last executing test programs: 2m54.993447791s ago: executing program 32 (id=291): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pivot_root(0x0, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x1, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff}, 0x0) 2m43.875700261s ago: executing program 33 (id=448): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m24.349936401s ago: executing program 2 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, &(0x7f0000000000)='7', 0x1) syslog(0xb, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2m24.17354939s ago: executing program 2 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) 2m24.049287117s ago: executing program 2 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x2) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/256, 0x100) 2m24.009651442s ago: executing program 2 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, 0x0, 0x0, 0x400040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m23.931152186s ago: executing program 2 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.524952361s ago: executing program 2 (id=722): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000300)=0x4000f216) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x0, [0x6, 0x1, 0xb9, 0x1, 0x2, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x100, 0x4, 0x1, 0x3, 0x9, 0x100000ff, 0x1000, 0xc, 0x3, 0x3, 0x80000003, 0xfffffffa, 0x0, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bda, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x20000002, 0x1, 0x9, 0x4, 0x7, 0x1, 0xfffffffd, 0x4, 0x100002, 0x3ff, 0x752, 0x0, 0xb, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0xff, 0x5, 0x252, 0x81, 0x2000000b, 0x4, 0x20004, 0xc49, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x84, 0x9042, 0x4, 0x8, 0x40, 0x8, 0x20004, 0x1, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m23.42952372s ago: executing program 34 (id=722): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000300)=0x4000f216) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x0, [0x6, 0x1, 0xb9, 0x1, 0x2, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x100, 0x4, 0x1, 0x3, 0x9, 0x100000ff, 0x1000, 0xc, 0x3, 0x3, 0x80000003, 0xfffffffa, 0x0, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bda, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x3, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x20000002, 0x1, 0x9, 0x4, 0x7, 0x1, 0xfffffffd, 0x4, 0x100002, 0x3ff, 0x752, 0x0, 0xb, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0xff, 0x5, 0x252, 0x81, 0x2000000b, 0x4, 0x20004, 0xc49, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x84, 0x9042, 0x4, 0x8, 0x40, 0x8, 0x20004, 0x1, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m13.218268874s ago: executing program 4 (id=854): bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 2m12.517319668s ago: executing program 4 (id=866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0xd, 0x1, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.350816787s ago: executing program 4 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 2m12.20141728s ago: executing program 4 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000d40)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 2m12.143762133s ago: executing program 4 (id=879): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f400"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 2m11.82765148s ago: executing program 4 (id=883): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="d4349ce4f5aaa0db7c9be537fab268cdfe3244b8a0690061b8b06125a330a19b251d47ba0e34676d4c47169a7392622af90f8890bb9e60faabaa33232e1675fc010482d3d6a95de91835d9b267806e9d2f60ab6c267c", 0x56}, {&(0x7f0000000300)="dbee1384f418e1d1d4ba3eeb3ba81861f82475b29a76bb825221a9c7381f9c8fbafac636a03ecb03404ca8f36406a8364bad4e2d0e561645f051ef37edb1379c853631e1ac08881697663737abc55ace47f8a0f52518e5bc5717d6a303eeed359f3d6184def67c85d379608caa617ac2d5290e3ec2ff672d2b9c48b6c7ab4219183e4f3480668e02bb1ba9f2daaa691cc4c16c8e7f02f693c6aabbb208f8245af375c1c7f821fcaee5feab141a7503", 0xaf}, {&(0x7f00000003c0)="da4c87c409592d4884a305e66c629b1eca79be9ae63dc4a26658358795f9483c6ecd5407c77cea8ece9e34fb1cc7fee76dfe7ed3f9ac4d114a8515bba3831c9a216381aa4196c375833f1960", 0x4c}, {&(0x7f0000000440)="5c7b3eaf143a5ca67b537e31f5806058b3ce242ac9c63cd9321f750c51dd85a52796bfdfab346105dcec056fa6127b3d4851bcb31acb7080aa50ac734d734eba", 0x40}, {&(0x7f0000000540)="90b120c1a9789753bfd35c1c5c32009ccb64b40bbc4c93829c9340d3b9b36b2cf5dec3915c5fcc139376f6a4d2853c9a7d424c0c9ff64cac326fdc33862cf41933b3e7319c99", 0x46}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x21e0}}], 0x2, 0x44840) 2m11.75504218s ago: executing program 35 (id=883): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="d4349ce4f5aaa0db7c9be537fab268cdfe3244b8a0690061b8b06125a330a19b251d47ba0e34676d4c47169a7392622af90f8890bb9e60faabaa33232e1675fc010482d3d6a95de91835d9b267806e9d2f60ab6c267c", 0x56}, {&(0x7f0000000300)="dbee1384f418e1d1d4ba3eeb3ba81861f82475b29a76bb825221a9c7381f9c8fbafac636a03ecb03404ca8f36406a8364bad4e2d0e561645f051ef37edb1379c853631e1ac08881697663737abc55ace47f8a0f52518e5bc5717d6a303eeed359f3d6184def67c85d379608caa617ac2d5290e3ec2ff672d2b9c48b6c7ab4219183e4f3480668e02bb1ba9f2daaa691cc4c16c8e7f02f693c6aabbb208f8245af375c1c7f821fcaee5feab141a7503", 0xaf}, {&(0x7f00000003c0)="da4c87c409592d4884a305e66c629b1eca79be9ae63dc4a26658358795f9483c6ecd5407c77cea8ece9e34fb1cc7fee76dfe7ed3f9ac4d114a8515bba3831c9a216381aa4196c375833f1960", 0x4c}, {&(0x7f0000000440)="5c7b3eaf143a5ca67b537e31f5806058b3ce242ac9c63cd9321f750c51dd85a52796bfdfab346105dcec056fa6127b3d4851bcb31acb7080aa50ac734d734eba", 0x40}, {&(0x7f0000000540)="90b120c1a9789753bfd35c1c5c32009ccb64b40bbc4c93829c9340d3b9b36b2cf5dec3915c5fcc139376f6a4d2853c9a7d424c0c9ff64cac326fdc33862cf41933b3e7319c99", 0x46}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x21e0}}], 0x2, 0x44840) 1m43.826348016s ago: executing program 5 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 1m43.776961584s ago: executing program 5 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010102, 0x4e1f, 0x3, 'rr\x00', 0x3e, 0x83, 0x5d}, {@rand_addr=0x64090102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) 1m43.714261955s ago: executing program 5 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m43.689632177s ago: executing program 5 (id=1300): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m43.604432686s ago: executing program 5 (id=1302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1a1280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m43.40732074s ago: executing program 5 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m27.971636683s ago: executing program 36 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m22.107170762s ago: executing program 6 (id=1429): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x541b, 0x0) ioctl(r1, 0x5451, 0x0) 1m22.025676s ago: executing program 6 (id=1430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) 1m21.137546926s ago: executing program 6 (id=1438): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffff0}}, {{0xa, 0x0, 0x6, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) 1m21.089197341s ago: executing program 6 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x38}}, 0xc840) 1m20.972292796s ago: executing program 6 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m20.75174879s ago: executing program 6 (id=1449): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') 1m4.949013187s ago: executing program 37 (id=1449): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') 1m4.463114406s ago: executing program 8 (id=1492): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m3.55728771s ago: executing program 8 (id=1495): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m2.009468696s ago: executing program 8 (id=1509): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2686dd4c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) 1m1.60222467s ago: executing program 8 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m1.557342293s ago: executing program 8 (id=1514): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c) listen(r0, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r1, 0x7) 1m1.145448998s ago: executing program 8 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1m1.068449907s ago: executing program 38 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 21.756166925s ago: executing program 0 (id=1812): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[], 0x0) 21.686988892s ago: executing program 0 (id=1813): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006ec0)={0x3e8, 0x0, 0x0, [{{0x2, 0x3, 0x34f8, 0x4, 0x401, 0x10001, {0x5, 0x3, 0xfffffffffffffff9, 0x8000000000000001, 0x2fd7, 0x2, 0x7, 0x7, 0x4, 0xa000, 0x6, 0x0, 0x0, 0x9, 0x7}}, {0x1, 0xff, 0x1, 0x9, '\x00'}}, {{0x3, 0x2, 0x16, 0x4, 0x5c4, 0x1000, {0x2, 0x9, 0x0, 0x3ff, 0xa, 0xfffffffffffffffb, 0x9, 0x4, 0x800, 0x6000, 0x8, 0x0, 0x0, 0x7d, 0x98e}}, {0x5, 0x10000, 0x4, 0x7, 'GPL\x00'}}, {{0x0, 0x3, 0x100000000, 0x9, 0x3, 0x0, {0x2, 0x97, 0x8, 0x2, 0x9, 0x49, 0x80000001, 0x7f, 0x7, 0x6000, 0xa865692, 0x0, 0x0, 0x8, 0x7}}, {0x2, 0x3, 0x3, 0x6, '-\')'}}, {{0x4, 0x2, 0x9, 0x4542187a, 0xffff, 0x0, {0x6, 0x8, 0x4, 0xf82, 0x7, 0x7, 0x7, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, 0x1ff}}, {0x4, 0x80000000, 0xf, 0x9, '/dev/snd/timer\x00'}}, {{0x6, 0x2, 0xb2, 0x3, 0x400, 0x9, {0x0, 0x2, 0x8001, 0x4, 0x7fffffff, 0x7, 0x401, 0x7ff, 0x7, 0x4000, 0xffffffff, 0x0, 0x0, 0x7ec, 0x1}}, {0x4, 0x8, 0xf, 0xd, '/dev/snd/timer\x00'}}, {{0x1, 0x0, 0x101, 0xfffffffffffffffe, 0x5, 0xfffffffb, {0x1, 0x4, 0xf, 0xe, 0x8000000000000001, 0xf, 0x2, 0x9a8, 0x915, 0xa000, 0x7, 0x0, 0x0, 0x581}}, {0x2, 0xb57d, 0xf, 0x3, '/dev/snd/timer\x00'}}]}, 0x3e8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 21.654317933s ago: executing program 0 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) 21.428749481s ago: executing program 0 (id=1815): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 21.416017189s ago: executing program 0 (id=1816): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) write$9p(r0, &(0x7f0000000340)="50ccbde162d4", 0x6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 21.05446669s ago: executing program 0 (id=1826): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) 20.979306478s ago: executing program 39 (id=1826): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) 2.694940703s ago: executing program 9 (id=2061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf2220000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.000611716s ago: executing program 9 (id=2067): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 1.424578985s ago: executing program 9 (id=2079): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.112472025s ago: executing program 3 (id=2085): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 1.057938683s ago: executing program 1 (id=2087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 548.420391ms ago: executing program 9 (id=2088): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x200080, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 548.339793ms ago: executing program 3 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="080008000600050000001400000045320fc0086512"], 0xfce) 545.968656ms ago: executing program 1 (id=2090): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x1) 422.680428ms ago: executing program 3 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180200000900000000000000010000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000009b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 421.437467ms ago: executing program 7 (id=2101): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043c71576111d5fc975aa7280ecc07ffffffffffff07"], 0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r0, &(0x7f0000000080)='ns\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_procfs(r0, &(0x7f0000000000)='io\x00') lseek(r1, 0x6, 0x0) 420.254642ms ago: executing program 1 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 360.38858ms ago: executing program 7 (id=2094): openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200c1, 0x60) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138}) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 351.064573ms ago: executing program 3 (id=2095): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 303.153218ms ago: executing program 7 (id=2096): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write$char_usb(r1, &(0x7f0000001480)="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", 0xb9d) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 299.822457ms ago: executing program 7 (id=2098): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 260.667715ms ago: executing program 1 (id=2099): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 213.43601ms ago: executing program 1 (id=2100): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff05"], 0x9e) 165.943055ms ago: executing program 3 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x2400c800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) setuid(0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 82.573966ms ago: executing program 7 (id=2103): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r2, 0x1f4}, 0x8) 70.675782ms ago: executing program 7 (id=2104): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="f3980f2207bad104b000ee660f38826a060f10eb0f07d9d8bad00466b8463d000066ef66b9800000c00f326635000400000f300f005600", 0x37}], 0x1, 0x71, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 60.445875ms ago: executing program 9 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000440), &(0x7f0000000740)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.023215ms ago: executing program 1 (id=2106): io_setup(0x6, &(0x7f00000003c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) 1.224556ms ago: executing program 3 (id=2107): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 0s ago: executing program 9 (id=2108): setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): 000000000025 [ 200.904656][T10849] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.904663][T10849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.904670][T10849] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.904676][T10849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.904691][T10849] [ 201.509047][T10897] FAULT_INJECTION: forcing a failure. [ 201.509047][T10897] name failslab, interval 1, probability 0, space 0, times 0 [ 201.509121][T10897] CPU: 2 UID: 0 PID: 10897 Comm: syz.7.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.509176][T10897] Tainted: [L]=SOFTLOCKUP [ 201.509185][T10897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.509198][T10897] Call Trace: [ 201.509205][T10897] [ 201.509214][T10897] dump_stack_lvl+0x100/0x190 [ 201.509243][T10897] should_fail_ex.cold+0x5/0xa [ 201.509268][T10897] should_failslab+0xc2/0x120 [ 201.509294][T10897] __kmalloc_noprof+0xfc/0x840 [ 201.509314][T10897] ? lsm_blob_alloc+0x68/0x90 [ 201.509338][T10897] lsm_blob_alloc+0x68/0x90 [ 201.509358][T10897] security_sk_alloc+0x2d/0x290 [ 201.509383][T10897] sk_prot_alloc+0x1d1/0x2a0 [ 201.509412][T10897] sk_alloc+0x36/0xe80 [ 201.509436][T10897] unix_create1+0xa6/0x700 [ 201.509460][T10897] unix_create+0x10f/0x1b0 [ 201.509480][T10897] __sock_create+0x339/0x860 [ 201.509515][T10897] p9_fd_create_unix+0x20a/0x350 [ 201.509542][T10897] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 201.509580][T10897] ? lockdep_init_map_type+0x5c/0x250 [ 201.509615][T10897] p9_client_create+0x563/0xd40 [ 201.509636][T10897] ? __pfx_p9_client_create+0x10/0x10 [ 201.509661][T10897] ? lockdep_init_map_type+0x5c/0x250 [ 201.509690][T10897] ? __raw_spin_lock_init+0x3a/0x110 [ 201.509725][T10897] v9fs_session_init+0x3c/0xdd0 [ 201.509746][T10897] ? v9fs_get_tree+0x9c/0xb50 [ 201.509775][T10897] v9fs_get_tree+0xb8/0xb50 [ 201.509798][T10897] ? rcu_is_watching+0x13/0xc0 [ 201.509825][T10897] ? __pfx_v9fs_get_tree+0x10/0x10 [ 201.509853][T10897] ? bpf_lsm_capable+0x9/0x10 [ 201.509878][T10897] ? security_capable+0x80/0x260 [ 201.509901][T10897] vfs_get_tree+0x92/0x320 [ 201.509929][T10897] path_mount+0x7d0/0x24c0 [ 201.509958][T10897] ? __pfx_path_mount+0x10/0x10 [ 201.510000][T10897] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.510032][T10897] ? putname+0xb1/0x110 [ 201.510056][T10897] ? kmem_cache_free+0x127/0x6c0 [ 201.510096][T10897] ? __ia32_sys_mount+0x292/0x310 [ 201.510120][T10897] __ia32_sys_mount+0x292/0x310 [ 201.510147][T10897] ? __pfx___ia32_sys_mount+0x10/0x10 [ 201.510181][T10897] __do_fast_syscall_32+0x13a/0x8b0 [ 201.510214][T10897] do_fast_syscall_32+0x32/0x70 [ 201.510243][T10897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.510268][T10897] RIP: 0023:0xf7f53fec [ 201.510289][T10897] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 201.510298][T10897] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 201.510317][T10897] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 201.510329][T10897] RDX: 0000000080000180 RSI: 0000000000208002 RDI: 0000000080000440 [ 201.510341][T10897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.510353][T10897] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.510365][T10897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.510391][T10897] [ 201.510588][T10897] 9pnet_fd: p9_fd_create_unix (10897): problem