last executing test programs: 3.929506392s ago: executing program 2 (id=675): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f80)={0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3.470486795s ago: executing program 1 (id=679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}, @srh={0x11, 0x8, 0x4, 0x4, 0x2, 0x20, 0x5, [@loopback, @local, @loopback, @mcast1]}], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de141"}}}}}}, 0xfce) 3.221111755s ago: executing program 1 (id=683): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.429335856s ago: executing program 0 (id=693): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.745462841s ago: executing program 1 (id=687): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x20000002, 0x4a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000740)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) 1.72548504s ago: executing program 0 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) r1 = syz_io_uring_setup(0x126b, &(0x7f0000000180)={0x0, 0x200072db, 0x0, 0x8001, 0x326}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x45, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x9, 0xe62, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, 0x0) 1.717135424s ago: executing program 3 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/trace_pipe\x00', 0x80001, 0xf0d676ade61207f3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) 1.655270642s ago: executing program 1 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/161, 0xa1, 0x2000000ff) 1.65476255s ago: executing program 3 (id=691): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 1.626871159s ago: executing program 3 (id=692): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x3, 0xe, @rand_addr, 0x1}, {0xa, 0xfffe, 0xfffffffc}, 0x0, {[0x3, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x3]}}, 0x5c) 1.622281544s ago: executing program 0 (id=694): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.619075119s ago: executing program 1 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000800)={0x1, 0x0, @pic={0x7f, 0x5, 0x5, 0xb0, 0xd, 0x87, 0xfc, 0x4e, 0x2a, 0x8, 0x6, 0x1, 0x8, 0x1c, 0x4, 0x4}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x8, 0x200}) 866.923368ms ago: executing program 2 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, 0x3, 0x4, 0xf000) 858.960352ms ago: executing program 3 (id=704): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$setsig(r0, 0xa, 0x13) 810.602941ms ago: executing program 2 (id=697): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000ac0)={'team_slave_0\x00', @remote}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'team_slave_0\x00', @broadcast}) 781.784941ms ago: executing program 1 (id=698): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 749.827494ms ago: executing program 2 (id=699): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 547.986151ms ago: executing program 0 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2f00, 0x103) 511.353965ms ago: executing program 0 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}, @srh={0x11, 0x8, 0x4, 0x4, 0x2, 0x20, 0x5, [@loopback, @local, @loopback, @mcast1]}], "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"}}}}}}, 0xfce) 399.143145ms ago: executing program 3 (id=702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 365.314649ms ago: executing program 2 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) io_setup(0x3, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 296.141249ms ago: executing program 2 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002180)='./sys\x00', &(0x7f00000021c0)='sysfs\x00', 0x810040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0xa2) write(r0, &(0x7f0000002240)='off', 0x3) write(r0, &(0x7f0000002280)='on', 0x2) 207.662412ms ago: executing program 3 (id=706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@updpolicy={0xfc, 0x19, 0x1, 0x50bd2a, 0x0, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xb692, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, {0x0, 0x3}}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2001ffd}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@updpolicy={0x108, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x77, 0x4}, {0x0, 0x0, 0xfffffffffffffffe}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x1, 0x6, 0x4, 0x9, 0x1}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 0s ago: executing program 0 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, 0x3, 0x4, 0xf000) kernel console output (not intermixed with test programs): [ T6529] ? xfd_validate_state+0x129/0x190 [ 66.282216][ T6529] __ia32_sys_modify_ldt+0xb0/0x170 [ 66.282230][ T6529] __do_fast_syscall_32+0x13a/0x8b0 [ 66.282243][ T6529] do_fast_syscall_32+0x32/0x70 [ 66.282255][ T6529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.282268][ T6529] RIP: 0023:0xf748efec [ 66.282279][ T6529] Code: Unable to access opcode bytes at 0xf748efc2. [ 66.282284][ T6529] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000007b [ 66.282293][ T6529] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080000540 [ 66.282300][ T6529] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.282306][ T6529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.282312][ T6529] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.282318][ T6529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.282331][ T6529] [ 66.282336][ T6529] Mem-Info: [ 66.282340][ T6529] active_anon:5752 inactive_anon:116 isolated_anon:0 [ 66.282340][ T6529] active_file:539 inactive_file:26149 isolated_file:0 [ 66.282340][ T6529] unevictable:1000 dirty:323 writeback:0 [ 66.282340][ T6529] slab_reclaimable:6221 slab_unreclaimable:52955 [ 66.282340][ T6529] mapped:24430 shmem:1386 pagetables:1187 [ 66.282340][ T6529] sec_pagetables:294 bounce:0 [ 66.282340][ T6529] kernel_misc_reclaimable:0 [ 66.282340][ T6529] free:70413 free_pcp:11563 free_cma:0 [ 66.282366][ T6529] Node 0 active_anon:32kB inactive_anon:12kB active_file:4kB inactive_file:16kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1040kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.282400][ T6529] Node 1 active_anon:22976kB inactive_anon:452kB active_file:2152kB inactive_file:104580kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:97692kB dirty:1280kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5000kB pagetables:3708kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.282429][ T6529] Node 0 DMA free:1952kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:448kB local_pcp:416kB free_cma:0kB [ 66.282459][ T6529] lowmem_reserve[]: 0 259 259 259 259 [ 66.282479][ T6529] Node 0 DMA32 free:17572kB boost:4096kB min:15800kB low:18724kB high:21648kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:4kB inactive_file:16kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:265352kB mlocked:0kB bounce:0kB free_pcp:7332kB local_pcp:5356kB free_cma:0kB [ 66.282558][ T6529] lowmem_reserve[]: 0 0 0 0 0 [ 66.282578][ T6529] Node 1 DMA32 free:262128kB boost:10240kB min:57380kB low:69164kB high:80948kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22976kB inactive_anon:452kB active_file:2152kB inactive_file:104580kB unevictable:2000kB writepending:1280kB zspages:1744kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38472kB local_pcp:27812kB free_cma:0kB [ 66.282611][ T6529] lowmem_reserve[]: 0 0 0 0 0 [ 66.282630][ T6529] Node 0 DMA: 26*4kB (UM) 15*8kB (UM) 4*16kB (M) 2*32kB (M) 13*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1952kB [ 66.282715][ T6529] Node 0 DMA32: 9*4kB (ME) 18*8kB (UME) 11*16kB (ME) 44*32kB (UME) 25*64kB (UM) 13*128kB (UM) 9*256kB (UM) 10*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 0*4096kB = 17572kB [ 66.282817][ T6529] Node 1 DMA32: 44*4kB (UM) 398*8kB (UME) 211*16kB (UME) 225*32kB (UME) 168*64kB (UME) 104*128kB (UME) 50*256kB (UME) 39*512kB (UME) 31*1024kB (UM) 8*2048kB (UM) 35*4096kB (UM) = 262256kB [ 66.282908][ T6529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.282916][ T6529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.282924][ T6529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.282932][ T6529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.282940][ T6529] 28276 total pagecache pages [ 66.282943][ T6529] 206 pages in swap cache [ 66.282947][ T6529] Free swap = 121452kB [ 66.282952][ T6529] Total swap = 124996kB [ 66.282957][ T6529] 524155 pages RAM [ 66.282960][ T6529] 0 pages HighMem/MovableOnly [ 66.282964][ T6529] 216925 pages reserved [ 66.282967][ T6529] 0 pages cma reserved [ 66.700892][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 66.799427][ T6535] bond0: invalid ARP target specified [ 67.038329][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.038360][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.231393][ T1035] usb 5-1: USB disconnect, device number 5 [ 67.293671][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 67.776060][ T6568] FAULT_INJECTION: forcing a failure. [ 67.776060][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 67.776082][ T6568] CPU: 2 UID: 0 PID: 6568 Comm: syz.1.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.776097][ T6568] Tainted: [L]=SOFTLOCKUP [ 67.776101][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.776107][ T6568] Call Trace: [ 67.776111][ T6568] [ 67.776116][ T6568] dump_stack_lvl+0x100/0x190 [ 67.776134][ T6568] should_fail_ex.cold+0x5/0xa [ 67.776148][ T6568] should_failslab+0xc2/0x120 [ 67.776166][ T6568] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.776181][ T6568] ? __pfx_map_id_range_down+0x10/0x10 [ 67.776197][ T6568] ? security_inode_alloc+0x3b/0x2c0 [ 67.776212][ T6568] security_inode_alloc+0x3b/0x2c0 [ 67.776224][ T6568] inode_init_always_gfp+0xc6f/0xfb0 [ 67.776241][ T6568] alloc_inode+0x8e/0x250 [ 67.776253][ T6568] new_inode+0x22/0x1c0 [ 67.776265][ T6568] shmem_get_inode+0x1e3/0xf70 [ 67.776282][ T6568] ? __pfx_shmem_get_inode+0x10/0x10 [ 67.776299][ T6568] ? make_vfsgid+0xf1/0x140 [ 67.776313][ T6568] shmem_mknod+0x217/0x480 [ 67.776330][ T6568] ? __pfx_shmem_mknod+0x10/0x10 [ 67.776349][ T6568] vfs_mknod+0x3a5/0x7f0 [ 67.776364][ T6568] filename_mknodat+0x5aa/0x7f0 [ 67.776381][ T6568] ? __pfx_filename_mknodat+0x10/0x10 [ 67.776397][ T6568] ? strncpy_from_user+0x19d/0x2d0 [ 67.776419][ T6568] ? do_getname+0x191/0x390 [ 67.776433][ T6568] __ia32_sys_mknodat+0xb4/0xf0 [ 67.776451][ T6568] __do_fast_syscall_32+0x13a/0x8b0 [ 67.776466][ T6568] do_fast_syscall_32+0x32/0x70 [ 67.776479][ T6568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.776494][ T6568] RIP: 0023:0xf748efec [ 67.776507][ T6568] Code: Unable to access opcode bytes at 0xf748efc2. [ 67.776512][ T6568] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 67.776539][ T6568] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 67.776547][ T6568] RDX: 000000000000150d RSI: 0000000000000103 RDI: 0000000000000000 [ 67.776554][ T6568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.776561][ T6568] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.776569][ T6568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.776584][ T6568] [ 67.997088][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.070949][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 68.274935][ T5853] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.425404][ T5853] usb 7-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 68.426727][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.428380][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.428391][ T5853] usb 7-1: Product: syz [ 68.428399][ T5853] usb 7-1: Manufacturer: syz [ 68.428406][ T5853] usb 7-1: SerialNumber: syz [ 68.454053][ T5853] keyspan 7-1:1.0: Keyspan 1 port adapter converter detected [ 68.454133][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.461767][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.461803][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 68.461833][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.461866][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.461896][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 83 [ 68.461927][ T5853] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 68.488774][ T5853] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 68.616535][ T1035] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 68.767987][ T1035] usb 5-1: not running at top speed; connect to a high speed hub [ 68.768006][ T1035] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.770093][ T1035] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.770116][ T1035] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 68.770135][ T1035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.771664][ T6040] usb 7-1: USB disconnect, device number 5 [ 68.795921][ T6040] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 68.796177][ T6040] keyspan 7-1:1.0: device disconnected [ 68.798843][ T1035] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 68.800789][ T1035] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.800824][ T1035] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.802384][ T1035] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.804658][ T1035] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.804729][ T1035] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.835123][ T1035] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 69.111660][ T6040] usb 5-1: USB disconnect, device number 6 [ 69.118573][ T6040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.129666][ T6040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.130054][ T6040] keyspan 5-1:1.0: device disconnected [ 70.628013][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 71.493256][ T65] cfg80211: failed to load regulatory.db [ 71.671682][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 71.708263][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 71.815290][ T5853] kernel write not supported for file /snd/midiC2D0 (pid: 5853 comm: kworker/2:6) [ 71.892031][ T6635] FAULT_INJECTION: forcing a failure. [ 71.892031][ T6635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 71.892053][ T6635] CPU: 0 UID: 0 PID: 6635 Comm: syz.0.