last executing test programs: 12.716563656s ago: executing program 3 (id=555): r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x404840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x30, r2, 0x83000000) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) 12.354457118s ago: executing program 3 (id=561): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[], 0xfffffffffffffe37) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x543102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000400)=0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x46eaf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000540)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c001fe63b0d40ef5ee10277ee9f900c7abcff3abc8fe334eef79148e883f24cdaa7e5f2f2442efc0bfff5f6300929fd5c62eba472dd6782848486cb60e2e5362f0f9b13534cdd8c64614134af7ea387ae0b530f55d6d23f9e514638fb53cdea94503daf837665e7bb77a33d294023a4318adcb82bcfb7fb450eaefdbacbcd05e249672cb010b5277c840aa94c7f61b0735e435c102511e4c83eb8382fc6056a585ffc5b3ff88ea14554ccb38afbd5e33b5ddc7b9a25b8a4d99e760ab31f1d"]) 11.812161081s ago: executing program 3 (id=562): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) (fail_nth: 5) 10.880433186s ago: executing program 3 (id=569): r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x404840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x30, r2, 0x83000000) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) 10.776070045s ago: executing program 3 (id=571): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r0, 0x0, r1, 0x0, 0x2, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) 9.882754811s ago: executing program 3 (id=574): openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 32) r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010104}, {0x306, @broadcast}, 0xc, {0x2, 0x4e25, @multicast2}, 'team_slave_0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async, rerun: 64) ioctl(0xffffffffffffffff, 0x3b8f, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) (async, rerun: 32) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x10, 0x8, 0x0, 0x40}, 'syz0\x00', 0x26}) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x8) (async, rerun: 32) mlockall(0x2) (rerun: 32) shmctl$SHM_LOCK(0x0, 0xb) (async) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 6.713126929s ago: executing program 2 (id=597): r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x404840) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x30, r2, 0x83000000) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) 6.684338655s ago: executing program 2 (id=598): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[], 0xfffffffffffffe37) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x543102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000400)=0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x46eaf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000540)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c001fe63b0d40ef5ee10277ee9f900c7abcff3abc8fe334eef79148e883f24cdaa7e5f2f2442efc0bfff5f6300929fd5c62eba472dd6782848486cb60e2e5362f0f9b13534cdd8c64614134af7ea387ae0b530f55d6d23f9e514638fb53cdea94503daf837665e7bb77a33d294023a4318adcb82bcfb7fb450eaefdbacbcd05e249672cb010b5277c840aa94c7f61b0735e435c102511e4c83eb8382fc6056a585ffc5b3ff88ea14554ccb38afbd5e33b5ddc7b9a25b8a4d99e760ab31f1d"]) 6.584308694s ago: executing program 2 (id=600): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0380c20000000180c200000e0800450000280067000000019078ac1e0001ac1414aa0e00907800040001000000085aef99d000000800c689cb5d112ab0d51913f6e4b17774b23694329ed23d9e35d1381f938e7d088e64d7fb59e2776ad46ed081e9d9c86c017af49a63e404d15d2eff1e5606f6374deb1443f7540e1ef998bd780605335ebd799dd4f5157edddf83ef0da9dec4a2e24f9a462db77228b0e0859ed3181a1d103d6a75b5264e301184ff9f"], 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x800, 0x52080) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000040)=0xc) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) 5.473421175s ago: executing program 2 (id=605): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x6ced, 0x10000, 0x0, 0x10000055}, &(0x7f0000000200)=0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x5, 0x7fff0000}]}) 4.688754646s ago: executing program 0 (id=608): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000e80), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/102) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r7, 0x4, 0x3c00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xd, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 3.760904541s ago: executing program 1 (id=609): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[], 0xfffffffffffffe37) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x543102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000400)=0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x46eaf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000540)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c001fe63b0d40ef5ee10277ee9f900c7abcff3abc8fe334eef79148e883f24cdaa7e5f2f2442efc0bfff5f6300929fd5c62eba472dd6782848486cb60e2e5362f0f9b13534cdd8c64614134af7ea387ae0b530f55d6d23f9e514638fb53cdea94503daf837665e7bb77a33d294023a4318adcb82bcfb7fb450eaefdbacbcd05e249672cb010b5277c840aa94c7f61b0735e435c102511e4c83eb8382fc6056a585ffc5b3ff88ea14554ccb38afbd5e33b5ddc7b9a25b8a4d99e760ab31f1d"]) 3.760269719s ago: executing program 0 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x3, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="2c548f2664234aea5882c40b00", 0xd}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 3.737207228s ago: executing program 1 (id=611): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f090c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.69367548s ago: executing program 1 (id=612): r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x30, r2, 0x83000000) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) 3.611136067s ago: executing program 0 (id=613): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000b3000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000d4000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000029000/0x3000)=nil, &(0x7f000088e000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x4000, 0x100001, 0x325}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x65, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000240)={0xa81, r3}) sendfile(r0, r1, 0x0, 0x106f) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, 0x0, 0x0) sched_setaffinity(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000640)="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", 0x182, 0x0) 3.570139659s ago: executing program 1 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8, 0x6}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000180)={0x0, 0xfffffffffffffde8}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 2.993334594s ago: executing program 0 (id=615): r0 = io_uring_setup(0xc1, &(0x7f00000002c0)={0x0, 0x54b, 0x0, 0x2, 0x26c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0xb960a7b531489aa1, 0x40010, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x608000, 0x800, 0x0, 0x2}, 0x5d) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = landlock_create_ruleset(0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x5, r9, r7) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000140)=[0x8, 0x9, 0x3, 0x5], 0x0, 0xc) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) 2.893109763s ago: executing program 0 (id=616): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x1cd403) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket(0x2a, 0x2, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) 2.486487923s ago: executing program 1 (id=617): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8, 0x6}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000180)={0x0, 0xfffffffffffffde8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 2.039693646s ago: executing program 2 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.323157423s ago: executing program 2 (id=619): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000e80), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/102) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r7, 0x4, 0x3c00) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xd, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 10.533465ms ago: executing program 1 (id=620): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[], 0xfffffffffffffe37) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x543102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000400)=0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x46eaf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000540)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c001fe63b0d40ef5ee10277ee9f900c7abcff3abc8fe334eef79148e883f24cdaa7e5f2f2442efc0bfff5f6300929fd5c62eba472dd6782848486cb60e2e5362f0f9b13534cdd8c64614134af7ea387ae0b530f55d6d23f9e514638fb53cdea94503daf837665e7bb77a33d294023a4318adcb82bcfb7fb450eaefdbacbcd05e249672cb010b5277c840aa94c7f61b0735e435c102511e4c83eb8382fc6056a585ffc5b3ff88ea14554ccb38afbd5e33b5ddc7b9a25b8a4d99e760ab31f1d"]) 0s ago: executing program 0 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x3, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="2c548f2664234aea5882c40b00", 0xd}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) kernel console output (not intermixed with test programs): ransport stream to the software demuxer [ 96.443109][ T855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 96.443128][ T855] usb 5-1: media controller created [ 96.448815][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.543453][ T5106] usb 7-1: Using ep0 maxpacket: 8 [ 96.543942][ T5106] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.545232][ T5106] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 96.545246][ T5106] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.545313][ T5106] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.545340][ T5106] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.545351][ T5106] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.545378][ T5106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.558026][ T5106] usbtmc 7-1:16.0: bulk endpoints not found [ 96.663243][ T6886] kvm: apic: phys broadcast and lowest prio [ 97.534986][ T855] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 97.535013][ T855] zl10353_read_register: readreg error (reg=127, ret==-110) [ 97.642210][ T6916] FAULT_INJECTION: forcing a failure. [ 97.642210][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 97.642233][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(full) [ 97.642246][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.642255][ T6916] Call Trace: [ 97.642260][ T6916] [ 97.642266][ T6916] dump_stack_lvl+0x100/0x190 [ 97.642295][ T6916] should_fail_ex.cold+0x5/0xa [ 97.642318][ T6916] should_failslab+0xc2/0x120 [ 97.642345][ T6916] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.642363][ T6916] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 97.642384][ T6916] bpf_prog_alloc_no_stats+0x15f/0x690 [ 97.642407][ T6916] bpf_prog_alloc+0x3b/0x200 [ 97.642431][ T6916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.642460][ T6916] bpf_prog_load+0x49e/0x2a80 [ 97.642485][ T6916] ? __lock_acquire+0x5c0/0x1f40 [ 97.642517][ T6916] ? __pfx_bpf_prog_load+0x10/0x10 [ 97.642541][ T6916] ? lock_acquire+0x1d1/0x380 [ 97.642588][ T6916] __sys_bpf+0x1f46/0x4a30 [ 97.642605][ T6916] ? __pfx___sys_bpf+0x10/0x10 [ 97.642618][ T6916] ? find_held_lock+0x2b/0x80 [ 97.642632][ T6916] ? futex_wake+0x4ea/0x5e0 [ 97.642671][ T6916] ? find_held_lock+0x2b/0x80 [ 97.642686][ T6916] ? __fget_files+0x215/0x3d0 [ 97.642700][ T6916] ? __fget_files+0x215/0x3d0 [ 97.642722][ T6916] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 97.642737][ T6916] ? xfd_validate_state+0x129/0x190 [ 97.642757][ T6916] ? __ia32_sys_bpf+0xcc/0x170 [ 97.642769][ T6916] __ia32_sys_bpf+0xcc/0x170 [ 97.642783][ T6916] ? __do_fast_syscall_32+0xb3/0x8b0 [ 97.642799][ T6916] __do_fast_syscall_32+0x13a/0x8b0 [ 97.642812][ T6916] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.642826][ T6916] do_fast_syscall_32+0x32/0x70 [ 97.642841][ T6916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.642855][ T6916] RIP: 0023:0xf6fdefec [ 97.642869][ T6916] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 97.642874][ T6916] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 97.642891][ T6916] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 97.642898][ T6916] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.642905][ T6916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.642912][ T6916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.642919][ T6916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.642933][ T6916] [ 97.750767][ T6919] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.751612][ T6919] fuse: Unknown parameter 'fl' [ 98.575203][ T6921] syzkaller0: entered promiscuous mode [ 98.575219][ T6921] syzkaller0: entered allmulticast mode [ 99.064522][ T855] usb 5-1: USB disconnect, device number 5 [ 99.156949][ T6360] usb 7-1: USB disconnect, device number 8 [ 99.833449][ T6360] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 99.983410][ T6360] usb 6-1: Using ep0 maxpacket: 8 [ 99.983937][ T6360] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.984897][ T6360] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 99.984920][ T6360] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.984932][ T6360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.984943][ T6360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.984955][ T6360] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.984980][ T6360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.126307][ T6934] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.138793][ T6934] fuse: Unknown parameter 'fl' [ 100.276492][ T6360] usb 6-1: GET_CAPABILITIES returned 0 [ 100.276516][ T6360] usbtmc 6-1:16.0: can't read capabilities [ 100.487409][ T6360] usb 6-1: USB disconnect, device number 8 [ 100.903570][ T5727] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 101.065372][ T5727] usb 8-1: Using ep0 maxpacket: 8 [ 101.070039][ T5727] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.070865][ T5727] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 101.070895][ T5727] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.070907][ T5727] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.070919][ T5727] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.070930][ T5727] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.070949][ T5727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.112244][ T6951] FAULT_INJECTION: forcing a failure. [ 101.112244][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 101.112266][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 101.112280][ T6951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.112287][ T6951] Call Trace: [ 101.112291][ T6951] [ 101.112296][ T6951] dump_stack_lvl+0x100/0x190 [ 101.112315][ T6951] should_fail_ex.cold+0x5/0xa [ 101.112331][ T6951] should_failslab+0xc2/0x120 [ 101.112349][ T6951] kmem_cache_alloc_noprof+0x92/0x6a0 [ 101.112364][ T6951] ? __pfx_map_id_range_down+0x10/0x10 [ 101.112380][ T6951] ? rcu_is_watching+0x13/0xc0 [ 101.112392][ T6951] ? security_inode_alloc+0x3b/0x2c0 [ 101.112413][ T6951] security_inode_alloc+0x3b/0x2c0 [ 101.112431][ T6951] inode_init_always_gfp+0xc6f/0xfb0 [ 101.112448][ T6951] alloc_inode+0x8e/0x250 [ 101.112459][ T6951] sock_alloc+0x44/0x280 [ 101.112482][ T6951] ? security_socket_create+0x7f/0x250 [ 101.112501][ T6951] __sock_create+0xc2/0x860 [ 101.112519][ T6951] __sys_socketpair+0x261/0x5b0 [ 101.112536][ T6951] ? __pfx___sys_socketpair+0x10/0x10 [ 101.112558][ T6951] __ia32_sys_socketpair+0x95/0x100 [ 101.112575][ T6951] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.112590][ T6951] __do_fast_syscall_32+0x13a/0x8b0 [ 101.112608][ T6951] do_fast_syscall_32+0x32/0x70 [ 101.112622][ T6951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.112637][ T6951] RIP: 0023:0xf7f83fec [ 101.112650][ T6951] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 101.112655][ T6951] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 101.112666][ T6951] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000002 [ 101.112673][ T6951] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 101.112680][ T6951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.112686][ T6951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.112692][ T6951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.112705][ T6951] [ 101.112720][ T6951] socket: no more sockets [ 