = 124996kB [ 258.067103][T16858] 1048443 pages RAM [ 258.067107][T16858] 0 pages HighMem/MovableOnly [ 258.067111][T16858] 290716 pages reserved [ 258.067114][T16858] 0 pages cma reserved [ 258.085060][ T5814] m920x_read = error: -19 [ 258.085075][ T5814] dvb-usb: error while querying for an remote control event. [ 258.085103][ T5814] m920x_read = error: -19 [ 258.085111][ T5814] dvb-usb: error while querying for an remote control event. [ 258.152054][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 258.152065][ T43] audit: type=1326 audit(1791935062.365:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16859 comm="syz.4.3745" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f329019e2d9 code=0x0 [ 258.192685][T16868] fuse: fd is not a fuse device [ 258.205011][ T5814] m920x_read = error: -19 [ 258.205024][ T5814] dvb-usb: error while querying for an remote control event. [ 258.205051][ T5814] m920x_read = error: -19 [ 258.205059][ T5814] dvb-usb: error while querying for an remote control event. [ 258.316818][ T5814] m920x_read = error: -19 [ 258.316832][ T5814] dvb-usb: error while querying for an remote control event. [ 258.316888][ T5814] m920x_read = error: -19 [ 258.316897][ T5814] dvb-usb: error while querying for an remote control event. [ 258.396845][ T1041] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 258.447848][ T5814] m920x_read = error: -19 [ 258.447871][ T5814] dvb-usb: error while querying for an remote control event. [ 258.447900][ T5814] m920x_read = error: -19 [ 258.447908][ T5814] dvb-usb: error while querying for an remote control event. [ 258.565050][ T5814] m920x_read = error: -19 [ 258.565128][ T5814] dvb-usb: error while querying for an remote control event. [ 258.565181][ T5814] m920x_read = error: -19 [ 258.565196][ T5814] dvb-usb: error while querying for an remote control event. [ 258.595413][ T1041] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 258.596294][ T1041] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 258.596313][ T1041] usb 6-1: config 1 has no interface number 0 [ 258.597896][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.597908][ T1041] usb 6-1: Product: syz [ 258.597915][ T1041] usb 6-1: Manufacturer: syz [ 258.597923][ T1041] usb 6-1: SerialNumber: syz [ 258.603444][ T1041] usb 6-1: 3:1 : does not exist [ 258.603455][ T1041] usb 6-1: 3:2 : does not exist [ 258.665097][ T5082] m920x_read = error: -19 [ 258.665121][ T5082] dvb-usb: error while querying for an remote control event. [ 258.665171][ T5082] m920x_read = error: -19 [ 258.665186][ T5082] dvb-usb: error while querying for an remote control event. [ 258.785094][ T5082] m920x_read = error: -19 [ 258.785108][ T5082] dvb-usb: error while querying for an remote control event. [ 258.785136][ T5082] m920x_read = error: -19 [ 258.785144][ T5082] dvb-usb: error while querying for an remote control event. [ 258.905208][ T5082] m920x_read = error: -19 [ 258.905259][ T5082] dvb-usb: error while querying for an remote control event. [ 258.905317][ T5082] m920x_read = error: -19 [ 258.905331][ T5082] dvb-usb: error while querying for an remote control event. [ 259.000917][T16896] bridge1: entered allmulticast mode [ 259.003693][ T43] audit: type=1400 audit(1791935063.215:1572): avc: denied { getopt } for pid=16895 comm="syz.0.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.009102][T16899] bridge2: entered allmulticast mode [ 259.032588][ T5082] m920x_read = error: -19 [ 259.032614][ T5082] dvb-usb: error while querying for an remote control event. [ 259.032670][ T5082] m920x_read = error: -19 [ 259.032686][ T5082] dvb-usb: error while querying for an remote control event. [ 259.135118][ T5082] m920x_read = error: -19 [ 259.135134][ T5082] dvb-usb: error while querying for an remote control event. [ 259.135167][ T5082] m920x_read = error: -19 [ 259.135175][ T5082] dvb-usb: error while querying for an remote control event. [ 259.155719][T16907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.245059][ T5082] m920x_read = error: -19 [ 259.245083][ T5082] dvb-usb: error while querying for an remote control event. [ 259.245136][ T5082] m920x_read = error: -19 [ 259.245152][ T5082] dvb-usb: error while querying for an remote control event. [ 259.269530][T16925] evm: overlay not supported [ 259.282160][T16925] overlayfs: failed lookup in lower (newroot/46, name='file0', err=-40): overlapping layers [ 259.282299][ T43] audit: type=1326 audit(1791935063.495:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.4.3756" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f329019e2d9 code=0x0 [ 259.282555][T16925] overlayfs: failed lookup in lower (newroot/46, name='file0', err=-40): overlapping layers [ 259.363605][ T1041] usb 6-1: USB disconnect, device number 56 [ 259.364998][ T5082] m920x_read = error: -19 [ 259.365011][ T5082] dvb-usb: error while querying for an remote control event. [ 259.365038][ T5082] m920x_read = error: -19 [ 259.365046][ T5082] dvb-usb: error while querying for an remote control event. [ 259.485059][ T5082] m920x_read = error: -19 [ 259.485074][ T5082] dvb-usb: error while querying for an remote control event. [ 259.485102][ T5082] m920x_read = error: -19 [ 259.485111][ T5082] dvb-usb: error while querying for an remote control event. [ 259.540382][T16967] input: syz0 as /devices/virtual/input/input38 [ 259.590991][ T43] audit: type=1400 audit(1791935063.805:1574): avc: denied { ioctl } for pid=16972 comm="syz.0.3769" path="socket:[59138]" dev="sockfs" ino=59138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.593469][T16973] smc: net device veth1_macvtap applied user defined pnetid SYZ2 [ 259.595888][ T5082] m920x_read = error: -19 [ 259.595908][ T5082] dvb-usb: error while querying for an remote control event. [ 259.595965][ T5082] m920x_read = error: -19 [ 259.595979][ T5082] dvb-usb: error while querying for an remote control event. [ 259.640548][T16978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.659192][T16978] gadgetfs: bound to dummy_udc driver [ 259.705113][ T5814] m920x_read = error: -19 [ 259.705137][ T5814] dvb-usb: error while querying for an remote control event. [ 259.705189][ T5814] m920x_read = error: -19 [ 259.705204][ T5814] dvb-usb: error while querying for an remote control event. [ 259.815078][ T5814] m920x_read = error: -19 [ 259.815102][ T5814] dvb-usb: error while querying for an remote control event. [ 259.815147][ T5814] m920x_read = error: -19 [ 259.815163][ T5814] dvb-usb: error while querying for an remote control event. [ 259.915643][ T5082] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 259.915889][ C0] gadgetfs: connected [ 259.916017][ T5082] gadgetfs: disconnected [ 259.936245][ T5877] m920x_read = error: -19 [ 259.936259][ T5877] dvb-usb: error while querying for an remote control event. [ 259.936293][ T5877] m920x_read = error: -19 [ 259.936302][ T5877] dvb-usb: error while querying for an remote control event. [ 260.055074][ T5877] m920x_read = error: -19 [ 260.055096][ T5877] dvb-usb: error while querying for an remote control event. [ 260.055140][ T5877] m920x_read = error: -19 [ 260.055153][ T5877] dvb-usb: error while querying for an remote control event. [ 260.107297][T17033] ip6t_rt: too many addresses specified [ 260.144849][ T43] audit: type=1400 audit(1791935064.355:1575): avc: denied { read } for pid=17019 comm="syz.0.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.164966][ T5877] m920x_read = error: -19 [ 260.164986][ T5877] dvb-usb: error while querying for an remote control event. [ 260.165033][ T5877] m920x_read = error: -19 [ 260.165048][ T5877] dvb-usb: error while querying for an remote control event. [ 260.205344][T17048] Format for deleting device is "id" (uint). [ 260.206460][T17049] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3795'. [ 260.258488][T17055] kAFS: unable to lookup cell '(,c¾Ì' [ 260.275094][ T5814] m920x_read = error: -19 [ 260.275117][ T5814] dvb-usb: error while querying for an remote control event. [ 260.275168][ T5814] m920x_read = error: -19 [ 260.275184][ T5814] dvb-usb: error while querying for an remote control event. [ 260.370331][ T43] audit: type=1326 audit(1791935064.585:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.7.3798" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4206d9e2d9 code=0x0 [ 260.384983][ T5814] m920x_read = error: -19 [ 260.385003][ T5814] dvb-usb: error while querying for an remote control event. [ 260.385043][ T5814] m920x_read = error: -19 [ 260.385054][ T5814] dvb-usb: error while querying for an remote control event. [ 260.401490][T17073] jffs2: notice: (17073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 260.404779][ T43] audit: type=1400 audit(1791935064.615:1577): avc: denied { write } for pid=17072 comm="syz.4.3802" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.411857][ T43] audit: type=1400 audit(1791935064.625:1578): avc: denied { read append open } for pid=17072 comm="syz.4.3802" path="/139/file0/blkio.throttle.io_service_bytes" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 260.414444][ T43] audit: type=1400 audit(1791935064.625:1579): avc: denied { ioctl } for pid=17072 comm="syz.4.3802" path="/139/file0/blkio.throttle.io_service_bytes" dev="jffs2" ino=4 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 260.495315][ T5814] m920x_read = error: -19 [ 260.495338][ T5814] dvb-usb: error while querying for an remote control event. [ 260.495389][ T5814] m920x_read = error: -19 [ 260.495404][ T5814] dvb-usb: error while querying for an remote control event. [ 260.605611][ T5814] m920x_read = error: -19 [ 260.605638][ T5814] dvb-usb: error while querying for an remote control event. [ 260.605691][ T5814] m920x_read = error: -19 [ 260.605706][ T5814] dvb-usb: error while querying for an remote control event. [ 260.631512][T17091] gadgetfs: bound to dummy_udc driver [ 260.725241][ T5814] m920x_read = error: -19 [ 260.725261][ T5814] dvb-usb: error while querying for an remote control event. [ 260.725304][ T5814] m920x_read = error: -19 [ 260.725318][ T5814] dvb-usb: error while querying for an remote control event. [ 260.835107][ T5814] m920x_read = error: -19 [ 260.835133][ T5814] dvb-usb: error while querying for an remote control event. [ 260.835186][ T5814] m920x_read = error: -19 [ 260.835200][ T5814] dvb-usb: error while querying for an remote control event. [ 260.946239][ T5814] m920x_read = error: -19 [ 260.946260][ T5814] dvb-usb: error while querying for an remote control event. [ 260.946311][ T5814] m920x_read = error: -19 [ 260.946323][ T5814] dvb-usb: error while querying for an remote control event. [ 261.005189][ C0] gadgetfs: connected [ 261.006185][ T5082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 261.006346][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.006597][T17090] gadgetfs: suspended from state 3 [ 261.006718][ T5082] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 261.006756][ T5082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.007183][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.007953][T17090] gadgetfs: disconnected [ 261.016831][ T5082] usb 5-1: can't set config #1, error -71 [ 261.023274][ T5082] usb 5-1: USB disconnect, device number 31 [ 261.065307][ T5814] m920x_read = error: -19 [ 261.065330][ T5814] dvb-usb: error while querying for an remote control event. [ 261.065382][ T5814] m920x_read = error: -19 [ 261.065397][ T5814] dvb-usb: error while querying for an remote control event. [ 261.105645][T17134] FAULT_INJECTION: forcing a failure. [ 261.105645][T17134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.105681][T17134] CPU: 1 UID: 0 PID: 17134 Comm: syz.1.3820 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.105710][T17134] Tainted: [L]=SOFTLOCKUP [ 261.105719][T17134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.105736][T17134] Call Trace: [ 261.105744][T17134] [ 261.105753][T17134] dump_stack_lvl+0x100/0x190 [ 261.105791][T17134] should_fail_ex.cold+0x5/0xa [ 261.105816][T17134] ? prepare_alloc_pages+0x16d/0x5b0 [ 261.105851][T17134] should_fail_alloc_page+0xeb/0x140 [ 261.105884][T17134] prepare_alloc_pages+0x1f0/0x5b0 [ 261.105917][T17134] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 261.105947][T17134] ? prepare_alloc_pages+0x111/0x5b0 [ 261.105992][T17134] ? is_bpf_text_address+0x94/0x1a0 [ 261.106029][T17134] ? rcu_is_watching+0x13/0xc0 [ 261.106062][T17134] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 261.106092][T17134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 261.106123][T17134] ? stack_trace_save+0x8e/0xc0 [ 261.106145][T17134] ? __pfx_stack_trace_save+0x10/0x10 [ 261.106166][T17134] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.106189][T17134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 261.106213][T17134] ? is_bpf_text_address+0x94/0x1a0 [ 261.106247][T17134] ? kasan_save_track+0x14/0x30 [ 261.106275][T17134] ? __kasan_slab_alloc+0x89/0x90 [ 261.106322][T17134] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 261.106352][T17134] ? alloc_vmap_area+0x640/0x2bb0 [ 261.106377][T17134] ? __get_vm_area_node+0x1ed/0x350 [ 261.106405][T17134] ? get_vm_area_caller+0x71/0xa0 [ 261.106432][T17134] ? vmap+0x132/0x2e0 [ 261.106458][T17134] ? ringbuf_map_alloc+0x363/0x860 [ 261.106483][T17134] ? map_create+0x874/0x30d0 [ 261.106501][T17134] ? __sys_bpf+0x12a0/0x4a30 [ 261.106522][T17134] ? __x64_sys_bpf+0xce/0x140 [ 261.106544][T17134] ? do_syscall_64+0x123/0x790 [ 261.106573][T17134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.106603][T17134] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 261.106635][T17134] ? policy_nodemask+0xed/0x4f0 [ 261.106668][T17134] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 261.106709][T17134] __kasan_populate_vmalloc+0xf0/0x210 [ 261.106753][T17134] alloc_vmap_area+0x95d/0x2bb0 [ 261.106792][T17134] ? kasan_save_track+0x14/0x30 [ 261.106823][T17134] ? __kasan_kmalloc+0xaa/0xb0 [ 261.106853][T17134] ? __pfx_alloc_vmap_area+0x10/0x10 [ 261.106883][T17134] ? __get_vm_area_node+0x124/0x350 [ 261.106916][T17134] __get_vm_area_node+0x1ed/0x350 [ 261.106948][T17134] ? ringbuf_map_alloc+0x363/0x860 [ 261.106975][T17134] get_vm_area_caller+0x71/0xa0 [ 261.107004][T17134] ? ringbuf_map_alloc+0x363/0x860 [ 261.107031][T17134] vmap+0x132/0x2e0 [ 261.107058][T17134] ? __pfx_vmap+0x10/0x10 [ 261.107084][T17134] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 