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.892069][ T6635] Tainted: [L]=SOFTLOCKUP [ 71.892073][ T6635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.892078][ T6635] Call Trace: [ 71.892082][ T6635] [ 71.892086][ T6635] dump_stack_lvl+0x100/0x190 [ 71.892106][ T6635] should_fail_ex.cold+0x5/0xa [ 71.892119][ T6635] ? prepare_alloc_pages+0x16d/0x5b0 [ 71.892139][ T6635] should_fail_alloc_page+0xeb/0x140 [ 71.892157][ T6635] prepare_alloc_pages+0x1f0/0x5b0 [ 71.892176][ T6635] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 71.892192][ T6635] ? lock_acquire+0x1d1/0x380 [ 71.892208][ T6635] ? is_bpf_text_address+0x25/0x1a0 [ 71.892232][ T6635] ? find_held_lock+0x2b/0x80 [ 71.892262][ T6635] ? is_bpf_text_address+0x8a/0x1a0 [ 71.892281][ T6635] ? is_bpf_text_address+0x8a/0x1a0 [ 71.892298][ T6635] ? bpf_ksym_find+0x124/0x1c0 [ 71.892312][ T6635] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.892331][ T6635] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 71.892344][ T6635] ? is_bpf_text_address+0x94/0x1a0 [ 71.892363][ T6635] ? __kernel_text_address+0xd/0x30 [ 71.892377][ T6635] ? unwind_get_return_address+0x59/0xa0 [ 71.892393][ T6635] ? arch_stack_walk+0xa6/0xf0 [ 71.892413][ T6635] ? __pfx_stack_trace_save+0x10/0x10 [ 71.892428][ T6635] ? stack_depot_save_flags+0x27/0x9f0 [ 71.892443][ T6635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.892461][ T6635] ? policy_nodemask+0xed/0x4f0 [ 71.892473][ T6635] alloc_pages_mpol+0x201/0x550 [ 71.892484][ T6635] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.892498][ T6635] alloc_pages_noprof+0x1a/0x160 [ 71.892510][ T6635] get_free_pages_noprof+0x10/0xb0 [ 71.892525][ T6635] __kasan_populate_vmalloc+0xa0/0x210 [ 71.892543][ T6635] alloc_vmap_area+0x95d/0x2bb0 [ 71.892562][ T6635] ? kasan_save_track+0x14/0x30 [ 71.892577][ T6635] ? __kasan_kmalloc+0xaa/0xb0 [ 71.892592][ T6635] ? __pfx_alloc_vmap_area+0x10/0x10 [ 71.892608][ T6635] ? __get_vm_area_node+0x124/0x350 [ 71.892640][ T6635] __get_vm_area_node+0x1ed/0x350 [ 71.892659][ T6635] __vmalloc_node_range_noprof+0x268/0x1420 [ 71.892677][ T6635] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 71.892692][ T6635] ? __pfx_stack_trace_save+0x10/0x10 [ 71.892707][ T6635] ? stack_depot_save_flags+0x27/0x9f0 [ 71.892723][ T6635] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 71.892739][ T6635] ? __kasan_kmalloc+0xaa/0xb0 [ 71.892754][ T6635] ? __do_fast_syscall_32+0x13a/0x8b0 [ 71.892768][ T6635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 71.892791][ T6635] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 71.892807][ T6635] __vmalloc_node_noprof+0xad/0xf0 [ 71.892823][ T6635] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 71.892840][ T6635] __vmalloc_noprof+0xa3/0x120 [ 71.892850][ T6635] ? __pfx___vmalloc_noprof+0x10/0x10 [ 71.892865][ T6635] bpf_prog_alloc_no_stats+0x58/0x690 [ 71.892883][ T6635] bpf_prog_alloc+0x3b/0x200 [ 71.892899][ T6635] bpf_prog_create_from_user+0xb4/0x2e0 [ 71.892916][ T6635] ? __pfx_seccomp_check_filter+0x10/0x10 [ 71.892930][ T6635] do_seccomp+0x7f7/0x2730 [ 71.892943][ T6635] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.892957][ T6635] ? __pfx_do_seccomp+0x10/0x10 [ 71.892969][ T6635] ? xfd_validate_state+0x129/0x190 [ 71.892993][ T6635] __do_fast_syscall_32+0x13a/0x8b0 [ 71.893007][ T6635] do_fast_syscall_32+0x32/0x70 [ 71.893019][ T6635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.893032][ T6635] RIP: 0023:0xf7f26fec [ 71.893046][ T6635] Code: Unable to access opcode bytes at 0xf7f26fc2. [ 71.893051][ T6635] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 71.893062][ T6635] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000001b [ 71.893069][ T6635] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.893075][ T6635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.893081][ T6635] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.893087][ T6635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.893101][ T6635] [ 72.134995][ T5853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.135095][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.186721][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 72.243711][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.298652][ T5853] usb 8-1: Using ep0 maxpacket: 16 [ 72.308571][ T5853] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 72.494888][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 72.495698][ T65] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.499870][ T65] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 72.499892][ T65] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.499903][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.499937][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.499950][ T65] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.499970][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.536788][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 72.625409][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 72.723042][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.723058][ T5853] usb 8-1: Product: syz [ 72.723065][ T5853] usb 8-1: Manufacturer: syz [ 72.723072][ T5853] usb 8-1: SerialNumber: syz [ 72.853553][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.853571][ T43] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.853582][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.981799][ T5853] usb 8-1: config 0 descriptor?? [ 72.982231][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 72.982243][ T43] usb 6-1: Product: syz [ 72.982251][ T43] usb 6-1: Manufacturer: syz [ 72.982262][ T43] usb 6-1: SerialNumber: syz [ 72.983744][ T65] usb 5-1: GET_CAPABILITIES returned 0 [ 72.983763][ T65] usbtmc 5-1:16.0: can't read capabilities [ 72.990978][ T5853] hub 8-1:0.0: bad descriptor, ignoring hub [ 72.990991][ T5853] hub 8-1:0.0: probe with driver hub failed with error -5 [ 73.006311][ T5853] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.119872][ T5853] usb 5-1: USB disconnect, device number 7 [ 73.159347][ T6653] syzkaller1: entered promiscuous mode [ 73.159367][ T6653] syzkaller1: entered allmulticast mode [ 73.217968][ T43] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 73.271014][ T65] usb 8-1: USB disconnect, device number 4 [ 73.418438][ T5853] usb 6-1: USB disconnect, device number 3 [ 73.420517][ T5853] usblp0: removed [ 73.484949][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 73.655703][ T43] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 73.656645][ T43] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 73.656665][ T43] usb 7-1: config 0 has no interface number 0 [ 73.656696][ T43] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.658610][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.658628][ T43] usb 7-1: Product: syz [ 73.658640][ T43] usb 7-1: Manufacturer: syz [ 73.658652][ T43] usb 7-1: SerialNumber: syz [ 73.660896][ T43] usb 7-1: config 0 descriptor?? [ 73.690327][ T43] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 73.873420][ T6660] jffs2: notice: (6660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.969013][ C2] usb 7-1: yurex_control_callback - control failed: -71 [ 73.972747][ T65] usb 7-1: USB disconnect, device number 6 [ 73.981134][ T65] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 74.012282][ T6669] FAULT_INJECTION: forcing a failure. [ 74.012282][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 74.012304][ T6669] CPU: 2 UID: 0 PID: 6669 Comm: syz.0.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.012319][ T6669] Tainted: [L]=SOFTLOCKUP [ 74.012323][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.012330][ T6669] Call Trace: [ 74.012334][ T6669] [ 74.012339][ T6669] dump_stack_lvl+0x100/0x190 [ 74.012357][ T6669] should_fail_ex.cold+0x5/0xa [ 74.012376][ T6669] should_failslab+0xc2/0x120 [ 74.012395][ T6669] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.012408][ T6669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.012421][ T6669] ? subdev_open+0x7f/0x510 [ 74.012435][ T6669] subdev_open+0x7f/0x510 [ 74.012448][ T6669] v4l2_open+0x1d2/0x490 [ 74.012465][ T6669] ? __pfx_v4l2_open+0x10/0x10 [ 74.012481][ T6669] chrdev_open+0x234/0x6a0 [ 74.012497][ T6669] ? __pfx_apparmor_file_open+0x10/0x10 [ 74.012512][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 74.012528][ T6669] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 74.012541][ T6669] do_dentry_open+0x6ab/0x14d0 [ 74.012555][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 74.012573][ T6669] vfs_open+0x82/0x3f0 [ 74.012584][ T6669] path_openat+0x1a23/0x2450 [ 74.012601][ T6669] ? __pfx_path_openat+0x10/0x10 [ 74.012620][ T6669] do_file_open+0x20e/0x430 [ 74.012636][ T6669] ? __pfx_do_file_open+0x10/0x10 [ 74.012661][ T6669] ? _raw_spin_unlock+0x28/0x50 [ 74.012676][ T6669] ? alloc_fd+0x471/0x7a0 [ 74.012695][ T6669] do_sys_openat2+0x10f/0x1e0 [ 74.012705][ T6669] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.012715][ T6669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.012743][ T6669] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 74.012761][ T6669] __ia32_compat_sys_openat+0x12d/0x210 [ 74.012774][ T6669] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 74.012793][ T6669] do_int80_emulation+0x166/0x650 [ 74.012807][ T6669] asm_int80_emulation+0x1a/0x20 [ 74.012818][ T6669] RIP: 0023:0xf71177eb [ 74.012828][ T6669] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 74.012838][ T6669] RSP: 002b:00000000f53d603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 74.012850][ T6669] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6100 [ 74.012858][ T6669] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.012865][ T6669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.012873][ T6669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.012879][ T6669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.012892][ T6669] [ 74.067767][ T43] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 74.228500][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 74.239497][ T43] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.241582][ T43] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.241606][ T43] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.241624][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.264537][ T43] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.264558][ T43] usb 8-1: Product: syz [ 74.264570][ T43] usb 8-1: Manufacturer: syz [ 74.264581][ T43] usb 8-1: SerialNumber: syz [ 74.280817][ T43] usb 8-1: config 0 descriptor?? [ 74.299102][ T43] usb 8-1: selecting invalid altsetting 0 [ 74.503137][ T43] usb 8-1: USB disconnect, device number 5 [ 74.674808][ T6680] FAULT_INJECTION: forcing a failure. [ 74.674808][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 74.682133][ T6680] CPU: 2 UID: 0 PID: 6680 Comm: syz.0.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.682153][ T6680] Tainted: [L]=SOFTLOCKUP [ 74.682158][ T6680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.682164][ T6680] Call Trace: [ 74.682169][ T6680] [ 74.682174][ T6680] dump_stack_lvl+0x100/0x190 [ 74.682195][ T6680] should_fail_ex.cold+0x5/0xa [ 74.682210][ T6680] should_failslab+0xc2/0x120 [ 74.682229][ T6680] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.682244][ T6680] ? qnx6_init_fs_context+0x3f/0xd0 [ 74.682264][ T6680] qnx6_init_fs_context+0x3f/0xd0 [ 74.682281][ T6680] alloc_fs_context+0x60c/0xf40 [ 74.682296][ T6680] __ia32_sys_fsopen+0xef/0x230 [ 74.682309][ T6680] __do_fast_syscall_32+0x13a/0x8b0 [ 74.682324][ T6680] do_fast_syscall_32+0x32/0x70 [ 74.682337][ T6680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.682352][ T6680] RIP: 0023:0xf7f26fec [ 74.682371][ T6680] Code: Unable to access opcode bytes at 0xf7f26fc2. [ 74.682376][ T6680] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 74.682388][ T6680] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 74.682396][ T6680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.682402][ T6680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.682409][ T6680] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.682416][ T6680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.682430][ T6680] [ 74.892637][ T6687] FAULT_INJECTION: forcing a failure. [ 74.892637][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 74.892659][ T6687] CPU: 2 UID: 0 PID: 6687 Comm: syz.2.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.892687][ T6687] Tainted: [L]=SOFTLOCKUP [ 74.892691][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.892697][ T6687] Call Trace: [ 74.892701][ T6687] [ 74.892706][ T6687] dump_stack_lvl+0x100/0x190 [ 74.892725][ T6687] should_fail_ex.cold+0x5/0xa [ 74.892739][ T6687] should_failslab+0xc2/0x120 [ 74.892757][ T6687] __kvmalloc_node_noprof+0x113/0x9b0 [ 74.892774][ T6687] ? do_raw_spin_lock+0x128/0x260 [ 74.892786][ T6687] ? alloc_fdtable+0x17f/0x2d0 [ 74.892802][ T6687] alloc_fdtable+0x17f/0x2d0 [ 74.892816][ T6687] dup_fd+0x995/0xd10 [ 74.892831][ T6687] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.892847][ T6687] ksys_unshare+0x748/0xb30 [ 74.892858][ T6687] ? __pfx_ksys_unshare+0x10/0x10 [ 74.892875][ T6687] __ia32_sys_unshare+0x30/0x40 [ 74.892886][ T6687] __do_fast_syscall_32+0x13a/0x8b0 [ 74.892899][ T6687] do_fast_syscall_32+0x32/0x70 [ 74.892911][ T6687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.892925][ T6687] RIP: 0023:0xf739efec [ 74.892938][ T6687] Code: Unable to access opcode bytes at 0xf739efc2. [ 74.892943][ T6687] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 74.892954][ T6687] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000000000000 [ 74.892961][ T6687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.892968][ T6687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.892974][ T6687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.892980][ T6687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.892994][ T6687] [ 75.220656][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 75.462023][ T6714] FAULT_INJECTION: forcing a failure. [ 75.462023][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 75.462158][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.1.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.462175][ T6714] Tainted: [L]=SOFTLOCKUP [ 75.462180][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.462186][ T6714] Call Trace: [ 75.462191][ T6714] [ 75.462196][ T6714] dump_stack_lvl+0x100/0x190 [ 75.462214][ T6714] should_fail_ex.cold+0x5/0xa [ 75.462230][ T6714] should_failslab+0xc2/0x120 [ 75.462248][ T6714] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 75.462263][ T6714] ? find_held_lock+0x2b/0x80 [ 75.462277][ T6714] ? alloc_io_context+0x21/0x2f0 [ 75.462297][ T6714] alloc_io_context+0x21/0x2f0 [ 75.462314][ T6714] set_task_ioprio+0x49e/0x670 [ 75.462339][ T6714] __do_sys_ioprio_set+0x55c/0xb40 [ 75.462355][ T6714] ? __do_sys_ioprio_set+0x3de/0xb40 [ 75.462373][ T6714] __do_fast_syscall_32+0x13a/0x8b0 [ 75.462388][ T6714] do_fast_syscall_32+0x32/0x70 [ 75.462399][ T6714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.462413][ T6714] RIP: 0023:0xf748efec [ 75.462426][ T6714] Code: Unable to access opcode bytes at 0xf748efc2. [ 75.462431][ T6714] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000121 [ 75.462442][ T6714] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 75.462450][ T6714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.462456][ T6714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.462462][ T6714] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.462468][ T6714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.462482][ T6714] [ 76.429320][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 76.656025][ T6726] device-mapper: table: 248:1: multipath: Unknown 'queue_mode' requested (-EINVAL) [ 76.656040][ T6726] device-mapper: ioctl: error adding target to table [ 76.727916][ T6737] FAULT_INJECTION: forcing a failure. [ 76.727916][ T6737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.727939][ T6737] CPU: 2 UID: 0 PID: 6737 Comm: syz.1.