creating socket [ 201.862585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.082726][ T25] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 202.096322][ T5746] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 202.096397][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.096440][ T5746] Tainted: [L]=SOFTLOCKUP [ 202.096448][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.096462][ T5746] Workqueue: hci3 hci_rx_work [ 202.096488][ T5746] Call Trace: [ 202.096495][ T5746] [ 202.096504][ T5746] dump_stack_lvl+0x100/0x190 [ 202.096534][ T5746] sysfs_warn_dup.cold+0x1c/0x28 [ 202.096561][ T5746] sysfs_create_dir_ns+0x24b/0x2b0 [ 202.096586][ T5746] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 202.096608][ T5746] ? find_held_lock+0x2b/0x80 [ 202.096629][ T5746] ? kobject_add_internal+0x25f/0x930 [ 202.096651][ T5746] ? kobject_add_internal+0x25f/0x930 [ 202.096672][ T5746] ? do_raw_spin_unlock+0x145/0x1e0 [ 202.096693][ T5746] kobject_add_internal+0x2c8/0x930 [ 202.096718][ T5746] kobject_add+0x16a/0x1e0 [ 202.096739][ T5746] ? __pfx_kobject_add+0x10/0x10 [ 202.096765][ T5746] ? class_to_subsys+0x10f/0x150 [ 202.096796][ T5746] ? kobject_put+0xb9/0x640 [ 202.096814][ T5746] ? _raw_spin_unlock+0x28/0x50 [ 202.096845][ T5746] device_add+0x294/0x1970 [ 202.096873][ T5746] ? __pfx_dev_set_name+0x10/0x10 [ 202.096890][ T5746] ? __pfx_device_add+0x10/0x10 [ 202.096917][ T5746] ? mgmt_send_event_skb+0x2fb/0x460 [ 202.096949][ T5746] hci_conn_add_sysfs+0x1a3/0x260 [ 202.096997][ T5746] le_conn_complete_evt+0x122f/0x2130 [ 202.097026][ T5746] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 202.097049][ T5746] ? hci_event_packet+0x186/0xcd0 [ 202.097078][ T5746] hci_le_conn_complete_evt+0x23c/0x3a0 [ 202.097104][ T5746] ? skb_pull_data+0x15f/0x1e0 [ 202.097134][ T5746] hci_le_meta_evt+0x34a/0x5f0 [ 202.097192][ T5746] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 202.097224][ T5746] hci_event_packet+0x51c/0xcd0 [ 202.097247][ T5746] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 202.097272][ T5746] ? __pfx_hci_event_packet+0x10/0x10 [ 202.097301][ T5746] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.097334][ T5746] hci_rx_work+0x451/0xfc0 [ 202.097360][ T5746] process_one_work+0xac7/0x1b10 [ 202.097394][ T5746] ? __pfx_process_one_work+0x10/0x10 [ 202.097419][ T5746] ? lock_acquire+0x1d1/0x380 [ 202.097452][ T5746] ? __pfx_hci_rx_work+0x10/0x10 [ 202.097476][ T5746] worker_thread+0x5ef/0xe50 [ 202.097509][ T5746] ? kthread+0x13a/0x450 [ 202.097529][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 202.097551][ T5746] kthread+0x373/0x450 [ 202.097571][ T5746] ? __pfx_kthread+0x10/0x10 [ 202.097591][ T5746] ret_from_fork+0x730/0xd60 [ 202.097623][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 202.097655][ T5746] ? __switch_to+0x800/0x10f0 [ 202.097679][ T5746] ? __pfx_kthread+0x10/0x10 [ 202.097700][ T5746] ret_from_fork_asm+0x1a/0x30 [ 202.097727][ T5746] [ 202.100890][ T5746] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.100921][ T5746] Bluetooth: hci3: failed to register connection device [ 202.246306][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 202.246450][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.254822][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1650'. [ 202.255730][T10932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.262789][ T25] usb 14-1: Using ep0 maxpacket: 8 [ 202.263399][ T25] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.264317][ T25] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 202.264373][ T25] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.264392][ T25] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.264412][ T25] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.264432][ T25] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.264465][ T25] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.289648][T10934] bond0: (slave bond_slave_0): Releasing backup interface [ 202.478244][ T25] usb 14-1: GET_CAPABILITIES returned 0 [ 202.478312][ T25] usbtmc 14-1:16.0: can't read capabilities [ 202.671432][T10946] ubi0: attaching mtd0 [ 202.677959][T10946] ubi0: scanning is finished [ 202.678051][T10946] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 202.741087][T10906] usbtmc 14-1:16.0: stb usb_control_msg returned -32 [ 202.746171][ T854] usb 14-1: USB disconnect, device number 7 [ 202.809238][T10946] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 202.912602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.049762][T10959] loop5: detected capacity change from 0 to 7 [ 203.054280][T10959] Dev loop5: unable to read RDB block 7 [ 203.054360][T10959] loop5: AHDI p1 p2 p3 [ 203.056273][T10959] loop5: partition table partially beyond EOD, truncated [ 203.056437][T10959] loop5: p3 start 335544320 is beyond EOD, truncated [ 203.180893][T10967] netlink: 'syz.7.1664': attribute type 2 has an invalid length. [ 203.180952][T10967] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1664'. [ 203.195386][T10967] : entered promiscuous mode [ 203.225164][ T854] logitech-hidpp-device 0005:046D:B012.0011: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 203.259679][T10970] fido_id[10970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.559793][T10986] FAULT_INJECTION: forcing a failure. [ 203.559793][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 203.559891][T10986] CPU: 1 UID: 0 PID: 10986 Comm: syz.9.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.559935][T10986] Tainted: [L]=SOFTLOCKUP [ 203.559945][T10986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.559959][T10986] Call Trace: [ 203.559966][T10986] [ 203.559975][T10986] dump_stack_lvl+0x100/0x190 [ 203.560006][T10986] should_fail_ex.cold+0x5/0xa [ 203.560033][T10986] should_failslab+0xc2/0x120 [ 203.560062][T10986] __kmalloc_cache_noprof+0x91/0x6d0 [ 203.560096][T10986] ? mpi_alloc+0x46/0x230 [ 203.560124][T10986] mpi_alloc+0x46/0x230 [ 203.560144][T10986] ? __virt_addr_valid+0x22a/0x430 [ 203.560174][T10986] rsa_enc+0x88/0x3b0 [ 203.560208][T10986] ? __pfx_rsa_enc+0x10/0x10 [ 203.560233][T10986] ? __virt_addr_valid+0x239/0x430 [ 203.560264][T10986] ? sg_init_one+0xf5/0x1b0 [ 203.560298][T10986] rsassa_pkcs1_verify+0x4eb/0xc20 [ 203.560329][T10986] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 203.560366][T10986] ? rsa_max_size+0xd/0x70 [ 203.560387][T10986] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 203.560413][T10986] public_key_verify_signature+0x5ee/0x910 [ 203.560437][T10986] ? __pfx_public_key_verify_signature+0x10/0x10 [ 203.560468][T10986] ? asymmetric_key_generate_id+0x7e/0x180 [ 203.560501][T10986] x509_check_for_self_signed+0x325/0x510 [ 203.560524][T10986] x509_cert_parse+0x60c/0x910 [ 203.560546][T10986] x509_key_preparse+0x65/0x9c0 [ 203.560570][T10986] asymmetric_key_preparse+0xce/0x1d0 [ 203.560597][T10986] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 203.560626][T10986] __key_create_or_update+0x463/0xe30 [ 203.560682][T10986] ? __pfx___key_create_or_update+0x10/0x10 [ 203.560710][T10986] ? lookup_user_key+0x3f3/0x1300 [ 203.560747][T10986] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 203.560779][T10986] key_create_or_update+0x42/0x60 [ 203.560810][T10986] __do_sys_add_key+0x2e8/0x460 [ 203.560832][T10986] ? __pfx___do_sys_add_key+0x10/0x10 [ 203.560851][T10986] ? ksys_write+0x1ac/0x250 [ 203.560881][T10986] __do_fast_syscall_32+0x13a/0x8b0 [ 203.560915][T10986] do_fast_syscall_32+0x32/0x70 [ 203.560943][T10986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.560969][T10986] RIP: 0023:0xf705efec [ 203.560991][T10986] Code: Unable to access opcode bytes at 0xf705efc2. [ 203.561001][T10986] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 203.561022][T10986] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 203.561037][T10986] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 203.561050][T10986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.561062][T10986] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.561074][T10986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.561100][T10986] [ 203.652614][ T5741] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 203.789534][T10997] netlink: 'syz.7.1677': attribute type 4 has an invalid length. [ 203.793360][T10997] netlink: 'syz.7.1677': attribute type 4 has an invalid length. [ 203.804183][ T5741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 203.808163][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.942550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.991977][T11005] FAULT_INJECTION: forcing a failure. [ 203.991977][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 203.992045][T11005] CPU: 2 UID: 0 PID: 11005 Comm: syz.0.1680 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.992073][T11005] Tainted: [L]=SOFTLOCKUP [ 203.992080][T11005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.992093][T11005] Call Trace: [ 203.992100][T11005] [ 203.992109][T11005] dump_stack_lvl+0x100/0x190 [ 203.992141][T11005] should_fail_ex.cold+0x5/0xa [ 203.992168][T11005] should_failslab+0xc2/0x120 [ 203.992194][T11005] __kmalloc_cache_noprof+0x91/0x6d0 [ 203.992225][T11005] ? sctp_add_bind_addr+0xae/0x3e0 [ 203.992258][T11005] sctp_add_bind_addr+0xae/0x3e0 [ 203.992288][T11005] sctp_copy_local_addr_list+0x349/0x550 [ 203.992323][T11005] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.992358][T11005] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 203.992380][T11005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.992411][T11005] sctp_bind_addr_copy+0xe0/0x530 [ 203.992458][T11005] sctp_connect_new_asoc+0x1c9/0x770 [ 203.992487][T11005] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.992517][T11005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.992546][T11005] sctp_sendmsg+0x1743/0x22e0 [ 203.992575][T11005] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.992605][T11005] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 203.992647][T11005] ? aa_sock_msg_perm+0x11e/0x200 [ 203.992673][T11005] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.992698][T11005] inet_sendmsg+0x11c/0x140 [ 203.992730][T11005] __sys_sendto+0x453/0x4e0 [ 203.992752][T11005] ? __pfx_inet_sendmsg+0x10/0x10 [ 203.992789][T11005] ? __pfx___sys_sendto+0x10/0x10 [ 203.992819][T11005] ? fd_install+0x223/0x580 [ 203.992853][T11005] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 203.992885][T11005] __ia32_sys_sendto+0xdd/0x1b0 [ 203.992909][T11005] ? __do_fast_syscall_32+0xb3/0x8b0 [ 203.992939][T11005] ? lockdep_hardirqs_on+0x7d/0x110 [ 203.992966][T11005] __do_fast_syscall_32+0x13a/0x8b0 [ 203.992999][T11005] do_fast_syscall_32+0x32/0x70 [ 203.993029][T11005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.993053][T11005] RIP: 0023:0xf7f87fec [ 203.993074][T11005] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 203.993084][T11005] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 203.993103][T11005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 203.993116][T11005] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 203.993129][T11005] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 203.993164][T11005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.993178][T11005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.993207][T11005] [ 204.039661][T11006] tipc: Enabling of bearer rejected, already enabled [ 204.089793][ T5741] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 204.568230][T11023] FAULT_INJECTION: forcing a failure. [ 204.568230][T11023] name failslab, interval 1, probability 0, space 0, times 0 [ 204.573774][T11023] CPU: 3 UID: 0 PID: 11023 Comm: syz.7.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.573818][T11023] Tainted: [L]=SOFTLOCKUP [ 204.573826][T11023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.573838][T11023] Call Trace: [ 204.573845][T11023] [ 204.573872][T11023] dump_stack_lvl+0x100/0x190 [ 204.573902][T11023] should_fail_ex.cold+0x5/0xa [ 204.573925][T11023] should_failslab+0xc2/0x120 [ 204.573951][T11023] __kmalloc_cache_noprof+0x91/0x6d0 [ 204.573977][T11023] ? __pfx_apparmor_file_open+0x10/0x10 [ 204.574004][T11023] ? single_open+0x4d/0x1d0 [ 204.574047][T11023] ? __pfx_seq_show+0x10/0x10 [ 204.574066][T11023] single_open+0x4d/0x1d0 [ 204.574095][T11023] do_dentry_open+0x6ab/0x14d0 [ 204.574113][T11023] ? __pfx_seq_fdinfo_open+0x10/0x10 [ 204.574136][T11023] vfs_open+0x82/0x3f0 [ 204.574162][T11023] path_openat+0x19fa/0x2440 [ 204.574186][T11023] ? __pfx_path_openat+0x10/0x10 [ 204.574213][T11023] do_file_open+0x20e/0x430 [ 204.574234][T11023] ? __pfx_do_file_open+0x10/0x10 [ 204.574263][T11023] ? __pfx_kfree_link+0x10/0x10 [ 204.574287][T11023] ? _raw_spin_unlock+0x28/0x50 [ 204.574307][T11023] ? alloc_fd+0x471/0x7a0 [ 204.574334][T11023] do_sys_openat2+0x10f/0x1e0 [ 204.574357][T11023] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.574383][T11023] ? irqentry_exit+0x24d/0xa10 [ 204.574406][T11023] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.574432][T11023] __ia32_compat_sys_openat+0x12d/0x210 [ 204.574457][T11023] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 204.574492][T11023] do_int80_emulation+0x166/0x650 [ 204.574519][T11023] asm_int80_emulation+0x1a/0x20 [ 204.574537][T11023] RIP: 0023:0xf71575ab [ 204.574553][T11023] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 204.574571][T11023] RSP: 002b:00000000f54163cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 204.574591][T11023] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5416490 [ 204.574603][T11023] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.574614][T11023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.574625][T11023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.574636][T11023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.574658][T11023] [ 204.675542][ T5811] usb 6-1: USB disconnect, device number 21 [ 204.742937][T11034] FAULT_INJECTION: forcing a failure. [ 204.742937][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 204.742985][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.7.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.743014][T11034] Tainted: [L]=SOFTLOCKUP [ 204.743020][T11034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.743028][T11034] Call Trace: [ 204.743032][T11034] [ 204.743038][T11034] dump_stack_lvl+0x100/0x190 [ 204.743057][T11034] should_fail_ex.cold+0x5/0xa [ 204.743073][T11034] should_failslab+0xc2/0x120 [ 204.743090][T11034] __kmalloc_cache_noprof+0x91/0x6d0 [ 204.743107][T11034] ? __pfx_vicodec_s_ctrl+0x10/0x10 [ 204.743120][T11034] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 204.743133][T11034] ? __pfx_queue_init+0x10/0x10 [ 204.743146][T11034] v4l2_m2m_ctx_init+0x4d/0x380 [ 204.743158][T11034] vicodec_open+0xafc/0xf70 [ 204.743174][T11034] v4l2_open+0x1d2/0x490 [ 204.743185][T11034] ? __pfx_v4l2_open+0x10/0x10 [ 204.743202][T11034] chrdev_open+0x234/0x6a0 [ 204.743216][T11034] ? __pfx_apparmor_file_open+0x10/0x10 [ 204.743235][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 204.743249][T11034] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 204.743268][T11034] do_dentry_open+0x6ab/0x14d0 [ 204.743280][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 204.743296][T11034] vfs_open+0x82/0x3f0 [ 204.743325][T11034] path_openat+0x19fa/0x2440 [ 204.743344][T11034] ? __pfx_path_openat+0x10/0x10 [ 204.743363][T11034] do_file_open+0x20e/0x430 [ 204.743380][T11034] ? __pfx_do_file_open+0x10/0x10 [ 204.743404][T11034] ? _raw_spin_unlock+0x28/0x50 [ 204.743418][T11034] ? alloc_fd+0x471/0x7a0 [ 204.743436][T11034] do_sys_openat2+0x10f/0x1e0 [ 204.743452][T11034] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.743467][T11034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.743487][T11034] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 204.743502][T11034] __ia32_compat_sys_openat+0x12d/0x210 [ 204.743520][T11034] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 204.743544][T11034] do_int80_emulation+0x166/0x650 [ 204.743564][T11034] asm_int80_emulation+0x1a/0x20 [ 204.743576][T11034] RIP: 0023:0xf71575ab [ 204.743586][T11034] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 204.743597][T11034] RSP: 002b:00000000f541603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 204.743609][T11034] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5416100 [ 204.743617][T11034] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.743623][T11034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.743630][T11034] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.743637][T11034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.743652][T11034] [ 204.982520][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.052598][ T1702] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 205.212760][ T1702] usb 12-1: Using ep0 maxpacket: 32 [ 205.213249][ T1702] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.214077][ T1702] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 205.214090][ T1702] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 205.214100][ T1702] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 205.214121][ T1702] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.214132][ T1702] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.214144][ T1702] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.214163][ T1702] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.215490][ T1702] usb 12-1: config 