261.107111][T17134] ? __bpf_map_area_alloc+0x13a/0x200 [ 261.107141][T17134] ringbuf_map_alloc+0x363/0x860 [ 261.107173][T17134] map_create+0x874/0x30d0 [ 261.107191][T17134] ? find_held_lock+0x2b/0x80 [ 261.107222][T17134] ? avc_has_perm_noaudit+0x11e/0x470 [ 261.107244][T17134] ? avc_has_perm_noaudit+0x11e/0x470 [ 261.107274][T17134] ? __pfx_map_create+0x10/0x10 [ 261.107294][T17134] ? avc_has_perm+0x135/0x1e0 [ 261.107317][T17134] ? __pfx_avc_has_perm+0x10/0x10 [ 261.107337][T17134] ? __might_fault+0xc5/0x140 [ 261.107361][T17134] ? __might_fault+0xc5/0x140 [ 261.107388][T17134] ? selinux_bpf+0xfb/0x150 [ 261.107415][T17134] __sys_bpf+0x12a0/0x4a30 [ 261.107446][T17134] ? __pfx___sys_bpf+0x10/0x10 [ 261.107467][T17134] ? find_held_lock+0x2b/0x80 [ 261.107497][T17134] ? futex_wake+0x4ea/0x5e0 [ 261.107537][T17134] ? percpu_counter_add_batch+0xb9/0x230 [ 261.107568][T17134] ? errseq_sample+0x51/0x70 [ 261.107597][T17134] ? file_init_path+0x48e/0x670 [ 261.107645][T17134] ? __x64_sys_futex+0x34f/0x4d0 [ 261.107675][T17134] ? __x64_sys_futex+0x358/0x4d0 [ 261.107707][T17134] ? __sys_socket+0xac/0x260 [ 261.107744][T17134] ? xfd_validate_state+0x129/0x190 [ 261.107773][T17134] ? __x64_sys_bpf+0xce/0x140 [ 261.107798][T17134] __x64_sys_bpf+0xce/0x140 [ 261.107824][T17134] ? do_syscall_64+0xae/0x790 [ 261.107855][T17134] do_syscall_64+0x123/0x790 [ 261.107888][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.107908][T17134] RIP: 0033:0x7f998679e2d9 [ 261.107924][T17134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.107941][T17134] RSP: 002b:00007f99876e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.107961][T17134] RAX: ffffffffffffffda RBX: 00007f9986a25fa0 RCX: 00007f998679e2d9 [ 261.107974][T17134] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 261.107987][T17134] RBP: 00007f9986835888 R08: 0000000000000000 R09: 0000000000000000 [ 261.107999][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.108011][T17134] R13: 00007f9986a26038 R14: 00007f9986a25fa0 R15: 00007ffd7b052f58 [ 261.108039][T17134] [ 261.187557][ T5814] m920x_read = error: -19 [ 261.187572][ T5814] dvb-usb: error while querying for an remote control event. [ 261.187600][ T5814] m920x_read = error: -19 [ 261.187608][ T5814] dvb-usb: error while querying for an remote control event. [ 261.295047][ T5082] m920x_read = error: -19 [ 261.295061][ T5082] dvb-usb: error while querying for an remote control event. [ 261.295089][ T5082] m920x_read = error: -19 [ 261.295097][ T5082] dvb-usb: error while querying for an remote control event. [ 261.408980][ T43] audit: type=1326 audit(1791935065.625:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17159 comm="syz.7.3832" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4206d9e2d9 code=0x0 [ 261.415006][ T5082] m920x_read = error: -19 [ 261.415024][ T5082] dvb-usb: error while querying for an remote control event. [ 261.415075][ T5082] m920x_read = error: -19 [ 261.415092][ T5082] dvb-usb: error while querying for an remote control event. [ 261.425524][ T1041] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 261.525037][ T5082] m920x_read = error: -19 [ 261.525060][ T5082] dvb-usb: error while querying for an remote control event. [ 261.525112][ T5082] m920x_read = error: -19 [ 261.525127][ T5082] dvb-usb: error while querying for an remote control event. [ 261.575719][ T1041] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 261.576645][ T1041] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 261.576666][ T1041] usb 9-1: config 1 has no interface number 0 [ 261.578561][ T1041] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.578581][ T1041] usb 9-1: Product: syz [ 261.578595][ T1041] usb 9-1: Manufacturer: syz [ 261.578608][ T1041] usb 9-1: SerialNumber: syz [ 261.592406][ T1041] usb 9-1: 3:1 : does not exist [ 261.592426][ T1041] usb 9-1: 3:2 : does not exist [ 261.643335][T17190] Bluetooth: MGMT ver 1.23 [ 261.645062][ T5082] m920x_read = error: -19 [ 261.645075][ T5082] dvb-usb: error while querying for an remote control event. [ 261.645102][ T5082] m920x_read = error: -19 [ 261.645110][ T5082] dvb-usb: error while querying for an remote control event. [ 261.658940][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 261.658972][T17192] validate_nla: 59 callbacks suppressed [ 261.658985][T17192] netlink: 'syz.1.3841': attribute type 12 has an invalid length. [ 261.694985][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.695013][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.695031][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.695048][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.755029][ T5082] m920x_read = error: -19 [ 261.755044][ T5082] dvb-usb: error while querying for an remote control event. [ 261.755072][ T5082] m920x_read = error: -19 [ 261.755080][ T5082] dvb-usb: error while querying for an remote control event. [ 261.875023][ T5082] m920x_read = error: -19 [ 261.875038][ T5082] dvb-usb: error while querying for an remote control event. [ 261.875064][ T5082] m920x_read = error: -19 [ 261.875072][ T5082] dvb-usb: error while querying for an remote control event. [ 261.995020][ T5082] m920x_read = error: -19 [ 261.995036][ T5082] dvb-usb: error while querying for an remote control event. [ 261.995065][ T5082] m920x_read = error: -19 [ 261.995073][ T5082] dvb-usb: error while querying for an remote control event. [ 262.065042][ T1041] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 262.115103][ T5082] m920x_read = error: -19 [ 262.115127][ T5082] dvb-usb: error while querying for an remote control event. [ 262.115179][ T5082] m920x_read = error: -19 [ 262.115194][ T5082] dvb-usb: error while querying for an remote control event. [ 262.135082][ T5806] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 262.214868][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 262.215375][ T1041] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.216260][ T1041] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.216273][ T1041] usb 6-1: config 0 has no interfaces? [ 262.216287][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.218023][ T1041] usb 6-1: config 0 descriptor?? [ 262.235827][ T5082] m920x_read = error: -19 [ 262.235847][ T5082] dvb-usb: error while querying for an remote control event. [ 262.235899][ T5082] m920x_read = error: -19 [ 262.235914][ T5082] dvb-usb: error while querying for an remote control event. [ 262.267462][T17225] ================================================================== [ 262.267478][T17225] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10 [ 262.267524][T17225] Read of size 42 at addr ffff8880468ef67a by task syz.7.3851/17225 [ 262.267540][T17225] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.267552][T17225] CPU: 0 UID: 0 PID: 17225 Comm: syz.7.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.267580][T17225] Tainted: [L]=SOFTLOCKUP [ 262.267589][T17225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.267600][T17225] Call Trace: [ 262.267607][T17225] [ 262.267619][T17225] dump_stack_lvl+0x100/0x190 [ 262.267648][T17225] print_report+0x13d/0x4b0 [ 262.267679][T17225] ? __virt_addr_valid+0x239/0x430 [ 262.267702][T17225] ? soft_cursor+0x458/0xa10 [ 262.267726][T17225] kasan_report+0xdf/0x1c0 [ 262.267750][T17225] ? soft_cursor+0x458/0xa10 [ 262.267774][T17225] kasan_check_range+0x10f/0x1e0 [ 262.267791][T17225] __asan_memcpy+0x23/0x60 [ 262.267812][T17225] soft_cursor+0x458/0xa10 [ 262.267838][T17225] ccw_cursor+0xd7f/0x15b0 [ 262.267866][T17225] ? __pfx_ccw_cursor+0x10/0x10 [ 262.267892][T17225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.267918][T17225] ? get_color+0x1da/0x450 [ 262.267936][T17225] ? __pfx_ccw_cursor+0x10/0x10 [ 262.267960][T17225] fbcon_cursor+0x43c/0x5e0 [ 262.267980][T17225] hide_cursor+0x87/0x230 [ 262.268006][T17225] redraw_screen+0x5d4/0x760 [ 262.268030][T17225] ? mark_held_locks+0x40/0x70 [ 262.268051][T17225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 262.268077][T17225] ? __pfx_redraw_screen+0x10/0x10 [ 262.268103][T17225] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.268133][T17225] vc_do_resize+0xc3d/0xeb0 [ 262.268166][T17225] ? __pfx_vc_do_resize+0x10/0x10 [ 262.268193][T17225] ? __local_bh_enable_ip+0xa5/0x120 [ 262.268215][T17225] ? lockdep_hardirqs_on+0x7d/0x110 [ 262.268241][T17225] ? kernel_fpu_end+0x5f/0x80 [ 262.268273][T17225] ? __local_bh_enable_ip+0xa5/0x120 [ 262.268297][T17225] fbcon_do_set_font+0x443/0x8c0 [ 262.268323][T17225] fbcon_set_font+0x4be/0x730 [ 262.268346][T17225] ? __pfx_fbcon_set_font+0x10/0x10 [ 262.268367][T17225] con_font_op+0x991/0x1020 [ 262.268389][T17225] ? __pfx_con_font_op+0x10/0x10 [ 262.268408][T17225] ? __might_fault+0xc5/0x140 [ 262.268427][T17225] ? __might_fault+0xc5/0x140 [ 262.268450][T17225] vt_ioctl+0xe00/0x3170 [ 262.268474][T17225] ? __pfx_vt_ioctl+0x10/0x10 [ 262.268496][T17225] ? tomoyo_path_number_perm+0x28f/0x580 [ 262.268525][T17225] ? tomoyo_path_number_perm+0x188/0x580 [ 262.268553][T17225] ? __pfx_futex_wait+0x10/0x10 [ 262.268574][T17225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.268599][T17225] ? tty_jobctrl_ioctl+0x152/0xce0 [ 262.268625][T17225] ? __pfx_vt_ioctl+0x10/0x10 [ 262.268647][T17225] tty_ioctl+0x26a/0x1800 [ 262.268677][T17225] ? __pfx_tty_ioctl+0x10/0x10 [ 262.268703][T17225] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 262.268734][T17225] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 262.268763][T17225] ? __fget_files+0x34/0x3d0 [ 262.268795][T17225] ? selinux_file_ioctl+0x13b/0x290 [ 