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.727955][ T6737] Tainted: [L]=SOFTLOCKUP [ 76.727959][ T6737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.727965][ T6737] Call Trace: [ 76.727970][ T6737] [ 76.727976][ T6737] dump_stack_lvl+0x100/0x190 [ 76.728002][ T6737] should_fail_ex.cold+0x5/0xa [ 76.728019][ T6737] ? prepare_alloc_pages+0x16d/0x5b0 [ 76.728049][ T6737] should_fail_alloc_page+0xeb/0x140 [ 76.728076][ T6737] prepare_alloc_pages+0x1f0/0x5b0 [ 76.728107][ T6737] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 76.728132][ T6737] ? stack_trace_save+0x8e/0xc0 [ 76.728150][ T6737] ? __pfx_stack_trace_save+0x10/0x10 [ 76.728166][ T6737] ? stack_depot_save_flags+0x27/0x9f0 [ 76.728182][ T6737] ? kasan_save_stack+0x3f/0x50 [ 76.728196][ T6737] ? kasan_save_stack+0x30/0x50 [ 76.728210][ T6737] ? kasan_save_track+0x14/0x30 [ 76.728225][ T6737] ? __kasan_slab_alloc+0x89/0x90 [ 76.728247][ T6737] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 76.728272][ T6737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 76.728294][ T6737] ? do_anonymous_page+0x1307/0x2050 [ 76.728315][ T6737] ? handle_mm_fault+0x363/0xa20 [ 76.728331][ T6737] ? populate_vma_page_range+0x267/0x3f0 [ 76.728353][ T6737] ? __mm_populate+0x107/0x3a0 [ 76.728383][ T6737] ? do_mlock+0x3f0/0x800 [ 76.728402][ T6737] ? __ia32_sys_mlock+0xce/0x120 [ 76.728421][ T6737] ? __do_fast_syscall_32+0x13a/0x8b0 [ 76.728435][ T6737] ? do_fast_syscall_32+0x32/0x70 [ 76.728448][ T6737] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.728484][ T6737] ? __lock_acquire+0x5c0/0x1f40 [ 76.728532][ T6737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.728562][ T6737] ? policy_nodemask+0xed/0x4f0 [ 76.728580][ T6737] alloc_pages_mpol+0x201/0x550 [ 76.728601][ T6737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 76.728616][ T6737] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.728634][ T6737] ? find_held_lock+0x2b/0x80 [ 76.728656][ T6737] ? find_held_lock+0x2b/0x80 [ 76.728681][ T6737] folio_alloc_mpol_noprof+0x36/0x260 [ 76.728703][ T6737] vma_alloc_folio_noprof+0xed/0x1d0 [ 76.728724][ T6737] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 76.728755][ T6737] do_anonymous_page+0xac9/0x2050 [ 76.728783][ T6737] ? __pfx_do_anonymous_page+0x10/0x10 [ 76.728799][ T6737] ? pgd_none+0x9f/0xe0 [ 76.728816][ T6737] ? __pfx_pgd_none+0x10/0x10 [ 76.728833][ T6737] ? find_held_lock+0x2b/0x80 [ 76.728856][ T6737] __handle_mm_fault+0x1ff3/0x2f60 [ 76.728883][ T6737] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.728900][ T6737] ? __pfx_mt_find+0x10/0x10 [ 76.728943][ T6737] handle_mm_fault+0x363/0xa20 [ 76.728972][ T6737] __get_user_pages+0x8ae/0x2c30 [ 76.729006][ T6737] ? __pfx_mt_find+0x10/0x10 [ 76.729028][ T6737] ? __pfx___get_user_pages+0x10/0x10 [ 76.729065][ T6737] populate_vma_page_range+0x267/0x3f0 [ 76.729096][ T6737] ? __pfx_populate_vma_page_range+0x10/0x10 [ 76.729125][ T6737] ? __pfx_find_vma_intersection+0x10/0x10 [ 76.729159][ T6737] __mm_populate+0x107/0x3a0 [ 76.729186][ T6737] ? __pfx___mm_populate+0x10/0x10 [ 76.729214][ T6737] ? up_write+0x2dc/0x5b0 [ 76.729236][ T6737] do_mlock+0x3f0/0x800 [ 76.729259][ T6737] ? do_futex+0x190/0x440 [ 76.729283][ T6737] ? __pfx_do_mlock+0x10/0x10 [ 76.729302][ T6737] ? __pfx_do_futex+0x10/0x10 [ 76.729324][ T6737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.729349][ T6737] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 76.729387][ T6737] __ia32_sys_mlock+0xce/0x120 [ 76.729411][ T6737] ? __pfx___ia32_sys_mlock+0x10/0x10 [ 76.729442][ T6737] __do_fast_syscall_32+0x13a/0x8b0 [ 76.729468][ T6737] do_fast_syscall_32+0x32/0x70 [ 76.729488][ T6737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.729513][ T6737] RIP: 0023:0xf748efec [ 76.729532][ T6737] Code: Unable to access opcode bytes at 0xf748efc2. [ 76.729540][ T6737] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 76.729556][ T6737] RAX: ffffffffffffffda RBX: 0000000080c00000 RCX: 0000000000400000 [ 76.729567][ T6737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.729576][ T6737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.729586][ T6737] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.729597][ T6737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.729624][ T6737] [ 78.042311][ T6755] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.081121][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 78.122044][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 78.245138][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 78.815268][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.029801][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 79.788814][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.790131][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.790166][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.790186][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.790202][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.790219][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.790249][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.833550][ T6771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.834615][ T9] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 79.851216][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.851252][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.851906][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 79.852601][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.852637][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.873563][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 79.986113][ T6788] FAULT_INJECTION: forcing a failure. [ 79.986113][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 79.986136][ T6788] CPU: 0 UID: 0 PID: 6788 Comm: syz.0.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.986151][ T6788] Tainted: [L]=SOFTLOCKUP [ 79.986155][ T6788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.986161][ T6788] Call Trace: [ 79.986165][ T6788] [ 79.986170][ T6788] dump_stack_lvl+0x100/0x190 [ 79.986190][ T6788] should_fail_ex.cold+0x5/0xa [ 79.986205][ T6788] should_failslab+0xc2/0x120 [ 79.986224][ T6788] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.986238][ T6788] ? fscontext_alloc_log+0x4a/0x1b0 [ 79.986253][ T6788] fscontext_alloc_log+0x4a/0x1b0 [ 79.986272][ T6788] __ia32_sys_fsopen+0x15b/0x230 [ 79.986287][ T6788] __do_fast_syscall_32+0x13a/0x8b0 [ 79.986302][ T6788] do_fast_syscall_32+0x32/0x70 [ 79.986314][ T6788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.986329][ T6788] RIP: 0023:0xf7f26fec [ 79.986342][ T6788] Code: Unable to access opcode bytes at 0xf7f26fc2. [ 79.986347][ T6788] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 79.986358][ T6788] RAX: ffffffffffffffda RBX: 00000000800008c0 RCX: 0000000000000000 [ 79.986365][ T6788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.986372][ T6788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.986380][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.986387][ T6788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.986401][ T6788] [ 80.265361][ T1031] usb 8-1: USB disconnect, device number 6 [ 80.408425][ T1031] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 80.498746][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 80.562197][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 80.728916][ T1031] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 80.729295][ T1031] keyspan 8-1:1.0: device disconnected [ 81.276153][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 81.322913][ T6810] FAULT_INJECTION: forcing a failure. [ 81.322913][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 81.322984][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.3.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.323000][ T6810] Tainted: [L]=SOFTLOCKUP [ 81.323004][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.323010][ T6810] Call Trace: [ 81.323014][ T6810] [ 81.323019][ T6810] dump_stack_lvl+0x100/0x190 [ 81.323038][ T6810] should_fail_ex.cold+0x5/0xa [ 81.323053][ T6810] should_failslab+0xc2/0x120 [ 81.323072][ T6810] __kmalloc_cache_noprof+0x91/0x6d0 [ 81.323087][ T6810] ? ceph_alloc_options+0x43/0x310 [ 81.323103][ T6810] ceph_alloc_options+0x43/0x310 [ 81.323117][ T6810] ceph_init_fs_context+0x61/0x530 [ 81.323131][ T6810] alloc_fs_context+0x60c/0xf40 [ 81.323144][ T6810] __ia32_sys_fsopen+0xef/0x230 [ 81.323158][ T6810] __do_fast_syscall_32+0x13a/0x8b0 [ 81.323171][ T6810] do_fast_syscall_32+0x32/0x70 [ 81.323183][ T6810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.323197][ T6810] RIP: 0023:0xf73aefec [ 81.323210][ T6810] Code: Unable to access opcode bytes at 0xf73aefc2. [ 81.323215][ T6810] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 81.323226][ T6810] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000001 [ 81.323233][ T6810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.323239][ T6810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.323245][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.323252][ T6810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.323270][ T6810] [ 81.505802][ T6815] FAULT_INJECTION: forcing a failure. [ 81.505802][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 81.505824][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.505840][ T6815] Tainted: [L]=SOFTLOCKUP [ 81.505844][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.505850][ T6815] Call Trace: [ 81.505854][ T6815] [ 81.505859][ T6815] dump_stack_lvl+0x100/0x190 [ 81.505880][ T6815] should_fail_ex.cold+0x5/0xa [ 81.505895][ T6815] should_failslab+0xc2/0x120 [ 81.505915][ T6815] __kmalloc_noprof+0xfc/0x840 [ 81.505931][ T6815] ? tomoyo_encode2+0xfb/0x3c0 [ 81.505949][ T6815] tomoyo_encode2+0xfb/0x3c0 [ 81.505966][ T6815] tomoyo_encode+0x29/0x50 [ 81.505981][ T6815] tomoyo_realpath_from_path+0x18c/0x690 [ 81.506001][ T6815] tomoyo_mkdev_perm+0x231/0x570 [ 81.506014][ T6815] ? tomoyo_mkdev_perm+0x21d/0x570 [ 81.506042][ T6815] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 81.506057][ T6815] ? do_raw_spin_lock+0x128/0x260 [ 81.506073][ T6815] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.506095][ T6815] ? simple_lookup+0xfc/0x1d0 [ 81.506114][ T6815] tomoyo_path_mknod+0xe2/0x190 [ 81.506125][ T6815] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 81.506137][ T6815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.506157][ T6815] security_path_mknod+0x161/0x300 [ 81.506175][ T6815] filename_mknodat+0x241/0x7f0 [ 81.506194][ T6815] ? __pfx_filename_mknodat+0x10/0x10 [ 81.506210][ T6815] ? strncpy_from_user+0x19d/0x2d0 [ 81.506224][ T6815] ? do_getname+0x191/0x390 [ 81.506237][ T6815] __ia32_sys_mknodat+0xb4/0xf0 [ 81.506253][ T6815] __do_fast_syscall_32+0x13a/0x8b0 [ 81.506274][ T6815] do_fast_syscall_32+0x32/0x70 [ 81.506286][ T6815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.506301][ T6815] RIP: 0023:0xf73aefec [ 81.506315][ T6815] Code: Unable to access opcode bytes at 0xf73aefc2. [ 81.506320][ T6815] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 81.506332][ T6815] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000980 [ 81.506338][ T6815] RDX: 00000000000021c0 RSI: 0000000000000103 RDI: 0000000000000000 [ 81.506345][ T6815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.506351][ T6815] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.506357][ T6815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.506371][ T6815] [ 81.507589][ T6815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.851573][ T6830] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 81.851911][ T6830] syz_tun: entered promiscuous mode [ 81.864383][ T6830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 81.874977][ T5810] bond0: (slave syz_tun): interface is now down [ 81.894929][ T5810] bond0: (slave syz_tun): interface is now down [ 81.895199][ T5810] bond0: now running without any active interface! [ 81.965669][ T6833] FAULT_INJECTION: forcing a failure. [ 81.965669][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 81.965692][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.2.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.965708][ T6833] Tainted: [L]=SOFTLOCKUP [ 81.965712][ T6833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.965720][ T6833] Call Trace: [ 81.965724][ T6833] [ 81.965730][ T6833] dump_stack_lvl+0x100/0x190 [ 81.965748][ T6833] should_fail_ex.cold+0x5/0xa [ 81.965764][ T6833] ? __pfx_rescuer_thread+0x10/0x10 [ 81.965779][ T6833] should_failslab+0xc2/0x120 [ 81.965797][ T6833] __kmalloc_cache_noprof+0x91/0x6d0 [ 81.965811][ T6833] ? __kthread_create_on_node+0xce/0x3f0 [ 81.965826][ T6833] ? __pfx_rescuer_thread+0x10/0x10 [ 81.965839][ T6833] __kthread_create_on_node+0xce/0x3f0 [ 81.965850][ T6833] ? vsnprintf+0x4c5/0x1300 [ 81.965867][ T6833] ? __pfx___kthread_create_on_node+0x10/0x10 [ 81.965885][ T6833] ? __pfx_rescuer_thread+0x10/0x10 [ 81.965899][ T6833] kthread_create_on_node+0xc7/0x100 [ 81.965910][ T6833] ? __pfx_kthread_create_on_node+0x10/0x10 [ 81.965921][ T6833] ? __pfx_scnprintf+0x10/0x10 [ 81.965932][ T6833] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 81.965949][ T6833] ? init_rescuer+0x19f/0x550 [ 81.965964][ T6833] init_rescuer+0x321/0x550 [ 81.965976][ T6833] ? __pfx_init_rescuer+0x10/0x10 [ 81.965988][ T6833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.966006][ T6833] __alloc_workqueue+0xe82/0x1950 [ 81.966022][ T6833] alloc_workqueue_noprof+0xc7/0x130 [ 81.966035][ T6833] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 81.966051][ T6833] ? __pfx___debug_object_init+0x10/0x10 [ 81.966068][ T6833] nci_register_device+0x21e/0xb80 [ 81.966084][ T6833] ? __pfx_nci_register_device+0x10/0x10 [ 81.966101][ T6833] ? lockdep_init_map_type+0x5c/0x250 [ 81.966121][ T6833] virtual_ncidev_open+0x141/0x220 [ 81.966138][ T6833] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 81.966152][ T6833] misc_open+0x26d/0x450 [ 81.966163][ T6833] ? __pfx_misc_open+0x10/0x10 [ 81.966173][ T6833] chrdev_open+0x234/0x6a0 [ 81.966189][ T6833] ? __pfx_chrdev_open+0x10/0x10 [ 81.966204][ T6833] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 81.966219][ T6833] do_dentry_open+0x6ab/0x14d0 [ 81.966250][ T6833] ? __pfx_chrdev_open+0x10/0x10 [ 81.966276][ T6833] vfs_open+0x82/0x3f0 [ 81.966288][ T6833] path_openat+0x1a23/0x2450 [ 81.966308][ T6833] ? __pfx_path_openat+0x10/0x10 [ 81.966330][ T6833] do_file_open+0x20e/0x430 [ 81.966348][ T6833] ? __pfx_do_file_open+0x10/0x10 [ 81.966375][ T6833] ? _raw_spin_unlock+0x28/0x50 [ 81.966392][ T6833] ? alloc_fd+0x471/0x7a0 [ 81.966412][ T6833] do_sys_openat2+0x10f/0x1e0 [ 81.966423][ T6833] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.966434][ T6833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.966450][ T6833] __ia32_compat_sys_openat+0x12d/0x210 [ 81.966463][ T6833] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 81.966481][ T6833] __do_fast_syscall_32+0x13a/0x8b0 [ 81.966495][ T6833] do_fast_syscall_32+0x32/0x70 [ 81.966507][ T6833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.966521][ T6833] RIP: 0023:0xf739efec [ 81.966534][ T6833] Code: Unable to access opcode bytes at 0xf739efc2. [ 81.966539][ T6833] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 81.966550][ T6833] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000480 [ 81.966557][ T6833] RDX: 0000000000000002 RSI: 0000000000000018 RDI: 0000000000000000 [ 81.966564][ T6833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.966570][ T6833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.966576][ T6833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.966590][ T6833] [ 81.969762][ T6833] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 82.120365][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 82.133257][ T6835] FAULT_INJECTION: forcing a failure. [ 82.133257][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 82.133279][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.3.