0 descriptor?? [ 205.367432][T11066] jffs2: notice: (11066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.388827][T11069] FAULT_INJECTION: forcing a failure. [ 205.388827][T11069] name failslab, interval 1, probability 0, space 0, times 0 [ 205.388883][T11069] CPU: 0 UID: 0 PID: 11069 Comm: syz.9.1700 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.388913][T11069] Tainted: [L]=SOFTLOCKUP [ 205.388920][T11069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.388932][T11069] Call Trace: [ 205.388939][T11069] [ 205.388946][T11069] dump_stack_lvl+0x100/0x190 [ 205.388977][T11069] should_fail_ex.cold+0x5/0xa [ 205.389002][T11069] should_failslab+0xc2/0x120 [ 205.389020][T11069] __kmalloc_noprof+0xfc/0x840 [ 205.389033][T11069] ? trace_kmalloc+0xeb/0x110 [ 205.389048][T11069] ? lsm_blob_alloc+0x68/0x90 [ 205.389064][T11069] lsm_blob_alloc+0x68/0x90 [ 205.389077][T11069] security_sk_alloc+0x2d/0x290 [ 205.389092][T11069] sk_prot_alloc+0x12a/0x2a0 [ 205.389111][T11069] sk_alloc+0x36/0xe80 [ 205.389126][T11069] llc_sk_alloc+0x32/0x4c0 [ 205.389161][T11069] llc_ui_create+0xeb/0x440 [ 205.389181][T11069] __sock_create+0x339/0x860 [ 205.389202][T11069] __sys_socket+0x14d/0x260 [ 205.389214][T11069] ? __pfx___sys_socket+0x10/0x10 [ 205.389230][T11069] __ia32_sys_socket+0x72/0xb0 [ 205.389242][T11069] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.389259][T11069] __do_fast_syscall_32+0x13a/0x8b0 [ 205.389276][T11069] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.389292][T11069] do_fast_syscall_32+0x32/0x70 [ 205.389315][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.389330][T11069] RIP: 0023:0xf705efec [ 205.389344][T11069] Code: Unable to access opcode bytes at 0xf705efc2. [ 205.389349][T11069] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 205.389361][T11069] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000000000001 [ 205.389368][T11069] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000f544d53c [ 205.389375][T11069] RBP: 00000000f544d5ec R08: 0000000000000000 R09: 0000000000000000 [ 205.389382][T11069] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 205.389389][T11069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.389403][T11069] [ 205.439826][ T1702] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.694084][ C2] usblp0: nonzero read bulk status received: -71 [ 205.695199][ T5811] usb 12-1: USB disconnect, device number 13 [ 205.696415][T11040] usblp0: error -71 reading from printer [ 205.706172][ T5811] usblp0: removed [ 205.716889][T11085] FAULT_INJECTION: forcing a failure. [ 205.716889][T11085] name fail_futex, interval 1, probability 0, space 0, times 1 [ 205.716976][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.9.1709 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.717004][T11085] Tainted: [L]=SOFTLOCKUP [ 205.717010][T11085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.717017][T11085] Call Trace: [ 205.717022][T11085] [ 205.717027][T11085] dump_stack_lvl+0x100/0x190 [ 205.717046][T11085] should_fail_ex.cold+0x5/0xa [ 205.717061][T11085] get_futex_key+0x1d0/0x14f0 [ 205.717080][T11085] ? __pfx_get_futex_key+0x10/0x10 [ 205.717103][T11085] futex_wait_setup+0x91/0x540 [ 205.717122][T11085] __futex_wait+0x19f/0x300 [ 205.717165][T11085] ? __pfx___futex_wait+0x10/0x10 [ 205.717184][T11085] ? __pfx_try_to_wake_up+0x10/0x10 [ 205.717207][T11085] ? futex_hash+0x311/0x400 [ 205.717225][T11085] ? __pfx_futex_wake_mark+0x10/0x10 [ 205.717241][T11085] ? find_held_lock+0x2b/0x80 [ 205.717252][T11085] ? futex_wake+0x4ea/0x5e0 [ 205.717269][T11085] futex_wait+0xe6/0x370 [ 205.717283][T11085] ? __pfx_futex_wait+0x10/0x10 [ 205.717301][T11085] ? putname+0xb1/0x110 [ 205.717314][T11085] ? kmem_cache_free+0x127/0x6c0 [ 205.717340][T11085] do_futex+0x265/0x440 [ 205.717353][T11085] ? __pfx_do_futex+0x10/0x10 [ 205.717364][T11085] ? do_sys_openat2+0x159/0x1e0 [ 205.717381][T11085] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.717397][T11085] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 205.717413][T11085] __ia32_sys_futex_time32+0x2f4/0x470 [ 205.717429][T11085] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 205.717444][T11085] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 205.717467][T11085] __do_fast_syscall_32+0x13a/0x8b0 [ 205.717484][T11085] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.717500][T11085] do_fast_syscall_32+0x32/0x70 [ 205.717517][T11085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.717532][T11085] RIP: 0023:0xf705efec [ 205.717545][T11085] Code: Unable to access opcode bytes at 0xf705efc2. [ 205.717550][T11085] RSP: 002b:00000000f544d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 205.717562][T11085] RAX: ffffffffffffffda RBX: 00000000f7454f88 RCX: 0000000000000080 [ 205.717570][T11085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7454f8c [ 205.717576][T11085] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 205.717583][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.717590][T11085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.717606][T11085] [ 205.834723][T11087] loop2: detected capacity change from 0 to 4095 [ 205.877431][T11087] Buffer I/O error on dev loop2, logical block 511, async page read [ 205.878258][T10927] Buffer I/O error on dev loop2, logical block 511, async page read [ 206.022693][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.228471][T11100] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 206.258032][T11102] FAULT_INJECTION: forcing a failure. [ 206.258032][T11102] name failslab, interval 1, probability 0, space 0, times 0 [ 206.258093][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.7.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.258122][T11102] Tainted: [L]=SOFTLOCKUP [ 206.258128][T11102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.258135][T11102] Call Trace: [ 206.258141][T11102] [ 206.258147][T11102] dump_stack_lvl+0x100/0x190 [ 206.258166][T11102] should_fail_ex.cold+0x5/0xa [ 206.258184][T11102] should_failslab+0xc2/0x120 [ 206.258199][T11102] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 206.258213][T11102] ? alloc_inode+0x183/0x250 [ 206.258233][T11102] alloc_inode+0x183/0x250 [ 206.258249][T11102] iget_locked+0x1d9/0x6d0 [ 206.258267][T11102] ? __pfx_iget_locked+0x10/0x10 [ 206.258283][T11102] ? down_read+0x13b/0x4c0 [ 206.258301][T11102] ? __pfx_down_read+0x10/0x10 [ 206.258318][T11102] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 206.258335][T11102] ? lock_acquire+0x1d1/0x380 [ 206.258352][T11102] kernfs_get_inode+0x46/0x470 [ 206.258366][T11102] kernfs_get_tree+0x636/0xbb0 [ 206.258380][T11102] ? __pfx_kernfs_get_tree+0x10/0x10 [ 206.258394][T11102] ? bpf_lsm_capable+0x9/0x10 [ 206.258411][T11102] ? security_capable+0x80/0x260 [ 206.258426][T11102] vfs_get_tree+0x92/0x320 [ 206.258443][T11102] path_mount+0x7d0/0x24c0 [ 206.258461][T11102] ? __pfx_path_mount+0x10/0x10 [ 206.258475][T11102] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.258492][T11102] ? putname+0xb1/0x110 [ 206.258505][T11102] ? kmem_cache_free+0x127/0x6c0 [ 206.258528][T11102] ? __ia32_sys_mount+0x292/0x310 [ 206.258543][T11102] __ia32_sys_mount+0x292/0x310 [ 206.258559][T11102] ? __pfx___ia32_sys_mount+0x10/0x10 [ 206.258579][T11102] __do_fast_syscall_32+0x13a/0x8b0 [ 206.258598][T11102] do_fast_syscall_32+0x32/0x70 [ 206.258615][T11102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.258629][T11102] RIP: 0023:0xf7f53fec [ 206.258655][T11102] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 206.258663][T11102] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 206.258675][T11102] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 206.258688][T11102] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.258696][T11102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.258704][T11102] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.258711][T11102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.258728][T11102] [ 206.465396][T11114] FAULT_INJECTION: forcing a failure. [ 206.465396][T11114] name failslab, interval 1, probability 0, space 0, times 0 [ 206.465476][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.7.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.465519][T11114] Tainted: [L]=SOFTLOCKUP [ 206.465528][T11114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.465541][T11114] Call Trace: [ 206.465549][T11114] [ 206.465558][T11114] dump_stack_lvl+0x100/0x190 [ 206.465590][T11114] should_fail_ex.cold+0x5/0xa [ 206.465617][T11114] should_failslab+0xc2/0x120 [ 206.465646][T11114] __kmalloc_noprof+0xfc/0x840 [ 206.465670][T11114] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 206.465700][T11114] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 206.465724][T11114] vb2_core_reqbufs+0x382/0xf30 [ 206.465751][T11114] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 206.465793][T11114] ? trace_contention_end+0x126/0x160 [ 206.465846][T11114] ? __video_do_ioctl+0x50f/0xdf0 [ 206.465884][T11114] vb2_reqbufs+0x1a3/0x1f0 [ 206.465905][T11114] ? __pfx_vb2_reqbufs+0x10/0x10 [ 206.465927][T11114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.465955][T11114] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 206.465979][T11114] v4l_reqbufs+0x175/0x1d0 [ 206.466008][T11114] __video_do_ioctl+0xb2a/0xdf0 [ 206.466040][T11114] ? __might_fault+0xc5/0x140 [ 206.466068][T11114] ? __pfx___video_do_ioctl+0x10/0x10 [ 206.466105][T11114] video_usercopy+0x3d3/0x14c0 [ 206.466135][T11114] ? __pfx___video_do_ioctl+0x10/0x10 [ 206.466166][T11114] ? __pfx_video_usercopy+0x10/0x10 [ 206.466205][T11114] ? __fget_files+0x215/0x3d0 [ 206.466226][T11114] ? hook_file_ioctl_common+0x140/0x440 [ 206.466262][T11114] v4l2_ioctl+0x1bd/0x250 [ 206.466296][T11114] v4l2_compat_ioctl32+0x20f/0x2d0 [ 206.466321][T11114] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 206.466346][T11114] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 206.466381][T11114] __do_fast_syscall_32+0x13a/0x8b0 [ 206.466411][T11114] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.466441][T11114] do_fast_syscall_32+0x32/0x70 [ 206.466469][T11114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.466494][T11114] RIP: 0023:0xf7f53fec [ 206.466516][T11114] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 206.466525][T11114] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 206.466546][T11114] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 206.466559][T11114] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.466571][T11114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.466583][T11114] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.466594][T11114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.466621][T11114] [ 206.703429][ T5811] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 206.823795][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1727'. [ 206.863090][ T5811] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 206.864121][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.072616][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.269885][ T5811] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 207.693560][T11156] FAULT_INJECTION: forcing a failure. [ 207.693560][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 207.693667][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.7.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.693697][T11156] Tainted: [L]=SOFTLOCKUP [ 207.693704][T11156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.693711][T11156] Call Trace: [ 207.693715][T11156] [ 207.693729][T11156] dump_stack_lvl+0x100/0x190 [ 207.693748][T11156] should_fail_ex.cold+0x5/0xa [ 207.693764][T11156] should_failslab+0xc2/0x120 [ 207.693792][T11156] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.693807][T11156] ? skb_clone+0x190/0x400 [ 207.693825][T11156] skb_clone+0x190/0x400 [ 207.693841][T11156] netlink_deliver_tap+0xaed/0xcc0 [ 207.693858][T11156] netlink_unicast+0x6a5/0x850 [ 207.693875][T11156] ? __pfx_netlink_unicast+0x10/0x10 [ 207.693894][T11156] ctrl_getfamily+0x417/0x550 [ 207.693909][T11156] ? __pfx_ctrl_getfamily+0x10/0x10 [ 207.693925][T11156] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 207.693940][T11156] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 207.693959][T11156] genl_family_rcv_msg_doit+0x214/0x300 [ 207.693976][T11156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 207.693992][T11156] ? genl_get_cmd+0x3e7/0x760 [ 207.694010][T11156] ? __dev_queue_xmit+0xa33/0x4970 [ 207.694022][T11156] ? __radix_tree_lookup+0x217/0x2b0 [ 207.694040][T11156] genl_rcv_msg+0x560/0x800 [ 207.694057][T11156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.694070][T11156] ? __lock_acquire+0x5c0/0x1f40 [ 207.694086][T11156] ? __pfx_ctrl_getfamily+0x10/0x10 [ 207.694107][T11156] netlink_rcv_skb+0x159/0x420 [ 207.694119][T11156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.694135][T11156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.694154][T11156] ? netlink_deliver_tap+0x1ae/0xcc0 [ 207.694168][T11156] genl_rcv+0x28/0x40 [ 207.694181][T11156] netlink_unicast+0x585/0x850 [ 207.694196][T11156] ? __pfx_netlink_unicast+0x10/0x10 [ 207.694212][T11156] netlink_sendmsg+0x8b0/0xda0 [ 207.694228][T11156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.694242][T11156] ? apparmor_socket_sendmsg+0x165/0x280 [ 207.694260][T11156] __sys_sendto+0x48b/0x4e0 [ 207.694272][T11156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.694285][T11156] ? __pfx___sys_sendto+0x10/0x10 [ 207.694303][T11156] ? lock_acquire+0x1d1/0x380 [ 207.694328][T11156] __ia32_compat_sys_socketcall+0x59a/0x770 [ 207.694349][T11156] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 207.694378][T11156] do_int80_emulation+0x166/0x650 [ 207.694397][T11156] asm_int80_emulation+0x1a/0x20 [ 207.694409][T11156] RIP: 0023:0xf71575ab [ 207.694419][T11156] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 207.694431][T11156] RSP: 002b:00000000f541534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 207.694443][T11156] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54153f4 [ 207.694450][T11156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.694457][T11156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.694464][T11156] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 207.694471][T11156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.694486][T11156] [ 208.021063][T11176] mac80211_hwsim hwsim18 syzkaller1: entered promiscuous mode [ 208.021238][T11176] mac80211_hwsim hwsim18 syzkaller1: entered allmulticast mode [ 208.022922][T11174] syzkaller1: entered promiscuous mode [ 208.022933][T11174] syzkaller1: entered allmulticast mode [ 208.112663][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.212073][T11183] tipc: Started in network mode [ 208.212174][T11183] tipc: Node identity 2ed7506faa04, cluster identity 4711 [ 208.212242][T11183] tipc: Enabled bearer , priority 1 [ 208.214706][T11182] tipc: Resetting bearer [ 208.234246][T11182] tipc: Disabling bearer [ 208.262787][ T5746] Bluetooth: hci3: command 0x0406 tx timeout [ 208.472621][T11194] FAULT_INJECTION: forcing a failure. [ 208.472621][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 208.472707][T11194] CPU: 0 UID: 0 PID: 11194 Comm: syz.7.1749 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.472736][T11194] Tainted: [L]=SOFTLOCKUP [ 208.472743][T11194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.472755][T11194] Call Trace: [ 208.472762][T11194] [ 208.472770][T11194] dump_stack_lvl+0x100/0x190 [ 208.472800][T11194] should_fail_ex.cold+0x5/0xa [ 208.472824][T11194] should_failslab+0xc2/0x120 [ 208.472851][T11194] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 208.472874][T11194] ? start_dirop+0x79/0xb0 [ 208.472896][T11194] ? alloc_inode+0x68/0x250 [ 208.472926][T11194] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 208.472952][T11194] alloc_inode+0x68/0x250 [ 208.472981][T11194] new_inode+0x22/0x1c0 [ 208.473013][T11194] debugfs_create_dir+0x9d/0x420 [ 208.473040][T11194] ptp_open+0x2fd/0x510 [ 208.473065][T11194] ? __pfx_ptp_open+0x10/0x10 [ 208.473087][T11194] ? kobject_get_unless_zero+0x156/0x200 [ 208.473108][T11194] ? posix_clock_open+0xc8/0x290 [ 208.473164][T11194] ? __pfx_ptp_open+0x10/0x10 [ 208.473184][T11194] posix_clock_open+0x17b/0x290 [ 208.473214][T11194] ? __pfx_posix_clock_open+0x10/0x10 [ 208.473243][T11194] chrdev_open+0x234/0x6a0 [ 208.473265][T11194] ? __pfx_apparmor_file_open+0x10/0x10 [ 208.473297][T11194] ? __pfx_chrdev_open+0x10/0x10 [ 208.473321][T11194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.473354][T11194] do_dentry_open+0x6ab/0x14d0 [ 208.473377][T11194] ? __pfx_chrdev_open+0x10/0x10 [ 208.473406][T11194] vfs_open+0x82/0x3f0 [ 208.473437][T11194] path_openat+0x19fa/0x2440 [ 208.473466][T11194] ? __pfx_path_openat+0x10/0x10 [ 208.473498][T11194] do_file_open+0x20e/0x430 [ 208.473525][T11194] ? __pfx_do_file_open+0x10/0x10 [ 208.473569][T11194] ? _raw_spin_unlock+0x28/0x50 [ 208.473593][T11194] ? alloc_fd+0x471/0x7a0 [ 208.473624][T11194] do_sys_openat2+0x10f/0x1e0 [ 208.473652][T11194] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.473690][T11194] ? fd_install+0x252/0x580 [ 208.473719][T11194] __ia32_compat_sys_openat+0x12d/0x210 [ 208.473751][T11194] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 208.473794][T11194] __do_fast_syscall_32+0x13a/0x8b0 [ 208.473829][T11194] do_fast_syscall_32+0x32/0x70 [ 208.473860][T11194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.473885][T11194] RIP: 0023:0xf7f53fec [ 208.473906][T11194] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 208.473916][T11194] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 208.473936][T11194] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 208.473949][T11194] RDX: 0000000000082001 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.473961][T11194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.473973][T11194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.473985][T11194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.474012][T11194] [ 208.474076][T11194] debugfs: out of free dentries, can not create directory '0xffff88806c414000' [ 209.143357][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.410294][T11207] FAULT_INJECTION: forcing a failure. [ 209.410294][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 209.410344][T11207] CPU: 2 UID: 0 PID: 11207 Comm: syz.9.