101.149529][ T6953] syzkaller0: entered promiscuous mode [ 101.149543][ T6953] syzkaller0: entered allmulticast mode [ 101.212778][ T6954] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.217566][ T6954] fuse: Unknown parameter 'fl' [ 101.289870][ T5727] usb 8-1: GET_CAPABILITIES returned 0 [ 101.289894][ T5727] usbtmc 8-1:16.0: can't read capabilities [ 101.492048][ T5834] usb 8-1: USB disconnect, device number 8 [ 101.574296][ T5727] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.733445][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 101.734543][ T5727] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 101.735446][ T5727] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.735466][ T5727] usb 6-1: config 0 has no interface number 0 [ 101.737460][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.737479][ T5727] usb 6-1: Product: syz [ 101.737491][ T5727] usb 6-1: Manufacturer: syz [ 101.737503][ T5727] usb 6-1: SerialNumber: syz [ 101.739828][ T5727] usb 6-1: config 0 descriptor?? [ 101.743765][ T5727] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 101.743785][ T5727] usb 6-1: selecting invalid altsetting 1 [ 101.743799][ T5727] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 101.745911][ T5727] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.746122][ T5727] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 101.746154][ T5727] usb 6-1: media controller created [ 101.752619][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.893519][ T77] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 101.968124][ T6958] kvm: apic: phys broadcast and lowest prio [ 102.044259][ T77] usb 7-1: Using ep0 maxpacket: 8 [ 102.044760][ T77] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.046002][ T77] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 102.046016][ T77] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 102.046035][ T77] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.046046][ T77] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.046057][ T77] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.046077][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.052070][ T77] usbtmc 7-1:16.0: bulk endpoints not found [ 102.803719][ T5727] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 102.803749][ T5727] zl10353_read_register: readreg error (reg=127, ret==-110) [ 104.521661][ T6985] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 104.523029][ T6985] fuse: Unknown parameter 'fl' [ 104.530718][ T5727] usb 6-1: USB disconnect, device number 9 [ 104.609656][ T6990] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 104.610789][ T6990] fuse: Unknown parameter 'fl' [ 104.709971][ T6360] usb 7-1: USB disconnect, device number 9 [ 104.956990][ T7010] kvm: apic: phys broadcast and lowest prio [ 105.224030][ T5106] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.281496][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 105.373966][ T5106] usb 6-1: Using ep0 maxpacket: 8 [ 105.377362][ T5106] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.384205][ T5106] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 105.384231][ T5106] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.384242][ T5106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.384254][ T5106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.384265][ T5106] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.384284][ T5106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.604871][ T5106] usb 6-1: GET_CAPABILITIES returned 0 [ 105.604895][ T5106] usbtmc 6-1:16.0: can't read capabilities [ 105.807765][ T5106] usb 6-1: USB disconnect, device number 10 [ 106.408357][ T7021] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 106.408937][ T7021] fuse: Unknown parameter 'fl' [ 106.441050][ T7023] FAULT_INJECTION: forcing a failure. [ 106.441050][ T7023] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.441073][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT(full) [ 106.441088][ T7023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.441094][ T7023] Call Trace: [ 106.441099][ T7023] [ 106.441104][ T7023] dump_stack_lvl+0x100/0x190 [ 106.441136][ T7023] should_fail_ex.cold+0x5/0xa [ 106.441152][ T7023] get_futex_key+0x1d0/0x14f0 [ 106.441166][ T7023] ? __pfx_get_futex_key+0x10/0x10 [ 106.441178][ T7023] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 106.441197][ T7023] ? __smp_call_single_queue+0x17e/0x450 [ 106.441216][ T7023] ? __pfx___smp_call_single_queue+0x10/0x10 [ 106.441249][ T7023] futex_wait_setup+0x91/0x540 [ 106.441268][ T7023] __futex_wait+0x19f/0x300 [ 106.441285][ T7023] ? __pfx___futex_wait+0x10/0x10 [ 106.441300][ T7023] ? __pfx_try_to_wake_up+0x10/0x10 [ 106.441317][ T7023] ? futex_hash+0x311/0x400 [ 106.441329][ T7023] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.441345][ T7023] ? find_held_lock+0x2b/0x80 [ 106.441359][ T7023] ? futex_wake+0x4ea/0x5e0 [ 106.441376][ T7023] futex_wait+0xe6/0x370 [ 106.441391][ T7023] ? __pfx_futex_wait+0x10/0x10 [ 106.441408][ T7023] ? __sched_setaffinity+0x17c/0x280 [ 106.441421][ T7023] ? kasan_save_track+0x14/0x30 [ 106.441436][ T7023] ? __pfx___sched_setaffinity+0x10/0x10 [ 106.441452][ T7023] do_futex+0x265/0x440 [ 106.441465][ T7023] ? __pfx_do_futex+0x10/0x10 [ 106.441483][ T7023] ? sched_setaffinity+0xe0/0x400 [ 106.441497][ T7023] ? __pfx_sched_setaffinity+0x10/0x10 [ 106.441513][ T7023] __ia32_sys_futex_time32+0x2f4/0x470 [ 106.441530][ T7023] ? xfd_validate_state+0x129/0x190 [ 106.441548][ T7023] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 106.441570][ T7023] __do_fast_syscall_32+0x13a/0x8b0 [ 106.441587][ T7023] do_fast_syscall_32+0x32/0x70 [ 106.441601][ T7023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.441616][ T7023] RIP: 0023:0xf7f83fec [ 106.441629][ T7023] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 106.441634][ T7023] RSP: 002b:00000000f54465bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 106.441645][ T7023] RAX: ffffffffffffffda RBX: 00000000f7444f88 RCX: 0000000000000080 [ 106.441652][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c [ 106.441659][ T7023] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 106.441665][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.441672][ T7023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.441685][ T7023] [ 106.639615][ T7027] syzkaller0: entered promiscuous mode [ 106.639630][ T7027] syzkaller0: entered allmulticast mode [ 106.723799][ T5106] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.793565][ T77] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.800741][ T7033] FAULT_INJECTION: forcing a failure. [ 106.800741][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.800763][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 106.800781][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.800788][ T7033] Call Trace: [ 106.800793][ T7033] [ 106.800797][ T7033] dump_stack_lvl+0x100/0x190 [ 106.800828][ T7033] should_fail_ex.cold+0x5/0xa [ 106.800847][ T7033] _copy_from_user+0x2e/0xd0 [ 106.800865][ T7033] bpf_prog_load+0x1490/0x2a80 [ 106.800886][ T7033] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.800915][ T7033] __sys_bpf+0x1f46/0x4a30 [ 106.800930][ T7033] ? do_anonymous_page+0x1f70/0x2050 [ 106.800941][ T7033] ? __pfx___sys_bpf+0x10/0x10 [ 106.800959][ T7033] ? rcu_is_watching+0x13/0xc0 [ 106.800975][ T7033] ? __handle_mm_fault+0x4ec/0x2f60 [ 106.800987][ T7033] ? __lock_acquire+0x5c0/0x1f40 [ 106.801004][ T7033] ? __css_rstat_updated+0x1ce/0x590 [ 106.801022][ T7033] ? __pfx___handle_mm_fault+0x10/0x10 [ 106.801033][ T7033] ? __pfx___css_rstat_updated+0x10/0x10 [ 106.801060][ T7033] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 106.801075][ T7033] ? find_held_lock+0x2b/0x80 [ 106.801088][ T7033] ? exc_page_fault+0x6f/0xd0 [ 106.801100][ T7033] ? exc_page_fault+0x6f/0xd0 [ 106.801114][ T7033] ? __ia32_sys_bpf+0xcc/0x170 [ 106.801126][ T7033] __ia32_sys_bpf+0xcc/0x170 [ 106.801140][ T7033] ? __do_fast_syscall_32+0xb3/0x8b0 [ 106.801155][ T7033] __do_fast_syscall_32+0x13a/0x8b0 [ 106.801171][ T7033] do_fast_syscall_32+0x32/0x70 [ 106.801185][ T7033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.801199][ T7033] RIP: 0023:0xf70aefec [ 106.801212][ T7033] Code: Unable to access opcode bytes at 0xf70aefc2. [ 106.801218][ T7033] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 106.801229][ T7033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 106.801236][ T7033] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.801243][ T7033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.801249][ T7033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.801256][ T7033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.801269][ T7033] [ 106.875303][ T5106] usb 6-1: Using ep0 maxpacket: 8 [ 106.875850][ T5106] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.876819][ T5106] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 106.876833][ T5106] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.876851][ T5106] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.876862][ T5106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.876874][ T5106] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.876893][ T5106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.882065][ T5106] usbtmc 6-1:16.0: bulk endpoints not found [ 107.013490][ T77] usb 5-1: Using ep0 maxpacket: 8 [ 107.014108][ T77] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.014904][ T77] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 107.014927][ T77] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.014977][ T77] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.014990][ T77] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 17696, setting to 1024 [ 107.015003][ T77] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 107.015014][ T77] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.015193][ T77] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.360520][ T77] usb 5-1: usb_control_msg returned -71 [ 107.360545][ T77] usbtmc 5-1:16.0: can't read capabilities [ 107.367869][ T77] usb 5-1: USB disconnect, device number 6 [ 107.905987][ T7046] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 107.908042][ T7046] fuse: Unknown parameter 'fl' [ 107.946708][ T7048] syzkaller0: entered promiscuous mode [ 107.946724][ T7048] syzkaller0: entered allmulticast mode [ 108.234302][ T7055] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 108.238561][ T7055] fuse: Unknown parameter 'fl' [ 108.400892][ T7061] syzkaller0: entered promiscuous mode [ 108.400908][ T7061] syzkaller0: entered allmulticast mode [ 109.133452][ T1353] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.183431][ T5834] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 109.283395][ T1353] usb 5-1: Using ep0 maxpacket: 32 [ 109.284317][ T1353] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 109.285113][ T1353] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.285125][ T1353] usb 5-1: config 0 has no interface number 0 [ 109.286660][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.286677][ T1353] usb 5-1: Product: syz [ 109.286686][ T1353] usb 5-1: Manufacturer: syz [ 109.286696][ T1353] usb 5-1: SerialNumber: syz [ 109.288005][ T1353] usb 5-1: config 0 descriptor?? [ 109.291008][ T1353] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 109.291023][ T1353] usb 5-1: selecting invalid altsetting 1 [ 109.291031][ T1353] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 109.292925][ T1353] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.293046][ T1353] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 109.293065][ T1353] usb 5-1: media controller created [ 109.298212][ T1353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.353425][ T5834] usb 7-1: Using ep0 maxpacket: 8 [ 109.354753][ T5834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.355562][ T5834] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 109.355589][ T5834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.355601][ T5834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.355612][ T5834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.355627][ T5834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.355646][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.493461][ T6360] usb 6-1: USB disconnect, device number 11 [ 109.523173][ T7074] kvm: apic: phys broadcast and lowest prio [ 109.541825][ T7078] syzkaller0: entered promiscuous mode [ 109.541839][ T7078] syzkaller0: entered allmulticast mode [ 109.570535][ T5834] usb 7-1: GET_CAPABILITIES returned 0 [ 109.570559][ T5834] usbtmc 7-1:16.0: can't read capabilities [ 109.760855][ T7081] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 109.762028][ T7081] fuse: Unknown parameter 'fl' [ 109.773448][ T6360] usb 7-1: USB disconnect, device number 10 [ 109.842123][ T7083] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 109.843106][ T7083] fuse: Unknown parameter 'fl' [ 109.892806][ T7085] FAULT_INJECTION: forcing a failure. [ 109.892806][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 109.892829][ T7085] CPU: 2 UID: 0 PID: 7085 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 109.892843][ T7085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.892850][ T7085] Call Trace: [ 109.892855][ T7085] [ 109.892860][ T7085] dump_stack_lvl+0x100/0x190 [ 109.892881][ T7085] should_fail_ex.cold+0x5/0xa [ 109.892896][ T7085] should_failslab+0xc2/0x120 [ 109.892914][ T7085] __kmalloc_cache_noprof+0x91/0x6d0 [ 109.892928][ T7085] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 109.892950][ T7085] bpf_prog_alloc_no_stats+0x15f/0x690 [ 109.892968][ T7085] bpf_prog_alloc+0x3b/0x200 [ 109.892983][ T7085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.893016][ T7085] bpf_prog_load+0x49e/0x2a80 [ 109.893040][ T7085] ? __lock_acquire+0x5c0/0x1f40 [ 109.893071][ T7085] ? __pfx_bpf_prog_load+0x10/0x10 [ 109.893116][ T7085] __sys_bpf+0x1f46/0x4a30 [ 109.893142][ T7085] ? do_anonymous_page+0x1f70/0x2050 [ 109.893158][ T7085] ? __pfx___sys_bpf+0x10/0x10 [ 109.893189][ T7085] ? rcu_is_watching+0x13/0xc0 [ 109.893209][ T7085] ? __handle_mm_fault+0x4ec/0x2f60 [ 109.893221][ T7085] ? __lock_acquire+0x5c0/0x1f40 [ 109.893238][ T7085] ? __css_rstat_updated+0x1ce/0x590 [ 109.893257][ T7085] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.893269][ T7085] ? __pfx___css_rstat_updated+0x10/0x10 [ 109.893297][ T7085] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 109.893312][ T7085] ? find_held_lock+0x2b/0x80 [ 109.893326][ T7085] ? exc_page_fault+0x6f/0xd0 [ 109.893338][ T7085] ? exc_page_fault+0x6f/0xd0 [ 109.893352][ T7085] ? __ia32_sys_bpf+0xcc/0x170 [ 109.893365][ T7085] __ia32_sys_bpf+0xcc/0x170 [ 109.893378][ T7085] ? __do_fast_syscall_32+0xb3/0x8b0 [ 109.893394][ T7085] __do_fast_syscall_32+0x13a/0x8b0 [ 109.893410][ T7085] do_fast_syscall_32+0x32/0x70 [ 109.893444][ T7085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.893460][ T7085] RIP: 0023:0xf7f83fec [ 109.893474][ T7085] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 109.893480][ T7085] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 109.893492][ T7085] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 109.893500][ T7085] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.893507][ T7085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.893514][ T7085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.893521][ T7085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.893535][ T7085] [ 109.955863][ T7087] syzkaller0: entered promiscuous mode [ 109.955888][ T7087] syzkaller0: entered allmulticast mode [ 110.327461][ T1353] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 110.327490][ T1353] zl10353_read_register: readreg error (reg=127, ret==-110) [ 110.549037][ T7099] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 110.551884][ T7099] fuse: Unknown parameter 'fl' [ 111.375791][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 111.523528][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 111.523654][ T855] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 111.524653][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.526268][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 111.526290][ T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.526328][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.526347][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.526366][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.526398][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.531786][ T10] usbtmc 6-1:16.0: bulk endpoints not found [ 111.673424][ T855] usb 8-1: Using ep0 maxpacket: 8 [ 111.674167][ T855] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.675134][ T855] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 111.675177][ T855] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.675197][ T855] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.675218][ T855] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.675239][ T855] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.675273][ T855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.910377][ T1353] usb 5-1: USB disconnect, device number 7 [ 111.923815][ T855] usb 8-1: GET_CAPABILITIES returned 0 [ 111.923854][ T855] usbtmc 8-1:16.0: can't read capabilities [ 111.967793][ T7110] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 111.969089][ T7110] fuse: Unknown parameter 'fl' [ 112.022884][ T7112] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.030449][ T7112] fuse: Unknown parameter 'fl' [ 112.093801][ T7114] FAULT_INJECTION: forcing a failure. [ 112.093801][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 112.093823][ T7114] CPU: 2 UID: 0 PID: 7114 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 112.093836][ T7114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.093844][ T7114] Call Trace: [ 112.093849][ T7114] [ 112.093855][ T7114] dump_stack_lvl+0x100/0x190 [ 112.093874][ T7114] should_fail_ex.cold+0x5/0xa [ 112.093892][ T7114] should_failslab+0xc2/0x120 [ 112.093915][ T7114] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.093931][ T7114] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 112.093952][ T7114] bpf_prog_alloc_no_stats+0x15f/0x690 [ 112.093972][ T7114] bpf_prog_alloc+0x3b/0x200 [ 112.093988][ T7114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.094008][ T7114] bpf_prog_load+0x49e/0x2a80 [ 112.094026][ T7114] ? __lock_acquire+0x5c0/0x1f40 [ 112.094050][ T7114] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.094078][ T7114] __sys_bpf+0x1f46/0x4a30 [ 112.094092][ T7114] ? do_anonymous_page+0x1f70/0x2050 [ 112.094104][ T7114] ? __pfx___sys_bpf+0x10/0x10 [ 112.094120][ T7114] ? rcu_is_watching+0x13/0xc0 [ 112.094135][ T7114] ? __handle_mm_fault+0x4ec/0x2f60 [ 112.094147][ T7114] ? __lock_acquire+0x5c0/0x1f40 [ 112.094164][ T7114] ? __css_rstat_updated+0x1ce/0x590 [ 112.094181][ T7114] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.094193][ T7114] ? __pfx___css_rstat_updated+0x10/0x10 [ 112.094220][ T7114] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 112.094235][ T7114] ? find_held_lock+0x2b/0x80 [ 112.094248][ T7114] ? exc_page_fault+0x6f/0xd0 [ 112.094263][ T7114] ? exc_page_fault+0x6f/0xd0 [ 112.094279][ T7114] ? __ia32_sys_bpf+0xcc/0x170 [ 112.094292][ T7114] __ia32_sys_bpf+0xcc/0x170 [ 112.094307][ T7114] ? __do_fast_syscall_32+0xb3/0x8b0 [ 112.094324][ T7114] __do_fast_syscall_32+0x13a/0x8b0 [ 112.094340][ T7114] do_fast_syscall_32+0x32/0x70 [ 112.094356][ T7114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.094371][ T7114] RIP: 0023:0xf7f96fec [ 112.094385][ T7114] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 112.094390][ T7114] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 112.094402][ T7114] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 112.094409][ T7114] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.094416][ T7114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.094423][ T7114] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.094429][ T7114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.094442][ T7114] [ 112.129089][ T5831] usb 8-1: USB disconnect, device number 10 [ 112.189810][ T7117] syzkaller0: entered promiscuous mode [ 112.189826][ T7117] syzkaller0: entered allmulticast mode [ 112.679260][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.726839][ T7132] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.727823][ T7132] fuse: Unknown parameter 'fl' [ 112.807803][ T7134] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.810131][ T7134] fuse: Unknown parameter 'fl' [ 112.823471][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 112.824375][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 112.825533][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.825551][ T25] usb 5-1: config 0 has no interface number 0 [ 112.827277][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.827295][ T25] usb 5-1: Product: syz [ 112.827306][ T25] usb 5-1: Manufacturer: syz [ 112.827318][ T25] usb 5-1: SerialNumber: syz [ 112.832850][ T25] usb 5-1: config 0 descriptor?? [ 112.836866][ T25] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 112.836881][ T25] usb 5-1: selecting invalid altsetting 1 [ 112.836889][ T25] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 112.838637][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.838858][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 112.838881][ T25] usb 5-1: media controller created [ 112.845171][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.881795][ T7136] FAULT_INJECTION: forcing a failure. [ 112.881795][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 112.881816][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT(full) [ 112.881829][ T7136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.881835][ T7136] Call Trace: [ 112.881840][ T7136] [ 112.881844][ T7136] dump_stack_lvl+0x100/0x190 [ 112.881864][ T7136] should_fail_ex.cold+0x5/0xa [ 112.881878][ T7136] should_failslab+0xc2/0x120 [ 112.881897][ T7136] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.881911][ T7136] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 112.881930][ T7136] bpf_prog_alloc_no_stats+0x15f/0x690 [ 112.881948][ T7136] bpf_prog_alloc+0x3b/0x200 [ 112.881963][ T7136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.881983][ T7136] bpf_prog_load+0x49e/0x2a80 [ 112.881999][ T7136] ? __lock_acquire+0x5c0/0x1f40 [ 112.882018][ T7136] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.882035][ T7136] ? lock_acquire+0x1d1/0x380 [ 112.882061][ T7136] __sys_bpf+0x1f46/0x4a30 [ 112.882077][ T7136] ? __pfx___sys_bpf+0x10/0x10 [ 112.882089][ T7136] ? find_held_lock+0x2b/0x80 [ 112.882102][ T7136] ? futex_wake+0x4ea/0x5e0 [ 112.882125][ T7136] ? find_held_lock+0x2b/0x80 [ 112.882137][ T7136] ? __fget_files+0x215/0x3d0 [ 112.882151][ T7136] ? __fget_files+0x215/0x3d0 [ 112.882172][ T7136] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 112.882203][ T7136] ? xfd_validate_state+0x129/0x190 [ 112.882223][ T7136] ? __ia32_sys_bpf+0xcc/0x170 [ 112.882237][ T7136] __ia32_sys_bpf+0xcc/0x170 [ 112.882252][ T7136] ? __do_fast_syscall_32+0xb3/0x8b0 [ 112.882268][ T7136] __do_fast_syscall_32+0x13a/0x8b0 [ 112.882283][ T7136] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.882298][ T7136] do_fast_syscall_32+0x32/0x70 [ 112.882317][ T7136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.882332][ T7136] RIP: 0023:0xf6fdefec [ 112.882344][ T7136] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 112.882351][ T7136] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 112.882363][ T7136] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 112.882370][ T7136] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.882377][ T7136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.882383][ T7136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.882390][ T7136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.882403][ T7136] [ 113.054575][ T7130] kvm: apic: phys broadcast and lowest prio [ 113.847499][ T7146] syzkaller0: entered promiscuous mode [ 113.847514][ T7146] syzkaller0: entered allmulticast mode [ 113.855156][ T1353] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 113.924031][ T25] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 113.924058][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 114.003542][ T1353] usb 7-1: Using ep0 maxpacket: 8 [ 114.004203][ T1353] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.005057][ T1353] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 114.005112][ T1353] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.005127][ T1353] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.005142][ T1353] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.005157][ T1353] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.005182][ T1353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.155760][ T10] usb 6-1: USB disconnect, device number 12 [ 114.193400][ T7152] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.198854][ T7152] fuse: Unknown parameter 'fl' [ 114.223203][ T7154] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.225308][ T1353] usb 7-1: GET_CAPABILITIES returned 0 [ 114.225332][ T1353] usbtmc 7-1:16.0: can't read capabilities [ 114.226897][ T7154] fuse: Unknown parameter 'fl' [ 114.285212][ T7156] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.291664][ T7156] fuse: Unknown parameter 'fl' [ 114.334340][ T7158] FAULT_INJECTION: forcing a failure. [ 114.334340][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.334362][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 114.334376][ T7158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.334384][ T7158] Call Trace: [ 114.334388][ T7158] [ 114.334393][ T7158] dump_stack_lvl+0x100/0x190 [ 114.334413][ T7158] should_fail_ex.cold+0x5/0xa [ 114.334428][ T7158] _copy_from_user+0x2e/0xd0 [ 114.334447][ T7158] bpf_prog_load+0x1490/0x2a80 [ 114.334475][ T7158] ? __pfx_bpf_prog_load+0x10/0x10 [ 114.334505][ T7158] __sys_bpf+0x1f46/0x4a30 [ 114.334521][ T7158] ? do_anonymous_page+0x1f70/0x2050 [ 114.334534][ T7158] ? __pfx___sys_bpf+0x10/0x10 [ 114.334551][ T7158] ? rcu_is_watching+0x13/0xc0 [ 114.334567][ T7158] ? __handle_mm_fault+0x4ec/0x2f60 [ 114.334580][ T7158] ? __lock_acquire+0x5c0/0x1f40 [ 114.334598][ T7158] ? __css_rstat_updated+0x1ce/0x590 [ 114.334617][ T7158] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.334628][ T7158] ? __pfx___css_rstat_updated+0x10/0x10 [ 114.334654][ T7158] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 114.334669][ T7158] ? find_held_lock+0x2b/0x80 [ 114.334682][ T7158] ? exc_page_fault+0x6f/0xd0 [ 114.334695][ T7158] ? exc_page_fault+0x6f/0xd0 [ 114.334709][ T7158] ? __ia32_sys_bpf+0xcc/0x170 [ 114.334722][ T7158] __ia32_sys_bpf+0xcc/0x170 [ 114.334735][ T7158] ? __do_fast_syscall_32+0xb3/0x8b0 [ 114.334751][ T7158] __do_fast_syscall_32+0x13a/0x8b0 [ 114.334767][ T7158] do_fast_syscall_32+0x32/0x70 [ 114.334781][ T7158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.334795][ T7158] RIP: 0023:0xf7f83fec [ 114.334809][ T7158] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 114.334814][ T7158] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 114.334826][ T7158] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 114.334834][ T7158] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.334840][ T7158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.334847][ T7158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.334853][ T7158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.334866][ T7158] [ 114.441132][ T10] usb 7-1: USB disconnect, device number 11 [ 114.527170][ T7165] syzkaller0: entered promiscuous mode [ 114.527193][ T7165] syzkaller0: entered allmulticast mode [ 114.933393][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 115.041345][ T7175] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.042453][ T7175] fuse: Unknown parameter 'fl' [ 115.104878][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 115.111328][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.443688][ T25] usb 5-1: USB disconnect, device number 8 [ 115.521960][ T7185] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.523122][ T7185] fuse: Unknown parameter 'fl' [ 115.528733][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 115.528751][ T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.557108][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.583410][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.583432][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.583444][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.583470][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.629910][ T7189] FAULT_INJECTION: forcing a failure. [ 115.629910][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 115.629931][ T7189] CPU: 3 UID: 0 PID: 7189 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT(full) [ 115.629944][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.629952][ T7189] Call Trace: [ 115.629956][ T7189] [ 115.629961][ T7189] dump_stack_lvl+0x100/0x190 [ 115.629980][ T7189] should_fail_ex.cold+0x5/0xa [ 115.629995][ T7189] should_failslab+0xc2/0x120 [ 115.630013][ T7189] __kmalloc_cache_noprof+0x91/0x6d0 [ 115.630028][ T7189] ? bpf_prog_alloc_no_stats+0x15f/0x690 [ 115.630046][ T7189] bpf_prog_alloc_no_stats+0x15f/0x690 [ 115.630065][ T7189] bpf_prog_alloc+0x3b/0x200 [ 115.630080][ T7189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.630098][ T7189] bpf_prog_load+0x49e/0x2a80 [ 115.630114][ T7189] ? __lock_acquire+0x5c0/0x1f40 [ 115.630133][ T7189] ? __pfx_bpf_prog_load+0x10/0x10 [ 115.630161][ T7189] __sys_bpf+0x1f46/0x4a30 [ 115.630175][ T7189] ? do_anonymous_page+0x1f70/0x2050 [ 115.630187][ T7189] ? __pfx___sys_bpf+0x10/0x10 [ 115.630202][ T7189] ? rcu_is_watching+0x13/0xc0 [ 115.630218][ T7189] ? __handle_mm_fault+0x4ec/0x2f60 [ 115.630229][ T7189] ? __lock_acquire+0x5c0/0x1f40 [ 115.630253][ T7189] ? __css_rstat_updated+0x1ce/0x590 [ 115.630272][ T7189] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.630283][ T7189] ? __pfx___css_rstat_updated+0x10/0x10 [ 115.630311][ T7189] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 115.630327][ T7189] ? find_held_lock+0x2b/0x80 [ 115.630342][ T7189] ? exc_page_fault+0x6f/0xd0 [ 115.630355][ T7189] ? exc_page_fault+0x6f/0xd0 [ 115.630369][ T7189] ? __ia32_sys_bpf+0xcc/0x170 [ 115.630384][ T7189] __ia32_sys_bpf+0xcc/0x170 [ 115.630398][ T7189] ? __do_fast_syscall_32+0xb3/0x8b0 [ 115.630413][ T7189] __do_fast_syscall_32+0x13a/0x8b0 [ 115.630429][ T7189] do_fast_syscall_32+0x32/0x70 [ 115.630443][ T7189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.630458][ T7189] RIP: 0023:0xf7f96fec [ 115.630471][ T7189] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 115.630476][ T7189] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 115.630489][ T7189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 115.630496][ T7189] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.630503][ T7189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.630527][ T7189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.630535][ T7189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.630550][ T7189] [ 115.884028][ T7192] syzkaller0: entered promiscuous mode [ 115.884131][ T7192] syzkaller0: entered allmulticast mode [ 116.460610][ T10] usbtmc 6-1:16.0: bulk endpoints not found [ 116.806078][ T7203] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 116.814240][ T7203] fuse: Unknown parameter 'fl' [ 117.243484][ T30] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.393403][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 117.394164][ T30] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 117.395343][ T30] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.395364][ T30] usb 8-1: config 0 has no interface number 0 [ 117.397224][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.397244][ T30] usb 8-1: Product: syz [ 117.397256][ T30] usb 8-1: Manufacturer: syz [ 117.397268][ T30] usb 8-1: SerialNumber: syz [ 117.399609][ T30] usb 8-1: config 0 descriptor?? [ 117.417430][ T30] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 117.417455][ T30] usb 8-1: selecting invalid altsetting 1 [ 117.417470][ T30] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 117.443043][ T30] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.443302][ T30] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 117.451554][ T30] usb 8-1: media controller created [ 117.462085][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.675047][ T7210] kvm: apic: phys broadcast and lowest prio [ 117.899035][ T5834] usb 6-1: USB disconnect, device number 13 [ 118.363386][ T5740] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.538658][ T7222] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 118.539304][ T7222] fuse: Unknown parameter 'fl' [ 118.564278][ T30] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 118.564412][ T30] zl10353_read_register: readreg error (reg=127, ret==-110) [ 118.583603][ T5740] usb 5-1: Using ep0 maxpacket: 8 [ 118.584707][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.586597][ T7224] syzkaller0: entered promiscuous mode [ 118.586610][ T7224] syzkaller0: entered allmulticast mode [ 118.587041][ T5740] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 