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.133295][ T6835] Tainted: [L]=SOFTLOCKUP [ 82.133299][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.133306][ T6835] Call Trace: [ 82.133310][ T6835] [ 82.133316][ T6835] dump_stack_lvl+0x100/0x190 [ 82.133335][ T6835] should_fail_ex.cold+0x5/0xa [ 82.133351][ T6835] should_failslab+0xc2/0x120 [ 82.133369][ T6835] __kmalloc_noprof+0xfc/0x840 [ 82.133386][ T6835] ? tomoyo_encode2+0xfb/0x3c0 [ 82.133404][ T6835] tomoyo_encode2+0xfb/0x3c0 [ 82.133421][ T6835] tomoyo_encode+0x29/0x50 [ 82.133436][ T6835] tomoyo_realpath_from_path+0x18c/0x690 [ 82.133455][ T6835] tomoyo_path_number_perm+0x23c/0x580 [ 82.133468][ T6835] ? tomoyo_path_number_perm+0x22e/0x580 [ 82.133482][ T6835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 82.133495][ T6835] ? rcu_read_unlock+0x17/0x60 [ 82.133512][ T6835] ? do_raw_spin_lock+0x128/0x260 [ 82.133525][ T6835] ? find_held_lock+0x2b/0x80 [ 82.133545][ T6835] ? find_held_lock+0x2b/0x80 [ 82.133557][ T6835] ? current_check_access_path+0x262/0x420 [ 82.133574][ T6835] ? __pfx_current_check_access_path+0x10/0x10 [ 82.133589][ T6835] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.133603][ T6835] ? simple_lookup+0xfc/0x1d0 [ 82.133621][ T6835] tomoyo_path_mknod+0x164/0x190 [ 82.133656][ T6835] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 82.133670][ T6835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.133691][ T6835] security_path_mknod+0x161/0x300 [ 82.133710][ T6835] filename_mknodat+0x241/0x7f0 [ 82.133730][ T6835] ? __pfx_filename_mknodat+0x10/0x10 [ 82.133747][ T6835] ? strncpy_from_user+0x19d/0x2d0 [ 82.133761][ T6835] ? do_getname+0x191/0x390 [ 82.133774][ T6835] __ia32_sys_mknod+0x8e/0xc0 [ 82.133792][ T6835] __do_fast_syscall_32+0x13a/0x8b0 [ 82.133806][ T6835] do_fast_syscall_32+0x32/0x70 [ 82.133818][ T6835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.133851][ T6835] RIP: 0023:0xf73aefec [ 82.133865][ T6835] Code: Unable to access opcode bytes at 0xf73aefc2. [ 82.133871][ T6835] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000000e [ 82.133882][ T6835] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000008001420 [ 82.133890][ T6835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.133897][ T6835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.133904][ T6835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.133911][ T6835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.133927][ T6835] [ 82.133964][ T6835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.413089][ T6843] FAULT_INJECTION: forcing a failure. [ 82.413089][ T6843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.413112][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.2.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.413127][ T6843] Tainted: [L]=SOFTLOCKUP [ 82.413132][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.413139][ T6843] Call Trace: [ 82.413143][ T6843] [ 82.413147][ T6843] dump_stack_lvl+0x100/0x190 [ 82.413166][ T6843] should_fail_ex.cold+0x5/0xa [ 82.413178][ T6843] ? prepare_alloc_pages+0x16d/0x5b0 [ 82.413197][ T6843] should_fail_alloc_page+0xeb/0x140 [ 82.413234][ T6843] prepare_alloc_pages+0x1f0/0x5b0 [ 82.413254][ T6843] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 82.413270][ T6843] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 82.413287][ T6843] ? rcu_is_watching+0x13/0xc0 [ 82.413301][ T6843] ? trace_kmem_cache_alloc+0x11/0x100 [ 82.413320][ T6843] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 82.413339][ T6843] ? __lock_acquire+0x5c0/0x1f40 [ 82.413355][ T6843] ? __css_rstat_updated+0x1ce/0x590 [ 82.413365][ T6843] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 82.413385][ T6843] ? rcu_is_watching+0x13/0xc0 [ 82.413397][ T6843] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 82.413414][ T6843] ? find_held_lock+0x2b/0x80 [ 82.413431][ T6843] ? __lock_acquire+0x5c0/0x1f40 [ 82.413447][ T6843] ? rcu_is_watching+0x13/0xc0 [ 82.413459][ T6843] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.413477][ T6843] ? policy_nodemask+0xed/0x4f0 [ 82.413489][ T6843] alloc_pages_mpol+0x201/0x550 [ 82.413500][ T6843] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 82.413510][ T6843] ? filemap_get_entry+0x22d/0x450 [ 82.413521][ T6843] ? filemap_get_entry+0x22d/0x450 [ 82.413534][ T6843] folio_alloc_noprof+0x22/0x250 [ 82.413546][ T6843] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 82.413564][ T6843] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 82.413579][ T6843] ? rcu_is_watching+0x13/0xc0 [ 82.413591][ T6843] ? trace_kmalloc+0xeb/0x110 [ 82.413609][ T6843] __filemap_get_folio_mpol+0x653/0x1280 [ 82.413624][ T6843] ioctx_alloc+0x7e1/0x21a0 [ 82.413665][ T6843] ? __pfx_ioctx_alloc+0x10/0x10 [ 82.413682][ T6843] __ia32_compat_sys_io_setup+0xc8/0x220 [ 82.413695][ T6843] __do_fast_syscall_32+0x13a/0x8b0 [ 82.413711][ T6843] do_fast_syscall_32+0x32/0x70 [ 82.413723][ T6843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.413737][ T6843] RIP: 0023:0xf739efec [ 82.413751][ T6843] Code: Unable to access opcode bytes at 0xf739efc2. [ 82.413757][ T6843] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 82.413768][ T6843] RAX: ffffffffffffffda RBX: 00000000000008fc RCX: 0000000080000040 [ 82.413775][ T6843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.413781][ T6843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.413788][ T6843] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.413794][ T6843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.413809][ T6843] [ 83.000917][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 83.019644][ T6853] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.605964][ T1031] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 83.681807][ T6877] syzkaller1: entered promiscuous mode [ 83.681822][ T6877] syzkaller1: entered allmulticast mode [ 83.730107][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 83.756496][ T1031] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 83.757295][ T1031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.760342][ T1031] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 83.760355][ T1031] usb 7-1: Product: syz [ 83.760362][ T1031] usb 7-1: Manufacturer: syz [ 83.760369][ T1031] usb 7-1: SerialNumber: syz [ 83.762388][ T1031] usb 7-1: config 0 descriptor?? [ 83.788776][ T1031] keyspan 7-1:0.0: Keyspan 4 port adapter converter detected [ 83.788905][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 83.788934][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 88 [ 83.789535][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 83.794332][ T1031] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 83.809522][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 83.820366][ T1031] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 83.821073][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 83.836900][ T1031] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 83.839239][ T1031] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 83.850725][ T1031] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 84.102965][ T1031] usb 7-1: USB disconnect, device number 7 [ 84.118352][ T1031] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 84.122532][ T1031] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 84.134051][ T1031] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 84.142503][ T1031] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 84.142832][ T1031] keyspan 7-1:0.0: device disconnected [ 84.472393][ T6898] FAULT_INJECTION: forcing a failure. [ 84.472393][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 84.472417][ T6898] CPU: 2 UID: 0 PID: 6898 Comm: syz.1.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.472435][ T6898] Tainted: [L]=SOFTLOCKUP [ 84.472440][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.472447][ T6898] Call Trace: [ 84.472451][ T6898] [ 84.472456][ T6898] dump_stack_lvl+0x100/0x190 [ 84.472474][ T6898] should_fail_ex.cold+0x5/0xa [ 84.472490][ T6898] should_failslab+0xc2/0x120 [ 84.472508][ T6898] __kmalloc_noprof+0xfc/0x840 [ 84.472523][ T6898] ? kernfs_fop_read_iter+0x447/0x610 [ 84.472541][ T6898] kernfs_fop_read_iter+0x447/0x610 [ 84.472555][ T6898] ? rw_verify_area+0xce/0x6d0 [ 84.472567][ T6898] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 84.472581][ T6898] vfs_read+0x82e/0xb40 [ 84.472596][ T6898] ? __pfx_vfs_read+0x10/0x10 [ 84.472608][ T6898] ? find_held_lock+0x2b/0x80 [ 84.472643][ T6898] ksys_read+0x12a/0x250 [ 84.472658][ T6898] ? __pfx_ksys_read+0x10/0x10 [ 84.472676][ T6898] do_int80_emulation+0x166/0x650 [ 84.472690][ T6898] asm_int80_emulation+0x1a/0x20 [ 84.472701][ T6898] RIP: 0023:0xf71e77eb [ 84.472710][ T6898] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 84.472721][ T6898] RSP: 002b:00000000f54a641c EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 84.472733][ T6898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f75e44e0 [ 84.472740][ T6898] RDX: 00000000009ff000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.472746][ T6898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.472753][ T6898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.472759][ T6898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.472773][ T6898] [ 84.671538][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 85.473027][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 85.634521][ T6928] sd 0:0:0:0: PR command failed: 1026 [ 85.634545][ T6928] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 85.634565][ T6928] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 85.742993][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 85.845561][ T6938] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 86.036754][ T6952] block2mtd: parameter too long [ 86.168466][ T6961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 86.230549][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 87.434543][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 87.531843][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 87.600100][ T6984] FAULT_INJECTION: forcing a failure. [ 87.600100][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 87.600123][ T6984] CPU: 2 UID: 0 PID: 6984 Comm: syz.3.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.600137][ T6984] Tainted: [L]=SOFTLOCKUP [ 87.600141][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.600153][ T6984] Call Trace: [ 87.600157][ T6984] [ 87.600161][ T6984] dump_stack_lvl+0x100/0x190 [ 87.600181][ T6984] should_fail_ex.cold+0x5/0xa [ 87.600196][ T6984] should_failslab+0xc2/0x120 [ 87.600214][ T6984] __kmalloc_cache_noprof+0x91/0x6d0 [ 87.600227][ T6984] ? __kasan_kmalloc+0xaa/0xb0 [ 87.600241][ T6984] ? proc_init_fs_context+0x4b/0x620 [ 87.600256][ T6984] proc_init_fs_context+0x4b/0x620 [ 87.600268][ T6984] alloc_fs_context+0x60c/0xf40 [ 87.600281][ T6984] __ia32_sys_fsopen+0xef/0x230 [ 87.600295][ T6984] __do_fast_syscall_32+0x13a/0x8b0 [ 87.600309][ T6984] do_fast_syscall_32+0x32/0x70 [ 87.600321][ T6984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.600335][ T6984] RIP: 0023:0xf73aefec [ 87.600348][ T6984] Code: Unable to access opcode bytes at 0xf73aefc2. [ 87.600352][ T6984] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 87.600364][ T6984] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 87.600371][ T6984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.600377][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.600383][ T6984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.600389][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.600403][ T6984] [ 87.824288][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 88.079925][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 88.205300][ T7030] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 88.388264][ T7038] syzkaller1: entered promiscuous mode [ 88.388278][ T7038] syzkaller1: entered allmulticast mode [ 88.814969][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.966675][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 88.967133][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 88.967930][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.967950][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.967963][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.967974][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 88.967987][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.968004][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.970574][ T9] usb 5-1: config 0 descriptor?? [ 89.273122][ T7059] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 89.413154][ T9] logitech-djreceiver 0003:046D:C53A.0007: hiddev0,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 89.526360][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 89.597898][ T1035] usb 5-1: USB disconnect, device number 8 [ 89.684694][ T7076] FAULT_INJECTION: forcing a failure. [ 89.684694][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 89.684728][ T7076] CPU: 0 UID: 0 PID: 7076 Comm: syz.3.500 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.684753][ T7076] Tainted: [L]=SOFTLOCKUP [ 89.684761][ T7076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.684772][ T7076] Call Trace: [ 89.684779][ T7076] [ 89.684787][ T7076] dump_stack_lvl+0x100/0x190 [ 89.684819][ T7076] should_fail_ex.cold+0x5/0xa [ 89.684863][ T7076] should_failslab+0xc2/0x120 [ 89.684894][ T7076] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.684921][ T7076] ? __ksm_enter+0x3c/0x630 [ 89.684953][ T7076] __ksm_enter+0x3c/0x630 [ 89.684978][ T7076] ? mas_prev_slot+0x768/0x11b0 [ 89.685006][ T7076] ksm_madvise+0x24a/0x2c0 [ 89.685034][ T7076] madvise_vma_behavior+0x261/0x2350 [ 89.685057][ T7076] ? mas_prev+0xa4/0x100 [ 89.685081][ T7076] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 89.685103][ T7076] ? mas_walk+0x260/0x310 [ 89.685122][ T7076] ? find_vma_prev+0xd8/0x150 [ 89.685157][ T7076] ? __pfx_find_vma_prev+0x10/0x10 [ 89.685183][ T7076] ? lock_acquire+0x1d1/0x380 [ 89.685230][ T7076] madvise_walk_vmas+0x30e/0xc50 [ 89.685256][ T7076] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 89.685276][ T7076] ? __lock_acquire+0x5c0/0x1f40 [ 89.685308][ T7076] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.685347][ T7076] madvise_do_behavior+0x1ea/0x510 [ 89.685367][ T7076] ? __pfx___might_resched+0x10/0x10 [ 89.685394][ T7076] ? __pfx_madvise_do_behavior+0x10/0x10 [ 89.685425][ T7076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.685459][ T7076] do_madvise+0x238/0x290 [ 89.685478][ T7076] ? __pfx_do_madvise+0x10/0x10 [ 89.685497][ T7076] ? do_futex+0x190/0x440 [ 89.685524][ T7076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.685565][ T7076] __ia32_sys_madvise+0xa7/0x110 [ 89.685585][ T7076] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.685627][ T7076] __do_fast_syscall_32+0x13a/0x8b0 [ 89.685651][ T7076] do_fast_syscall_32+0x32/0x70 [ 89.685670][ T7076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.685694][ T7076] RIP: 0023:0xf73aefec [ 89.685714][ T7076] Code: Unable to access opcode bytes at 0xf73aefc2. [ 89.685722][ T7076] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 89.685742][ T7076] RAX: ffffffffffffffda RBX: 00000000802a3000 RCX: 0000000000002000 [ 89.685754][ T7076] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 89.685765][ T7076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.685777][ T7076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.685788][ T7076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.685815][ T7076] [ 89.892531][ T7080] netlink: 'syz.3.502': attribute type 8 has an invalid length. [ 89.892550][ T7080] netlink: 212 bytes leftover after parsing attributes in process `syz.3.502'. [ 89.892561][ T7080] NCSI netlink: No device for ifindex 2097153 [ 90.064264][ T7084] loop5: detected capacity change from 0 to 7 [ 90.085169][ T7084] Dev loop5: unable to read RDB block 7 [ 90.085203][ T7084] loop5: unable to read partition table [ 90.085378][ T7084] loop5: partition table beyond EOD, truncated [ 90.085404][ T7084] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 90.593184][ T1031] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.889258][ T1031] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.934999][ T1031] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 90.935039][ T1031] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.935054][ T1031] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.935074][ T1031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.135336][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 91.137439][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 91.161912][ T44] audit: type=1326 audit(1792199145.657:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.162020][ T44] audit: type=1326 audit(1792199145.657:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.162508][ T44] audit: type=1326 audit(1792199145.657:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.162598][ T44] audit: type=1326 audit(1792199145.657:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.162775][ T44] audit: type=1326 audit(1792199145.657:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.162939][ T44] audit: type=1326 audit(1792199145.657:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.164504][ T44] audit: type=1326 audit(1792199145.657:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.164759][ T44] audit: type=1326 audit(1792199145.657:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.167353][ T44] audit: type=1326 audit(1792199145.657:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.167482][ T44] audit: type=1326 audit(1792199145.667:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.1.