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.410371][T11207] Tainted: [L]=SOFTLOCKUP [ 209.410377][T11207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.410384][T11207] Call Trace: [ 209.410389][T11207] [ 209.410395][T11207] dump_stack_lvl+0x100/0x190 [ 209.410414][T11207] should_fail_ex.cold+0x5/0xa [ 209.410429][T11207] should_failslab+0xc2/0x120 [ 209.410446][T11207] kmem_cache_alloc_noprof+0x92/0x6a0 [ 209.410462][T11207] ? mas_preallocate+0xc22/0xee0 [ 209.410483][T11207] mas_preallocate+0xc22/0xee0 [ 209.410502][T11207] ? __pfx_mas_preallocate+0x10/0x10 [ 209.410524][T11207] ? __asan_memset+0x23/0x50 [ 209.410537][T11207] ? init_multi_vma_prep+0x33c/0x650 [ 209.410555][T11207] commit_merge+0x3cc/0x2150 [ 209.410587][T11207] ? __vma_start_write+0x1c6/0x280 [ 209.410603][T11207] ? __pfx_commit_merge+0x10/0x10 [ 209.410623][T11207] ? __pfx___vma_start_write+0x10/0x10 [ 209.410638][T11207] ? __pfx_mas_prev+0x10/0x10 [ 209.410650][T11207] ? dup_anon_vma+0x74/0x2f0 [ 209.410668][T11207] vma_modify+0xd81/0x29b0 [ 209.410691][T11207] ? __pfx_vma_modify+0x10/0x10 [ 209.410717][T11207] ? lock_acquire+0x1d1/0x380 [ 209.410739][T11207] vma_modify_flags+0x2c3/0x460 [ 209.410758][T11207] ? __pfx_vma_modify_flags+0x10/0x10 [ 209.410785][T11207] ? __pfx_futex_wake_mark+0x10/0x10 [ 209.410805][T11207] mlock_fixup+0x4a8/0xc60 [ 209.410826][T11207] ? __pfx_mlock_fixup+0x10/0x10 [ 209.410851][T11207] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 209.410871][T11207] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 209.410895][T11207] ? __pfx___might_resched+0x10/0x10 [ 209.410913][T11207] ? down_write_killable+0x152/0x240 [ 209.410932][T11207] ? __pfx_ksys_write+0x10/0x10 [ 209.410946][T11207] __do_sys_munlockall+0xc7/0x270 [ 209.410959][T11207] __do_fast_syscall_32+0x13a/0x8b0 [ 209.410979][T11207] do_fast_syscall_32+0x32/0x70 [ 209.410996][T11207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.411011][T11207] RIP: 0023:0xf705efec [ 209.411024][T11207] Code: Unable to access opcode bytes at 0xf705efc2. [ 209.411030][T11207] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000099 [ 209.411042][T11207] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 209.411049][T11207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.411056][T11207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.411062][T11207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.411070][T11207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.411084][T11207] [ 209.535904][T11216] input: syz0 as /devices/virtual/input/input21 [ 210.152562][ T5833] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 210.192507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.303336][ T5833] usb 14-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 210.307365][ T5833] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.312019][ T5833] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.317580][ T5833] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.329898][ T5833] usb-storage 14-1:1.0: USB Mass Storage device detected [ 210.445844][ T5833] gspca_main: spca501-2.14.0 probing 0000:0000 [ 210.556398][ T5833] gspca_spca501: reg write: error -71 [ 210.558933][ T5833] spca501 14-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 210.562178][ T5833] spca501 14-1:1.0: probe with driver spca501 failed with error -22 [ 210.569292][ T5833] usb 14-1: USB disconnect, device number 8 [ 211.232497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.262553][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.917324][ T5811] usb 6-1: USB disconnect, device number 22 [ 213.025974][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 213.083617][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 213.087333][T11257] nbd: device at index 64 is going down [ 213.088163][T11255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.088275][T11255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.088306][T11255] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.127893][T11255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.130718][T11255] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.163436][T11255] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.178910][T11255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.179051][T11255] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.188036][T10927] udevd[10927]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 213.194292][T11255] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.199493][T11255] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.256914][ T5833] kernel write not supported for file /tomoyo/query (pid: 5833 comm: kworker/2:4) [ 213.296177][T11278] FAULT_INJECTION: forcing a failure. [ 213.296177][T11278] name failslab, interval 1, probability 0, space 0, times 0 [ 213.296253][T11278] CPU: 1 UID: 0 PID: 11278 Comm: syz.7.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.296284][T11278] Tainted: [L]=SOFTLOCKUP [ 213.296291][T11278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.296299][T11278] Call Trace: [ 213.296304][T11278] [ 213.296310][T11278] dump_stack_lvl+0x100/0x190 [ 213.296331][T11278] should_fail_ex.cold+0x5/0xa [ 213.296347][T11278] should_failslab+0xc2/0x120 [ 213.296366][T11278] __kmalloc_cache_noprof+0x91/0x6d0 [ 213.296386][T11278] ? blk_mq_init_allocated_queue+0xcf/0x1440 [ 213.296408][T11278] blk_mq_init_allocated_queue+0xcf/0x1440 [ 213.296429][T11278] ? blk_alloc_queue+0x627/0x790 [ 213.296442][T11278] ? blk_alloc_queue+0x1a3/0x790 [ 213.296454][T11278] ? alloc_pages_node_noprof+0x11d/0x200 [ 213.296469][T11278] blk_mq_alloc_queue+0x1bd/0x290 [ 213.296486][T11278] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 213.296514][T11278] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 213.296535][T11278] __blk_mq_alloc_disk+0x29/0x120 [ 213.296555][T11278] loop_add+0x498/0xb60 [ 213.296569][T11278] ? __pfx_loop_add+0x10/0x10 [ 213.296589][T11278] ? __fget_files+0x34/0x3d0 [ 213.296603][T11278] ? find_held_lock+0x2b/0x80 [ 213.296616][T11278] ? __fget_files+0x215/0x3d0 [ 213.296631][T11278] loop_control_ioctl+0xae/0x620 [ 213.296650][T11278] ? __pfx_loop_control_ioctl+0x10/0x10 [ 213.296711][T11278] ? __pfx_loop_control_ioctl+0x10/0x10 [ 213.296735][T11278] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 213.296809][T11278] __do_fast_syscall_32+0x13a/0x8b0 [ 213.296833][T11278] do_fast_syscall_32+0x32/0x70 [ 213.296855][T11278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.296872][T11278] RIP: 0023:0xf7f53fec [ 213.296887][T11278] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 213.296893][T11278] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 213.296906][T11278] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 213.296915][T11278] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.296922][T11278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.296929][T11278] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.296935][T11278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.296951][T11278] [ 213.312531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.527178][T11294] FAULT_INJECTION: forcing a failure. [ 213.527178][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 213.530864][T11294] CPU: 0 UID: 0 PID: 11294 Comm: syz.0.1784 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.530897][T11294] Tainted: [L]=SOFTLOCKUP [ 213.530905][T11294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.530918][T11294] Call Trace: [ 213.530926][T11294] [ 213.530935][T11294] dump_stack_lvl+0x100/0x190 [ 213.530968][T11294] should_fail_ex.cold+0x5/0xa [ 213.530994][T11294] should_failslab+0xc2/0x120 [ 213.531021][T11294] kmem_cache_alloc_noprof+0x92/0x6a0 [ 213.531042][T11294] ? __pfx_map_id_range_down+0x10/0x10 [ 213.531067][T11294] ? security_inode_alloc+0x3b/0x2c0 [ 213.531095][T11294] security_inode_alloc+0x3b/0x2c0 [ 213.531119][T11294] inode_init_always_gfp+0xc6f/0xfb0 [ 213.531153][T11294] alloc_inode+0x8e/0x250 [ 213.531182][T11294] alloc_anon_inode+0x2a/0x3e0 [ 213.531210][T11294] anon_inode_make_secure_inode+0x2f/0x140 [ 213.531243][T11294] __anon_inode_getfile+0x1cf/0x280 [ 213.531271][T11294] ? _copy_to_user+0xaf/0xd0 [ 213.531295][T11294] io_uring_setup.cold+0x1956/0x1c5e [ 213.531330][T11294] ? __pfx_io_uring_setup+0x10/0x10 [ 213.531360][T11294] ? __pfx_do_futex+0x10/0x10 [ 213.531390][T11294] ? xfd_validate_state+0x129/0x190 [ 213.531429][T11294] __ia32_sys_io_uring_setup+0xc2/0x170 [ 213.531455][T11294] __do_fast_syscall_32+0x13a/0x8b0 [ 213.531487][T11294] do_fast_syscall_32+0x32/0x70 [ 213.531518][T11294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.531542][T11294] RIP: 0023:0xf7f87fec [ 213.531563][T11294] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 213.531572][T11294] RSP: 002b:00000000f54464bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 213.531592][T11294] RAX: ffffffffffffffda RBX: 0000000000006aed RCX: 0000000080000200 [ 213.531606][T11294] RDX: 00000000f71b0fd7 RSI: 0000000000000001 RDI: 00000000f544653c [ 213.531620][T11294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.531633][T11294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.531645][T11294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.531669][T11294] [ 213.557918][ T43] audit: type=1326 audit(1788955463.396:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.1.1782" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05fec code=0x0 [ 214.238625][T11323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.352569][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.411415][T11335] jffs2: notice: (11335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.483450][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 214.976063][T11368] FAULT_INJECTION: forcing a failure. [ 214.976063][T11368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.976134][T11368] CPU: 1 UID: 0 PID: 11368 Comm: syz.0.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.976164][T11368] Tainted: [L]=SOFTLOCKUP [ 214.976170][T11368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.976179][T11368] Call Trace: [ 214.976184][T11368] [ 214.976189][T11368] dump_stack_lvl+0x100/0x190 [ 214.976210][T11368] should_fail_ex.cold+0x5/0xa [ 214.976225][T11368] ? prepare_alloc_pages+0x16d/0x5b0 [ 214.976242][T11368] should_fail_alloc_page+0xeb/0x140 [ 214.976259][T11368] prepare_alloc_pages+0x1f0/0x5b0 [ 214.976278][T11368] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 214.976293][T11368] ? mark_held_locks+0x40/0x70 [ 214.976309][T11368] ? smp_call_function_many_cond+0x1458/0x18c0 [ 214.976325][T11368] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.976342][T11368] ? __pfx_flush_tlb_func+0x10/0x10 [ 214.976353][T11368] ? smp_call_function_many_cond+0x944/0x18c0 [ 214.976371][T11368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.976396][T11368] ? __pfx_flush_tlb_func+0x10/0x10 [ 214.976408][T11368] ? __gup_longterm_locked+0x87d/0x16f0 [ 214.976423][T11368] ? process_vm_rw_core.constprop.0+0x412/0x950 [ 214.976436][T11368] ? process_vm_rw+0x226/0x2d0 [ 214.976447][T11368] ? __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 214.976460][T11368] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 214.976477][T11368] ? rcu_is_watching+0x13/0xc0 [ 214.976494][T11368] ? __lock_acquire+0x5c0/0x1f40 [ 214.976514][T11368] ? __css_rstat_updated+0x1ce/0x590 [ 214.976532][T11368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.976549][T11368] ? policy_nodemask+0xed/0x4f0 [ 214.976567][T11368] alloc_pages_mpol+0x201/0x550 [ 214.976584][T11368] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.976602][T11368] ? page_table_check_set+0x31e/0x580 [ 214.976620][T11368] folio_alloc_mpol_noprof+0x36/0x260 [ 214.976639][T11368] vma_alloc_folio_noprof+0xed/0x1d0 [ 214.976657][T11368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 214.976674][T11368] ? rcu_read_unlock+0x2d/0xb0 [ 214.976691][T11368] ? rcu_read_unlock+0x2d/0xb0 [ 214.976711][T11368] do_wp_page+0xe11/0x45c0 [ 214.976733][T11368] ? lock_acquire+0x1d1/0x380 [ 214.976748][T11368] ? __pfx_do_wp_page+0x10/0x10 [ 214.976764][T11368] ? do_raw_spin_lock+0x128/0x260 [ 214.976783][T11368] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 214.976806][T11368] __handle_mm_fault+0x1cd2/0x2f60 [ 214.976827][T11368] ? __pfx___handle_mm_fault+0x10/0x10 [ 214.976844][T11368] ? __pfx_mt_find+0x10/0x10 [ 214.976869][T11368] ? find_vma+0xbf/0x140 [ 214.976881][T11368] ? __pfx_find_vma+0x10/0x10 [ 214.976895][T11368] handle_mm_fault+0x363/0xa20 [ 214.976915][T11368] do_user_addr_fault+0x745/0x12f0 [ 214.976932][T11368] exc_page_fault+0x6f/0xd0 [ 214.976949][T11368] asm_exc_page_fault+0x26/0x30 [ 214.976960][T11368] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 214.976974][T11368] Code: 00 e8 74 67 e5 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 7c ad 57 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 214.976986][T11368] RSP: 0000:ffffc90027247908 EFLAGS: 00050246 [ 214.976996][T11368] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 214.977003][T11368] RDX: 0000000000000001 RSI: ffff88800c00a180 RDI: 000000008000a000 [ 214.977011][T11368] RBP: ffffc90027247d10 R08: 0000000000000000 R09: ffffed10018015ff [ 214.977018][T11368] R10: ffff88800c00afff R11: 0000000000000000 R12: ffff88800c00a000 [ 214.977025][T11368] R13: 0000000000009b80 R14: 0000000080009e80 R15: 0000000000001000 [ 214.977041][T11368] ? _copy_to_iter+0x4b4/0x1720 [ 214.977057][T11368] ? __pfx__copy_to_iter+0x10/0x10 [ 214.977071][T11368] ? rcu_is_watching+0x13/0xc0 [ 214.977083][T11368] ? __up_read+0x333/0x980 [ 214.977128][T11368] copy_page_to_iter+0x285/0x370 [ 214.977144][T11368] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 214.977166][T11368] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 214.977189][T11368] ? iovec_from_user+0xda/0x140 [ 214.977205][T11368] process_vm_rw+0x226/0x2d0 [ 214.977222][T11368] ? __pfx_process_vm_rw+0x10/0x10 [ 214.977238][T11368] ? find_held_lock+0x2b/0x80 [ 214.977250][T11368] ? ksys_write+0x190/0x250 [ 214.977274][T11368] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 214.977287][T11368] ? __task_pid_nr_ns+0x1ca/0x510 [ 214.977299][T11368] ? __task_pid_nr_ns+0x1ca/0x510 [ 214.977313][T11368] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 214.977325][T11368] ? __do_fast_syscall_32+0xb3/0x8b0 [ 214.977342][T11368] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.977358][T11368] __do_fast_syscall_32+0x13a/0x8b0 [ 214.977376][T11368] do_fast_syscall_32+0x32/0x70 [ 214.977393][T11368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.977407][T11368] RIP: 0023:0xf7f87fec [ 214.977419][T11368] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 214.977425][T11368] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 214.977436][T11368] RAX: ffffffffffffffda RBX: 00000000000000d4 RCX: 0000000080008400 [ 214.977443][T11368] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 214.977472][T11368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.977480][T11368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.977488][T11368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.977504][T11368] [ 215.152572][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.152624][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 215.232621][ T5746] Bluetooth: hci3: command 0x0406 tx timeout [ 215.392633][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.744365][ T5746] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 215.820394][T11370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.820584][T11370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.820726][T11370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.820851][T11370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.820914][T11370] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 215.893786][T11400] FAULT_INJECTION: forcing a failure. [ 215.893786][T11400] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.893860][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.1.