118.587196][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.587275][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.587369][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.588271][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.588407][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.868967][ T5740] usb 5-1: GET_CAPABILITIES returned 0 [ 118.868992][ T5740] usbtmc 5-1:16.0: can't read capabilities [ 119.072238][ T5834] usb 5-1: USB disconnect, device number 9 [ 119.386455][ T7235] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 119.388514][ T7235] fuse: Unknown parameter 'fl' [ 119.446820][ T7237] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 119.448191][ T7237] fuse: Unknown parameter 'fl' [ 120.394980][ T7247] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.396256][ T7247] fuse: Unknown parameter 'fl' [ 120.447731][ T7249] syzkaller0: entered promiscuous mode [ 120.447745][ T7249] syzkaller0: entered allmulticast mode [ 120.509665][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.931146][ T30] usb 8-1: USB disconnect, device number 11 [ 122.034413][ T7262] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 122.035478][ T7262] fuse: Unknown parameter 'fl' [ 122.101084][ T7271] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 122.110107][ T7271] fuse: Unknown parameter 'fl' [ 122.178596][ T7275] syzkaller0: entered promiscuous mode [ 122.178610][ T7275] syzkaller0: entered allmulticast mode [ 122.637144][ T855] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.904638][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.973388][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 122.973892][ T855] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 122.974771][ T855] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.974785][ T855] usb 5-1: config 0 has no interface number 0 [ 122.976452][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.976469][ T855] usb 5-1: Product: syz [ 122.976480][ T855] usb 5-1: Manufacturer: syz [ 122.976493][ T855] usb 5-1: SerialNumber: syz [ 122.978567][ T855] usb 5-1: config 0 descriptor?? [ 123.002138][ T855] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 123.002153][ T855] usb 5-1: selecting invalid altsetting 1 [ 123.002161][ T855] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 123.011412][ T855] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.011535][ T855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 123.011556][ T855] usb 5-1: media controller created [ 123.024272][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.219907][ T7273] kvm: apic: phys broadcast and lowest prio [ 124.095740][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.121817][ T855] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 124.121859][ T855] zl10353_read_register: readreg error (reg=127, ret==-110) [ 124.128489][ T5834] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 124.283390][ T5834] usb 7-1: Using ep0 maxpacket: 8 [ 124.284306][ T5834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.285595][ T5834] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 124.285634][ T5834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.285652][ T5834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.285693][ T5834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.285713][ T5834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.285746][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.503054][ T5834] usb 7-1: GET_CAPABILITIES returned 0 [ 124.503077][ T5834] usbtmc 7-1:16.0: can't read capabilities [ 124.705537][ T5834] usb 7-1: USB disconnect, device number 12 [ 125.027143][ T7304] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.028038][ T7304] fuse: Unknown parameter 'fl' [ 125.070091][ T7306] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.071237][ T7306] fuse: Unknown parameter 'fl' [ 125.144508][ T7308] syzkaller0: entered promiscuous mode [ 125.144531][ T7308] syzkaller0: entered allmulticast mode [ 125.170177][ T855] usb 5-1: USB disconnect, device number 10 [ 125.560245][ T7322] syzkaller0: entered promiscuous mode [ 125.560259][ T7322] syzkaller0: entered allmulticast mode [ 125.708224][ T7317] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.709543][ T7317] fuse: Unknown parameter 'fl' [ 125.877551][ T7329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.439203][ T7332] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.445701][ T7332] fuse: Unknown parameter 'fl' [ 126.471042][ T7337] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.471903][ T7337] fuse: Unknown parameter 'fl' [ 126.783053][ T7342] syzkaller0: entered promiscuous mode [ 126.783068][ T7342] syzkaller0: entered allmulticast mode [ 127.204099][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.204130][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.064649][ T7359] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.071926][ T7359] fuse: Unknown parameter 'fl' [ 128.218283][ T7363] syzkaller0: entered promiscuous mode [ 128.218305][ T7363] syzkaller0: entered allmulticast mode [ 128.231269][ T7365] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.232466][ T7365] fuse: Unknown parameter 'fl' [ 128.416865][ T7372] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.433207][ T7372] fuse: Unknown parameter 'fl' [ 128.665262][ T7062] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.833441][ T7062] usb 5-1: Using ep0 maxpacket: 8 [ 128.834806][ T7062] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.836753][ T7062] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 128.836776][ T7062] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.836787][ T7062] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.836799][ T7062] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.836811][ T7062] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.836830][ T7062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.952479][ T7378] syzkaller0: entered promiscuous mode [ 128.952502][ T7378] syzkaller0: entered allmulticast mode [ 129.087977][ T7062] usb 5-1: GET_CAPABILITIES returned 0 [ 129.088017][ T7062] usbtmc 5-1:16.0: can't read capabilities [ 129.302720][ T5727] usb 5-1: USB disconnect, device number 11 [ 129.803488][ T5831] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 129.963429][ T5831] usb 7-1: Using ep0 maxpacket: 8 [ 129.963940][ T5831] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.964848][ T5831] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 129.964872][ T5831] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.964883][ T5831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.964895][ T5831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.964906][ T5831] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.964925][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.353508][ T5834] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 130.513507][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 130.514060][ T5834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.514998][ T5834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 130.515019][ T5834] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.515052][ T5834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.515071][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.515090][ T5834] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 130.515123][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.522946][ T5834] usbtmc 6-1:16.0: bulk endpoints not found [ 130.543391][ T5831] usb 7-1: GET_CAPABILITIES returned 0 [ 130.543416][ T5831] usbtmc 7-1:16.0: can't read capabilities [ 130.545923][ T5831] usb 7-1: USB disconnect, device number 13 [ 130.632013][ T7406] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 130.633058][ T7406] fuse: Unknown parameter 'fl' [ 131.147932][ T7415] syzkaller0: entered promiscuous mode [ 131.147946][ T7415] syzkaller0: entered allmulticast mode [ 131.452034][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.528626][ T7434] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.529419][ T7434] fuse: Unknown parameter 'fl' [ 132.626800][ T7437] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.628397][ T7437] fuse: Unknown parameter 'fl' [ 133.127372][ T5740] usb 6-1: USB disconnect, device number 14 [ 133.160530][ T7439] syzkaller0: entered promiscuous mode [ 133.160544][ T7439] syzkaller0: entered allmulticast mode [ 134.273450][ T7062] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 134.356892][ T7466] tipc: Enabled bearer , priority 1 [ 134.374896][ T7466] dlm: Unknown command passed to DLM device : 0 [ 134.374896][ T7466] [ 134.425801][ T7465] tipc: Resetting bearer [ 134.434510][ T7465] tipc: Disabling bearer [ 134.444803][ T7062] usb 8-1: Using ep0 maxpacket: 8 [ 134.446693][ T7062] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.447856][ T7062] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 134.447893][ T7062] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.447912][ T7062] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.447933][ T7062] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.447953][ T7062] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.447986][ T7062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.534022][ T7469] syzkaller0: entered promiscuous mode [ 134.534103][ T7469] syzkaller0: entered allmulticast mode [ 134.602385][ T7471] FAULT_INJECTION: forcing a failure. [ 134.602385][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 134.602415][ T7471] CPU: 3 UID: 0 PID: 7471 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) [ 134.602435][ T7471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.602447][ T7471] Call Trace: [ 134.602453][ T7471] [ 134.602460][ T7471] dump_stack_lvl+0x100/0x190 [ 134.602489][ T7471] should_fail_ex.cold+0x5/0xa [ 134.602514][ T7471] should_failslab+0xc2/0x120 [ 134.602542][ T7471] kmem_cache_alloc_noprof+0x92/0x6a0 [ 134.602564][ T7471] ? __fget_files+0x215/0x3d0 [ 134.602589][ T7471] ? create_new_namespaces+0x30/0xac0 [ 134.602621][ T7471] create_new_namespaces+0x30/0xac0 [ 134.602654][ T7471] __do_sys_setns+0x213/0x1f30 [ 134.602679][ T7471] ? xfd_validate_state+0x129/0x190 [ 134.602705][ T7471] ? __pfx___do_sys_setns+0x10/0x10 [ 134.602740][ T7471] __do_fast_syscall_32+0x13a/0x8b0 [ 134.602777][ T7471] do_fast_syscall_32+0x32/0x70 [ 134.602802][ T7471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.602828][ T7471] RIP: 0023:0xf70aefec [ 134.602847][ T7471] Code: Unable to access opcode bytes at 0xf70aefc2. [ 134.602855][ T7471] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000015a [ 134.602873][ T7471] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 134.602885][ T7471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.602895][ T7471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.602906][ T7471] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.602918][ T7471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.602942][ T7471] [ 134.633417][ T5740] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.690177][ T7062] usb 8-1: GET_CAPABILITIES returned 0 [ 134.690221][ T7062] usbtmc 8-1:16.0: can't read capabilities [ 134.783537][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 134.784357][ T5740] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 134.785857][ T5740] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.785877][ T5740] usb 6-1: config 0 has no interface number 0 [ 134.892097][ T5834] usb 8-1: USB disconnect, device number 12 [ 135.059399][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.059426][ T5740] usb 6-1: Product: syz [ 135.059439][ T5740] usb 6-1: Manufacturer: syz [ 135.059452][ T5740] usb 6-1: SerialNumber: syz [ 135.387686][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.739519][ T5740] usb 6-1: config 0 descriptor?? [ 135.741676][ T5740] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 135.741690][ T5740] usb 6-1: selecting invalid altsetting 1 [ 135.741698][ T5740] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 135.743187][ T5740] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.743409][ T5740] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 135.743431][ T5740] usb 6-1: media controller created [ 135.748088][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.801917][ T7493] UBIFS error (pid: 7493): cannot open "ubi0_0", error -19 [ 135.963674][ T7467] kvm: apic: phys broadcast and lowest prio [ 136.333493][ T5834] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 136.463497][ T5834] usb 7-1: device descriptor read/64, error -71 [ 136.620680][ T7509] syzkaller0: entered promiscuous mode [ 136.620702][ T7509] syzkaller0: entered allmulticast mode [ 136.703499][ T5834] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 136.752464][ T7511] FAULT_INJECTION: forcing a failure. [ 136.752464][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 136.752498][ T7511] CPU: 2 UID: 0 PID: 7511 Comm: syz.0.449 Not tainted syzkaller #0 PREEMPT(full) [ 136.752520][ T7511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.752532][ T7511] Call Trace: [ 136.752539][ T7511] [ 136.752547][ T7511] dump_stack_lvl+0x100/0x190 [ 136.752579][ T7511] should_fail_ex.cold+0x5/0xa [ 136.752607][ T7511] should_failslab+0xc2/0x120 [ 136.752635][ T7511] kmem_cache_alloc_noprof+0x92/0x6a0 [ 136.752659][ T7511] ? __fget_files+0x215/0x3d0 [ 136.752682][ T7511] ? create_new_namespaces+0x30/0xac0 [ 136.752717][ T7511] create_new_namespaces+0x30/0xac0 [ 136.752752][ T7511] __do_sys_setns+0x213/0x1f30 [ 136.752783][ T7511] ? xfd_validate_state+0x129/0x190 [ 136.752814][ T7511] ? __pfx___do_sys_setns+0x10/0x10 [ 136.752852][ T7511] __do_fast_syscall_32+0x13a/0x8b0 [ 136.752881][ T7511] do_fast_syscall_32+0x32/0x70 [ 136.752906][ T7511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.752931][ T7511] RIP: 0023:0xf7f96fec [ 136.752953][ T7511] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 136.752962][ T7511] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000015a [ 136.752982][ T7511] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 136.752995][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.753006][ T7511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.753018][ T7511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.753029][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.753055][ T7511] [ 136.816028][ T5740] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 136.816070][ T5740] zl10353_read_register: readreg error (reg=127, ret==-110) [ 136.863433][ T5834] usb 7-1: device descriptor read/64, error -71 [ 136.974412][ T5834] usb usb7-port1: attempt power cycle [ 137.073430][ T7062] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.109872][ T7519] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.110948][ T7519] fuse: Unknown parameter 'fl' [ 137.243455][ T7062] usb 5-1: Using ep0 maxpacket: 32 [ 137.244277][ T7062] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 137.245436][ T7062] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.245458][ T7062] usb 5-1: config 0 has no interface number 0 [ 137.248216][ T7062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.248237][ T7062] usb 5-1: Product: syz [ 137.248249][ T7062] usb 5-1: Manufacturer: syz [ 137.248260][ T7062] usb 5-1: SerialNumber: syz [ 137.253488][ T7062] usb 5-1: config 0 descriptor?? [ 137.257367][ T7062] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 137.257390][ T7062] usb 5-1: selecting invalid altsetting 1 [ 137.257402][ T7062] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 137.260061][ T7062] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.260347][ T7062] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 137.260387][ T7062] usb 5-1: media controller created [ 137.269830][ T7062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.302973][ T7523] FAULT_INJECTION: forcing a failure. [ 137.302973][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 137.302996][ T7523] CPU: 2 UID: 0 PID: 7523 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) [ 137.303009][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.303016][ T7523] Call Trace: [ 137.303020][ T7523] [ 137.303025][ T7523] dump_stack_lvl+0x100/0x190 [ 137.303044][ T7523] should_fail_ex.cold+0x5/0xa [ 137.303059][ T7523] should_failslab+0xc2/0x120 [ 137.303080][ T7523] __kmalloc_cache_noprof+0x91/0x6d0 [ 137.303095][ T7523] ? rtnl_newlink+0x139/0x2620 [ 137.303108][ T7523] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.303120][ T7523] rtnl_newlink+0x139/0x2620 [ 137.303137][ T7523] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.303151][ T7523] ? rcu_is_watching+0x13/0xc0 [ 137.303164][ T7523] ? kasan_quarantine_put+0x104/0x240 [ 137.303178][ T7523] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.303196][ T7523] ? __lock_acquire+0x5c0/0x1f40 [ 137.303215][ T7523] ? find_held_lock+0x2b/0x80 [ 137.303248][ T7523] ? lock_acquire+0x1d1/0x380 [ 137.303264][ T7523] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 137.303276][ T7523] ? find_held_lock+0x2b/0x80 [ 137.303288][ T7523] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.303300][ T7523] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.303312][ T7523] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.303324][ T7523] rtnetlink_rcv_msg+0x95e/0xe90 [ 137.303337][ T7523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.303352][ T7523] ? ref_tracker_free+0x37e/0x6c0 [ 137.303366][ T7523] netlink_rcv_skb+0x159/0x420 [ 137.303383][ T7523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.303396][ T7523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.303417][ T7523] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.303434][ T7523] netlink_unicast+0x585/0x850 [ 137.303452][ T7523] ? __pfx_netlink_unicast+0x10/0x10 [ 137.303472][ T7523] netlink_sendmsg+0x8b0/0xda0 [ 137.303490][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.303507][ T7523] ? apparmor_socket_sendmsg+0x165/0x280 [ 137.303526][ T7523] ____sys_sendmsg+0xa4d/0xbe0 [ 137.303539][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.303556][ T7523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.303575][ T7523] ___sys_sendmsg+0x190/0x1e0 [ 137.303590][ T7523] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.303611][ T7523] ? find_held_lock+0x2b/0x80 [ 137.303631][ T7523] __sys_sendmsg+0x160/0x210 [ 137.303649][ T7523] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.303663][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 137.303679][ T7523] __do_fast_syscall_32+0x13a/0x8b0 [ 137.303693][ T7523] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.303706][ T7523] do_fast_syscall_32+0x32/0x70 [ 137.303720][ T7523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.303734][ T7523] RIP: 0023:0xf6fdefec [ 137.303747][ T7523] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 137.303752][ T7523] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 137.303763][ T7523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 137.303770][ T7523] RDX: 0000000004004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.303776][ T7523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.303783][ T7523] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.303789][ T7523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.303802][ T7523] [ 137.345050][ T5834] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 137.374613][ T5834] usb 7-1: device descriptor read/8, error -71 [ 137.415688][ T7528] FAULT_INJECTION: forcing a failure. [ 137.415688][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 137.415709][ T7528] CPU: 2 UID: 0 PID: 7528 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 137.415722][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.415729][ T7528] Call Trace: [ 137.415734][ T7528] [ 137.415738][ T7528] dump_stack_lvl+0x100/0x190 [ 137.415756][ T7528] should_fail_ex.cold+0x5/0xa [ 137.415769][ T7528] ? __netlink_lookup+0x652/0x900 [ 137.415786][ T7528] should_failslab+0xc2/0x120 [ 137.415802][ T7528] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.415818][ T7528] ? skb_clone+0x190/0x400 [ 137.415831][ T7528] skb_clone+0x190/0x400 [ 137.415844][ T7528] netlink_deliver_tap+0xaed/0xcc0 [ 137.415862][ T7528] netlink_unicast+0x62b/0x850 [ 137.415881][ T7528] ? __pfx_netlink_unicast+0x10/0x10 [ 137.415900][ T7528] netlink_sendmsg+0x8b0/0xda0 [ 137.415919][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.415936][ T7528] ? apparmor_socket_sendmsg+0x165/0x280 [ 137.415955][ T7528] ____sys_sendmsg+0xa4d/0xbe0 [ 137.415969][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.415986][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.416006][ T7528] ___sys_sendmsg+0x190/0x1e0 [ 137.416021][ T7528] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.416041][ T7528] ? find_held_lock+0x2b/0x80 [ 137.416063][ T5740] usb 6-1: USB disconnect, device number 15 [ 137.416063][ T7528] __sys_sendmsg+0x160/0x210 [ 137.416074][ T7528] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.416089][ T7528] ? __pfx_ksys_write+0x10/0x10 [ 137.416105][ T7528] __do_fast_syscall_32+0x13a/0x8b0 [ 137.416119][ T7528] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.416133][ T7528] do_fast_syscall_32+0x32/0x70 [ 137.416147][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.416162][ T7528] RIP: 0023:0xf7f83fec [ 137.416174][ T7528] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 137.416179][ T7528] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 137.416191][ T7528] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800012c0 [ 137.416198][ T7528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.416204][ T7528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.416210][ T7528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.416216][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.416229][ T7528] [ 137.476953][ T7513] kvm: apic: phys broadcast and lowest prio [ 137.531203][ T7532] syzkaller0: entered promiscuous mode [ 137.531264][ T7532] syzkaller0: entered allmulticast mode [ 137.538749][ T7062] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 137.538792][ T7062] zl10353_read_register: readreg error (reg=127, ret==-71) [ 137.539162][ T7062] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 137.566449][ T7534] FAULT_INJECTION: forcing a failure. [ 137.566449][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 137.566470][ T7534] CPU: 2 UID: 0 PID: 7534 Comm: syz.3.458 Not tainted syzkaller #0 PREEMPT(full) [ 137.566482][ T7534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.566489][ T7534] Call Trace: [ 137.566493][ T7534] [ 137.566498][ T7534] dump_stack_lvl+0x100/0x190 [ 137.566518][ T7534] should_fail_ex.cold+0x5/0xa [ 137.566534][ T7534] should_failslab+0xc2/0x120 [ 137.566553][ T7534] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.566568][ T7534] ? __fget_files+0x215/0x3d0 [ 137.566583][ T7534] ? create_new_namespaces+0x30/0xac0 [ 137.566603][ T7534] create_new_namespaces+0x30/0xac0 [ 137.566624][ T7534] __do_sys_setns+0x213/0x1f30 [ 137.566643][ T7534] ? xfd_validate_state+0x129/0x190 [ 137.566660][ T7534] ? __pfx___do_sys_setns+0x10/0x10 [ 137.566681][ T7534] __do_fast_syscall_32+0x13a/0x8b0 [ 137.566698][ T7534] do_fast_syscall_32+0x32/0x70 [ 137.566712][ T7534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.566726][ T7534] RIP: 0023:0xf6fdefec [ 137.566739][ T7534] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 137.566744][ T7534] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 000000000000015a [ 137.566755][ T7534] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 137.566762][ T7534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.566769][ T7534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.566775][ T7534] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.566782][ T7534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.566795][ T7534] [ 137.569689][ T7062] usb 5-1: USB disconnect, device number 12 [ 137.615041][ T5834] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 137.645034][ T5834] usb 7-1: device descriptor read/8, error -71 [ 137.652207][ T7540] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.652992][ T7540] fuse: Unknown parameter 'fl' [ 137.756052][ T5834] usb usb7-port1: unable to enumerate USB device [ 137.875697][ T7550] xt_REDIRECT: bad MAP_IPS. [ 138.083425][ T5748] Bluetooth: hci1: command tx timeout [ 138.112357][ T7561] syzkaller0: entered promiscuous mode [ 138.112372][ T7561] syzkaller0: entered allmulticast mode [ 138.428784][ T7568] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 138.429373][ T7568] fuse: Unknown parameter 'fl' [ 138.506889][ T7570] syzkaller0: entered promiscuous mode [ 138.506905][ T7570] syzkaller0: entered allmulticast mode [ 139.054198][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 139.095293][ T7589] syzkaller0: entered promiscuous mode [ 139.095308][ T7589] syzkaller0: entered allmulticast mode [ 139.213451][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 139.214412][ T35] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 139.215555][ T35] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.215575][ T35] usb 8-1: config 0 has no interface number 0 [ 139.217747][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.217767][ T35] usb 8-1: Product: syz [ 139.217780][ T35] usb 8-1: Manufacturer: syz [ 139.217792][ T35] usb 8-1: SerialNumber: syz [ 139.220047][ T35] usb 8-1: config 0 descriptor?? [ 139.246644][ T35] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 139.246667][ T35] usb 8-1: selecting invalid altsetting 1 [ 139.246681][ T35] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 139.251359][ T35] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.251590][ T35] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 139.251623][ T35] usb 8-1: media controller created [ 139.260171][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.323442][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.357452][ T7593] FAULT_INJECTION: forcing a failure. [ 139.357452][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 139.357473][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 139.357486][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.357493][ T7593] Call Trace: [ 139.357497][ T7593] [ 139.357501][ T7593] dump_stack_lvl+0x100/0x190 [ 139.357521][ T7593] should_fail_ex.cold+0x5/0xa [ 139.357536][ T7593] should_failslab+0xc2/0x120 [ 139.357554][ T7593] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 139.357569][ T7593] ? __d_alloc+0x35/0xa50 [ 139.357587][ T7593] __d_alloc+0x35/0xa50 [ 139.357633][ T7593] d_alloc_parallel+0x105/0x14c0 [ 139.357652][ T7593] ? lock_acquire+0x1d1/0x380 [ 139.357668][ T7593] ? __d_lookup+0x73/0x4a0 [ 139.357680][ T7593] ? __pfx_d_alloc_parallel+0x10/0x10 [ 139.357692][ T7593] ? __d_lookup+0x25c/0x4a0 [ 139.357705][ T7593] ? __d_lookup+0x266/0x4a0 [ 139.357720][ T7593] lookup_open+0x6bb/0x1990 [ 139.357737][ T7593] path_openat+0xa2c/0x2440 [ 139.357754][ T7593] ? __pfx_path_openat+0x10/0x10 [ 139.357773][ T7593] do_file_open+0x20e/0x430 [ 139.357789][ T7593] ? __pfx_do_file_open+0x10/0x10 [ 139.357813][ T7593] ? _raw_spin_unlock+0x28/0x50 [ 139.357827][ T7593] ? alloc_fd+0x471/0x7a0 [ 139.357845][ T7593] do_sys_openat2+0x10f/0x1e0 [ 139.357863][ T7593] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.357882][ T7593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.357898][ T7593] __ia32_compat_sys_openat+0x12d/0x210 [ 139.357910][ T7593] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 139.357920][ T7593] ? fput+0x7c/0x100 [ 139.357935][ T7593] ? ksys_write+0x1ac/0x250 [ 139.357948][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 139.357963][ T7593] __do_fast_syscall_32+0x13a/0x8b0 [ 139.357980][ T7593] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.357999][ T7593] do_fast_syscall_32+0x32/0x70 [ 139.358019][ T7593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.358039][ T7593] RIP: 0023:0xf70aefec [ 139.358056][ T7593] Code: Unable to access opcode bytes at 0xf70aefc2. [ 139.358063][ T7593] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 139.358082][ T7593] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 139.358093][ T7593] RDX: 0000000000064961 RSI: 00000000d7a15f2d RDI: 0000000000000000 [ 139.358104][ T7593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.358114][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.358124][ T7593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.358145][ T7593] [ 139.448493][ T7582] kvm: apic: phys broadcast and lowest prio [ 139.473456][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 139.473929][ T30] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.474752][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.474775][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.476147][ T30] usb 5-1: config 0 descriptor?? [ 139.525825][ T35] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 139.525869][ T35] zl10353_read_register: readreg error (reg=127, ret==-71) [ 139.526295][ T35] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 139.549928][ T35] usb 8-1: USB disconnect, device number 13 [ 139.681585][ T30] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.097351][ T35] usb 5-1: USB disconnect, device number 13 [ 140.151850][ T7597] syzkaller0: entered promiscuous mode [ 140.151870][ T7597] syzkaller0: entered allmulticast mode [ 141.238416][ T7616] syzkaller0: entered promiscuous mode [ 141.238469][ T7616] syzkaller0: entered allmulticast mode [ 141.763511][ T77] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 141.789007][ T7622] capability: warning: `syz.1.489' uses deprecated v2 capabilities in a way that may be insecure [ 141.848624][ T7625] syzkaller0: entered promiscuous mode [ 141.848647][ T7625] syzkaller0: entered allmulticast mode [ 141.913470][ T77] usb 7-1: Using ep0 maxpacket: 32 [ 141.914198][ T77] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 141.915336][ T77] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.915355][ T77] usb 7-1: config 0 has no interface number 0 [ 141.917415][ T77] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.917434][ T77] usb 7-1: Product: syz [ 141.917447][ T77] usb 7-1: Manufacturer: syz [ 141.917459][ T77] usb 7-1: SerialNumber: syz [ 141.919711][ T77] usb 7-1: config 0 descriptor?? [ 141.935968][ T77] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 141.935991][ T77] usb 7-1: selecting invalid altsetting 1 [ 141.936004][ T77] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 141.961020][ T77] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.961240][ T77] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 141.961273][ T77] usb 7-1: media controller created [ 141.980568][ T77] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.148497][ T7620] kvm: apic: phys broadcast and lowest prio [ 142.283473][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 142.434731][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.435965][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.435991][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.436009][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.436041][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.438256][ T35] usb 6-1: config 0 descriptor?? [ 142.613423][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 142.673391][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.763444][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 142.764534][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.765508][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 142.765548][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.765571][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.765611][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.765632][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.765666][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.823492][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 142.824120][ T5834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.825151][ T5834] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 142.825175][ T5834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.825186][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.825198][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.825209][ T5834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.825228][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.844832][ T35] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 142.855757][ T35] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 142.973766][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 142.973792][ T9] usbtmc 8-1:16.0: can't read capabilities [ 143.036759][ T5834] usb 5-1: GET_CAPABILITIES returned 0 [ 143.036784][ T5834] usbtmc 5-1:16.0: can't read capabilities [ 143.045253][ T77] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 143.045300][ T77] zl10353_read_register: readreg error (reg=127, ret==-110) [ 143.113039][ T5831] usb 6-1: USB disconnect, device number 16 [ 143.177731][ T5740] usb 8-1: USB disconnect, device number 14 [ 143.238839][ T30] usb 5-1: USB disconnect, device number 14 [ 143.665104][ T5831] hid-generic 0006:046D:B00F.0003: unknown main item tag 0x0 [ 143.665725][ T5831] hid-generic 0006:046D:B00F.0003: item fetching failed at offset 52/86 [ 143.666065][ T5831] hid-generic 0006:046D:B00F.0003: probe with driver hid-generic failed with error -22 [ 