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 91.276152][ T1031] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.277303][ T1031] usb 5-1: invalid MIDI out EP 0 [ 91.396411][ T1031] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 91.414179][ T7104] input: syz1 as /devices/virtual/input/input17 [ 91.553242][ T5853] usb 5-1: USB disconnect, device number 9 [ 92.591478][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 92.600423][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 92.992324][ T7143] overlayfs: upper fs does not support tmpfile. [ 93.034812][ T7145] FAULT_INJECTION: forcing a failure. [ 93.034812][ T7145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.035525][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.3.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.035544][ T7145] Tainted: [L]=SOFTLOCKUP [ 93.035548][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.035555][ T7145] Call Trace: [ 93.035560][ T7145] [ 93.035565][ T7145] dump_stack_lvl+0x100/0x190 [ 93.035584][ T7145] should_fail_ex.cold+0x5/0xa [ 93.035598][ T7145] ? prepare_alloc_pages+0x16d/0x5b0 [ 93.035617][ T7145] should_fail_alloc_page+0xeb/0x140 [ 93.035636][ T7145] prepare_alloc_pages+0x1f0/0x5b0 [ 93.035655][ T7145] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 93.035670][ T7145] ? stack_trace_save+0x8e/0xc0 [ 93.035688][ T7145] ? __pfx_stack_trace_save+0x10/0x10 [ 93.035702][ T7145] ? _raw_spin_unlock_irq_enable+0x31/0x90 [ 93.035719][ T7145] ? stack_depot_save_flags+0x27/0x9f0 [ 93.035736][ T7145] ? kasan_save_stack+0x3f/0x50 [ 93.035751][ T7145] ? kasan_save_stack+0x30/0x50 [ 93.035765][ T7145] ? kasan_save_track+0x14/0x30 [ 93.035780][ T7145] ? __kasan_slab_alloc+0x89/0x90 [ 93.035795][ T7145] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 93.035809][ T7145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.035823][ T7145] ? walk_pgd_range+0xb94/0x1e00 [ 93.035836][ T7145] ? walk_page_range_vma_unsafe+0x209/0x8f0 [ 93.035852][ T7145] ? madvise_vma_behavior+0xc02/0x2350 [ 93.035864][ T7145] ? madvise_walk_vmas+0x870/0xc50 [ 93.035874][ T7145] ? madvise_do_behavior+0x1ea/0x510 [ 93.035884][ T7145] ? do_madvise+0x238/0x290 [ 93.035894][ T7145] ? __ia32_sys_madvise+0xa7/0x110 [ 93.035904][ T7145] ? __do_fast_syscall_32+0x13a/0x8b0 [ 93.035915][ T7145] ? do_fast_syscall_32+0x32/0x70 [ 93.035926][ T7145] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.035942][ T7145] ? look_up_lock_class+0x64/0x120 [ 93.035954][ T7145] ? register_lock_class+0x3f/0x7b0 [ 93.035974][ T7145] ? __lock_acquire+0x5c0/0x1f40 [ 93.035990][ T7145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.036007][ T7145] ? policy_nodemask+0xed/0x4f0 [ 93.036019][ T7145] alloc_pages_mpol+0x201/0x550 [ 93.036030][ T7145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 93.036040][ T7145] ? do_raw_spin_lock+0x128/0x260 [ 93.036052][ T7145] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.036066][ T7145] alloc_pages_noprof+0x1a/0x160 [ 93.036078][ T7145] pte_alloc_one+0x1c/0x3d0 [ 93.036094][ T7145] __pte_alloc+0x6d/0x380 [ 93.036108][ T7145] ? __pfx___pte_alloc+0x10/0x10 [ 93.036122][ T7145] ? walk_pgd_range+0x13ca/0x1e00 [ 93.036134][ T7145] ? walk_pgd_range+0x13ca/0x1e00 [ 93.036150][ T7145] walk_pgd_range+0xb94/0x1e00 [ 93.036165][ T7145] ? __pfx_guard_install_set_pte+0x10/0x10 [ 93.036207][ T7145] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 93.036221][ T7145] ? __pfx_guard_install_set_pte+0x10/0x10 [ 93.036240][ T7145] ? __pfx_guard_install_set_pte+0x10/0x10 [ 93.036258][ T7145] ? __pfx_guard_install_set_pte+0x10/0x10 [ 93.036275][ T7145] ? __pfx_walk_pgd_range+0x10/0x10 [ 93.036293][ T7145] __walk_page_range+0x171/0x850 [ 93.036314][ T7145] walk_page_range_vma_unsafe+0x209/0x8f0 [ 93.036331][ T7145] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 93.036354][ T7145] madvise_guard_install+0x421/0x790 [ 93.036369][ T7145] ? __pfx_madvise_guard_install+0x10/0x10 [ 93.036382][ T7145] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 93.036399][ T7145] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 93.036415][ T7145] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 93.036427][ T7145] ? __pfx_guard_install_set_pte+0x10/0x10 [ 93.036448][ T7145] madvise_vma_behavior+0xc02/0x2350 [ 93.036463][ T7145] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 93.036477][ T7145] ? lock_vma_under_rcu+0x25/0x590 [ 93.036488][ T7145] ? lock_vma_under_rcu+0x1f9/0x590 [ 93.036498][ T7145] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 93.036513][ T7145] ? preempt_schedule_common+0x3c/0xb0 [ 93.036529][ T7145] ? preempt_schedule_thunk+0x16/0x40 [ 93.036545][ T7145] madvise_walk_vmas+0x870/0xc50 [ 93.036557][ T7145] ? __pfx_try_to_wake_up+0x10/0x10 [ 93.036575][ T7145] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 93.036590][ T7145] ? plist_check_list+0x1b8/0x280 [ 93.036614][ T7145] ? plist_del+0x308/0x510 [ 93.036633][ T7145] ? find_held_lock+0x2b/0x80 [ 93.036652][ T7145] ? futex_wake+0x4ea/0x5e0 [ 93.036677][ T7145] madvise_do_behavior+0x1ea/0x510 [ 93.036694][ T7145] ? futex_private_hash_put.part.0+0xdc/0x180 [ 93.036711][ T7145] ? __pfx_madvise_do_behavior+0x10/0x10 [ 93.036728][ T7145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.036746][ T7145] do_madvise+0x238/0x290 [ 93.036757][ T7145] ? __pfx_do_madvise+0x10/0x10 [ 93.036768][ T7145] ? do_futex+0x190/0x440 [ 93.036782][ T7145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.036804][ T7145] __ia32_sys_madvise+0xa7/0x110 [ 93.036815][ T7145] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.036825][ T7145] __do_fast_syscall_32+0x13a/0x8b0 [ 93.036839][ T7145] do_fast_syscall_32+0x32/0x70 [ 93.036851][ T7145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.036864][ T7145] RIP: 0023:0xf73aefec [ 93.036878][ T7145] Code: Unable to access opcode bytes at 0xf73aefc2. [ 93.036883][ T7145] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 93.036895][ T7145] RAX: ffffffffffffffda RBX: 000000008042f000 RCX: 000000000080fd00 [ 93.036902][ T7145] RDX: 0000000000000066 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.036908][ T7145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.036914][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.036920][ T7145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.036935][ T7145] [ 93.039414][ T7147] FAULT_INJECTION: forcing a failure. [ 93.039414][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 93.039434][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.1.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.039450][ T7147] Tainted: [L]=SOFTLOCKUP [ 93.039454][ T7147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.039461][ T7147] Call Trace: [ 93.039465][ T7147] [ 93.039470][ T7147] dump_stack_lvl+0x100/0x190 [ 93.039488][ T7147] should_fail_ex.cold+0x5/0xa [ 93.039503][ T7147] should_failslab+0xc2/0x120 [ 93.039522][ T7147] __kmalloc_cache_noprof+0x91/0x6d0 [ 93.039536][ T7147] ? xfd_validate_state+0x129/0x190 [ 93.039554][ T7147] ? do_eventfd+0x67/0x2b0 [ 93.039571][ T7147] do_eventfd+0x67/0x2b0 [ 93.039588][ T7147] __ia32_sys_eventfd2+0x53/0x80 [ 93.039606][ T7147] __do_fast_syscall_32+0x13a/0x8b0 [ 93.039621][ T7147] do_fast_syscall_32+0x32/0x70 [ 93.039633][ T7147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.039647][ T7147] RIP: 0023:0xf748efec [ 93.039660][ T7147] Code: Unable to access opcode bytes at 0xf748efc2. [ 93.039665][ T7147] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000148 [ 93.039677][ T7147] RAX: ffffffffffffffda RBX: 0000000000000085 RCX: 0000000000080000 [ 93.039684][ T7147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.039691][ T7147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.039698][ T7147] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.039704][ T7147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.039719][ T7147] [ 93.322608][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 93.777906][ T1035] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.496425][ T1035] usb 8-1: Using ep0 maxpacket: 32 [ 94.498498][ T1035] usb 8-1: unable to get BOS descriptor or descriptor too short [ 94.498523][ T1035] usb 8-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=ef.a1 [ 94.499321][ T1035] usb 8-1: config index 0 descriptor too short (expected 160, got 54) [ 94.499334][ T1035] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.499343][ T1035] usb 8-1: config 0 has no interfaces? [ 94.501228][ T1035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.501240][ T1035] usb 8-1: Product: syz [ 94.501247][ T1035] usb 8-1: Manufacturer: syz [ 94.501254][ T1035] usb 8-1: SerialNumber: syz [ 94.511615][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 94.513115][ T1035] usb 8-1: config 0 descriptor?? [ 94.637427][ T7174] FAULT_INJECTION: forcing a failure. [ 94.637427][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 94.637449][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.0.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.637464][ T7174] Tainted: [L]=SOFTLOCKUP [ 94.637468][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.637475][ T7174] Call Trace: [ 94.637479][ T7174] [ 94.637484][ T7174] dump_stack_lvl+0x100/0x190 [ 94.637503][ T7174] should_fail_ex.cold+0x5/0xa [ 94.637518][ T7174] should_failslab+0xc2/0x120 [ 94.637537][ T7174] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 94.637556][ T7174] ? fscrypt_provisioning_key_preparse+0x199/0x290 [ 94.637600][ T7174] kmemdup_noprof+0x29/0x60 [ 94.637616][ T7174] fscrypt_provisioning_key_preparse+0x199/0x290 [ 94.637630][ T7174] ? __pfx_fscrypt_provisioning_key_preparse+0x10/0x10 [ 94.637645][ T7174] __key_create_or_update+0x413/0xe30 [ 94.637663][ T7174] ? __pfx___key_create_or_update+0x10/0x10 [ 94.637680][ T7174] ? lookup_user_key+0x3f3/0x1300 [ 94.637699][ T7174] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 94.637716][ T7174] key_create_or_update+0x42/0x60 [ 94.637733][ T7174] __do_sys_add_key+0x2e8/0x460 [ 94.637751][ T7174] ? __pfx___do_sys_add_key+0x10/0x10 [ 94.637773][ T7174] __do_fast_syscall_32+0x13a/0x8b0 [ 94.637787][ T7174] do_fast_syscall_32+0x32/0x70 [ 94.637799][ T7174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.637813][ T7174] RIP: 0023:0xf7f26fec [ 94.637826][ T7174] Code: Unable to access opcode bytes at 0xf7f26fc2. [ 94.637831][ T7174] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 94.637842][ T7174] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 94.637849][ T7174] RDX: 00000000800000c0 RSI: 0000000000000018 RDI: 00000000fffffffc [ 94.637856][ T7174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.637862][ T7174] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.637868][ T7174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.637881][ T7174] [ 94.740592][ T65] usb 8-1: USB disconnect, device number 7 [ 94.792190][ T7183] input: syz1 as /devices/virtual/input/input19 [ 94.885085][ T7187] FAULT_INJECTION: forcing a failure. [ 94.885085][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 94.885117][ T7187] CPU: 2 UID: 0 PID: 7187 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.885141][ T7187] Tainted: [L]=SOFTLOCKUP [ 94.885147][ T7187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.885157][ T7187] Call Trace: [ 94.885163][ T7187] [ 94.885170][ T7187] dump_stack_lvl+0x100/0x190 [ 94.885205][ T7187] should_fail_ex.cold+0x5/0xa [ 94.885230][ T7187] should_failslab+0xc2/0x120 [ 94.885257][ T7187] __kmalloc_cache_noprof+0x91/0x6d0 [ 94.885277][ T7187] ? pstore_init_fs_context+0x45/0x150 [ 94.885304][ T7187] pstore_init_fs_context+0x45/0x150 [ 94.885326][ T7187] alloc_fs_context+0x60c/0xf40 [ 94.885348][ T7187] __ia32_sys_fsopen+0xef/0x230 [ 94.885369][ T7187] __do_fast_syscall_32+0x13a/0x8b0 [ 94.885392][ T7187] do_fast_syscall_32+0x32/0x70 [ 94.885409][ T7187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.885432][ T7187] RIP: 0023:0xf739efec [ 94.885452][ T7187] Code: Unable to access opcode bytes at 0xf739efc2. [ 94.885459][ T7187] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 94.885477][ T7187] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 94.885487][ T7187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.885497][ T7187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.885507][ T7187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.885518][ T7187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.885543][ T7187] [ 95.831713][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 95.959565][ T7200] FAULT_INJECTION: forcing a failure. [ 95.959565][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 95.959588][ T7200] CPU: 2 UID: 0 PID: 7200 Comm: syz.1.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.959603][ T7200] Tainted: [L]=SOFTLOCKUP [ 95.959607][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.959614][ T7200] Call Trace: [ 95.959619][ T7200] [ 95.959624][ T7200] dump_stack_lvl+0x100/0x190 [ 95.959644][ T7200] should_fail_ex.cold+0x5/0xa [ 95.959660][ T7200] should_failslab+0xc2/0x120 [ 95.959678][ T7200] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 95.959696][ T7200] ? proc_alloc_inode+0x25/0x200 [ 95.959713][ T7200] ? __pfx_proc_alloc_inode+0x10/0x10 [ 95.959731][ T7200] proc_alloc_inode+0x25/0x200 [ 95.959747][ T7200] alloc_inode+0x68/0x250 [ 95.959759][ T7200] new_inode+0x22/0x1c0 [ 95.959772][ T7200] proc_pid_make_inode+0x22/0x160 [ 95.959789][ T7200] proc_pident_instantiate+0x85/0x310 [ 95.959807][ T7200] proc_pident_lookup+0x1e3/0x270 [ 95.959824][ T7200] ? __pfx_down_read+0x10/0x10 [ 95.959839][ T7200] __lookup_slow+0x155/0x320 [ 95.959852][ T7200] lookup_slow+0x50/0x70 [ 95.959864][ T7200] link_path_walk+0x1712/0x1cc0 [ 95.959882][ T7200] __filename_parentat+0x213/0x740 [ 95.959899][ T7200] ? __pfx___filename_parentat+0x10/0x10 [ 95.959917][ T7200] ? __pfx_proc_put_link+0x10/0x10 [ 95.959935][ T7200] ? __pfx_kfree_link+0x10/0x10 [ 95.959953][ T7200] ? __lock_acquire+0x5c0/0x1f40 [ 95.959972][ T7200] filename_create+0xbe/0x400 [ 95.959986][ T7200] ? __pfx_filename_create+0x10/0x10 [ 95.960001][ T7200] ? __might_fault+0xc5/0x140 [ 95.960015][ T7200] filename_mknodat+0x190/0x7f0 [ 95.960033][ T7200] ? __pfx_filename_mknodat+0x10/0x10 [ 95.960049][ T7200] ? strncpy_from_user+0x19d/0x2d0 [ 95.960065][ T7200] ? do_getname+0x191/0x390 [ 95.960078][ T7200] __ia32_sys_mknodat+0xb4/0xf0 [ 95.960095][ T7200] __do_fast_syscall_32+0x13a/0x8b0 [ 95.960109][ T7200] do_fast_syscall_32+0x32/0x70 [ 95.960121][ T7200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.960135][ T7200] RIP: 0023:0xf748efec [ 95.960148][ T7200] Code: Unable to access opcode bytes at 0xf748efc2. [ 95.960153][ T7200] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 95.960164][ T7200] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 95.960178][ T7200] RDX: 00000000000021c0 RSI: 0000000000000103 RDI: 0000000000000000 [ 95.960185][ T7200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.960191][ T7200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.960198][ T7200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.960213][ T7200] [ 96.162184][ T7205] FAULT_INJECTION: forcing a failure. [ 96.162184][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 96.162207][ T7205] CPU: 2 UID: 0 PID: 7205 Comm: syz.1.