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.893888][T11400] Tainted: [L]=SOFTLOCKUP [ 215.893894][T11400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.893901][T11400] Call Trace: [ 215.893906][T11400] [ 215.893911][T11400] dump_stack_lvl+0x100/0x190 [ 215.893931][T11400] should_fail_ex.cold+0x5/0xa [ 215.893946][T11400] get_futex_key+0xf72/0x14f0 [ 215.893967][T11400] ? __pfx_get_futex_key+0x10/0x10 [ 215.893986][T11400] ? refill_pi_state_cache+0x91/0x260 [ 215.894003][T11400] futex_lock_pi+0x1eb/0x7e0 [ 215.894018][T11400] ? __pfx_futex_lock_pi+0x10/0x10 [ 215.894036][T11400] ? __pfx___futex_wait+0x10/0x10 [ 215.894054][T11400] ? __pfx_try_to_wake_up+0x10/0x10 [ 215.894095][T11400] ? __pfx_futex_wake_mark+0x10/0x10 [ 215.894115][T11400] ? putname+0xb1/0x110 [ 215.894131][T11400] do_futex+0x371/0x440 [ 215.894143][T11400] ? __pfx_do_futex+0x10/0x10 [ 215.894153][T11400] ? do_sys_openat2+0x159/0x1e0 [ 215.894169][T11400] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.894184][T11400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.894204][T11400] __ia32_sys_futex_time32+0x2f4/0x470 [ 215.894218][T11400] ? xfd_validate_state+0x129/0x190 [ 215.894235][T11400] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 215.894253][T11400] __do_fast_syscall_32+0x13a/0x8b0 [ 215.894269][T11400] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.894286][T11400] do_fast_syscall_32+0x32/0x70 [ 215.894304][T11400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.894318][T11400] RIP: 0023:0xf7f05fec [ 215.894331][T11400] Code: Unable to access opcode bytes at 0xf7f05fc2. [ 215.894337][T11400] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 215.894351][T11400] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 000000000000000d [ 215.894359][T11400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.894366][T11400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.894373][T11400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.894380][T11400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.894396][T11400] [ 215.971654][T11404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.008616][T11402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.257319][T11421] jffs2: notice: (11421) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.346501][T11427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.379281][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.383756][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.386244][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.391001][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.395410][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.432523][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.443898][T11433] kvm: Disabled LAPIC found during irq injection [ 216.443941][T11433] kvm: apic: phys broadcast and lowest prio [ 216.455478][ T43] audit: type=1326 audit(1788955466.296:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.7.1834" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x0 [ 216.815051][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.815237][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.815560][T11428] bridge_slave_0: entered allmulticast mode [ 216.816851][T11428] bridge_slave_0: entered promiscuous mode [ 216.819482][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.819615][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.819710][T11428] bridge_slave_1: entered allmulticast mode [ 216.821268][T11428] bridge_slave_1: entered promiscuous mode [ 216.857262][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.860191][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.865044][ T5735] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 216.879758][T11428] team0: Port device team_slave_0 added [ 216.882219][T11428] team0: Port device team_slave_1 added [ 216.919802][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.919861][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.920167][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.923254][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.923267][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.923289][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.977283][T11428] hsr_slave_0: entered promiscuous mode [ 216.977870][T11428] hsr_slave_1: entered promiscuous mode [ 216.978163][T11428] debugfs: 'hsr0' already exists in 'hsr' [ 216.978175][T11428] Cannot create hsr debugfs directory [ 217.012561][ T5735] usb 6-1: Using ep0 maxpacket: 16 [ 217.015157][ T5735] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.019354][ T5735] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.019414][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.019442][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.019467][ T5735] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.019493][ T5735] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.037032][ T5735] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.040416][ T5735] usb 6-1: Manufacturer: syz [ 217.044584][ T5735] usb 6-1: config 0 descriptor?? [ 217.152562][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.302634][ T5735] rc_core: IR keymap rc-hauppauge not found [ 217.302677][ T5735] Registered IR keymap rc-empty [ 217.303130][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.322802][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.334796][T11479] jffs2: notice: (11479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 217.343183][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 217.344013][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 217.352637][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.372649][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.402696][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.422784][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.446543][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.462684][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.472679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.492769][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.512933][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.532640][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.562632][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 217.583235][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1844'. [ 217.584329][ T5735] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 217.584347][ T5735] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.593045][ T5735] usb 6-1: USB disconnect, device number 23 [ 217.766654][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1844'. [ 217.766723][T11500] nbd: nbd64 already in use [ 217.775746][T11428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.783220][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.783845][T11428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.794039][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.797156][T11428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.812505][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.815234][T11428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.836978][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.863506][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.863553][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 217.870704][T10927] udevd[10927]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 217.914029][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.922387][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.927196][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.927278][ T7419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.943351][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.943432][ T7419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.175383][T11551] syzkaller0: entered promiscuous mode [ 218.175450][T11551] syzkaller0: entered allmulticast mode [ 218.176704][T11551] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 218.286167][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.340136][T11428] veth0_vlan: entered promiscuous mode [ 218.367563][T11428] veth1_vlan: entered promiscuous mode [ 218.389970][T11428] veth0_macvtap: entered promiscuous mode [ 218.392055][T11428] veth1_macvtap: entered promiscuous mode [ 218.398411][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.400196][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.423470][ T5746] Bluetooth: hci3: command tx timeout [ 218.454501][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.454792][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.454956][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.455210][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.502513][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.509112][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.509158][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.527749][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.527812][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.567970][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 218.582587][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 218.587682][T11587] kvm: emulating exchange as write [ 218.592891][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 218.601396][T11591] FAULT_INJECTION: forcing a failure. [ 218.601396][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 218.601450][T11591] CPU: 3 UID: 0 PID: 11591 Comm: syz.3.1828 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.601470][T11591] Tainted: [L]=SOFTLOCKUP [ 218.601475][T11591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.601482][T11591] Call Trace: [ 218.601488][T11591] [ 218.601493][T11591] dump_stack_lvl+0x100/0x190 [ 218.601512][T11591] should_fail_ex.cold+0x5/0xa [ 218.601529][T11591] should_failslab+0xc2/0x120 [ 218.601545][T11591] __kvmalloc_node_noprof+0x113/0x9b0 [ 218.601560][T11591] ? bpf_prog_pack_alloc+0x1a6/0x950 [ 218.601577][T11591] ? bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 218.601591][T11591] bpf_jit_binary_pack_alloc+0xda/0x2c0 [ 218.601603][T11591] ? __pfx_jit_fill_hole+0x10/0x10 [ 218.601623][T11591] bpf_int_jit_compile+0x526/0x1820 [ 218.601643][T11591] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 218.601676][T11591] __bpf_prog_select_runtime+0x3dc/0x970 [ 218.601691][T11591] ? __asan_memcpy+0x3c/0x60 [ 218.601705][T11591] bpf_prepare_filter+0xd32/0x11e0 [ 218.601723][T11591] ? __pfx_seccomp_check_filter+0x10/0x10 [ 218.601744][T11591] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 218.601766][T11591] ? __asan_memcpy+0x3c/0x60 [ 218.601777][T11591] ? kmemdup_noprof+0x49/0x60 [ 218.601798][T11591] bpf_prog_create_from_user+0x1df/0x2e0 [ 218.601816][T11591] ? __pfx_seccomp_check_filter+0x10/0x10 [ 218.601836][T11591] do_seccomp+0x7f7/0x2730 [ 218.601852][T11591] ? __pfx_do_seccomp+0x10/0x10 [ 218.601865][T11591] ? xfd_validate_state+0x129/0x190 [ 218.601891][T11591] __do_fast_syscall_32+0x13a/0x8b0 [ 218.601910][T11591] do_fast_syscall_32+0x32/0x70 [ 218.601927][T11591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.601942][T11591] RIP: 0023:0xf7f03fec [ 218.601960][T11591] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 218.601966][T11591] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 218.601978][T11591] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 218.601985][T11591] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.601993][T11591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.602001][T11591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 218.602008][T11591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.602024][T11591] [ 218.730903][T11599] tipc: Enabled bearer , priority 1 [ 218.736360][T11597] tipc: Resetting bearer [ 218.771204][T11597] tipc: Disabling bearer [ 219.152948][ T7420] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.153177][ T7420] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.153210][ T7420] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.153238][ T7420] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.153267][ T7420] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.416649][ T5749] Bluetooth: Frame is too long (len 10, expected len 4) [ 219.542569][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.942589][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.209659][T11681] loop2: detected capacity change from 0 to 4095 [ 220.259006][T11681] Buffer I/O error on dev loop2, logical block 511, async page read [ 220.267075][T10927] Buffer I/O error on dev loop2, logical block 511, async page read [ 220.502572][ T5749] Bluetooth: hci3: command tx timeout [ 220.583668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.226148][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 221.226188][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.632563][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.002521][ T5735] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 222.093650][ T5746] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 222.160709][T11708] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 222.175734][ T5735] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 222.179633][ T5735] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.361117][T11718] FAULT_INJECTION: forcing a failure. [ 222.361117][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.361172][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.3.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.361200][T11718] Tainted: [L]=SOFTLOCKUP [ 222.361206][T11718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.361213][T11718] Call Trace: [ 222.361217][T11718] [ 222.361223][T11718] dump_stack_lvl+0x100/0x190 [ 222.361242][T11718] should_fail_ex.cold+0x5/0xa [ 222.361258][T11718] _copy_from_user+0x2e/0xd0 [ 222.361274][T11718] do_handle_open+0x6ba/0xf20 [ 222.361292][T11718] ? __pfx_do_handle_open+0x10/0x10 [ 222.361312][T11718] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 222.361331][T11718] ? __do_fast_syscall_32+0x13a/0x8b0 [ 222.361349][T11718] __do_fast_syscall_32+0x13a/0x8b0 [ 222.361375][T11718] do_fast_syscall_32+0x32/0x70 [ 222.361400][T11718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.361425][T11718] RIP: 0023:0xf7f03fec [ 222.361446][T11718] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 222.361455][T11718] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 222.361475][T11718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 222.361488][T11718] RDX: 0000000000422001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.361500][T11718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.361512][T11718] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.361525][T11718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.361552][T11718] [ 222.403763][ T5735] cdc_acm 12-1:1.0: ttyACM0: USB ACM device [ 222.582643][ T5746] Bluetooth: hci3: command tx timeout [ 222.672520][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.713478][T11725] gre2: entered promiscuous mode [ 222.753935][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 222.755080][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 222.936143][ T5746] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 223.276045][T11755] FAULT_INJECTION: forcing a failure. [ 223.276045][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 223.284453][T11755] CPU: 1 UID: 0 PID: 11755 Comm: syz.1.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.284498][T11755] Tainted: [L]=SOFTLOCKUP [ 223.284508][T11755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.284522][T11755] Call Trace: [ 223.284531][T11755] [ 223.284539][T11755] dump_stack_lvl+0x100/0x190 [ 223.284570][T11755] should_fail_ex.cold+0x5/0xa [ 223.284597][T11755] should_failslab+0xc2/0x120 [ 223.284623][T11755] __kmalloc_cache_noprof+0x91/0x6d0 [ 223.284656][T11755] ? tcf_action_init_1+0x27e/0x6c0 [ 223.284684][T11755] tcf_action_init_1+0x27e/0x6c0 [ 223.284712][T11755] ? __pfx_tcf_action_init_1+0x10/0x10 [ 223.284735][T11755] ? tc_action_load_ops+0x1f5/0x3e0 [ 223.284762][T11755] ? __pfx_tc_action_load_ops+0x10/0x10 [ 223.284799][T11755] ? __nla_parse+0x40/0x60 [ 223.284821][T11755] tcf_action_init+0x43f/0xa60 [ 223.284853][T11755] ? __pfx_tcf_action_init+0x10/0x10 [ 223.284924][T11755] ? __lock_acquire+0x5c0/0x1f40 [ 223.284958][T11755] tcf_action_add+0xed/0x5c0 [ 223.284986][T11755] ? __pfx_tcf_action_add+0x10/0x10 [ 223.285024][T11755] ? bpf_ksym_find+0x124/0x1c0 [ 223.285091][T11755] ? __nla_parse+0x40/0x60 [ 223.285120][T11755] tc_ctl_action+0x2e3/0x470 [ 223.285148][T11755] ? __pfx_tc_ctl_action+0x10/0x10 [ 223.285184][T11755] ? __pfx_tc_ctl_action+0x10/0x10 [ 223.285212][T11755] rtnetlink_rcv_msg+0x3c9/0xe90 [ 223.285244][T11755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.285274][T11755] ? __lock_acquire+0x5c0/0x1f40 [ 223.285299][T11755] ? __netlink_lookup+0xa9/0x900 [ 223.285323][T11755] netlink_rcv_skb+0x159/0x420 [ 223.285344][T11755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.285373][T11755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.285404][T11755] ? netlink_deliver_tap+0x1ae/0xcc0 [ 223.285429][T11755] netlink_unicast+0x585/0x850 [ 223.285455][T11755] ? __pfx_netlink_unicast+0x10/0x10 [ 223.285484][T11755] netlink_sendmsg+0x8b0/0xda0 [ 223.285510][T11755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.285536][T11755] ? apparmor_socket_sendmsg+0x165/0x280 [ 223.285566][T11755] ____sys_sendmsg+0xa4d/0xbe0 [ 223.285595][T11755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.285619][T11755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.285662][T11755] ___sys_sendmsg+0x190/0x1e0 [ 223.285683][T11755] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.285702][T11755] ? futex_wait+0x11e/0x370 [ 223.285736][T11755] ? find_held_lock+0x2b/0x80 [ 223.285774][T11755] __sys_sendmsg+0x160/0x210 [ 223.285799][T11755] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.285839][T11755] __do_fast_syscall_32+0x13a/0x8b0 [ 223.285872][T11755] do_fast_syscall_32+0x32/0x70 [ 223.285901][T11755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.285926][T11755] RIP: 0023:0xf7f05fec [ 223.285947][T11755] Code: Unable to access opcode bytes at 0xf7f05fc2. [ 223.285957][T11755] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 223.285978][T11755] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 223.285992][T11755] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.286005][T11755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.286018][T11755] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.286030][T11755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.286059][T11755] [ 223.311366][T11757] 9pnet_fd: p9_fd_create_tcp (11757): problem connecting socket to 127.0.0.1 [ 223.712560][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.746540][T11765] loop2: detected capacity change from 0 to 4095 [ 223.788339][T11765] Buffer I/O error on dev loop2, logical block 511, async page read [ 223.792941][T10927] Buffer I/O error on dev loop2, logical block 511, async page read [ 224.113808][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.219994][T11767] jffs2: notice: (11767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.308099][T11771] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 224.308762][T11771] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 224.459378][ T5746] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 224.672605][ T5746] Bluetooth: hci3: command tx timeout [ 224.752507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.992580][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.792526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.192584][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.544290][T11788] FAULT_INJECTION: forcing a failure. [ 226.544290][T11788] name failslab, interval 1, probability 0, space 0, times 0 [ 226.547692][T11788] CPU: 2 UID: 0 PID: 11788 Comm: syz.3.