262.268821][T17225] ? selinux_file_ioctl+0xb6/0x290 [ 262.268844][T17225] ? __pfx_tty_ioctl+0x10/0x10 [ 262.268869][T17225] __x64_sys_ioctl+0x18e/0x210 [ 262.268892][T17225] do_syscall_64+0x123/0x790 [ 262.268919][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.268940][T17225] RIP: 0033:0x7f4206d9e2d9 [ 262.268958][T17225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.268976][T17225] RSP: 002b:00007f4204ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.268996][T17225] RAX: ffffffffffffffda RBX: 00007f4207025fa0 RCX: 00007f4206d9e2d9 [ 262.269010][T17225] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 262.269022][T17225] RBP: 00007f4206e35888 R08: 0000000000000000 R09: 0000000000000000 [ 262.269034][T17225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.269046][T17225] R13: 00007f4207026038 R14: 00007f4207025fa0 R15: 00007ffdda80c648 [ 262.269064][T17225] [ 262.269071][T17225] [ 262.269075][T17225] Allocated by task 16698: [ 262.269085][T17225] kasan_save_stack+0x30/0x50 [ 262.269109][T17225] kasan_save_track+0x14/0x30 [ 262.269131][T17225] __kasan_kmalloc+0xaa/0xb0 [ 262.269152][T17225] __kmalloc_noprof+0x32f/0x840 [ 262.269172][T17225] font_data_rotate+0x353/0x3b0 [ 262.269190][T17225] fbcon_rotate_font+0x2bf/0x510 [ 262.269241][T17225] fbcon_modechanged+0x218/0x7f0 [ 262.269265][T17225] fbcon_set_all_vcs+0x39b/0x470 [ 262.269282][T17225] rotate_all_store+0x31e/0x410 [ 262.269300][T17225] dev_attr_store+0x58/0x80 [ 262.269318][T17225] sysfs_kf_write+0xf2/0x150 [ 262.269343][T17225] kernfs_fop_write_iter+0x3e0/0x5f0 [ 262.269365][T17225] vfs_write+0x6af/0x1050 [ 262.269385][T17225] ksys_write+0x12a/0x250 [ 262.269404][T17225] do_syscall_64+0x123/0x790 [ 262.269428][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.269444][T17225] [ 262.269449][T17225] The buggy address belongs to the object at ffff8880468ee000 [ 262.269449][T17225] which belongs to the cache kmalloc-4k of size 4096 [ 262.269463][T17225] The buggy address is located 1658 bytes to the right of [ 262.269463][T17225] allocated 4096-byte region [ffff8880468ee000, ffff8880468ef000) [ 262.269481][T17225] [ 262.269486][T17225] The buggy address belongs to the physical page: [ 262.269494][T17225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x468e8 [ 262.269510][T17225] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 262.269521][T17225] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 262.269537][T17225] page_type: f5(slab) [ 262.269552][T17225] raw: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 262.269570][T17225] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 262.269584][T17225] head: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 262.269599][T17225] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 262.269613][T17225] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 262.269626][T17225] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 262.269637][T17225] page dumped because: kasan: bad access detected [ 262.269645][T17225] page_owner tracks the page as allocated [ 262.269652][T17225] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1166, tgid 1166 (kworker/u33:10), ts 142895845954 [ 262.269675][T17225] post_alloc_hook+0xfd/0x120 [ 262.269689][T17225] get_page_from_freelist+0x110d/0x35d0 [ 262.269705][T17225] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 262.269725][T17225] new_slab+0xa9/0x6e0 [ 262.269742][T17225] refill_objects+0xe3/0x410 [ 262.269761][T17225] __pcs_replace_empty_main+0x35e/0x650 [ 262.269779][T17225] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 262.269802][T17225] kmalloc_reserve+0xe8/0x350 [ 262.269824][T17225] __alloc_skb+0x185/0x710 [ 262.269849][T17225] nsim_dev_trap_report_work+0x2af/0xd20 [ 262.269869][T17225] process_one_work+0xac7/0x1b10 [ 262.269897][T17225] worker_thread+0x5ef/0xe50 [ 262.269912][T17225] kthread+0x373/0x450 [ 262.269936][T17225] ret_from_fork+0x730/0xd60 [ 262.269954][T17225] ret_from_fork_asm+0x1a/0x30 [ 262.269973][T17225] page last free pid 1041 tgid 1041 ts 140204743440 stack trace: [ 262.269985][T17225] __free_frozen_pages+0x79f/0x10f0 [ 262.270011][T17225] qlist_free_all+0x47/0xf0 [ 262.270031][T17225] kasan_quarantine_reduce+0x1a0/0x1f0 [ 262.270053][T17225] __kasan_slab_alloc+0x69/0x90 [ 262.270077][T17225] __kmalloc_cache_noprof+0x278/0x6d0 [ 262.270094][T17225] snd_mixer_oss_build_test+0x7a/0x380 [ 262.270122][T17225] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 262.270138][T17225] snd_mixer_oss_build_input+0x139/0xd50 [ 262.270154][T17225] snd_mixer_oss_notify_handler+0x48d/0x990 [ 262.270172][T17225] snd_card_register+0x2af/0x760 [ 262.270191][T17225] snd_usx2y_probe+0x756/0x9b0 [ 262.270212][T17225] usb_probe_interface+0x386/0x9b0 [ 262.270233][T17225] really_probe+0x241/0xa60 [ 262.270267][T17225] __driver_probe_device+0x210/0x460 [ 262.270293][T17225] driver_probe_device+0x4a/0x140 [ 262.270317][T17225] __device_attach_driver+0x1df/0x320 [ 262.270344][T17225] [ 262.270349][T17225] Memory state around the buggy address: [ 262.270359][T17225] ffff8880468ef500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.270372][T17225] ffff8880468ef580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.270385][T17225] >ffff8880468ef600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.270394][T17225] ^ [ 262.270406][T17225] ffff8880468ef680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.270419][T17225] ffff8880468ef700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 262.270429][T17225] ================================================================== [ 262.270578][T17225] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 262.636249][T17225] CPU: 0 UID: 0 PID: 17225 Comm: syz.7.3851 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.640761][T17225] Tainted: [L]=SOFTLOCKUP [ 262.642602][T17225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.646799][T17225] Call Trace: [ 262.648230][T17225] [ 262.649502][T17225] dump_stack_lvl+0x100/0x190 [ 262.651496][T17225] vpanic+0x553/0x970 [ 262.653246][T17225] ? __pfx_vpanic+0x10/0x10 [ 262.655182][T17225] ? mark_held_locks+0x40/0x70 [ 262.657216][T17225] ? soft_cursor+0x458/0xa10 [ 262.659148][T17225] panic+0xd1/0xe0 [ 262.660756][T17225] ? __pfx_panic+0x10/0x10 [ 262.662650][T17225] ? soft_cursor+0x458/0xa10 [ 262.664621][T17225] ? preempt_schedule_common+0x3c/0xb0 [ 262.666951][T17225] check_panic_on_warn.cold+0x19/0x34 [ 262.669221][T17225] end_report.part.0+0x3a/0x90 [ 262.671254][T17225] kasan_report.cold+0xe/0x18 [ 262.673279][T17225] ? soft_cursor+0x458/0xa10 [ 262.675257][T17225] kasan_check_range+0x10f/0x1e0 [ 262.677373][T17225] __asan_memcpy+0x23/0x60 [ 262.679252][T17225] soft_cursor+0x458/0xa10 [ 262.681170][T17225] ccw_cursor+0xd7f/0x15b0 [ 262.683082][T17225] ? __pfx_ccw_cursor+0x10/0x10 [ 262.685164][T17225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.687682][T17225] ? get_color+0x1da/0x450 [ 262.689580][T17225] ? __pfx_ccw_cursor+0x10/0x10 [ 262.691639][T17225] fbcon_cursor+0x43c/0x5e0 [ 262.693571][T17225] hide_cursor+0x87/0x230 [ 262.695417][T17225] redraw_screen+0x5d4/0x760 [ 262.697403][T17225] ? mark_held_locks+0x40/0x70 [ 262.699431][T17225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 262.701931][T17225] ? __pfx_redraw_screen+0x10/0x10 [ 262.704137][T17225] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.706607][T17225] vc_do_resize+0xc3d/0xeb0 [ 262.708536][T17225] ? __pfx_vc_do_resize+0x10/0x10 [ 262.710672][T17225] ? __local_bh_enable_ip+0xa5/0x120 [ 262.712908][T17225] ? lockdep_hardirqs_on+0x7d/0x110 [ 262.715161][T17225] ? kernel_fpu_end+0x5f/0x80 [ 262.717161][T17225] ? __local_bh_enable_ip+0xa5/0x120 [ 262.719392][T17225] fbcon_do_set_font+0x443/0x8c0 [ 262.721470][T17225] fbcon_set_font+0x4be/0x730 [ 262.722964][T17225] ? __pfx_fbcon_set_font+0x10/0x10 [ 262.724622][T17225] con_font_op+0x991/0x1020 [ 262.726057][T17225] ? __pfx_con_font_op+0x10/0x10 [ 262.727607][T17225] ? __might_fault+0xc5/0x140 [ 262.729102][T17225] ? __might_fault+0xc5/0x140 [ 262.730589][T17225] vt_ioctl+0xe00/0x3170 [ 262.731931][T17225] ? __pfx_vt_ioctl+0x10/0x10 [ 262.733415][T17225] ? tomoyo_path_number_perm+0x28f/0x580 [ 262.735156][T17225] ? tomoyo_path_number_perm+0x188/0x580 [ 262.736901][T17225] ? __pfx_futex_wait+0x10/0x10 [ 262.738424][T17225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.740232][T17225] ? tty_jobctrl_ioctl+0x152/0xce0 [ 262.741795][T17225] ? __pfx_vt_ioctl+0x10/0x10 [ 262.743230][T17225] tty_ioctl+0x26a/0x1800 [ 262.744568][T17225] ? __pfx_tty_ioctl+0x10/0x10 [ 262.746028][T17225] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 262.748018][T17225] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 262.750145][T17225] ? __fget_files+0x34/0x3d0 [ 262.751602][T17225] ? selinux_file_ioctl+0x13b/0x290 [ 262.753227][T17225] ? selinux_file_ioctl+0xb6/0x290 [ 262.754832][T17225] ? __pfx_tty_ioctl+0x10/0x10 [ 262.756331][T17225] __x64_sys_ioctl+0x18e/0x210 [ 262.757834][T17225] do_syscall_64+0x123/0x790 [ 262.759285][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.761124][T17225] RIP: 0033:0x7f4206d9e2d9 [ 262.762534][T17225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.768439][T17225] RSP: 002b:00007f4204ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.771016][T17225] RAX: ffffffffffffffda RBX: 00007f4207025fa0 RCX: 00007f4206d9e2d9 [ 262.773464][T17225] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 262.775912][T17225] RBP: 00007f4206e35888 R08: 0000000000000000 R09: 0000000000000000 [ 262.778377][T17225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.780832][T17225] R13: 00007f4207026038 