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.162223][ T7205] Tainted: [L]=SOFTLOCKUP [ 96.162227][ T7205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.162233][ T7205] Call Trace: [ 96.162238][ T7205] [ 96.162242][ T7205] dump_stack_lvl+0x100/0x190 [ 96.162261][ T7205] should_fail_ex.cold+0x5/0xa [ 96.162276][ T7205] should_failslab+0xc2/0x120 [ 96.162295][ T7205] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.162310][ T7205] ? do_fcntl_add_lease+0x9d/0x550 [ 96.162330][ T7205] do_fcntl_add_lease+0x9d/0x550 [ 96.162346][ T7205] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 96.162368][ T7205] fcntl_setlease+0xfc/0x180 [ 96.162379][ T7205] ? __pfx_fcntl_setlease+0x10/0x10 [ 96.162389][ T7205] ? futex_wait+0x11e/0x370 [ 96.162419][ T7205] do_fcntl+0xfb8/0x16d0 [ 96.162433][ T7205] ? __pfx_do_fcntl+0x10/0x10 [ 96.162443][ T7205] ? __fget_files+0x215/0x3d0 [ 96.162463][ T7205] ? tomoyo_file_fcntl+0x6c/0xc0 [ 96.162476][ T7205] do_compat_fcntl64+0x66d/0x720 [ 96.162488][ T7205] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 96.162501][ T7205] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 96.162516][ T7205] ? xfd_validate_state+0x129/0x190 [ 96.162540][ T7205] __do_fast_syscall_32+0x13a/0x8b0 [ 96.162555][ T7205] do_fast_syscall_32+0x32/0x70 [ 96.162566][ T7205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.162580][ T7205] RIP: 0023:0xf748efec [ 96.162593][ T7205] Code: Unable to access opcode bytes at 0xf748efc2. [ 96.162599][ T7205] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037 [ 96.162610][ T7205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000400 [ 96.162617][ T7205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.162624][ T7205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.162631][ T7205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.162637][ T7205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.162656][ T7205] [ 96.255705][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 96.484430][ T7219] rnbd_client L127: Can't parse path ivP|d-yY_~XG&PXt~450d5>!JS"w e,Go2: -22 [ 96.570015][ T7222] sctp: [Deprecated]: syz.2.561 (pid 7222) Use of int in max_burst socket option. [ 96.570015][ T7222] Use struct sctp_assoc_value instead [ 96.634917][ T7216] nvme nvme0: rdma connection establishment failed (-512) [ 96.665343][ T5586] nvme nvme0: rdma_resolve_route failed (-110). [ 96.769837][ T7216] nvme nvme0: rdma connection establishment failed (-512) [ 96.828841][ T7216] nvme nvme0: rdma connection establishment failed (-512) [ 96.926896][ T7234] FAULT_INJECTION: forcing a failure. [ 96.926896][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 96.926918][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.1.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.926933][ T7234] Tainted: [L]=SOFTLOCKUP [ 96.926937][ T7234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.926943][ T7234] Call Trace: [ 96.926948][ T7234] [ 96.926952][ T7234] dump_stack_lvl+0x100/0x190 [ 96.926971][ T7234] should_fail_ex.cold+0x5/0xa [ 96.926986][ T7234] should_failslab+0xc2/0x120 [ 96.927004][ T7234] __kmalloc_flags_noprof+0x122/0x8e0 [ 96.927019][ T7234] ? find_held_lock+0x2b/0x80 [ 96.927033][ T7234] ? __pcs_replace_empty_main+0x132/0x650 [ 96.927046][ T7234] ? __pcs_replace_empty_main+0x3fa/0x650 [ 96.927061][ T7234] __pcs_replace_empty_main+0x3fa/0x650 [ 96.927077][ T7234] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 96.927094][ T7234] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 96.927111][ T7234] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 96.927124][ T7234] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 96.927138][ T7234] alloc_inode+0x68/0x250 [ 96.927151][ T7234] new_inode+0x22/0x1c0 [ 96.927163][ T7234] hugetlbfs_get_inode+0x39a/0x700 [ 96.927176][ T7234] ? security_capable+0x80/0x260 [ 96.927189][ T7234] hugetlb_file_setup+0x3cc/0x5b0 [ 96.927206][ T7234] newseg+0xaf0/0xed0 [ 96.927224][ T7234] ? __pfx_newseg+0x10/0x10 [ 96.927239][ T7234] ? down_write+0x146/0x1f0 [ 96.927253][ T7234] ? ksys_write+0x190/0x250 [ 96.927269][ T7234] ipcget+0xee/0xf50 [ 96.927284][ T7234] ? __pfx_do_futex+0x10/0x10 [ 96.927298][ T7234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.927310][ T7234] ? __pfx_ipcget+0x10/0x10 [ 96.927325][ T7234] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 96.927360][ T7234] __ia32_sys_shmget+0x13b/0x1b0 [ 96.927379][ T7234] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 96.927400][ T7234] __do_fast_syscall_32+0x13a/0x8b0 [ 96.927415][ T7234] do_fast_syscall_32+0x32/0x70 [ 96.927427][ T7234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.927443][ T7234] RIP: 0023:0xf748efec [ 96.927456][ T7234] Code: Unable to access opcode bytes at 0xf748efc2. [ 96.927461][ T7234] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000018b [ 96.927472][ T7234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000003000 [ 96.927479][ T7234] RDX: 0000000000000880 RSI: 0000000080ffa000 RDI: 0000000000000000 [ 96.927486][ T7234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.927492][ T7234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.927498][ T7234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.927512][ T7234] [ 97.078707][ T7237] No fuse device found [ 97.235230][ T7243] block device autoloading is deprecated and will be removed. [ 97.322723][ T5586] nvme nvme0: rdma_resolve_route failed (-110). [ 97.323114][ T7216] nvme nvme0: rdma connection establishment failed (-512) [ 97.659804][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 97.726006][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.814969][ T65] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 97.964972][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 97.966571][ T65] usb 8-1: unable to get BOS descriptor or descriptor too short [ 97.966606][ T65] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.968265][ T65] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 97.968284][ T65] usb 8-1: config 8 has no interface number 0 [ 97.968306][ T65] usb 8-1: config 8 interface 188 has no altsetting 0 [ 97.971226][ T65] usb 8-1: string descriptor 0 read error: -22 [ 97.971418][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.002886][ T65] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 98.002906][ T65] dw2102: su3000_power_ctrl: 1, initialized 0 [ 98.004740][ T65] dvb-usb: bulk message failed: -22 (2/0) [ 98.023453][ T65] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.028108][ T65] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 98.028133][ T65] usb 8-1: media controller created [ 98.028362][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028369][ T65] dw2102: i2c transfer failed. [ 98.028384][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028390][ T65] dw2102: i2c transfer failed. [ 98.028396][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028402][ T65] dw2102: i2c transfer failed. [ 98.028408][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028414][ T65] dw2102: i2c transfer failed. [ 98.028419][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028425][ T65] dw2102: i2c transfer failed. [ 98.028431][ T65] dvb-usb: bulk message failed: -22 (6/0) [ 98.028437][ T65] dw2102: i2c transfer failed. [ 98.028440][ T65] dvb-usb: MAC address: 02:02:02:02:02:02 [ 98.065991][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 98.069160][ T65] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.086612][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.086639][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.092191][ T65] dvb-usb: bulk message failed: -22 (3/0) [ 98.092203][ T65] dw2102: command 0x0e transfer failed. [ 98.092207][ T65] dvb-usb: bulk message failed: -22 (3/0) [ 98.092213][ T65] dw2102: command 0x0e transfer failed. [ 98.379720][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 98.379820][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 98.379848][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 98.381985][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 98.382021][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 98.382933][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 98.385704][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 98.385738][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 98.386588][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 98.418419][ T65] dvb-usb: bulk message failed: -22 (3/0) [ 98.423537][ T65] dw2102: command 0x0e transfer failed. [ 98.423548][ T65] dvb-usb: bulk message failed: -22 (3/0) [ 98.423559][ T65] dw2102: command 0x0e transfer failed. [ 98.423565][ T65] dvb-usb: bulk message failed: -22 (1/0) [ 98.423574][ T65] dw2102: command 0x51 transfer failed. [ 98.442839][ T7252] dvb-usb: bulk message failed: -22 (5/0) [ 98.442857][ T7252] dw2102: i2c transfer failed. [ 98.442901][ T7252] dvb-usb: bulk message failed: -22 (5/0) [ 98.442913][ T7252] dw2102: i2c transfer failed. [ 98.457043][ T7252] tps6598x 2-0003: probe with driver tps6598x failed with error -5 [ 98.458117][ T7252] i2c i2c-2: new_device: Instantiated device tps6598x at 0x03 [ 98.483520][ T65] DVB: Unable to find symbol ds3000_attach() [ 98.483529][ T65] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 98.546112][ T65] rc_core: IR keymap rc-su3000 not found [ 98.546124][ T65] Registered IR keymap rc-empty [ 98.550823][ T65] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 98.561728][ T65] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input20 [ 98.576773][ T65] dvb-usb: schedule remote query interval to 150 msecs. [ 98.576787][ T65] dw2102: su3000_power_ctrl: 0, initialized 1 [ 98.576794][ T65] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 98.591931][ T65] usb 8-1: USB disconnect, device number 8 [ 98.604464][ T5756] udevd[5756]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 98.604571][ T5756] udevd[5756]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 98.662400][ T65] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 98.745861][ T1035] usb 5-1: USB disconnect, device number 10 [ 98.747360][ T1035] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 98.751168][ T1035] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 98.753011][ T1035] keyspan 5-1:1.0: device disconnected [ 99.646919][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 99.823877][ T7295] loop4: detected capacity change from 0 to 7 [ 99.829147][ T7295] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 99.829169][ T7295] loop4: partition table partially beyond EOD, truncated [ 99.829314][ T7295] loop4: p1 size 2305420955 extends beyond EOD, truncated [ 99.882074][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 99.947087][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.957730][ T7299] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 99.960535][ T705] IPVS: starting estimator thread 0... [ 99.995073][ T65] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.055481][ T7300] IPVS: using max 43 ests per chain, 103200 per kthread [ 100.104979][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 100.106417][ T43] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.107274][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.107290][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.107302][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.107322][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.109426][ T43] usb 8-1: config 0 descriptor?? [ 100.174351][ T65] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.245247][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.246436][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.246453][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.246464][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.246484][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.395494][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.396435][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.396460][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.396479][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.398307][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.398320][ T9] usb 5-1: Product: syz [ 100.398328][ T9] usb 5-1: Manufacturer: syz [ 100.398335][ T9] usb 5-1: SerialNumber: syz [ 100.400094][ T9] usb 5-1: config 0 descriptor?? [ 100.449025][ T9] usb 5-1: selecting invalid altsetting 0 [ 100.581006][ T65] usb 6-1: config 0 descriptor?? [ 100.649085][ T1035] usb 5-1: USB disconnect, device number 11 [ 101.077700][ T43] hid_parser_main: 12 callbacks suppressed [ 101.077762][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077777][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077789][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077801][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077812][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077824][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077836][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077847][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077859][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.077871][ T43] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 101.089762][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0008/input/input21 [ 101.159917][ T65] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 101.190258][ T43] microsoft 0003:045E:07DA.0008: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 101.233758][ T43] usb 8-1: USB disconnect, device number 9 [ 101.263708][ T7317] FAULT_INJECTION: forcing a failure. [ 101.263708][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 101.263730][ T7317] CPU: 2 UID: 0 PID: 7317 Comm: syz.0.