143.754769][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 144.014519][ T7657] syzkaller0: entered promiscuous mode [ 144.014533][ T7657] syzkaller0: entered allmulticast mode [ 144.085656][ T7660] FAULT_INJECTION: forcing a failure. [ 144.085656][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 144.085677][ T7660] CPU: 3 UID: 0 PID: 7660 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 144.085689][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.085696][ T7660] Call Trace: [ 144.085700][ T7660] [ 144.085704][ T7660] dump_stack_lvl+0x100/0x190 [ 144.085723][ T7660] should_fail_ex.cold+0x5/0xa [ 144.085736][ T7660] ? __netlink_lookup+0x652/0x900 [ 144.085753][ T7660] should_failslab+0xc2/0x120 [ 144.085770][ T7660] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.085785][ T7660] ? skb_clone+0x190/0x400 [ 144.085798][ T7660] skb_clone+0x190/0x400 [ 144.085809][ T7660] netlink_deliver_tap+0xaed/0xcc0 [ 144.085827][ T7660] netlink_unicast+0x62b/0x850 [ 144.085845][ T7660] ? __pfx_netlink_unicast+0x10/0x10 [ 144.085865][ T7660] netlink_sendmsg+0x8b0/0xda0 [ 144.085883][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.085901][ T7660] ? apparmor_socket_sendmsg+0x165/0x280 [ 144.085920][ T7660] ____sys_sendmsg+0xa4d/0xbe0 [ 144.085932][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.085949][ T7660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.085969][ T7660] ___sys_sendmsg+0x190/0x1e0 [ 144.085984][ T7660] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.086005][ T7660] ? find_held_lock+0x2b/0x80 [ 144.086026][ T7660] __sys_sendmsg+0x160/0x210 [ 144.086037][ T7660] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.086051][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 144.086067][ T7660] __do_fast_syscall_32+0x13a/0x8b0 [ 144.086081][ T7660] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.086095][ T7660] do_fast_syscall_32+0x32/0x70 [ 144.086109][ T7660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.086124][ T7660] RIP: 0023:0xf6fdefec [ 144.086144][ T7660] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 144.086149][ T7660] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 144.086160][ T7660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 144.086167][ T7660] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.086173][ T7660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.086179][ T7660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.086186][ T7660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.086199][ T7660] [ 144.086255][ T7660] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 144.314583][ T7670] syzkaller0: entered promiscuous mode [ 144.314597][ T7670] syzkaller0: entered allmulticast mode [ 145.169493][ T77] usb 7-1: USB disconnect, device number 18 [ 145.259243][ T7688] syzkaller0: entered promiscuous mode [ 145.259258][ T7688] syzkaller0: entered allmulticast mode [ 145.321059][ T7692] syzkaller0: entered promiscuous mode [ 145.321072][ T7692] syzkaller0: entered allmulticast mode [ 145.410290][ T7696] syzkaller0: entered promiscuous mode [ 145.410310][ T7696] syzkaller0: entered allmulticast mode [ 145.533448][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 145.705854][ T9] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 145.707096][ T9] usb 8-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 145.707135][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 145.707156][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 34928, setting to 1024 [ 145.707177][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 145.707196][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.709121][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.709142][ T9] usb 8-1: Product: syz [ 145.709155][ T9] usb 8-1: Manufacturer: syz [ 145.709167][ T9] usb 8-1: SerialNumber: syz [ 145.712725][ T7690] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.773427][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.843490][ T77] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 145.916203][ T9] usb 8-1: usb_control_msg returned -71 [ 145.916245][ T9] usbtmc 8-1:1.0: can't read capabilities [ 145.923506][ T9] usb 8-1: USB disconnect, device number 15 [ 145.933415][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 145.934106][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.934967][ T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 145.934989][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.935001][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.935013][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.935025][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.935044][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.993450][ T77] usb 6-1: Using ep0 maxpacket: 32 [ 145.994200][ T77] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 145.995151][ T77] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.995171][ T77] usb 6-1: config 0 has no interface number 0 [ 145.997532][ T77] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.997552][ T77] usb 6-1: Product: syz [ 145.997563][ T77] usb 6-1: Manufacturer: syz [ 145.997597][ T77] usb 6-1: SerialNumber: syz [ 145.999783][ T77] usb 6-1: config 0 descriptor?? [ 146.003996][ T77] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 146.004014][ T77] usb 6-1: selecting invalid altsetting 1 [ 146.004028][ T77] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 146.006685][ T77] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.006918][ T77] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 146.006953][ T77] usb 6-1: media controller created [ 146.015686][ T77] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.148470][ T35] usb 5-1: GET_CAPABILITIES returned 0 [ 146.148507][ T35] usbtmc 5-1:16.0: can't read capabilities [ 146.217156][ T7705] kvm: apic: phys broadcast and lowest prio [ 146.353454][ T30] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 146.354546][ T9] usb 5-1: USB disconnect, device number 15 [ 146.504215][ T30] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 146.507478][ T30] usb 8-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 146.507520][ T30] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 146.507541][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 34928, setting to 1024 [ 146.507622][ T30] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 146.507642][ T30] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.512294][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.512317][ T30] usb 8-1: Product: syz [ 146.512330][ T30] usb 8-1: Manufacturer: syz [ 146.512341][ T30] usb 8-1: SerialNumber: syz [ 146.520969][ T7690] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.724889][ T30] usb 8-1: usb_control_msg returned -32 [ 146.724913][ T30] usbtmc 8-1:1.0: can't read capabilities [ 147.123807][ T77] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 147.123854][ T77] zl10353_read_register: readreg error (reg=127, ret==-110) [ 147.300111][ T7719] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 147.301061][ T7719] fuse: Unknown parameter 'fl' [ 147.358393][ T7722] syzkaller0: entered promiscuous mode [ 147.358407][ T7722] syzkaller0: entered allmulticast mode [ 147.379332][ T7715] overlayfs: failed to resolve './file1': -2 [ 147.468618][ T7726] syzkaller0: entered promiscuous mode [ 147.468643][ T7726] syzkaller0: entered allmulticast mode [ 148.315893][ T9] usb 8-1: USB disconnect, device number 16 [ 148.483888][ T7741] 9pnet_fd: Insufficient options for proto=fd [ 148.522297][ T7743] vers=2.0 not permitted when mounting with smb3 [ 148.522297][ T7743] [ 148.522456][ T7743] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 148.579300][ T77] usb 6-1: USB disconnect, device number 17 [ 148.621168][ T7745] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.622378][ T7745] fuse: Unknown parameter 'fl' [ 148.626917][ T7749] syzkaller0: entered promiscuous mode [ 148.626928][ T7749] syzkaller0: entered allmulticast mode [ 148.647871][ T7751] FAULT_INJECTION: forcing a failure. [ 148.647871][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 148.647891][ T7751] CPU: 0 UID: 0 PID: 7751 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT(full) [ 148.647904][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.647911][ T7751] Call Trace: [ 148.647915][ T7751] [ 148.647920][ T7751] dump_stack_lvl+0x100/0x190 [ 148.647939][ T7751] should_fail_ex.cold+0x5/0xa [ 148.647952][ T7751] ? __netlink_lookup+0x652/0x900 [ 148.647968][ T7751] should_failslab+0xc2/0x120 [ 148.647985][ T7751] kmem_cache_alloc_noprof+0x92/0x6a0 [ 148.648000][ T7751] ? skb_clone+0x190/0x400 [ 148.648012][ T7751] skb_clone+0x190/0x400 [ 148.648023][ T7751] netlink_deliver_tap+0xaed/0xcc0 [ 148.648041][ T7751] netlink_unicast+0x62b/0x850 [ 148.648060][ T7751] ? __pfx_netlink_unicast+0x10/0x10 [ 148.648080][ T7751] netlink_sendmsg+0x8b0/0xda0 [ 148.648103][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.648121][ T7751] ? apparmor_socket_sendmsg+0x165/0x280 [ 148.648152][ T7751] ____sys_sendmsg+0xa4d/0xbe0 [ 148.648167][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.648184][ T7751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.648204][ T7751] ___sys_sendmsg+0x190/0x1e0 [ 148.648219][ T7751] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.648240][ T7751] ? find_held_lock+0x2b/0x80 [ 148.648262][ T7751] __sys_sendmsg+0x160/0x210 [ 148.648273][ T7751] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.648287][ T7751] ? __pfx_ksys_write+0x10/0x10 [ 148.648303][ T7751] __do_fast_syscall_32+0x13a/0x8b0 [ 148.648317][ T7751] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.648331][ T7751] do_fast_syscall_32+0x32/0x70 [ 148.648345][ T7751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.648360][ T7751] RIP: 0023:0xf7f83fec [ 148.648373][ T7751] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 148.648378][ T7751] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 148.648389][ T7751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 148.648396][ T7751] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.648402][ T7751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.648408][ T7751] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.648414][ T7751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.648428][ T7751] [ 149.874914][ T5834] logitech-hidpp-device 0005:046D:B012.0004: item fetching failed at offset 0/1 [ 149.878908][ T5834] logitech-hidpp-device 0005:046D:B012.0004: hidpp_probe:parse failed [ 149.878970][ T5834] logitech-hidpp-device 0005:046D:B012.0004: probe with driver logitech-hidpp-device failed with error -22 [ 150.041056][ T7787] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.042222][ T7787] fuse: Unknown parameter 'fl' [ 150.120127][ T7789] syzkaller0: entered promiscuous mode [ 150.120149][ T7789] syzkaller0: entered allmulticast mode [ 150.536357][ T7803] FAULT_INJECTION: forcing a failure. [ 150.536357][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 150.536380][ T7803] CPU: 3 UID: 0 PID: 7803 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.536395][ T7803] Tainted: [L]=SOFTLOCKUP [ 150.536399][ T7803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.536406][ T7803] Call Trace: [ 150.536409][ T7803] [ 150.536414][ T7803] dump_stack_lvl+0x100/0x190 [ 150.536433][ T7803] should_fail_ex.cold+0x5/0xa [ 150.536448][ T7803] should_failslab+0xc2/0x120 [ 150.536465][ T7803] kmem_cache_alloc_noprof+0x92/0x6a0 [ 150.536480][ T7803] ? dst_alloc+0x99/0x1a0 [ 150.536499][ T7803] dst_alloc+0x99/0x1a0 [ 150.536517][ T7803] rt_dst_alloc+0x35/0x3a0 [ 150.536530][ T7803] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 150.536551][ T7803] ip_route_output_key_hash+0x118/0x2b0 [ 150.536567][ T7803] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 150.536585][ T7803] ? __ip_queue_xmit+0x1028/0x1f40 [ 150.536597][ T7803] ? find_held_lock+0x2b/0x80 [ 150.536613][ T7803] ip_route_output_flow+0x27/0x150 [ 150.536629][ T7803] __ip_queue_xmit+0x1926/0x1f40 [ 150.536644][ T7803] ? __pfx_ip_queue_xmit+0x10/0x10 [ 150.536656][ T7803] __tcp_transmit_skb+0x3503/0x4f40 [ 150.536679][ T7803] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 150.536697][ T7803] ? lock_acquire+0x1d1/0x380 [ 150.536723][ T7803] ? ktime_get+0x22c/0x320 [ 150.536750][ T7803] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.536768][ T7803] tcp_write_xmit+0x1130/0x8470 [ 150.536793][ T7803] ? __sk_mem_schedule+0xd0/0x100 [ 150.536808][ T7803] tcp_sendmsg_locked+0x2c02/0x4420 [ 150.536826][ T7803] ? __lock_acquire+0x5c0/0x1f40 [ 150.536848][ T7803] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 150.536863][ T7803] ? lock_acquire+0x1d1/0x380 [ 150.536879][ T7803] ? do_raw_spin_lock+0x128/0x260 [ 150.536891][ T7803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.536905][ T7803] ? __local_bh_enable_ip+0xa5/0x120 [ 150.536924][ T7803] tcp_sendmsg+0x2e/0x50 [ 150.536938][ T7803] ? __pfx_tcp_sendmsg+0x10/0x10 [ 150.536952][ T7803] inet_sendmsg+0xb9/0x140 [ 150.536966][ T7803] sock_sendmsg+0x352/0x410 [ 150.536979][ T7803] ? __pfx_inet_sendmsg+0x10/0x10 [ 150.536993][ T7803] ? __pfx_sock_sendmsg+0x10/0x10 [ 150.537011][ T7803] ? find_held_lock+0x2b/0x80 [ 150.537024][ T7803] ? current_time+0x8a/0x3b0 [ 150.537042][ T7803] splice_to_socket+0xb3c/0x11a0 [ 150.537065][ T7803] ? __pfx_splice_to_socket+0x10/0x10 [ 150.537096][ T7803] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 150.537116][ T7803] ? __pfx_splice_to_socket+0x10/0x10 [ 150.537139][ T7803] direct_splice_actor+0x192/0x690 [ 150.537164][ T7803] splice_direct_to_actor+0x345/0xa30 [ 150.537191][ T7803] ? __pfx_direct_splice_actor+0x10/0x10 [ 150.537219][ T7803] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 150.537247][ T7803] ? lock_acquire+0x1d1/0x380 [ 150.537275][ T7803] do_splice_direct+0x174/0x240 [ 150.537302][ T7803] ? __pfx_do_splice_direct+0x10/0x10 [ 150.537326][ T7803] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.537351][ T7803] ? bpf_lsm_file_permission+0x9/0x10 [ 150.537371][ T7803] ? security_file_permission+0x76/0x210 [ 150.537384][ T7803] ? rw_verify_area+0xce/0x6d0 [ 150.537397][ T7803] do_sendfile+0xadc/0xe20 [ 150.537413][ T7803] ? __pfx_do_sendfile+0x10/0x10 [ 150.537425][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.537440][ T7803] ? __fget_files+0x21f/0x3d0 [ 150.537457][ T7803] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 150.537472][ T7803] ? fput+0x7c/0x100 [ 150.537488][ T7803] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 150.537503][ T7803] ? ksys_write+0x1ac/0x250 [ 150.537516][ T7803] ? __pfx_ksys_write+0x10/0x10 [ 150.537532][ T7803] __do_fast_syscall_32+0x13a/0x8b0 [ 150.537546][ T7803] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.537581][ T7803] do_fast_syscall_32+0x32/0x70 [ 150.537596][ T7803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.537610][ T7803] RIP: 0023:0xf70aefec [ 150.537625][ T7803] Code: Unable to access opcode bytes at 0xf70aefc2. [ 150.537693][ T7803] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 150.537705][ T7803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 150.537712][ T7803] RDX: 0000000000000000 RSI: 000000007ffff004 RDI: 0000000000000000 [ 150.537719][ T7803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.537728][ T7803] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.537735][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.537750][ T7803] [ 150.883572][ T5831] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.033449][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 151.035825][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.036846][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 151.036882][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.036899][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.036918][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.036935][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.036965][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.251114][ T5831] usb 5-1: GET_CAPABILITIES returned 0 [ 151.251137][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 151.454967][ T43] usb 5-1: USB disconnect, device number 16 [ 151.571100][ T7813] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.572168][ T7813] fuse: Unknown parameter 'fl' [ 151.625573][ T7815] syzkaller0: entered promiscuous mode [ 151.625588][ T7815] syzkaller0: entered allmulticast mode [ 151.707074][ T7817] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 151.708642][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 151.786306][ T7817] configfs-gadget.g1 gadget.0: HOST MAC d2:59:ef:5c:08:4d [ 151.786332][ T7817] configfs-gadget.g1 gadget.0: MAC