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.547713][T11788] Tainted: [L]=SOFTLOCKUP [ 226.547719][T11788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.547726][T11788] Call Trace: [ 226.547730][T11788] [ 226.547736][T11788] dump_stack_lvl+0x100/0x190 [ 226.547756][T11788] should_fail_ex.cold+0x5/0xa [ 226.547772][T11788] should_failslab+0xc2/0x120 [ 226.547788][T11788] __kvmalloc_node_noprof+0x113/0x9b0 [ 226.547803][T11788] ? __print_lock_name+0x61/0x80 [ 226.547816][T11788] ? bpf_test_run_xdp_live+0x16f/0x760 [ 226.547838][T11788] bpf_test_run_xdp_live+0x16f/0x760 [ 226.547858][T11788] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 226.547878][T11788] ? __pfx_try_to_wake_up+0x10/0x10 [ 226.547897][T11788] ? lock_acquire+0x1d1/0x380 [ 226.547914][T11788] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 226.547931][T11788] ? rcu_is_watching+0x13/0xc0 [ 226.547952][T11788] ? 0xffffffffa0405200 [ 226.547963][T11788] ? 0xffffffffa0405200 [ 226.547973][T11788] ? 0xffffffffa0405200 [ 226.547982][T11788] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 226.548004][T11788] bpf_prog_test_run_xdp+0xd86/0x1670 [ 226.548021][T11788] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.548037][T11788] ? fput+0x7c/0x100 [ 226.548051][T11788] ? __bpf_prog_get+0x97/0x290 [ 226.548066][T11788] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.548079][T11788] __sys_bpf+0x2265/0x4a30 [ 226.548094][T11788] ? __pfx___sys_bpf+0x10/0x10 [ 226.548107][T11788] ? find_held_lock+0x2b/0x80 [ 226.548119][T11788] ? futex_wake+0x4ea/0x5e0 [ 226.548142][T11788] ? rcu_read_lock_any_held+0x6a/0x90 [ 226.548155][T11788] ? find_held_lock+0x2b/0x80 [ 226.548167][T11788] ? ksys_write+0x190/0x250 [ 226.548178][T11788] ? ksys_write+0x190/0x250 [ 226.548198][T11788] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 226.548210][T11788] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 226.548223][T11788] ? fput+0x7c/0x100 [ 226.548237][T11788] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 226.548250][T11788] ? ksys_write+0x1ac/0x250 [ 226.548263][T11788] ? __ia32_sys_bpf+0xcc/0x170 [ 226.548274][T11788] __ia32_sys_bpf+0xcc/0x170 [ 226.548286][T11788] ? __do_fast_syscall_32+0xb3/0x8b0 [ 226.548305][T11788] __do_fast_syscall_32+0x13a/0x8b0 [ 226.548324][T11788] do_fast_syscall_32+0x32/0x70 [ 226.548341][T11788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.548355][T11788] RIP: 0023:0xf7f03fec [ 226.548385][T11788] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 226.548392][T11788] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 226.548405][T11788] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 226.548413][T11788] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.548421][T11788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.548428][T11788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.548435][T11788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.548450][T11788] [ 226.791633][T11804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.830484][T11808] syzkaller1: entered promiscuous mode [ 226.830546][T11808] syzkaller1: entered allmulticast mode [ 226.834153][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.875751][T11802] FAULT_INJECTION: forcing a failure. [ 226.875751][T11802] name failslab, interval 1, probability 0, space 0, times 0 [ 226.875800][T11802] CPU: 1 UID: 0 PID: 11802 Comm: syz.1.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.875828][T11802] Tainted: [L]=SOFTLOCKUP [ 226.875834][T11802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.875842][T11802] Call Trace: [ 226.875846][T11802] [ 226.875852][T11802] dump_stack_lvl+0x100/0x190 [ 226.875871][T11802] should_fail_ex.cold+0x5/0xa [ 226.875887][T11802] should_failslab+0xc2/0x120 [ 226.875903][T11802] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 226.875917][T11802] ? xas_split_alloc+0x182/0x530 [ 226.875937][T11802] xas_split_alloc+0x182/0x530 [ 226.875958][T11802] __folio_split+0x95e/0x1bf0 [ 226.875975][T11802] ? __pfx___folio_split+0x10/0x10 [ 226.875986][T11802] ? folio_alloc_swap+0xbd8/0x1e70 [ 226.876005][T11802] ? folio_alloc_swap+0x4c6/0x1e70 [ 226.876021][T11802] shmem_writeout+0x786/0x1a00 [ 226.876042][T11802] ? __pfx_shmem_writeout+0x10/0x10 [ 226.876059][T11802] ? __pfx_try_to_unmap+0x10/0x10 [ 226.876076][T11802] ? find_held_lock+0x2b/0x80 [ 226.876089][T11802] ? inode_to_bdi+0x9e/0x160 [ 226.876101][T11802] ? folio_clear_dirty_for_io+0x178/0x960 [ 226.876122][T11802] shrink_folio_list+0x399a/0x5e40 [ 226.876143][T11802] ? __pfx_shrink_folio_list+0x10/0x10 [ 226.876160][T11802] ? __lock_acquire+0x5c0/0x1f40 [ 226.876178][T11802] ? unwind_next_frame+0xbd/0x2090 [ 226.876197][T11802] ? lock_acquire+0x1d1/0x380 [ 226.876212][T11802] ? unwind_next_frame+0xbd/0x2090 [ 226.876237][T11802] ? __lock_acquire+0x5c0/0x1f40 [ 226.876252][T11802] ? __css_rstat_updated+0x1ce/0x590 [ 226.876269][T11802] ? __pfx___css_rstat_updated+0x10/0x10 [ 226.876288][T11802] reclaim_folio_list+0xe9/0x5e0 [ 226.876305][T11802] ? __pfx_reclaim_folio_list+0x10/0x10 [ 226.876319][T11802] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 226.876339][T11802] ? lru_gen_update_size+0x431/0xe20 [ 226.876356][T11802] ? lru_gen_del_folio+0x382/0x5f0 [ 226.876372][T11802] reclaim_pages+0x428/0x5e0 [ 226.876389][T11802] ? __pfx_reclaim_pages+0x10/0x10 [ 226.876403][T11802] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 226.876424][T11802] ? folio_isolate_lru+0xd6/0xe90 [ 226.876449][T11802] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 226.876486][T11802] ? rcu_read_unlock+0x17/0x60 [ 226.876511][T11802] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 226.876529][T11802] ? __mod_zone_page_state+0xdb/0x190 [ 226.876550][T11802] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 226.876568][T11802] walk_pgd_range+0xbef/0x1e00 [ 226.876585][T11802] ? find_held_lock+0x2b/0x80 [ 226.876603][T11802] ? __pfx_walk_pgd_range+0x10/0x10 [ 226.876616][T11802] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 226.876635][T11802] __walk_page_range+0x171/0x850 [ 226.876655][T11802] walk_page_range_vma_unsafe+0x209/0x8f0 [ 226.876670][T11802] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 226.876686][T11802] ? find_held_lock+0x2b/0x80 [ 226.876703][T11802] ? mlock_drain_local+0x254/0x4e0 [ 226.876714][T11802] ? mlock_drain_local+0x254/0x4e0 [ 226.876726][T11802] walk_page_range_vma+0x63/0x90 [ 226.876740][T11802] madvise_pageout+0x29e/0x5b0 [ 226.876757][T11802] ? __pfx_madvise_pageout+0x10/0x10 [ 226.876772][T11802] ? lock_acquire+0x1d1/0x380 [ 226.876797][T11802] madvise_vma_behavior+0x48b/0x2350 [ 226.876815][T11802] ? mas_prev+0xa4/0x100 [ 226.876826][T11802] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 226.876844][T11802] ? mas_walk+0x260/0x310 [ 226.876860][T11802] ? find_vma_prev+0xd8/0x150 [ 226.876874][T11802] ? __pfx_find_vma_prev+0x10/0x10 [ 226.876887][T11802] ? lock_acquire+0x1d1/0x380 [ 226.876910][T11802] madvise_walk_vmas+0x30e/0xc50 [ 226.876929][T11802] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 226.876946][T11802] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.876963][T11802] ? lock_acquire+0x1d1/0x380 [ 226.876980][T11802] madvise_do_behavior+0x1ea/0x510 [ 226.876998][T11802] ? __pfx_madvise_do_behavior+0x10/0x10 [ 226.877015][T11802] ? down_read+0x13b/0x4c0 [ 226.877060][T11802] do_madvise+0x238/0x290 [ 226.877079][T11802] ? __pfx_do_madvise+0x10/0x10 [ 226.877094][T11802] ? do_futex+0x190/0x440 [ 226.877108][T11802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 226.877131][T11802] ? ksys_write+0x1ac/0x250 [ 226.877143][T11802] ? __pfx_ksys_write+0x10/0x10 [ 226.877157][T11802] __ia32_sys_madvise+0xa7/0x110 [ 226.877173][T11802] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.877189][T11802] __do_fast_syscall_32+0x13a/0x8b0 [ 226.877208][T11802] do_fast_syscall_32+0x32/0x70 [ 226.877225][T11802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.877239][T11802] RIP: 0023:0xf7f05fec [ 226.877254][T11802] Code: Unable to access opcode bytes at 0xf7f05fc2. [ 226.877259][T11802] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 226.877271][T11802] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 226.877278][T11802] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.877285][T11802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.877291][T11802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.877298][T11802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.877312][T11802] [ 227.068876][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.097190][T11819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.230356][T11823] FAULT_INJECTION: forcing a failure. [ 227.230356][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 227.230413][T11823] CPU: 3 UID: 0 PID: 11823 Comm: syz.3.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.230441][T11823] Tainted: [L]=SOFTLOCKUP [ 227.230447][T11823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.230454][T11823] Call Trace: [ 227.230459][T11823] [ 227.230466][T11823] dump_stack_lvl+0x100/0x190 [ 227.230485][T11823] should_fail_ex.cold+0x5/0xa [ 227.230502][T11823] should_failslab+0xc2/0x120 [ 227.230519][T11823] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.230538][T11823] ? find_held_lock+0x2b/0x80 [ 227.230550][T11823] ? tipc_conn_alloc+0x48/0x590 [ 227.230569][T11823] tipc_conn_alloc+0x48/0x590 [ 227.230584][T11823] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 227.230602][T11823] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 227.230620][T11823] ? net_generic+0xea/0x2a0 [ 227.230641][T11823] tipc_group_create+0x4ab/0x660 [ 227.230666][T11823] tipc_setsockopt+0x611/0xe30 [ 227.230681][T11823] ? __pfx_tipc_setsockopt+0x10/0x10 [ 227.230693][T11823] ? lock_acquire+0x1d1/0x380 [ 227.230709][T11823] ? __fget_files+0x34/0x3d0 [ 227.230729][T11823] ? __pfx_tipc_setsockopt+0x10/0x10 [ 227.230743][T11823] do_sock_setsockopt+0xf3/0x1d0 [ 227.230762][T11823] __sys_setsockopt+0x119/0x190 [ 227.230779][T11823] __ia32_sys_setsockopt+0xbc/0x160 [ 227.230793][T11823] ? __do_fast_syscall_32+0xb3/0x8b0 [ 227.230810][T11823] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.230826][T11823] __do_fast_syscall_32+0x13a/0x8b0 [ 227.230844][T11823] do_fast_syscall_32+0x32/0x70 [ 227.230861][T11823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.230876][T11823] RIP: 0023:0xf7f03fec [ 227.230900][T11823] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 227.230907][T11823] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 227.230918][T11823] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000010f [ 227.230926][T11823] RDX: 0000000000000087 RSI: 0000000080000180 RDI: 00000000000004bd [ 227.230934][T11823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.230940][T11823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.230948][T11823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.230963][T11823] [ 227.364309][T11833] jffs2: notice: (11833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.456403][ T5746] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 227.862536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.939502][T11871] null_blk: disk nullb1 created [ 227.943922][ T30] usb 12-1: USB disconnect, device number 14 [ 228.262994][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.272599][ T5741] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 228.434065][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 228.434488][ T5741] usb 6-1: not running at top speed; connect to a high speed hub [ 228.434504][ T5741] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 228.435272][ T5741] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 228.435290][ T5741] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 228.435300][ T5741] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 228.435309][ T5741] usb 6-1: config 14 has no interface number 0 [ 228.435318][ T5741] usb 6-1: config 14 has no interface number 1 [ 228.435342][ T5741] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 228.435354][ T5741] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 228.435367][ T5741] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.435379][ T5741] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.435391][ T5741] usb 6-1: config 14 interface 57 has no altsetting 0 [ 228.435400][ T5741] usb 6-1: config 14 interface 228 has no altsetting 0 [ 228.436878][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.436890][ T5741] usb 6-1: Product: syz [ 228.436897][ T5741] usb 6-1: Manufacturer: syz [ 228.436905][ T5741] usb 6-1: SerialNumber: syz [ 228.851754][ T5741] legousbtower 6-1:14.57: interrupt endpoints not found [ 228.902538][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.015297][ T5746] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 229.125243][T11903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 229.142571][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.256773][ T5741] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 229.257658][ T5741] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 229.498440][T11912] Bluetooth: hci0: invalid len left 7, exp >= 119 [ 229.657496][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1991'. [ 229.660654][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1991'. [ 229.663855][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1991'. [ 229.822808][T11931] usb 6-1: Couldn't submit interrupt_in_urb -90 [ 229.930219][T11937] team_slave_1: entered promiscuous mode [ 229.937424][T11936] team_slave_1: left promiscuous mode [ 229.952535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.023424][ T5833] usb 6-1: USB disconnect, device number 24 [ 230.027545][ T5833] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 230.784480][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 230.848016][ T5749] Bluetooth: hci4: sending frame failed (-49) [ 230.850955][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 230.982544][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.640302][T11984] FAULT_INJECTION: forcing a failure. [ 231.640302][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.640368][T11984] CPU: 2 UID: 0 PID: 11984 Comm: syz.9.