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.263745][ T7317] Tainted: [L]=SOFTLOCKUP [ 101.263750][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.263757][ T7317] Call Trace: [ 101.263761][ T7317] [ 101.263767][ T7317] dump_stack_lvl+0x100/0x190 [ 101.263786][ T7317] should_fail_ex.cold+0x5/0xa [ 101.263801][ T7317] should_failslab+0xc2/0x120 [ 101.263820][ T7317] __kvmalloc_node_noprof+0x113/0x9b0 [ 101.263836][ T7317] ? lockdep_init_map_type+0x5c/0x250 [ 101.263854][ T7317] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 101.263874][ T7317] v4l2_ctrl_handler_init_class+0x201/0x350 [ 101.263890][ T7317] ? mutex_init_lockdep+0xf1/0x120 [ 101.263908][ T7317] vicodec_open+0x18b/0xf70 [ 101.263918][ T7317] ? kobject_get_unless_zero+0x156/0x200 [ 101.263935][ T7317] v4l2_open+0x1d2/0x490 [ 101.263951][ T7317] ? __pfx_v4l2_open+0x10/0x10 [ 101.263967][ T7317] chrdev_open+0x234/0x6a0 [ 101.263982][ T7317] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.263998][ T7317] ? __pfx_chrdev_open+0x10/0x10 [ 101.264015][ T7317] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 101.264030][ T7317] do_dentry_open+0x6ab/0x14d0 [ 101.264045][ T7317] ? __pfx_chrdev_open+0x10/0x10 [ 101.264063][ T7317] vfs_open+0x82/0x3f0 [ 101.264074][ T7317] path_openat+0x1a23/0x2450 [ 101.264092][ T7317] ? __pfx_path_openat+0x10/0x10 [ 101.264112][ T7317] do_file_open+0x20e/0x430 [ 101.264129][ T7317] ? __pfx_do_file_open+0x10/0x10 [ 101.264162][ T7317] ? _raw_spin_unlock+0x28/0x50 [ 101.264178][ T7317] ? alloc_fd+0x471/0x7a0 [ 101.264199][ T7317] do_sys_openat2+0x10f/0x1e0 [ 101.264211][ T7317] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.264238][ T7317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.264253][ T7317] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 101.264270][ T7317] __ia32_compat_sys_openat+0x12d/0x210 [ 101.264285][ T7317] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 101.264303][ T7317] do_int80_emulation+0x166/0x650 [ 101.264318][ T7317] asm_int80_emulation+0x1a/0x20 [ 101.264330][ T7317] RIP: 0023:0xf71177eb [ 101.264340][ T7317] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 101.264351][ T7317] RSP: 002b:00000000f53d603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.264362][ T7317] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6100 [ 101.264369][ T7317] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.264375][ T7317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.264381][ T7317] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.264387][ T7317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.264401][ T7317] [ 101.309748][ T7315] fido_id[7315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 101.470944][ T65] usb 6-1: USB disconnect, device number 4 [ 101.553090][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 102.297343][ T7332] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.198902][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 103.201935][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 103.585057][ T5824] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 103.604517][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 103.681570][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.683412][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 103.721963][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.724598][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 103.763008][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 103.769115][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.776136][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 103.777725][ T5824] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.782420][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.782435][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.782446][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.782465][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.785167][ T5824] usb 6-1: config 0 descriptor?? [ 103.839493][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.840431][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 103.873093][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.895006][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.914255][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 103.914620][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.955304][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 103.955900][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.000847][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.002584][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.043823][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.044601][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.051276][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 104.057289][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.057313][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 104.058612][ T9] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 104.058625][ T9] usb 5-1: config 8 has no interface number 0 [ 104.058638][ T9] usb 5-1: config 8 interface 188 has no altsetting 0 [ 104.062030][ T9] usb 5-1: string descriptor 0 read error: -22 [ 104.062083][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.100487][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 104.100508][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 104.100516][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 104.116297][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.117521][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 104.120326][ T9] usb 5-1: media controller created [ 104.120342][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120349][ T9] dw2102: i2c transfer failed. [ 104.120355][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120361][ T9] dw2102: i2c transfer failed. [ 104.120367][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120373][ T9] dw2102: i2c transfer failed. [ 104.120379][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120385][ T9] dw2102: i2c transfer failed. [ 104.120391][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120397][ T9] dw2102: i2c transfer failed. [ 104.120403][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 104.120409][ T9] dw2102: i2c transfer failed. [ 104.120413][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 104.175902][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.200075][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.202698][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.214501][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 104.214512][ T9] dw2102: command 0x0e transfer failed. [ 104.214516][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 104.214522][ T9] dw2102: command 0x0e transfer failed. [ 104.268381][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.306058][ T5824] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input22 [ 104.334662][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.341781][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.357654][ T7374] binder: 7373:7374 ioctl c0306201 80000b80 returned -22 [ 104.381723][ T5824] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 104.411583][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.412571][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.454776][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.457950][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.515034][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 104.515048][ T9] dw2102: command 0x0e transfer failed. [ 104.515052][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 104.515059][ T9] dw2102: command 0x0e transfer failed. [ 104.515062][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 104.515069][ T9] dw2102: command 0x51 transfer failed. [ 104.516086][ T7359] dvb-usb: bulk message failed: -22 (5/0) [ 104.516096][ T7359] dw2102: i2c transfer failed. [ 104.516112][ T7359] dvb-usb: bulk message failed: -22 (5/0) [ 104.516907][ T7359] dw2102: i2c transfer failed. [ 104.517270][ T7359] tps6598x 2-0003: probe with driver tps6598x failed with error -5 [ 104.517434][ T7359] i2c i2c-2: new_device: Instantiated device tps6598x at 0x03 [ 104.592476][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 104.592968][ T7356] nvme nvme0: rdma connection establishment failed (-512) [ 104.626826][ T9] DVB: Unable to find symbol ds3000_attach() [ 104.626835][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 104.665491][ T5824] usb 6-1: USB disconnect, device number 5 [ 104.726194][ T9] rc_core: IR keymap rc-su3000 not found [ 104.726206][ T9] Registered IR keymap rc-empty [ 104.729430][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 104.742391][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input23 [ 104.764642][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.618'. [ 104.824399][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 105.444001][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 105.475261][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 105.475274][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.475280][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 105.771985][ T9] usb 5-1: USB disconnect, device number 12 [ 106.107747][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 106.135278][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 106.695618][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 106.845795][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.846974][ T9] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.846998][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.847016][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.849415][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.849433][ T9] usb 6-1: Product: syz [ 106.849444][ T9] usb 6-1: Manufacturer: syz [ 106.849456][ T9] usb 6-1: SerialNumber: syz [ 106.851554][ T9] usb 6-1: config 0 descriptor?? [ 106.875103][ T9] usb 6-1: selecting invalid altsetting 0 [ 107.062330][ T5824] usb 6-1: USB disconnect, device number 6 [ 107.618222][ T5586] nvme nvme0: rdma_resolve_route failed (-110). [ 107.619069][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.649093][ T5586] nvme nvme0: rdma_resolve_route failed (-110). [ 107.651408][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.712313][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.714524][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 107.758591][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 107.759317][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.804539][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.837992][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.936457][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 107.957223][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 108.060817][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 108.064155][ T5810] nvme nvme0: rdma_resolve_route failed (-110). [ 108.736221][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 108.890210][ T7410] nvme nvme0: rdma connection establishment failed (-512) [ 109.445152][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 110.043935][ T7455] FAULT_INJECTION: forcing a failure. [ 110.043935][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 110.043959][ T7455] CPU: 0 UID: 0 PID: 7455 Comm: syz.1.650 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.043974][ T7455] Tainted: [L]=SOFTLOCKUP [ 110.043979][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.043986][ T7455] Call Trace: [ 110.043990][ T7455] [ 110.043995][ T7455] dump_stack_lvl+0x100/0x190 [ 110.044027][ T7455] should_fail_ex.cold+0x5/0xa [ 110.044046][ T7455] should_failslab+0xc2/0x120 [ 110.044063][ T7455] __kvmalloc_node_noprof+0x113/0x9b0 [ 110.044085][ T7455] ? lockdep_init_map_type+0x5c/0x250 [ 110.044104][ T7455] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 110.044125][ T7455] v4l2_ctrl_handler_init_class+0x201/0x350 [ 110.044142][ T7455] ? mutex_init_lockdep+0xf1/0x120 [ 110.044159][ T7455] vicodec_open+0x18b/0xf70 [ 110.044170][ T7455] ? kobject_get_unless_zero+0x156/0x200 [ 110.044188][ T7455] v4l2_open+0x1d2/0x490 [ 110.044204][ T7455] ? __pfx_v4l2_open+0x10/0x10 [ 110.044220][ T7455] chrdev_open+0x234/0x6a0 [ 110.044235][ T7455] ? __pfx_apparmor_file_open+0x10/0x10 [ 110.044250][ T7455] ? __pfx_chrdev_open+0x10/0x10 [ 110.044269][ T7455] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 110.044284][ T7455] do_dentry_open+0x6ab/0x14d0 [ 110.044299][ T7455] ? __pfx_chrdev_open+0x10/0x10 [ 110.044317][ T7455] vfs_open+0x82/0x3f0 [ 110.044329][ T7455] path_openat+0x1a23/0x2450 [ 110.044347][ T7455] ? __pfx_path_openat+0x10/0x10 [ 110.044366][ T7455] do_file_open+0x20e/0x430 [ 110.044382][ T7455] ? __pfx_do_file_open+0x10/0x10 [ 110.044408][ T7455] ? _raw_spin_unlock+0x28/0x50 [ 110.044423][ T7455] ? alloc_fd+0x471/0x7a0 [ 110.044442][ T7455] do_sys_openat2+0x10f/0x1e0 [ 110.044453][ T7455] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.044463][ T7455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.044477][ T7455] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 110.044493][ T7455] __ia32_compat_sys_openat+0x12d/0x210 [ 110.044506][ T7455] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 110.044524][ T7455] do_int80_emulation+0x166/0x650 [ 110.044538][ T7455] asm_int80_emulation+0x1a/0x20 [ 110.044549][ T7455] RIP: 0023:0xf71e77eb [ 110.044558][ T7455] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 110.044569][ T7455] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 110.044580][ T7455] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 110.044587][ T7455] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.044593][ T7455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.044599][ T7455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.044606][ T7455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.044620][ T7455] [ 110.083898][ T44] audit: type=1400 audit(1792199164.577:34): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=7458 comm="syz.2.644" [ 110.275364][ T5853] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.704218][ T5853] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.119647][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.119674][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.119693][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.119725][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.344994][ T5095] Bluetooth: hci4: command 0xfc11 tx timeout [ 111.345057][ T5751] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 111.411850][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 111.450890][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 111.686109][ T5853] usb 8-1: config 0 descriptor?? [ 112.000626][ T7487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.654'. [ 112.324046][ T44] audit: type=1400 audit(1792199166.817:35): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=7491 comm="syz.0.655" [ 112.939486][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 112.940555][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 113.004214][ T5853] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.008250][ T5853] usb 8-1: USB disconnect, device number 10 [ 113.092689][ T7507] fido_id[7507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 113.101359][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 113.103573][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 113.167284][ T7511] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 113.198833][ T7511] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 113.235810][ T7519] FAULT_INJECTION: forcing a failure. [ 113.235810][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 113.235834][ T7519] CPU: 2 UID: 0 PID: 7519 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.235849][ T7519] Tainted: [L]=SOFTLOCKUP [ 113.235853][ T7519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.235860][ T7519] Call Trace: [ 113.235864][ T7519] [ 113.235869][ T7519] dump_stack_lvl+0x100/0x190 [ 113.235888][ T7519] should_fail_ex.cold+0x5/0xa [ 113.235903][ T7519] should_failslab+0xc2/0x120 [ 113.235922][ T7519] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.235936][ T7519] ? snd_card_file_add+0x52/0x320 [ 113.235954][ T7519] snd_card_file_add+0x52/0x320 [ 113.235988][ T7519] snd_pcm_oss_open+0x1a8/0x1380 [ 113.236006][ T7519] ? kasan_quarantine_put+0x104/0x240 [ 113.236023][ T7519] ? find_held_lock+0x2b/0x80 [ 113.236036][ T7519] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 113.236053][ T7519] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 113.236069][ T7519] ? __lock_acquire+0x5c0/0x1f40 [ 113.236088][ T7519] ? __lock_acquire+0x5c0/0x1f40 [ 113.236107][ T7519] ? do_raw_spin_lock+0x128/0x260 [ 113.236119][ T7519] ? soundcore_open+0x231/0x5a0 [ 113.236134][ T7519] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 113.236150][ T7519] soundcore_open+0x2e3/0x5a0 [ 113.236164][ T7519] ? __pfx_soundcore_open+0x10/0x10 [ 113.236177][ T7519] chrdev_open+0x234/0x6a0 [ 113.236197][ T7519] ? __pfx_apparmor_file_open+0x10/0x10 [ 113.236213][ T7519] ? __pfx_chrdev_open+0x10/0x10 [ 113.236230][ T7519] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 113.236245][ T7519] do_dentry_open+0x6ab/0x14d0 [ 113.236260][ T7519] ? __pfx_chrdev_open+0x10/0x10 [ 113.236278][ T7519] vfs_open+0x82/0x3f0 [ 113.236292][ T7519] path_openat+0x1a23/0x2450 [ 113.236310][ T7519] ? __pfx_path_openat+0x10/0x10 [ 113.236329][ T7519] do_file_open+0x20e/0x430 [ 113.236346][ T7519] ? __pfx_do_file_open+0x10/0x10 [ 113.236371][ T7519] ? _raw_spin_unlock+0x28/0x50 [ 113.236387][ T7519] ? alloc_fd+0x471/0x7a0 [ 113.236406][ T7519] do_sys_openat2+0x10f/0x1e0 [ 113.236417][ T7519] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.236428][ T7519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.236443][ T7519] __ia32_compat_sys_openat+0x12d/0x210 [ 113.236456][ T7519] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 113.236473][ T7519] __do_fast_syscall_32+0x13a/0x8b0 [ 113.236487][ T7519] do_fast_syscall_32+0x32/0x70 [ 113.236498][ T7519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.236514][ T7519] RIP: 0023:0xf7f26fec [ 113.236526][ T7519] Code: Unable to access opcode bytes at 0xf7f26fc2. [ 113.236531][ T7519] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 113.236543][ T7519] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000940 [ 113.236550][ T7519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.236556][ T7519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.236562][ T7519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.236569][ T7519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.236583][ T7519] [ 113.288182][ T7523] netlink: 'syz.0.671': attribute type 14 has an invalid length. [ 113.288201][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 113.315860][ T5810] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.315896][ T5810] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.315921][ T5810] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.315946][ T5810] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.323985][ T7523] netlink: 'syz.0.671': attribute type 14 has an invalid length. [ 113.343216][ T7521] size and base must be multiples of 4 kiB [ 113.343235][ T7521] CPU: 3 UID: 0 PID: 7521 Comm: syz.3.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.343262][ T7521] Tainted: [L]=SOFTLOCKUP [ 113.343269][ T7521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.343280][ T7521] Call Trace: [ 113.343287][ T7521] [ 113.343294][ T7521] dump_stack_lvl+0x100/0x190 [ 113.343326][ T7521] mtrr_add.cold+0x74/0x87 [ 113.343347][ T7521] mtrr_ioctl+0x25a/0xcf0 [ 113.343377][ T7521] ? __pfx_mtrr_ioctl+0x10/0x10 [ 113.343409][ T7521] ? __fget_files+0x34/0x3d0 [ 113.343435][ T7521] ? find_held_lock+0x2b/0x80 [ 113.343465][ T7521] ? __fget_files+0x21f/0x3d0 [ 113.343491][ T7521] ? __pfx_mtrr_ioctl+0x10/0x10 [ 113.343519][ T7521] proc_reg_compat_ioctl+0x229/0x320 [ 113.343538][ T7521] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 113.343557][ T7521] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 113.343583][ T7521] __do_fast_syscall_32+0x13a/0x8b0 [ 113.343608][ T7521] do_fast_syscall_32+0x32/0x70 [ 113.343626][ T7521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.343654][ T7521] RIP: 0023:0xf73aefec [ 113.343690][ T7521] Code: Unable to access opcode bytes at 0xf73aefc2. [ 113.343710][ T7521] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 113.343754][ T7521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c4d01 [ 113.343765][ T7521] RDX: 0000000080000a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.343775][ T7521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.343786][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.343796][ T7521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.343820][ T7521] [ 113.607978][ T7543] team_slave_0: entered allmulticast mode [ 113.618245][ T7543] team_slave_0: entered promiscuous mode [ 114.003664][ T7551] __nla_validate_parse: 2 callbacks suppressed [ 114.003711][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 115.262790][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 115.328541][ T7568] loop4: detected capacity change from 0 to 524287998 [ 115.477448][ T7579] syz_tun: entered allmulticast mode [ 115.705138][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 116.300257][ T7591] team_slave_0: entered allmulticast mode [ 116.309951][ T7591] team_slave_0: entered promiscuous mode [ 116.778201][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 116.779152][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 116.959564][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 116.961827][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 116.991852][ T7607] smpboot: CPU 1 is now offline [ 117.036711][ T7607] smpboot: CPU 3 is now offline [ 117.064214][ T7608] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 117.082306][ T7608] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 117.105080][ T7601] ------------[ cut here ]------------ [ 117.105088][ T7601] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 117.105093][ T7601] WARNING: kernel/sched/sched.h:1665 at update_rq_clock+0x40a/0xd20, CPU#2: syz.1.698/7601 [ 117.113084][ T7601] Modules linked in: [ 117.114854][ T7601] CPU: 2 UID: 0 PID: 7601 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.118530][ T7601] Tainted: [L]=SOFTLOCKUP [ 117.119928][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.123285][ T7601] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 117.125118][ T7601] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 117.131394][ T7601] RSP: 0018:ffffc9000604eed0 EFLAGS: 00010046 [ 117.133938][ T7601] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 117.137052][ T7601] RDX: 0000000000000046 RSI: ffffffff8e3baf7c RDI: ffffffff8c625c80 [ 117.139677][ T7601] RBP: ffffc9000604f070 R08: 0000000000000001 R09: 0000000000000001 [ 117.142415][ T7601] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9245c9e4 [ 117.144978][ T7601] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000003 [ 117.147588][ T7601] FS: 0000000000000000(0000) GS:ffff88809594a000(0000) knlGS:0000000000000000 [ 117.150500][ T7601] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 117.152979][ T7601] CR2: 00000000f73adcec CR3: 000000004d68d000 CR4: 0000000000352ef0 [ 117.156172][ T7601] Call Trace: [ 117.157320][ T7601] [ 117.158331][ T7601] __schedule+0x1c69/0x6920 [ 117.159875][ T7601] ? __pfx___schedule+0x10/0x10 [ 117.161549][ T7601] ? preempt_schedule_thunk+0x16/0x40 [ 117.163790][ T7601] preempt_schedule_common+0x3c/0xb0 [ 117.165658][ T7601] preempt_schedule_thunk+0x16/0x40 [ 117.167385][ T7601] _raw_spin_unlock_irqrestore+0x61/0x80 [ 117.169201][ T7601] folios_put_refs+0x4f2/0xaa0 [ 117.170828][ T7601] ? __pfx_folios_put_refs+0x10/0x10 [ 117.172878][ T7601] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 117.175351][ T7601] ? smp_call_function_many_cond+0x944/0x18c0 [ 117.177589][ T7601] free_pages_and_swap_cache+0x30b/0x3b0 [ 117.179442][ T7601] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 117.181484][ T7601] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 117.183724][ T7601] ? kvm_flush_tlb_multi+0x262/0x3b0 [ 117.185493][ T7601] ? lruvec_stat_mod_folio+0x22d/0x2e0 [ 117.187263][ T7601] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 117.189088][ T7601] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 117.191074][ T7601] tlb_flush_mmu+0xe9/0x590 [ 117.192915][ T7601] __zap_vma_range+0x2166/0x48e0 [ 117.195024][ T7601] ? __pfx___zap_vma_range+0x10/0x10 [ 117.196927][ T7601] ? mas_next_slot+0xc05/0x13a0 [ 117.198600][ T7601] unmap_vmas+0x299/0x5f0 [ 117.200020][ T7601] ? __pfx_unmap_vmas+0x10/0x10 [ 117.201758][ T7601] ? mas_next_slot+0xc05/0x13a0 [ 117.203474][ T7601] exit_mmap+0x1ef/0xa00 [ 117.204871][ T7601] ? __pfx_exit_mmap+0x10/0x10 [ 117.206502][ T7601] ? rcu_is_watching+0x13/0xc0 [ 117.208057][ T7601] ? find_held_lock+0x2b/0x80 [ 117.209645][ T7601] ? uprobe_clear_state+0x5f/0x250 [ 117.211317][ T7601] ? __mutex_unlock_slowpath+0x35d/0x930 [ 117.213688][ T7601] __mmput+0x12a/0x410 [ 117.215412][ T7601] mmput+0x67/0x80 [ 117.217021][ T7601] do_exit+0x83b/0x2a60 [ 117.218595][ T7601] ? lock_acquire+0x1d1/0x380 [ 117.220125][ T7601] ? cgroup1_freezing+0x27/0x3b0 [ 117.221923][ T7601] ? find_held_lock+0x2b/0x80 [ 117.223550][ T7601] ? __pfx_do_exit+0x10/0x10 [ 117.225059][ T7601] ? find_held_lock+0x2b/0x80 [ 117.226655][ T7601] ? get_signal+0x7e0/0x21e0 [ 117.228150][ T7601] do_group_exit+0xd5/0x2a0 [ 117.229694][ T7601] get_signal+0x1ec7/0x21e0 [ 117.231178][ T7601] ? find_held_lock+0x2b/0x80 [ 117.233114][ T7601] ? __pfx_get_signal+0x10/0x10 [ 117.235163][ T7601] ? do_futex+0x190/0x440 [ 117.236773][ T7601] arch_do_signal_or_restart+0x91/0x7a0 [ 117.238632][ T7601] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 117.240689][ T7601] exit_to_user_mode_loop+0x139/0x700 [ 117.242702][ T7601] ? rcu_is_watching+0x13/0xc0 [ 117.244304][ T7601] __do_fast_syscall_32+0x59f/0x8b0 [ 117.246037][ T7601] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.247771][ T7601] do_fast_syscall_32+0x32/0x70 [ 117.249369][ T7601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.251467][ T7601] RIP: 0023:0xf748efec [ 117.253175][ T7601] Code: Unable to access opcode bytes at 0xf748efc2. [ 117.255923][ T7601] RSP: 002b:00000000f50415bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 117.258696][ T7601] RAX: fffffffffffffe00 RBX: 00000000f74b5150 RCX: 0000000000000080 [ 117.261259][ T7601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b5154 [ 117.264138][ T7601] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 117.266756][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.269327][ T7601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.272099][ T7601] [ 117.273414][ T7601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.276427][ T7601] CPU: 2 UID: 0 PID: 7601 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.280306][ T7601] Tainted: [L]=SOFTLOCKUP [ 117.281857][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.285162][ T7601] Call Trace: [ 117.286283][ T7601] [ 117.287283][ T7601] dump_stack_lvl+0x100/0x190 [ 117.288862][ T7601] vpanic+0x553/0x970 [ 117.290191][ T7601] ? __pfx_vpanic+0x10/0x10 [ 117.291806][ T7601] panic+0xd1/0xe0 [ 117.293400][ T7601] ? __pfx_panic+0x10/0x10 [ 117.295293][ T7601] check_panic_on_warn.cold+0x19/0x34 [ 117.297542][ T7601] ? update_rq_clock+0x40a/0xd20 [ 117.299164][ T7601] __warn.cold+0x191/0x318 [ 117.300680][ T7601] __report_bug+0x30f/0x440 [ 117.302375][ T7601] ? update_rq_clock+0x40a/0xd20 [ 117.304007][ T7601] ? __pfx___report_bug+0x10/0x10 [ 117.305691][ T7601] ? stack_trace_save+0x8e/0xc0 [ 117.307292][ T7601] ? __lock_acquire+0x5c0/0x1f40 [ 117.308935][ T7601] ? __lock_acquire+0x5c0/0x1f40 [ 117.310592][ T7601] ? update_rq_clock+0x40a/0xd20 [ 117.312441][ T7601] report_bug+0xb3/0x220 [ 117.314225][ T7601] ? update_rq_clock+0x40a/0xd20 [ 117.316106][ T7601] handle_bug+0x16a/0x2a0 [ 117.317581][ T7601] exc_invalid_op+0x17/0x50 [ 117.319072][ T7601] asm_exc_invalid_op+0x1a/0x20 [ 117.320700][ T7601] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 117.322831][ T7601] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 117.329426][ T7601] RSP: 0018:ffffc9000604eed0 EFLAGS: 00010046 [ 117.331446][ T7601] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 117.334716][ T7601] RDX: 0000000000000046 RSI: ffffffff8e3baf7c RDI: ffffffff8c625c80 [ 117.337688][ T7601] RBP: ffffc9000604f070 R08: 0000000000000001 R09: 0000000000000001 [ 117.340254][ T7601] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9245c9e4 [ 117.343009][ T7601] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000003 [ 117.345625][ T7601] __schedule+0x1c69/0x6920 [ 117.347118][ T7601] ? __pfx___schedule+0x10/0x10 [ 117.348758][ T7601] ? preempt_schedule_thunk+0x16/0x40 [ 117.350543][ T7601] preempt_schedule_common+0x3c/0xb0 [ 117.352527][ T7601] preempt_schedule_thunk+0x16/0x40 [ 117.354709][ T7601] _raw_spin_unlock_irqrestore+0x61/0x80 [ 117.357057][ T7601] folios_put_refs+0x4f2/0xaa0 [ 117.358678][ T7601] ? __pfx_folios_put_refs+0x10/0x10 [ 117.360419][ T7601] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 117.362523][ T7601] ? smp_call_function_many_cond+0x944/0x18c0 [ 117.364609][ T7601] free_pages_and_swap_cache+0x30b/0x3b0 [ 117.366477][ T7601] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 117.368496][ T7601] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 117.370597][ T7601] ? kvm_flush_tlb_multi+0x262/0x3b0 [ 117.372605][ T7601] ? lruvec_stat_mod_folio+0x22d/0x2e0 [ 117.374899][ T7601] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 117.377221][ T7601] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 117.379733][ T7601] tlb_flush_mmu+0xe9/0x590 [ 117.381648][ T7601] __zap_vma_range+0x2166/0x48e0 [ 117.383744][ T7601] ? __pfx___zap_vma_range+0x10/0x10 [ 117.385965][ T7601] ? mas_next_slot+0xc05/0x13a0 [ 117.388021][ T7601] unmap_vmas+0x299/0x5f0 [ 117.389856][ T7601] ? __pfx_unmap_vmas+0x10/0x10 [ 117.391911][ T7601] ? mas_next_slot+0xc05/0x13a0 [ 117.393979][ T7601] exit_mmap+0x1ef/0xa00 [ 117.395774][ T7601] ? __pfx_exit_mmap+0x10/0x10 [ 117.397811][ T7601] ? rcu_is_watching+0x13/0xc0 [ 117.399829][ T7601] ? find_held_lock+0x2b/0x80 [ 117.401824][ T7601] ? uprobe_clear_state+0x5f/0x250 [ 117.403978][ T7601] ? __mutex_unlock_slowpath+0x35d/0x930 [ 117.406221][ T7601] __mmput+0x12a/0x410 [ 117.407873][ T7601] mmput+0x67/0x80 [ 117.409491][ T7601] do_exit+0x83b/0x2a60 [ 117.411244][ T7601] ? lock_acquire+0x1d1/0x380 [ 117.413228][ T7601] ? cgroup1_freezing+0x27/0x3b0 [ 117.415321][ T7601] ? find_held_lock+0x2b/0x80 [ 117.417312][ T7601] ? __pfx_do_exit+0x10/0x10 [ 117.419263][ T7601] ? find_held_lock+0x2b/0x80 [ 117.421237][ T7601] ? get_signal+0x7e0/0x21e0 [ 117.423178][ T7601] do_group_exit+0xd5/0x2a0 [ 117.425088][ T7601] get_signal+0x1ec7/0x21e0 [ 117.427015][ T7601] ? find_held_lock+0x2b/0x80 [ 117.428995][ T7601] ? __pfx_get_signal+0x10/0x10 [ 117.431046][ T7601] ? do_futex+0x190/0x440 [ 117.432866][ T7601] arch_do_signal_or_restart+0x91/0x7a0 [ 117.435195][ T7601] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 117.437805][ T7601] exit_to_user_mode_loop+0x139/0x700 [ 117.440044][ T7601] ? rcu_is_watching+0x13/0xc0 [ 117.442064][ T7601] __do_fast_syscall_32+0x59f/0x8b0 [ 117.444240][ T7601] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.446414][ T7601] do_fast_syscall_32+0x32/0x70 [ 117.448474][ T7601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.451107][ T7601] RIP: 0023:0xf748efec [ 117.452752][ T7601] Code: Unable to access opcode bytes at 0xf748efc2. [ 117.455513][ T7601] RSP: 002b:00000000f50415bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 117.458416][ T7601] RAX: fffffffffffffe00 RBX: 00000000f74b5150 RCX: 0000000000000080 [ 117.460985][ T7601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b5154 [ 117.464155][ T7601] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 117.466891][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.469490][ T7601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.472239][ T7601] [ 118.552902][ T7601] Shutting down cpus with NMI [ 118.555056][ T7601] Kernel Offset: disabled [ 118.556424][ T7601] Rebooting in 86400 seconds..