b6:2d:b5:87:24:68 [ 151.798808][ T7819] FAULT_INJECTION: forcing a failure. [ 151.798808][ T7819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.798831][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.798846][ T7819] Tainted: [L]=SOFTLOCKUP [ 151.798850][ T7819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.798857][ T7819] Call Trace: [ 151.798861][ T7819] [ 151.798866][ T7819] dump_stack_lvl+0x100/0x190 [ 151.798885][ T7819] should_fail_ex.cold+0x5/0xa [ 151.798900][ T7819] _copy_from_user+0x2e/0xd0 [ 151.798917][ T7819] kstrtouint_from_user+0xd6/0x1d0 [ 151.798929][ T7819] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 151.798944][ T7819] ? lock_acquire+0x1d1/0x380 [ 151.798963][ T7819] proc_fail_nth_write+0x83/0x220 [ 151.798978][ T7819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.798996][ T7819] vfs_write+0x2aa/0x1050 [ 151.799009][ T7819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.799022][ T7819] ? lock_acquire+0x1d1/0x380 [ 151.799038][ T7819] ? __fget_files+0x34/0x3d0 [ 151.799052][ T7819] ? __pfx_vfs_write+0x10/0x10 [ 151.799064][ T7819] ? find_held_lock+0x2b/0x80 [ 151.799078][ T7819] ? __fget_files+0x215/0x3d0 [ 151.799093][ T7819] ? __fget_files+0x21f/0x3d0 [ 151.799111][ T7819] ksys_write+0x12a/0x250 [ 151.799123][ T7819] ? __pfx_ksys_write+0x10/0x10 [ 151.799140][ T7819] do_int80_emulation+0x166/0x650 [ 151.799169][ T7819] asm_int80_emulation+0x1a/0x20 [ 151.799181][ T7819] RIP: 0023:0xf71875ab [ 151.799190][ T7819] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 151.799201][ T7819] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 151.799212][ T7819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54465d0 [ 151.799219][ T7819] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.799226][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.799232][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.799238][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.799252][ T7819] [ 151.887170][ T7824] input: syz1 as /devices/virtual/input/input7 [ 152.023838][ T35] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.183804][ T35] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 152.188329][ T35] usb 5-1: Dual-Role OTG device on HNP port [ 152.188681][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.280247][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 152.318606][ T7844] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.319700][ T7844] fuse: Unknown parameter 'fl' [ 152.336004][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 152.336020][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 152.468354][ T7846] 9p: Bad value for 'version' [ 152.782191][ T7854] FAULT_FLAG_ALLOW_RETRY missing 801 [ 152.782208][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.3.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.782224][ T7854] Tainted: [L]=SOFTLOCKUP [ 152.782228][ T7854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.782235][ T7854] Call Trace: [ 152.782239][ T7854] [ 152.782243][ T7854] dump_stack_lvl+0x100/0x190 [ 152.782263][ T7854] handle_userfault.cold+0x38/0x65 [ 152.782280][ T7854] ? do_raw_spin_unlock+0x145/0x1e0 [ 152.782292][ T7854] ? _raw_spin_unlock+0x28/0x50 [ 152.782303][ T7854] ? __free_frozen_pages+0x751/0x10f0 [ 152.782336][ T7854] ? __pfx_handle_userfault+0x10/0x10 [ 152.782356][ T7854] ? rcu_read_unlock+0x2d/0xb0 [ 152.782367][ T7854] ? rcu_read_unlock+0x2d/0xb0 [ 152.782382][ T7854] do_anonymous_page+0x186d/0x2050 [ 152.782397][ T7854] ? __pfx_do_anonymous_page+0x10/0x10 [ 152.782407][ T7854] ? rcu_read_unlock+0x2d/0xb0 [ 152.782418][ T7854] ? rcu_read_unlock+0x2d/0xb0 [ 152.782429][ T7854] ? __pte_offset_map+0x179/0x310 [ 152.782445][ T7854] __handle_mm_fault+0x1ff3/0x2f60 [ 152.782459][ T7854] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.782470][ T7854] ? pte_offset_map_lock+0x174/0x320 [ 152.782485][ T7854] ? find_held_lock+0x2b/0x80 [ 152.782497][ T7854] ? find_held_lock+0x2b/0x80 [ 152.782509][ T7854] ? follow_page_pte+0x536/0x1050 [ 152.782533][ T7854] handle_mm_fault+0x363/0xa20 [ 152.782547][ T7854] __get_user_pages+0x8ae/0x2c30 [ 152.782567][ T7854] ? __pfx___get_user_pages+0x10/0x10 [ 152.782588][ T7854] populate_vma_page_range+0x267/0x3f0 [ 152.782604][ T7854] ? __pfx_populate_vma_page_range+0x10/0x10 [ 152.782620][ T7854] ? __pfx___vma_start_write+0x10/0x10 [ 152.782646][ T7854] mprotect_fixup+0x925/0xe00 [ 152.782660][ T7854] ? __pfx_mprotect_fixup+0x10/0x10 [ 152.782684][ T7854] do_mprotect_pkey+0xa51/0xdd0 [ 152.782700][ T7854] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 152.782710][ T7854] ? find_held_lock+0x2b/0x80 [ 152.782722][ T7854] ? ksys_write+0x190/0x250 [ 152.782735][ T7854] ? ksys_write+0x190/0x250 [ 152.782753][ T7854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.782772][ T7854] ? ksys_write+0x1ac/0x250 [ 152.782785][ T7854] ? __pfx_ksys_write+0x10/0x10 [ 152.782799][ T7854] __ia32_sys_mprotect+0x75/0xb0 [ 152.782810][ T7854] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.782823][ T7854] __do_fast_syscall_32+0x13a/0x8b0 [ 152.782836][ T7854] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.782850][ T7854] do_fast_syscall_32+0x32/0x70 [ 152.782865][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.782879][ T7854] RIP: 0023:0xf6fdefec [ 152.782892][ T7854] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 152.782897][ T7854] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 152.782908][ T7854] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 152.782915][ T7854] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 152.782921][ T7854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.782928][ T7854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.782934][ T7854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.782948][ T7854] [ 152.940136][ T7857] syzkaller0: entered promiscuous mode [ 152.940157][ T7857] syzkaller0: entered allmulticast mode [ 153.096876][ T35] cdc_ncm 5-1:1.0: MAC-Address: d2:59:ef:5c:08:4d [ 153.113193][ T35] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), d2:59:ef:5c:08:4d [ 153.232489][ T7871] netlink: 51 bytes leftover after parsing attributes in process `syz.0.566'. [ 153.689806][ T7882] netlink: 76 bytes leftover after parsing attributes in process `syz.0.568'. [ 153.705141][ T77] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.712860][ T7892] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.725662][ T7892] fuse: Unknown parameter 'fl' [ 153.835152][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 153.973418][ T77] usb 6-1: Using ep0 maxpacket: 8 [ 153.974141][ T77] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.975030][ T77] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 153.975066][ T77] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.975085][ T77] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.975103][ T77] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.975337][ T77] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.975372][ T77] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.397028][ T77] usb 6-1: GET_CAPABILITIES returned 0 [ 154.397202][ T77] usbtmc 6-1:16.0: can't read capabilities [ 154.463664][ T35] usb 6-1: USB disconnect, device number 18 [ 154.558773][ T7908] syzkaller0: entered promiscuous mode [ 154.558788][ T7908] syzkaller0: entered allmulticast mode [ 154.661882][ T7911] FAULT_INJECTION: forcing a failure. [ 154.661882][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 154.661912][ T7911] CPU: 2 UID: 0 PID: 7911 Comm: syz.0.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.661936][ T7911] Tainted: [L]=SOFTLOCKUP [ 154.661942][ T7911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.661952][ T7911] Call Trace: [ 154.661958][ T7911] [ 154.661965][ T7911] dump_stack_lvl+0x100/0x190 [ 154.661993][ T7911] should_fail_ex.cold+0x5/0xa [ 154.662012][ T7911] ? __netlink_lookup+0x652/0x900 [ 154.662037][ T7911] should_failslab+0xc2/0x120 [ 154.662063][ T7911] kmem_cache_alloc_noprof+0x92/0x6a0 [ 154.662086][ T7911] ? skb_clone+0x190/0x400 [ 154.662107][ T7911] skb_clone+0x190/0x400 [ 154.662124][ T7911] netlink_deliver_tap+0xaed/0xcc0 [ 154.662158][ T7911] netlink_unicast+0x62b/0x850 [ 154.662185][ T7911] ? __pfx_netlink_unicast+0x10/0x10 [ 154.662216][ T7911] netlink_sendmsg+0x8b0/0xda0 [ 154.662243][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.662269][ T7911] ? apparmor_socket_sendmsg+0x165/0x280 [ 154.662299][ T7911] ____sys_sendmsg+0xa4d/0xbe0 [ 154.662318][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.662344][ T7911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.662375][ T7911] ___sys_sendmsg+0x190/0x1e0 [ 154.662398][ T7911] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.662431][ T7911] ? find_held_lock+0x2b/0x80 [ 154.662465][ T7911] __sys_sendmsg+0x160/0x210 [ 154.662481][ T7911] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.662504][ T7911] ? __pfx_ksys_write+0x10/0x10 [ 154.662528][ T7911] __do_fast_syscall_32+0x13a/0x8b0 [ 154.662550][ T7911] ? lockdep_hardirqs_on+0x7d/0x110 [ 154.662571][ T7911] do_fast_syscall_32+0x32/0x70 [ 154.662592][ T7911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.662613][ T7911] RIP: 0023:0xf7f96fec [ 154.662631][ T7911] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 154.662639][ T7911] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 154.662656][ T7911] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000740 [ 154.662667][ T7911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.662677][ T7911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.662686][ T7911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.662695][ T7911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.662717][ T7911] [ 154.667441][ T7911] bridge0: port 3(syz_tun) entered disabled state [ 154.694640][ T7911] syz_tun (unregistering): left allmulticast mode [ 154.694656][ T7911] syz_tun (unregistering): left promiscuous mode [ 154.694708][ T7911] bridge0: port 3(syz_tun) entered disabled state [ 154.863707][ T7916] input: syz1 as /devices/virtual/input/input8 [ 154.879152][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 155.161817][ T7926] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.175840][ T7926] fuse: Unknown parameter 'fl' [ 155.270186][ T7930] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.327085][ T7932] FAULT_INJECTION: forcing a failure. [ 155.327085][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.327108][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.0.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.327124][ T7932] Tainted: [L]=SOFTLOCKUP [ 155.327128][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.327134][ T7932] Call Trace: [ 155.327138][ T7932] [ 155.327143][ T7932] dump_stack_lvl+0x100/0x190 [ 155.327161][ T7932] should_fail_ex.cold+0x5/0xa [ 155.327176][ T7932] _copy_from_user+0x2e/0xd0 [ 155.327205][ T7932] compat_i2cdev_ioctl+0x3c9/0x540 [ 155.327221][ T7932] ? hook_file_ioctl_common+0x140/0x440 [ 155.327235][ T7932] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 155.327250][ T7932] ? __fget_files+0x21f/0x3d0 [ 155.327266][ T7932] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 155.327281][ T7932] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 155.327295][ T7932] __do_fast_syscall_32+0x13a/0x8b0 [ 155.327310][ T7932] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.327324][ T7932] do_fast_syscall_32+0x32/0x70 [ 155.327338][ T7932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.327352][ T7932] RIP: 0023:0xf7f96fec [ 155.327364][ T7932] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 155.327370][ T7932] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 155.327381][ T7932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 155.327387][ T7932] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.327394][ T7932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.327400][ T7932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.327407][ T7932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.327420][ T7932] [ 155.421899][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.422247][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.448561][ T7935] kvm: apic: phys broadcast and lowest prio [ 156.075657][ T7943] fuse: Bad value for 'fd' [ 156.199897][ T7950] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.200812][ T7950] fuse: Unknown parameter 'fl' [ 156.262015][ T7952] EXT4-fs (nbd0): unable to read superblock [ 156.268294][ T7952] FAULT_INJECTION: forcing a failure. [ 156.268294][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 156.268316][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.268331][ T7952] Tainted: [L]=SOFTLOCKUP [ 156.268335][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.268342][ T7952] Call Trace: [ 156.268346][ T7952] [ 156.268350][ T7952] dump_stack_lvl+0x100/0x190 [ 156.268381][ T7952] should_fail_ex.cold+0x5/0xa [ 156.268398][ T7952] should_failslab+0xc2/0x120 [ 156.268415][ T7952] __kmalloc_cache_noprof+0x91/0x6d0 [ 156.268428][ T7952] ? kasan_save_track+0x14/0x30 [ 156.268443][ T7952] ? ovl_init_fs_context+0x96/0x630 [ 156.268458][ T7952] ovl_init_fs_context+0x96/0x630 [ 156.268471][ T7952] alloc_fs_context+0x60c/0xf40 [ 156.268492][ T7952] __ia32_sys_fsopen+0xef/0x230 [ 156.268504][ T7952] __do_fast_syscall_32+0x13a/0x8b0 [ 156.268520][ T7952] do_fast_syscall_32+0x32/0x70 [ 156.268534][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.268549][ T7952] RIP: 0023:0xf7f96fec [ 156.268561][ T7952] Code: Unable to access opcode bytes at 0xf7f96fc2. [ 156.268566][ T7952] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 156.268577][ T7952] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000001 [ 156.268585][ T7952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.268591][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.268598][ T7952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.268604][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.268618][ T7952] [ 156.538494][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.539359][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.548685][ T7962] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 156.763534][ T5834] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 156.923558][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 156.926269][ T5834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.927086][ T5834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 156.927110][ T5834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.927122][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.927133][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.927145][ T5834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.927164][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.140023][ T5834] usb 6-1: GET_CAPABILITIES returned 0 [ 157.140060][ T5834] usbtmc 6-1:16.0: can't read capabilities [ 157.343466][ T77] usb 6-1: USB disconnect, device number 19 [ 157.861139][ T7980] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.862444][ T7980] fuse: Unknown parameter 'fl' [ 157.946177][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.946215][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.951363][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.952932][ T7982] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 157.952953][ T7982] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 157.953026][ T7982] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 157.956253][ T7982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.962757][ T7982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.989082][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.990625][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.991775][ T7982] wg2 speed is unknown, defaulting to 1000 [ 157.993576][ T7982] wg2 speed is unknown, defaulting to 1000 [ 158.007734][ T7982] FAT-fs (nbd1): unable to read boot sector [ 158.093999][ T7989] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 158.095003][ T7989] syzkaller0: entered promiscuous mode [ 158.095020][ T7989] syzkaller0: entered allmulticast mode [ 158.412613][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.600'. [ 158.589112][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.334338][ T5740] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 159.472475][ T8010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.997976][ T5740] usb 7-1: Using ep0 maxpacket: 8 [ 160.005837][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 160.005871][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 160.005962][ T5747] Bluetooth: hci1: command 0x0406 tx timeout [ 160.035894][ T5740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.056802][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.057006][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.099056][ T5740] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 160.099075][ T5740] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.099096][ T5740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.099107][ T5740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.099119][ T5740] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.099138][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.509626][ T5740] usbtmc 7-1:16.0: bulk endpoints not found [ 160.742844][ T8019] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 160.749224][ T8019] fuse: Unknown parameter 'fl' [ 160.808251][ T8023] syzkaller0: entered promiscuous mode [ 160.808274][ T8023] syzkaller0: entered allmulticast mode [ 161.553875][ T8037] binder: BINDER_SET_CONTEXT_MGR already set [ 161.553886][ T8037] binder: 8036:8037 ioctl 4018620d 80001000 returned -16 [ 162.326790][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.409996][ T43] usb 7-1: USB disconnect, device number 19 [ 166.326346][ T8053] ------------[ cut here ]------------ [ 166.326404][ T8053] current->flags & PF_MEMALLOC [ 166.326410][ T8053] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: dhcpcd-run-hook/8053 [ 166.333591][ T8053] Modules linked in: [ 166.334977][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 166.338391][ T8053] Tainted: [L]=SOFTLOCKUP [ 166.339762][ T8053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.342916][ T8053] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.345121][ T8053] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 a8 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 166.351869][ T8053] RSP: 0000:ffffc90006f1e5e8 EFLAGS: 00010202 [ 166.353825][ T8053] RAX: ffff888024e2cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 166.356312][ T8053] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 166.358839][ T8053] RBP: ffff888024e2cb2c R08: 0000000000008000 R09: 0000000000000001 [ 166.361353][ T8053] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 166.363878][ T8053] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000de3cd7 [ 166.366439][ T8053] FS: 00007f578e4d7c80(0000) GS:ffff888096955000(0000) knlGS:0000000000000000 [ 166.369146][ T8053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.371148][ T8053] CR2: 00000000f70e9070 CR3: 000000006e7aa000 CR4: 0000000000352ef0 [ 166.374122][ T8053] Call Trace: [ 166.375202][ T8053] [ 166.376180][ T8053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.378478][ T8053] ? do_raw_spin_lock+0x128/0x260 [ 166.380224][ T8053] ? __lock_acquire+0xe8b/0x1f40 [ 166.381887][ T8053] ? mark_held_locks+0x40/0x70 [ 166.383584][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.385194][ T8053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.387051][ T8053] ? policy_nodemask+0xed/0x4f0 [ 166.388597][ T8053] alloc_pages_mpol+0x201/0x550 [ 166.390153][ T8053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.391864][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.393639][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.395239][ T8053] folio_alloc_noprof+0x22/0x250 [ 166.396998][ T8053] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 166.399111][ T8053] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 166.401204][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.403108][ T8053] ? ext4_get_group_info+0x146/0x480 [ 166.404826][ T8053] ? find_held_lock+0x2b/0x80 [ 166.406359][ T8053] __filemap_get_folio_mpol+0x653/0x1280 [ 166.408266][ T8053] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 166.410089][ T8053] ext4_discard_preallocations+0x584/0x10c0 [ 166.411976][ T8053] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 166.413981][ T8053] ? __pfx_xa_destroy+0x10/0x10 [ 166.415567][ T8053] ? inode_wait_for_writeback+0x171/0x390 [ 166.417515][ T8053] ? inode_lru_isolate+0x37/0xf00 [ 166.419108][ T8053] ext4_clear_inode+0x6e/0x280 [ 166.420651][ T8053] ext4_evict_inode+0x1de/0x17d0 [ 166.422239][ T8053] ? evict+0x37e/0xad0 [ 166.423620][ T8053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 166.425301][ T8053] evict+0x3c2/0xad0 [ 166.426574][ T8053] ? _raw_spin_unlock+0x28/0x50 [ 166.428118][ T8053] ? __list_lru_walk_one+0x26d/0x550 [ 166.429778][ T8053] ? __pfx_evict+0x10/0x10 [ 166.431210][ T8053] ? xa_load+0x149/0x2c0 [ 166.432577][ T8053] ? xa_load+0x149/0x2c0 [ 166.433946][ T8053] dispose_list+0x117/0x1e0 [ 166.435360][ T8053] prune_icache_sb+0xea/0x150 [ 166.437051][ T8053] ? list_lru_count_one+0x147/0x320 [ 166.438731][ T8053] ? __pfx_prune_icache_sb+0x10/0x10 [ 166.440374][ T8053] super_cache_scan+0x376/0x550 [ 166.441934][ T8053] do_shrink_slab+0x416/0x1200 [ 166.443453][ T8053] shrink_slab+0xa82/0x12e0 [ 166.444894][ T8053] ? shrink_slab+0x677/0x12e0 [ 166.446945][ T8053] ? __pfx_shrink_slab+0x10/0x10 [ 166.448690][ T8053] ? __pfx_lruvec_evictable_size+0x10/0x10 [ 166.450587][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.452099][ T8053] shrink_one+0x398/0x850 [ 166.453788][ T8053] ? shrink_node+0x2b00/0x4320 [ 166.455403][ T8053] shrink_node+0x2b20/0x4320 [ 166.457200][ T8053] ? __queue_work+0x4d6/0x1370 [ 166.458812][ T8053] ? shrink_node+0x286e/0x4320 [ 166.460301][ T8053] ? __pfx_shrink_node+0x10/0x10 [ 166.461886][ T8053] ? queue_work_on+0x141/0x1e0 [ 166.463599][ T8053] ? do_try_to_free_pages+0x33e/0x16d0 [ 166.465313][ T8053] do_try_to_free_pages+0x33e/0x16d0 [ 166.466993][ T8053] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 166.469016][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.470623][ T8053] try_to_free_pages+0x2a0/0x740 [ 166.472478][ T8053] ? __pfx_try_to_free_pages+0x10/0x10 [ 166.474314][ T8053] ? find_held_lock+0x2b/0x80 [ 166.475830][ T8053] ? fs_reclaim_acquire+0x70/0x100 [ 166.477501][ T8053] ? fs_reclaim_acquire+0x70/0x100 [ 166.479145][ T8053] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 166.481557][ T8053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.483760][ T8053] ? __blk_flush_plug+0x2f3/0x4b0 [ 166.485509][ T8053] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 166.487713][ T8053] ? __pfx___blk_flush_plug+0x10/0x10 [ 166.489533][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.491046][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.492669][ T8053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.494561][ T8053] ? policy_nodemask+0xed/0x4f0 [ 166.496317][ T8053] alloc_pages_mpol+0x201/0x550 [ 166.497906][ T8053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.499707][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.501570][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.503078][ T8053] folio_alloc_noprof+0x22/0x250 [ 166.504729][ T8053] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 166.506726][ T8053] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 166.509269][ T8053] __filemap_get_folio_mpol+0x653/0x1280 [ 166.511307][ T8053] filemap_fault+0x879/0x3130 [ 166.512772][ T8053] ? __pfx_filemap_fault+0x10/0x10 [ 166.514416][ T8053] ? find_held_lock+0x2b/0x80 [ 166.515980][ T8053] ? __pfx_filemap_map_pages+0x10/0x10 [ 166.517660][ T8053] __do_fault+0x10b/0x440 [ 166.519212][ T8053] do_fault+0xb3f/0x1830 [ 166.520638][ T8053] ? __pfx_do_fault+0x10/0x10 [ 166.522222][ T8053] ? rcu_read_unlock+0x2d/0xb0 [ 166.523882][ T8053] ? rcu_read_unlock+0x2d/0xb0 [ 166.525426][ T8053] ? __pte_offset_map+0x179/0x310 [ 166.527004][ T8053] __handle_mm_fault+0x150b/0x2f60 [ 166.528648][ T8053] ? lock_vma_under_rcu+0x11d/0x590 [ 166.530422][ T8053] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.532225][ T8053] ? lock_vma_under_rcu+0x17c/0x590 [ 166.533898][ T8053] handle_mm_fault+0x363/0xa20 [ 166.535400][ T8053] do_user_addr_fault+0x59c/0x12f0 [ 166.536977][ T8053] exc_page_fault+0x6f/0xd0 [ 166.538583][ T8053] asm_exc_page_fault+0x26/0x30 [ 166.540113][ T8053] RIP: 0033:0x7f578e8599ec [ 166.541746][ T8053] Code: Unable to access opcode bytes at 0x7f578e8599c2. [ 166.543993][ T8053] RSP: 002b:00007ffd88769f40 EFLAGS: 00010206 [ 166.545864][ T8053] RAX: 00007f578e545fe0 RBX: 00007f578e5c6588 RCX: 00007f578e770d60 [ 166.548665][ T8053] RDX: 0000000000000000 RSI: 00007f578e770d68 RDI: 00007f578e5a9580 [ 166.551146][ T8053] RBP: 00007ffd8876a060 R08: 0000000000000000 R09: 00007f578e5a0000 [ 166.553696][ T8053] R10: 00007f578e545fe0 R11: 00007f578e8425f0 R12: 00007f578e5a9580 [ 166.556083][ T8053] R13: 00007f578e8425f0 R14: 0000000000000012 R15: 0000000000000012 [ 166.558829][ T8053] [ 166.559835][ T8053] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.562037][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 166.565542][ T8053] Tainted: [L]=SOFTLOCKUP [ 166.566817][ T8053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.569790][ T8053] Call Trace: [ 166.570815][ T8053] [ 166.571735][ T8053] dump_stack_lvl+0x100/0x190 [ 166.573122][ T8053] vpanic+0x553/0x970 [ 166.574369][ T8053] ? __pfx_vpanic+0x10/0x10 [ 166.575917][ T8053] panic+0xd1/0xe0 [ 166.577052][ T8053] ? __pfx_panic+0x10/0x10 [ 166.578645][ T8053] check_panic_on_warn.cold+0x19/0x34 [ 166.580253][ T8053] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.582161][ T8053] __warn.cold+0x191/0x318 [ 166.583548][ T8053] __report_bug+0x30f/0x440 [ 166.584986][ T8053] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.586899][ T8053] ? __pfx___report_bug+0x10/0x10 [ 166.588594][ T8053] ? __zone_watermark_ok+0x281/0x500 [ 166.590388][ T8053] ? get_page_from_freelist+0x344/0x35d0 [ 166.592184][ T8053] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.594340][ T8053] report_bug+0xb3/0x220 [ 166.595986][ T8053] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.598385][ T8053] handle_bug+0x16a/0x2a0 [ 166.600048][ T8053] exc_invalid_op+0x17/0x50 [ 166.601748][ T8053] asm_exc_invalid_op+0x1a/0x20 [ 166.603494][ T8053] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 166.606012][ T8053] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 a8 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 166.612911][ T8053] RSP: 0000:ffffc90006f1e5e8 EFLAGS: 00010202 [ 166.615179][ T8053] RAX: ffff888024e2cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 166.618010][ T8053] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 166.620897][ T8053] RBP: ffff888024e2cb2c R08: 0000000000008000 R09: 0000000000000001 [ 166.623727][ T8053] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 166.626594][ T8053] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000de3cd7 [ 166.629387][ T8053] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 166.631629][ T8053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.633998][ T8053] ? do_raw_spin_lock+0x128/0x260 [ 166.635917][ T8053] ? __lock_acquire+0xe8b/0x1f40 [ 166.637768][ T8053] ? mark_held_locks+0x40/0x70 [ 166.639580][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.641453][ T8053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.643731][ T8053] ? policy_nodemask+0xed/0x4f0 [ 166.645514][ T8053] alloc_pages_mpol+0x201/0x550 [ 166.647314][ T8053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.649289][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.651188][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.653078][ T8053] folio_alloc_noprof+0x22/0x250 [ 166.654900][ T8053] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 166.657149][ T8053] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 166.659486][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.661176][ T8053] ? ext4_get_group_info+0x146/0x480 [ 166.663101][ T8053] ? find_held_lock+0x2b/0x80 [ 166.664694][ T8053] __filemap_get_folio_mpol+0x653/0x1280 [ 166.666387][ T8053] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 166.667979][ T8053] ext4_discard_preallocations+0x584/0x10c0 [ 166.669786][ T8053] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 166.671729][ T8053] ? __pfx_xa_destroy+0x10/0x10 [ 166.673223][ T8053] ? inode_wait_for_writeback+0x171/0x390 [ 166.674927][ T8053] ? inode_lru_isolate+0x37/0xf00 [ 166.676490][ T8053] ext4_clear_inode+0x6e/0x280 [ 166.677957][ T8053] ext4_evict_inode+0x1de/0x17d0 [ 166.679441][ T8053] ? evict+0x37e/0xad0 [ 166.680691][ T8053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 166.682335][ T8053] evict+0x3c2/0xad0 [ 166.683544][ T8053] ? _raw_spin_unlock+0x28/0x50 [ 166.684973][ T8053] ? __list_lru_walk_one+0x26d/0x550 [ 166.686504][ T8053] ? __pfx_evict+0x10/0x10 [ 166.687855][ T8053] ? xa_load+0x149/0x2c0 [ 166.689130][ T8053] ? xa_load+0x149/0x2c0 [ 166.690444][ T8053] dispose_list+0x117/0x1e0 [ 166.691868][ T8053] prune_icache_sb+0xea/0x150 [ 166.693298][ T8053] ? list_lru_count_one+0x147/0x320 [ 166.694881][ T8053] ? __pfx_prune_icache_sb+0x10/0x10 [ 166.696496][ T8053] super_cache_scan+0x376/0x550 [ 166.697958][ T8053] do_shrink_slab+0x416/0x1200 [ 166.699404][ T8053] shrink_slab+0xa82/0x12e0 [ 166.700796][ T8053] ? shrink_slab+0x677/0x12e0 [ 166.702221][ T8053] ? __pfx_shrink_slab+0x10/0x10 [ 166.703737][ T8053] ? __pfx_lruvec_evictable_size+0x10/0x10 [ 166.705519][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.706929][ T8053] shrink_one+0x398/0x850 [ 166.708229][ T8053] ? shrink_node+0x2b00/0x4320 [ 166.709670][ T8053] shrink_node+0x2b20/0x4320 [ 166.711050][ T8053] ? __queue_work+0x4d6/0x1370 [ 166.712479][ T8053] ? shrink_node+0x286e/0x4320 [ 166.713936][ T8053] ? __pfx_shrink_node+0x10/0x10 [ 166.715419][ T8053] ? queue_work_on+0x141/0x1e0 [ 166.716842][ T8053] ? do_try_to_free_pages+0x33e/0x16d0 [ 166.718500][ T8053] do_try_to_free_pages+0x33e/0x16d0 [ 166.720108][ T8053] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 166.721852][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.723372][ T8053] try_to_free_pages+0x2a0/0x740 [ 166.724836][ T8053] ? __pfx_try_to_free_pages+0x10/0x10 [ 166.726504][ T8053] ? find_held_lock+0x2b/0x80 [ 166.727960][ T8053] ? fs_reclaim_acquire+0x70/0x100 [ 166.729529][ T8053] ? fs_reclaim_acquire+0x70/0x100 [ 166.731055][ T8053] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 166.732870][ T8053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.734778][ T8053] ? __blk_flush_plug+0x2f3/0x4b0 [ 166.736311][ T8053] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 166.738228][ T8053] ? __pfx___blk_flush_plug+0x10/0x10 [ 166.739877][ T8053] ? lock_acquire+0x1d1/0x380 [ 166.741284][ T8053] ? __lock_acquire+0x5c0/0x1f40 [ 166.742808][ T8053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 166.744570][ T8053] ? policy_nodemask+0xed/0x4f0 [ 166.746077][ T8053] alloc_pages_mpol+0x201/0x550 [ 166.747557][ T8053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.749191][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.750757][ T8053] ? filemap_get_entry+0x22d/0x450 [ 166.752324][ T8053] folio_alloc_noprof+0x22/0x250 [ 166.753822][ T8053] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 166.755708][ T8053] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 166.757776][ T8053] __filemap_get_folio_mpol+0x653/0x1280 [ 166.759497][ T8053] filemap_fault+0x879/0x3130 [ 166.760922][ T8053] ? __pfx_filemap_fault+0x10/0x10 [ 166.762484][ T8053] ? find_held_lock+0x2b/0x80 [ 166.763867][ T8053] ? __pfx_filemap_map_pages+0x10/0x10 [ 166.765539][ T8053] __do_fault+0x10b/0x440 [ 166.766874][ T8053] do_fault+0xb3f/0x1830 [ 166.768203][ T8053] ? __pfx_do_fault+0x10/0x10 [ 166.769666][ T8053] ? rcu_read_unlock+0x2d/0xb0 [ 166.771102][ T8053] ? rcu_read_unlock+0x2d/0xb0 [ 166.772585][ T8053] ? __pte_offset_map+0x179/0x310 [ 166.774111][ T8053] __handle_mm_fault+0x150b/0x2f60 [ 166.775653][ T8053] ? lock_vma_under_rcu+0x11d/0x590 [ 166.777215][ T8053] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.778815][ T8053] ? lock_vma_under_rcu+0x17c/0x590 [ 166.780368][ T8053] handle_mm_fault+0x363/0xa20 [ 166.781831][ T8053] do_user_addr_fault+0x59c/0x12f0 [ 166.783428][ T8053] exc_page_fault+0x6f/0xd0 [ 166.784811][ T8053] asm_exc_page_fault+0x26/0x30 [ 166.786257][ T8053] RIP: 0033:0x7f578e8599ec [ 166.787578][ T8053] Code: Unable to access opcode bytes at 0x7f578e8599c2. [ 166.789630][ T8053] RSP: 002b:00007ffd88769f40 EFLAGS: 00010206 [ 166.791418][ T8053] RAX: 00007f578e545fe0 RBX: 00007f578e5c6588 RCX: 00007f578e770d60 [ 166.793737][ T8053] RDX: 0000000000000000 RSI: 00007f578e770d68 RDI: 00007f578e5a9580 [ 166.796033][ T8053] RBP: 00007ffd8876a060 R08: 0000000000000000 R09: 00007f578e5a0000 [ 166.798388][ T8053] R10: 00007f578e545fe0 R11: 00007f578e8425f0 R12: 00007f578e5a9580 [ 166.800715][ T8053] R13: 00007f578e8425f0 R14: 0000000000000012 R15: 0000000000000012 [ 166.803092][ T8053] [ 166.804739][ T8053] Kernel Offset: disabled [ 166.806090][ T8053] Rebooting in 86400 seconds..