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.640423][T11984] Tainted: [L]=SOFTLOCKUP [ 231.640431][T11984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.640443][T11984] Call Trace: [ 231.640451][T11984] [ 231.640459][T11984] dump_stack_lvl+0x100/0x190 [ 231.640488][T11984] should_fail_ex.cold+0x5/0xa [ 231.640514][T11984] _copy_from_user+0x2e/0xd0 [ 231.640539][T11984] memdup_user+0x6b/0xe0 [ 231.640559][T11984] security_setselfattr+0x82/0x320 [ 231.640586][T11984] __ia32_sys_lsm_set_self_attr+0x10f/0x1a0 [ 231.640617][T11984] __do_fast_syscall_32+0x13a/0x8b0 [ 231.640650][T11984] do_fast_syscall_32+0x32/0x70 [ 231.640680][T11984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.640703][T11984] RIP: 0023:0xf705efec [ 231.640724][T11984] Code: Unable to access opcode bytes at 0xf705efc2. [ 231.640734][T11984] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001cc [ 231.640754][T11984] RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 0000000000000000 [ 231.640768][T11984] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.640780][T11984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.640791][T11984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.640803][T11984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.640829][T11984] [ 231.655883][ T7419] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.881911][ T5736] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 232.022545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.078318][T11997] loop5: detected capacity change from 0 to 7 [ 232.089478][T11997] Dev loop5: unable to read RDB block 7 [ 232.089548][T11997] loop5: AHDI p1 p2 p3 [ 232.089595][T11997] loop5: partition table partially beyond EOD, truncated [ 232.089784][T11997] loop5: p1 start 1818582900 is beyond EOD, truncated [ 232.089803][T11997] loop5: p3 start 335544320 is beyond EOD, truncated [ 232.135033][ T5736] Bluetooth: hci1: unexpected event for opcode 0x041b [ 232.340695][T12015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2029'. [ 232.622749][ T5811] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 232.783853][ T5811] usb 14-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 232.784728][ T5811] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.784743][ T5811] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 232.784763][ T5811] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.789141][ T5811] spcp8x5 14-1:1.0: SPCP8x5 converter detected [ 232.793505][ T5811] usb 14-1: SPCP8x5 converter now attached to ttyUSB0 [ 233.063967][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.142606][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 233.158159][T12021] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 233.159597][T12021] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 233.159865][T12021] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 233.254614][T12021] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 233.290848][T12032] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 233.308410][T12032] bond1: entered promiscuous mode [ 233.308776][T12032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.338738][T12032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.338967][T12032] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 233.339054][T12032] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 233.348661][T12032] bond1: (slave gre1): making interface the new active one [ 233.348685][T12032] gre1: entered promiscuous mode [ 233.351482][T12032] bond1: (slave gre1): Enslaving as an active interface with an up link [ 233.372927][T12018] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 233.373761][ T25] usb 14-1: USB disconnect, device number 9 [ 233.379673][ T25] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 233.380259][ T25] spcp8x5 14-1:1.0: device disconnected [ 233.442691][ T1039] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 233.562354][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 233.593205][ T1039] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 233.595835][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 233.595852][ T1039] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.595863][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 233.595882][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.599541][T12028] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 233.600686][ T1039] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 233.606372][ T1039] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 233.702588][ T5746] Bluetooth: hci5: command 0x1003 tx timeout [ 233.702730][ T5749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.769498][T12045] FAULT_INJECTION: forcing a failure. [ 233.769498][T12045] name failslab, interval 1, probability 0, space 0, times 0 [ 233.769590][T12045] CPU: 1 UID: 0 PID: 12045 Comm: syz.7.2039 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.769608][T12045] Tainted: [L]=SOFTLOCKUP [ 233.769612][T12045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.769619][T12045] Call Trace: [ 233.769625][T12045] [ 233.769630][T12045] dump_stack_lvl+0x100/0x190 [ 233.769649][T12045] should_fail_ex.cold+0x5/0xa [ 233.769666][T12045] should_failslab+0xc2/0x120 [ 233.769682][T12045] __kmalloc_cache_noprof+0x91/0x6d0 [ 233.769714][T12045] ? lock_acquire+0x1d1/0x380 [ 233.769730][T12045] ? rtnl_newlink+0x139/0x2620 [ 233.769747][T12045] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.769769][T12045] rtnl_newlink+0x139/0x2620 [ 233.769786][T12045] ? find_held_lock+0x2b/0x80 [ 233.769799][T12045] ? is_bpf_text_address+0x8a/0x1a0 [ 233.769816][T12045] ? is_bpf_text_address+0x8a/0x1a0 [ 233.769833][T12045] ? bpf_ksym_find+0x124/0x1c0 [ 233.769847][T12045] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.769863][T12045] ? is_bpf_text_address+0x94/0x1a0 [ 233.769879][T12045] ? kernel_text_address+0x8d/0x100 [ 233.769893][T12045] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 233.769909][T12045] ? __kernel_text_address+0xd/0x30 [ 233.769923][T12045] ? unwind_get_return_address+0x59/0xa0 [ 233.769937][T12045] ? arch_stack_walk+0xa6/0xf0 [ 233.769956][T12045] ? __lock_acquire+0x5c0/0x1f40 [ 233.769972][T12045] ? stack_depot_save_flags+0x27/0x9f0 [ 233.769989][T12045] ? stack_trace_save+0x8e/0xc0 [ 233.770003][T12045] ? __pfx_stack_trace_save+0x10/0x10 [ 233.770019][T12045] ? lock_acquire+0x1d1/0x380 [ 233.770034][T12045] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 233.770049][T12045] ? find_held_lock+0x2b/0x80 [ 233.770061][T12045] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.770077][T12045] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.770093][T12045] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.770109][T12045] rtnetlink_rcv_msg+0x95e/0xe90 [ 233.770127][T12045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.770146][T12045] ? __lock_acquire+0x5c0/0x1f40 [ 233.770162][T12045] ? __netlink_lookup+0xa9/0x900 [ 233.770176][T12045] netlink_rcv_skb+0x159/0x420 [ 233.770189][T12045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.770206][T12045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.770224][T12045] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.770239][T12045] netlink_unicast+0x585/0x850 [ 233.770254][T12045] ? __pfx_netlink_unicast+0x10/0x10 [ 233.770271][T12045] netlink_sendmsg+0x8b0/0xda0 [ 233.770287][T12045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.770301][T12045] ? apparmor_socket_sendmsg+0x165/0x280 [ 233.770318][T12045] ____sys_sendmsg+0xa4d/0xbe0 [ 233.770335][T12045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.770349][T12045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.770373][T12045] ___sys_sendmsg+0x190/0x1e0 [ 233.770385][T12045] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.770397][T12045] ? futex_wait+0x11e/0x370 [ 233.770416][T12045] ? find_held_lock+0x2b/0x80 [ 233.770437][T12045] __sys_sendmsg+0x160/0x210 [ 233.770452][T12045] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.770474][T12045] __do_fast_syscall_32+0x13a/0x8b0 [ 233.770493][T12045] do_fast_syscall_32+0x32/0x70 [ 233.770510][T12045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.770526][T12045] RIP: 0023:0xf7f53fec [ 233.770540][T12045] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 233.770545][T12045] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 233.770557][T12045] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 233.770565][T12045] RDX: 0000000020004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.770573][T12045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.770580][T12045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 233.770588][T12045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.770604][T12045] [ 233.838950][ T1039] usb 6-1: USB disconnect, device number 25 [ 233.841278][ T1039] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 233.841581][ T1039] cyberjack 6-1:1.0: device disconnected [ 233.933225][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 234.069447][T12060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3345044383 (214082840512 ns) > initial count (60632714432 ns). Using initial count to start timer. [ 234.102532][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.459683][T12098] FAULT_INJECTION: forcing a failure. [ 234.459683][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 234.459751][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.3.2059 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.459782][T12098] Tainted: [L]=SOFTLOCKUP [ 234.459788][T12098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.459796][T12098] Call Trace: [ 234.459801][T12098] [ 234.459807][T12098] dump_stack_lvl+0x100/0x190 [ 234.459826][T12098] should_fail_ex.cold+0x5/0xa [ 234.459843][T12098] should_failslab+0xc2/0x120 [ 234.459860][T12098] __kvmalloc_node_noprof+0x113/0x9b0 [ 234.459876][T12098] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 234.459892][T12098] v4l2_ctrl_new+0x4a6/0x23a0 [ 234.459905][T12098] ? fred_int80_emulation+0x5a0/0x650 [ 234.459925][T12098] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 234.459945][T12098] v4l2_ctrl_new_std+0x1bb/0x290 [ 234.459970][T12098] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 234.459987][T12098] ? rcu_is_watching+0x13/0xc0 [ 234.460005][T12098] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 234.460022][T12098] ? media_request_object_init+0x105/0x180 [ 234.460048][T12098] vim2m_open+0x140/0x830 [ 234.460077][T12098] v4l2_open+0x1d2/0x490 [ 234.460094][T12098] ? __pfx_v4l2_open+0x10/0x10 [ 234.460122][T12098] chrdev_open+0x234/0x6a0 [ 234.460143][T12098] ? __pfx_apparmor_file_open+0x10/0x10 [ 234.460170][T12098] ? __pfx_chrdev_open+0x10/0x10 [ 234.460195][T12098] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 234.460226][T12098] do_dentry_open+0x6ab/0x14d0 [ 234.460246][T12098] ? __pfx_chrdev_open+0x10/0x10 [ 234.460273][T12098] vfs_open+0x82/0x3f0 [ 234.460301][T12098] path_openat+0x19fa/0x2440 [ 234.460328][T12098] ? __pfx_path_openat+0x10/0x10 [ 234.460356][T12098] do_file_open+0x20e/0x430 [ 234.460380][T12098] ? __pfx_do_file_open+0x10/0x10 [ 234.460418][T12098] ? _raw_spin_unlock+0x28/0x50 [ 234.460439][T12098] ? alloc_fd+0x471/0x7a0 [ 234.460483][T12098] do_sys_openat2+0x10f/0x1e0 [ 234.460513][T12098] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.460541][T12098] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 234.460572][T12098] __ia32_compat_sys_openat+0x12d/0x210 [ 234.460600][T12098] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 234.460637][T12098] __do_fast_syscall_32+0x13a/0x8b0 [ 234.460663][T12098] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.460694][T12098] do_fast_syscall_32+0x32/0x70 [ 234.460722][T12098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.460744][T12098] RIP: 0023:0xf7f03fec [ 234.460765][T12098] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 234.460773][T12098] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 234.460791][T12098] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 234.460804][T12098] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.460815][T12098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.460825][T12098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.460836][T12098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.460860][T12098] [ 234.494993][T12100] smpboot: CPU 1 is now offline [ 234.671219][T12115] loop5: detected capacity change from 0 to 7 [ 234.675483][T12115] Dev loop5: unable to read RDB block 7 [ 234.675533][T12115] loop5: AHDI p1 p2 p3 [ 234.675575][T12115] loop5: partition table partially beyond EOD, truncated [ 234.675754][T12115] loop5: p1 start 1818582900 is beyond EOD, truncated [ 234.675793][T12115] loop5: p3 start 335544320 is beyond EOD, truncated [ 234.978941][T12108] FAULT_INJECTION: forcing a failure. [ 234.978941][T12108] name failslab, interval 1, probability 0, space 0, times 0 [ 234.989697][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.9.2061 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.989730][T12108] Tainted: [L]=SOFTLOCKUP [ 234.989736][T12108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.989743][T12108] Call Trace: [ 234.989749][T12108] [ 234.989755][T12108] dump_stack_lvl+0x100/0x190 [ 234.989775][T12108] should_fail_ex.cold+0x5/0xa [ 234.989790][T12108] should_failslab+0xc2/0x120 [ 234.989807][T12108] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 234.989822][T12108] ? xas_split_alloc+0x182/0x530 [ 234.989843][T12108] xas_split_alloc+0x182/0x530 [ 234.989865][T12108] __folio_split+0x95e/0x1bf0 [ 234.989883][T12108] ? __pfx___folio_split+0x10/0x10 [ 234.989894][T12108] ? folio_alloc_swap+0xbd8/0x1e70 [ 234.989913][T12108] ? folio_alloc_swap+0x4c6/0x1e70 [ 234.989931][T12108] shmem_writeout+0x786/0x1a00 [ 234.989952][T12108] ? __pfx_shmem_writeout+0x10/0x10 [ 234.989967][T12108] ? __pfx_try_to_unmap+0x10/0x10 [ 234.989985][T12108] ? find_held_lock+0x2b/0x80 [ 234.989998][T12108] ? inode_to_bdi+0x9e/0x160 [ 234.990010][T12108] ? folio_clear_dirty_for_io+0x178/0x960 [ 234.990031][T12108] shrink_folio_list+0x399a/0x5e40 [ 234.990051][T12108] ? lock_acquire+0x1d1/0x380 [ 234.990067][T12108] ? __pfx_shrink_folio_list+0x10/0x10 [ 234.990081][T12108] ? find_held_lock+0x2b/0x80 [ 234.990093][T12108] ? __page_table_check_zero+0x27f/0x410 [ 234.990108][T12108] ? __page_table_check_zero+0x27f/0x410 [ 234.990126][T12108] ? __page_table_check_zero+0x284/0x410 [ 234.990144][T12108] ? post_alloc_hook+0xed/0x120 [ 234.990162][T12108] ? get_page_from_freelist+0x110d/0x35d0 [ 234.990185][T12108] ? __lock_acquire+0x5c0/0x1f40 [ 234.990200][T12108] ? __css_rstat_updated+0x1ce/0x590 [ 234.990216][T12108] ? rcu_read_unlock+0x17/0x60 [ 234.990233][T12108] ? __pfx___css_rstat_updated+0x10/0x10 [ 234.990252][T12108] reclaim_folio_list+0xe9/0x5e0 [ 234.990269][T12108] ? __pfx_reclaim_folio_list+0x10/0x10 [ 234.990284][T12108] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 234.990304][T12108] ? lru_gen_update_size+0x431/0xe20 [ 234.990322][T12108] ? lru_gen_del_folio+0x382/0x5f0 [ 234.990337][T12108] reclaim_pages+0x428/0x5e0 [ 234.990355][T12108] ? __pfx_reclaim_pages+0x10/0x10 [ 234.990370][T12108] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 234.990388][T12108] ? folio_isolate_lru+0xd6/0xe90 [ 234.990406][T12108] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 234.990428][T12108] ? rcu_read_unlock+0x17/0x60 [ 234.990446][T12108] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 234.990463][T12108] ? __mod_zone_page_state+0xdb/0x190 [ 234.990483][T12108] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 234.990501][T12108] walk_pgd_range+0xbef/0x1e00 [ 234.990517][T12108] ? find_held_lock+0x2b/0x80 [ 234.990534][T12108] ? __pfx_walk_pgd_range+0x10/0x10 [ 234.990547][T12108] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 234.990574][T12108] __walk_page_range+0x171/0x850 [ 234.990594][T12108] walk_page_range_vma_unsafe+0x209/0x8f0 [ 234.990610][T12108] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 234.990626][T12108] ? find_held_lock+0x2b/0x80 [ 234.990639][T12108] ? mlock_drain_local+0x254/0x4e0 [ 234.990651][T12108] ? mlock_drain_local+0x254/0x4e0 [ 234.990665][T12108] walk_page_range_vma+0x63/0x90 [ 234.990680][T12108] madvise_pageout+0x29e/0x5b0 [ 234.990697][T12108] ? __pfx_madvise_pageout+0x10/0x10 [ 234.990725][T12108] madvise_vma_behavior+0x48b/0x2350 [ 234.990743][T12108] ? mas_prev+0xa4/0x100 [ 234.990756][T12108] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 234.990773][T12108] ? mas_walk+0x260/0x310 [ 234.990789][T12108] ? find_vma_prev+0xd8/0x150 [ 234.990804][T12108] ? __pfx_find_vma_prev+0x10/0x10 [ 234.990817][T12108] ? lock_acquire+0x1d1/0x380 [ 234.990840][T12108] madvise_walk_vmas+0x30e/0xc50 [ 234.990859][T12108] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 234.990876][T12108] ? __pfx_futex_wake_mark+0x10/0x10 [ 234.990893][T12108] ? lock_acquire+0x1d1/0x380 [ 234.990912][T12108] madvise_do_behavior+0x1ea/0x510 [ 234.990931][T12108] ? __pfx_madvise_do_behavior+0x10/0x10 [ 234.990948][T12108] ? down_read+0x13b/0x4c0 [ 234.990972][T12108] do_madvise+0x238/0x290 [ 234.990988][T12108] ? __pfx_do_madvise+0x10/0x10 [ 234.991004][T12108] ? do_futex+0x190/0x440 [ 234.991017][T12108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.991045][T12108] __ia32_sys_madvise+0xa7/0x110 [ 234.991061][T12108] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.991077][T12108] __do_fast_syscall_32+0x13a/0x8b0 [ 234.991096][T12108] do_fast_syscall_32+0x32/0x70 [ 234.991114][T12108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.991128][T12108] RIP: 0023:0xf705efec [ 234.991143][T12108] Code: Unable to access opcode bytes at 0xf705efc2. [ 234.991148][T12108] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 234.991160][T12108] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 234.991167][T12108] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.991174][T12108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.991181][T12108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.991188][T12108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.991203][T12108] [ 235.142730][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.899030][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 235.939530][T12153] FAULT_INJECTION: forcing a failure. [ 235.939530][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 235.939580][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.3.