R14: 00007f4207025fa0 R15: 00007ffdda80c648 [ 262.783293][T17225] [ 262.784954][T17225] Kernel Offset: disabled [ 262.786316][T17225] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:44:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2baa5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90005e46c30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666652 R12=0000000000000000 R13=0000000000000020 R14=0000000000000009 R15=ffffc90005e46f48 RIP=ffffffff85b2bacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4204ff66c0 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003000 CR3=000000003daa0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3290f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc89b97c66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc89b97c66 00007ffc89b97c6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3290235e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3290235eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329023600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3290235e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32903f4600 00007f32903f45e0 00007f32903f45e8 00007f32903f4618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32903f45f8 00007f32903f45c8 00007f32903f4600 00007f32903f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffff88804d69b130 RCX=0000000000000001 RDX=0ac0d5affe09d4ff RSI=0000000095481a34 RDI=0000000086db7919 RBP=0000000000000007 RSP=ffffc9000539ed80 R8 =00000000ef9d33e4 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=ffff88804d69a580 R13=0000000000020000 R14=0000000000000005 R15=0ac0d5affe09d4ff RIP=ffffffff81e75931 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc97a15da08 CR3=0000000015651000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0aaf3bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0aaf3bd6 00007fff0aaf3bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc979435e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc979435eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc97943600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc979435e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888101ef8000 RBX=0000000000000000 RCX=ffffc9000013d110 RDX=0000000000000008 RSI=ffffc9000013d100 RDI=ffff88802a1a9448 RBP=0000000000000000 RSP=ffffc90000658e48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802a1a9110 R13=dffffc0000000000 R14=ffff88802a1a9000 R15=0000000000000001 RIP=ffffffff86c2da81 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=00000000395aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7b053446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7b053446 00007ffd7b05344c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9986835e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9986835eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f998683600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9986835e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90005037790 RCX=0000000000000001 RDX=ffff888037090000 RSI=ffffea0001332040 RDI=ffffc90005037790 RBP=000000000c000103 RSP=ffffc900050376f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffea0001332040 R14=ffffc90005037880 R15=0000000000000000 RIP=ffffffff8bd29470 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f95b102e300 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a5723c0f40 CR3=0000000027097000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=55b11319c5fb6469 b699f5857626ba5f 55b11319c5fb6469 b699f5857626ba5f 55b11319c5fb6469 b699f5857626ba5f 55b11319c5fb6469 b699f5857626ba5f ZMM18=1f4c9828a6a548d2 9be7afb936953c94 1f4c9828a6a548d2 9be7afb936953c94 1f4c9828a6a548d2 9be7afb936953c94 1f4c9828a6a548d2 9be7afb936953c94 ZMM19=e911000000000000 0000000000000004 e911000000000000 0000000000000003 e911000000000000 0000000000000002 e911000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003a2035c020003 a003000800039803 0008000390031c82 0400038c03000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0204060388032808 0003800303800402 800302800401a003 0008000190030fff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040180 030108000fffffff ffffff04040277fa 2008000610002010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0603880328080003 8003038004028003 02800401a0030008 000190030fffffff ZMM25=34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d 34a18d4d34a18d4d ZMM26=ab93881cab93881c ab93881cab93881c ab93881cab93881c ab93881cab93881c ab93881cab93881c ab93881cab93881c ab93881cab93881c ab93881cab93881c ZMM27=00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 00cb679200cb6792 ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fb130000fb130000 fb130000fb130000 fb130000fb130000 fb130000fb130000 fb130000fb130000 fb130000fb130000 fb130000fb130000 fb130000fb130000