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.939610][T12153] Tainted: [L]=SOFTLOCKUP [ 235.939616][T12153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.939623][T12153] Call Trace: [ 235.939628][T12153] [ 235.939634][T12153] dump_stack_lvl+0x100/0x190 [ 235.939658][T12153] should_fail_ex.cold+0x5/0xa [ 235.939674][T12153] should_failslab+0xc2/0x120 [ 235.939691][T12153] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 235.939706][T12153] ? xas_split_alloc+0x182/0x530 [ 235.939727][T12153] xas_split_alloc+0x182/0x530 [ 235.939761][T12153] __folio_split+0x95e/0x1bf0 [ 235.939779][T12153] ? __pfx___folio_split+0x10/0x10 [ 235.939790][T12153] ? folio_alloc_swap+0xbd8/0x1e70 [ 235.939809][T12153] ? folio_alloc_swap+0x4c6/0x1e70 [ 235.939827][T12153] shmem_writeout+0x786/0x1a00 [ 235.939848][T12153] ? __pfx_shmem_writeout+0x10/0x10 [ 235.939865][T12153] ? __pfx_try_to_unmap+0x10/0x10 [ 235.939882][T12153] ? find_held_lock+0x2b/0x80 [ 235.939896][T12153] ? inode_to_bdi+0x9e/0x160 [ 235.939907][T12153] ? folio_clear_dirty_for_io+0x178/0x960 [ 235.939928][T12153] shrink_folio_list+0x399a/0x5e40 [ 235.939947][T12153] ? lock_acquire+0x1d1/0x380 [ 235.939963][T12153] ? __pfx_shrink_folio_list+0x10/0x10 [ 235.939977][T12153] ? find_held_lock+0x2b/0x80 [ 235.939989][T12153] ? __page_table_check_zero+0x27f/0x410 [ 235.940005][T12153] ? __page_table_check_zero+0x27f/0x410 [ 235.940023][T12153] ? __page_table_check_zero+0x284/0x410 [ 235.940041][T12153] ? post_alloc_hook+0xed/0x120 [ 235.940060][T12153] ? get_page_from_freelist+0x110d/0x35d0 [ 235.940082][T12153] ? __lock_acquire+0x5c0/0x1f40 [ 235.940097][T12153] ? __css_rstat_updated+0x1ce/0x590 [ 235.940114][T12153] ? rcu_read_unlock+0x17/0x60 [ 235.940132][T12153] ? __pfx___css_rstat_updated+0x10/0x10 [ 235.940150][T12153] reclaim_folio_list+0xe9/0x5e0 [ 235.940167][T12153] ? __pfx_reclaim_folio_list+0x10/0x10 [ 235.940182][T12153] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 235.940202][T12153] ? lru_gen_update_size+0x431/0xe20 [ 235.940219][T12153] ? lru_gen_del_folio+0x382/0x5f0 [ 235.940235][T12153] reclaim_pages+0x428/0x5e0 [ 235.940252][T12153] ? __pfx_reclaim_pages+0x10/0x10 [ 235.940266][T12153] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 235.940284][T12153] ? folio_isolate_lru+0xd6/0xe90 [ 235.940302][T12153] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 235.940324][T12153] ? rcu_read_unlock+0x17/0x60 [ 235.940341][T12153] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 235.940358][T12153] ? __mod_zone_page_state+0xdb/0x190 [ 235.940378][T12153] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 235.940396][T12153] walk_pgd_range+0xbef/0x1e00 [ 235.940412][T12153] ? find_held_lock+0x2b/0x80 [ 235.940429][T12153] ? __pfx_walk_pgd_range+0x10/0x10 [ 235.940442][T12153] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 235.940461][T12153] __walk_page_range+0x171/0x850 [ 235.940480][T12153] walk_page_range_vma_unsafe+0x209/0x8f0 [ 235.940494][T12153] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 235.940510][T12153] ? find_held_lock+0x2b/0x80 [ 235.940521][T12153] ? mlock_drain_local+0x254/0x4e0 [ 235.940532][T12153] ? mlock_drain_local+0x254/0x4e0 [ 235.940544][T12153] walk_page_range_vma+0x63/0x90 [ 235.940558][T12153] madvise_pageout+0x29e/0x5b0 [ 235.940574][T12153] ? __pfx_madvise_pageout+0x10/0x10 [ 235.940600][T12153] madvise_vma_behavior+0x48b/0x2350 [ 235.940618][T12153] ? mas_prev+0xa4/0x100 [ 235.940630][T12153] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 235.940647][T12153] ? mas_walk+0x260/0x310 [ 235.940670][T12153] ? find_vma_prev+0xd8/0x150 [ 235.940686][T12153] ? __pfx_find_vma_prev+0x10/0x10 [ 235.940700][T12153] ? lock_acquire+0x1d1/0x380 [ 235.940724][T12153] madvise_walk_vmas+0x30e/0xc50 [ 235.940744][T12153] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 235.940763][T12153] ? __pfx_futex_wake_mark+0x10/0x10 [ 235.940780][T12153] ? lock_acquire+0x1d1/0x380 [ 235.940798][T12153] madvise_do_behavior+0x1ea/0x510 [ 235.940817][T12153] ? __pfx_madvise_do_behavior+0x10/0x10 [ 235.940834][T12153] ? down_read+0x13b/0x4c0 [ 235.940858][T12153] do_madvise+0x238/0x290 [ 235.940874][T12153] ? __pfx_do_madvise+0x10/0x10 [ 235.940890][T12153] ? do_futex+0x190/0x440 [ 235.940903][T12153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.940931][T12153] __ia32_sys_madvise+0xa7/0x110 [ 235.940947][T12153] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.940963][T12153] __do_fast_syscall_32+0x13a/0x8b0 [ 235.940981][T12153] do_fast_syscall_32+0x32/0x70 [ 235.941024][T12153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.941041][T12153] RIP: 0023:0xf7f03fec [ 235.941055][T12153] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 235.941061][T12153] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 235.941074][T12153] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 235.941082][T12153] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.941090][T12153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.941098][T12153] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 235.941106][T12153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.941122][T12153] [ 235.946065][ T5749] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 235.946126][ T5749] Bluetooth: hci1: Injecting HCI hardware error event [ 235.948694][ T5749] Bluetooth: hci1: hardware error 0x00 [ 236.182574][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.752186][T12182] syzkaller1: entered promiscuous mode [ 236.752240][T12182] syzkaller1: entered allmulticast mode [ 236.941713][T12197] FAULT_INJECTION: forcing a failure. [ 236.941713][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 236.950313][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.3.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.950366][T12197] Tainted: [L]=SOFTLOCKUP [ 236.950375][T12197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.950387][T12197] Call Trace: [ 236.950395][T12197] [ 236.950405][T12197] dump_stack_lvl+0x100/0x190 [ 236.950439][T12197] should_fail_ex.cold+0x5/0xa [ 236.950466][T12197] should_failslab+0xc2/0x120 [ 236.950495][T12197] __kmalloc_cache_noprof+0x91/0x6d0 [ 236.950525][T12197] ? nf_flow_offload_xdp_setup+0x5fc/0x9a0 [ 236.950554][T12197] nf_flow_offload_xdp_setup+0x5fc/0x9a0 [ 236.950582][T12197] nf_flow_table_offload_setup+0x4ac/0x6b0 [ 236.950604][T12197] ? kasan_save_track+0x14/0x30 [ 236.950627][T12197] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 236.950673][T12197] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 236.950704][T12197] nft_register_flowtable_ops+0x9c/0x1a0 [ 236.950740][T12197] nft_register_flowtable_net_hooks+0x348/0x7e0 [ 236.950775][T12197] nf_tables_newflowtable+0x1353/0x2830 [ 236.950814][T12197] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 236.950850][T12197] ? lock_acquire+0x1d1/0x380 [ 236.950876][T12197] ? net_generic+0x25/0x2a0 [ 236.950907][T12197] ? __nla_parse+0x40/0x60 [ 236.950931][T12197] nfnetlink_rcv_batch+0x1410/0x2880 [ 236.950975][T12197] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 236.951005][T12197] ? find_held_lock+0x2b/0x80 [ 236.951051][T12197] ? __local_bh_enable_ip+0xa5/0x120 [ 236.951083][T12197] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.951110][T12197] ? __dev_queue_xmit+0xa12/0x4970 [ 236.951171][T12197] ? __nla_parse+0x40/0x60 [ 236.951196][T12197] nfnetlink_rcv+0x3bd/0x440 [ 236.951221][T12197] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 236.951256][T12197] netlink_unicast+0x585/0x850 [ 236.951282][T12197] ? __pfx_netlink_unicast+0x10/0x10 [ 236.951313][T12197] netlink_sendmsg+0x8b0/0xda0 [ 236.951340][T12197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.951366][T12197] ? apparmor_socket_sendmsg+0x165/0x280 [ 236.951397][T12197] ____sys_sendmsg+0xa4d/0xbe0 [ 236.951425][T12197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.951450][T12197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.951493][T12197] ___sys_sendmsg+0x190/0x1e0 [ 236.951516][T12197] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.951536][T12197] ? futex_wait+0x11e/0x370 [ 236.951571][T12197] ? find_held_lock+0x2b/0x80 [ 236.951609][T12197] __sys_sendmsg+0x160/0x210 [ 236.951635][T12197] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.951676][T12197] __do_fast_syscall_32+0x13a/0x8b0 [ 236.951717][T12197] do_fast_syscall_32+0x32/0x70 [ 236.951747][T12197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.951774][T12197] RIP: 0023:0xf7f03fec [ 236.951796][T12197] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 236.951806][T12197] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 236.951827][T12197] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 236.951841][T12197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.951854][T12197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.951867][T12197] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.951879][T12197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.951907][T12197] [ 237.163335][T12210] sctp: [Deprecated]: syz.7.2103 (pid 12210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.163335][T12210] Use struct sctp_sack_info instead [ 237.222542][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.289205][ T7440] ================================================================== [ 237.289227][ T7440] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.289251][ T7440] Read of size 1 at addr ffff8880144ad809 by task kworker/u33:43/7440 [ 237.289260][ T7440] [ 237.289267][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: kworker/u33:43 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.289283][ T7440] Tainted: [L]=SOFTLOCKUP [ 237.289287][ T7440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.289296][ T7440] Workqueue: events_unbound commit_work [ 237.289313][ T7440] Call Trace: [ 237.289318][ T7440] [ 237.289322][ T7440] dump_stack_lvl+0x100/0x190 [ 237.289337][ T7440] print_report+0x13d/0x4b0 [ 237.289354][ T7440] ? __virt_addr_valid+0x239/0x430 [ 237.289371][ T7440] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.289387][ T7440] kasan_report+0xdf/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.289402][ T7440] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.289420][ T7440] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.289436][ T7440] ? preempt_schedule_common+0x3c/0xb0 [ 237.289452][ T7440] ? preempt_schedule_thunk+0x16/0x40 [ 237.289464][ T7440] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 237.289481][ T7440] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 237.289495][ T7440] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 237.289513][ T7440] drm_atomic_helper_commit_tail+0xff/0x130 [ 237.289529][ T7440] commit_tail+0x338/0x430 [ 237.289546][ T7440] process_one_work+0xac7/0x1b10 [ 237.289562][ T7440] ? __pfx_process_one_work+0x10/0x10 [ 237.289576][ T7440] ? lock_acquire+0x1d1/0x380 [ 237.289592][ T7440] ? __pfx_commit_work+0x10/0x10 [ 237.289608][ T7440] worker_thread+0x5ef/0xe50 [ 237.289623][ T7440] ? kthread+0x13a/0x450 [ 237.289634][ T7440] ? __pfx_worker_thread+0x10/0x10 [ 237.289646][ T7440] kthread+0x373/0x450 [ 237.289662][ T7440] ? __pfx_kthread+0x10/0x10 [ 237.289674][ T7440] ret_from_fork+0x730/0xd60 [ 237.289703][ T7440] ? __pfx_ret_from_fork+0x10/0x10 [ 237.289722][ T7440] ? __switch_to+0x800/0x10f0 [ 237.289735][ T7440] ? __pfx_kthread+0x10/0x10 [ 237.289746][ T7440] ret_from_fork_asm+0x1a/0x30 [ 237.289759][ T7440] [ 237.289764][ T7440] [ 237.289766][ T7440] Allocated by task 12216: [ 237.289772][ T7440] kasan_save_stack+0x30/0x50 [ 237.289784][ T7440] kasan_save_track+0x14/0x30 [ 237.289796][ T7440] __kasan_kmalloc+0xaa/0xb0 [ 237.289806][ T7440] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 237.289822][ T7440] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 237.289840][ T7440] drm_atomic_get_crtc_state+0x1de/0x690 [ 237.289852][ T7440] drm_atomic_set_property+0x165/0x3f90 [ 237.289868][ T7440] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 237.289882][ T7440] drm_ioctl_kernel+0x1f3/0x3e0 [ 237.289895][ T7440] drm_ioctl+0x5e6/0xc60 [ 237.289908][ T7440] drm_compat_ioctl+0x386/0x4c0 [ 237.289917][ T7440] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 237.289934][ T7440] __do_fast_syscall_32+0x13a/0x8b0 [ 237.289949][ T7440] do_fast_syscall_32+0x32/0x70 [ 237.289963][ T7440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.289976][ T7440] [ 237.289978][ T7440] Freed by task 5741: [ 237.289983][ T7440] kasan_save_stack+0x30/0x50 [ 237.289995][ T7440] kasan_save_track+0x14/0x30 [ 237.290006][ T7440] kasan_save_free_info+0x3b/0x70 [ 237.290021][ T7440] __kasan_slab_free+0x5f/0x80 [ 237.290033][ T7440] kfree+0x22b/0x6d0 [ 237.290047][ T7440] drm_atomic_commit_default_clear+0x465/0x10c0 [ 237.290061][ T7440] __drm_atomic_commit_free+0x185/0x2f0 [ 237.290075][ T7440] drm_atomic_helper_dirtyfb+0x578/0x790 [ 237.290086][ T7440] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 237.290097][ T7440] drm_fb_helper_damage_work+0x4c8/0xab0 [ 237.290112][ T7440] process_one_work+0xac7/0x1b10 [ 237.290124][ T7440] worker_thread+0x5ef/0xe50 [ 237.290135][ T7440] kthread+0x373/0x450 [ 237.290145][ T7440] ret_from_fork+0x730/0xd60 [ 237.290160][ T7440] ret_from_fork_asm+0x1a/0x30 [ 237.290169][ T7440] [ 237.290171][ T7440] The buggy address belongs to the object at ffff8880144ad800 [ 237.290171][ T7440] which belongs to the cache kmalloc-512 of size 512 [ 237.290180][ T7440] The buggy address is located 9 bytes inside of [ 237.290180][ T7440] freed 512-byte region [ffff8880144ad800, ffff8880144ada00) [ 237.290190][ T7440] [ 237.290193][ T7440] The buggy address belongs to the physical page: [ 237.290198][ T7440] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144ac [ 237.290208][ T7440] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.290216][ T7440] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.290226][ T7440] page_type: f5(slab) [ 237.290236][ T7440] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 237.290245][ T7440] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 237.290255][ T7440] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 237.290264][ T7440] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 237.290274][ T7440] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 237.290283][ T7440] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 237.290289][ T7440] page dumped because: kasan: bad access detected [ 237.290294][ T7440] page_owner tracks the page as allocated [ 237.290298][ T7440] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5731, tgid 5731 (syz-executor), ts 39997768967 [ 237.290315][ T7440] post_alloc_hook+0xfd/0x120 [ 237.290331][ T7440] get_page_from_freelist+0x110d/0x35d0 [ 237.290340][ T7440] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 237.290350][ T7440] new_slab+0xa9/0x6e0 [ 237.290358][ T7440] refill_objects+0xe3/0x410 [ 237.290366][ T7440] __pcs_replace_empty_main+0x35e/0x650 [ 237.290382][ T7440] __kmalloc_noprof+0x67c/0x840 [ 237.290392][ T7440] fib6_info_alloc+0x40/0x160 [ 237.290402][ T7440] ip6_route_info_create+0x14c/0xad0 [ 237.290412][ T7440] ip6_route_add+0x4b/0x1d0 [ 237.290425][ T7440] addrconf_prefix_route+0x2fb/0x510 [ 237.290440][ T7440] inet6_addr_add+0x575/0x9a0 [ 237.290451][ T7440] inet6_rtm_newaddr+0x147a/0x1bb0 [ 237.290462][ T7440] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.290477][ T7440] netlink_rcv_skb+0x159/0x420 [ 237.290488][ T7440] netlink_unicast+0x585/0x850 [ 237.290498][ T7440] page last free pid 5732 tgid 5732 ts 39049296709 stack trace: [ 237.290505][ T7440] __free_frozen_pages+0x79f/0x10f0 [ 237.290519][ T7440] qlist_free_all+0x47/0xf0 [ 237.290529][ T7440] kasan_quarantine_reduce+0x1a0/0x1f0 [ 237.290540][ T7440] __kasan_slab_alloc+0x69/0x90 [ 237.290551][ T7440] kmem_cache_alloc_noprof+0x269/0x6a0 [ 237.290562][ T7440] __kernfs_new_node+0xd2/0xa10 [ 237.290574][ T7440] kernfs_new_node+0x117/0x150 [ 237.290587][ T7440] __kernfs_create_file+0x53/0x350 [ 237.290603][ T7440] sysfs_add_file_mode_ns+0x207/0x3c0 [ 237.290613][ T7440] internal_create_group+0x593/0xfb0 [ 237.290624][ T7440] internal_create_groups+0x9d/0x150 [ 237.290636][ T7440] device_add+0x71a/0x1970 [ 237.290650][ T7440] netdev_register_kobject+0x1df/0x410 [ 237.290669][ T7440] register_netdevice+0x15b6/0x25a0 [ 237.290682][ T7440] veth_newlink+0x44a/0xce0 [ 237.290697][ T7440] rtnl_newlink+0x1697/0x2620 [ 237.290711][ T7440] [ 237.290713][ T7440] Memory state around the buggy address: [ 237.290718][ T7440] ffff8880144ad700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.290725][ T7440] ffff8880144ad780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.290732][ T7440] >ffff8880144ad800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.290738][ T7440] ^ [ 237.290743][ T7440] ffff8880144ad880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.290750][ T7440] ffff8880144ad900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.290756][ T7440] ================================================================== [ 237.290826][ T7440] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 237.536119][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: kworker/u33:43 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.539617][ T7440] Tainted: [L]=SOFTLOCKUP [ 237.540962][ T7440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.544300][ T7440] Workqueue: events_unbound commit_work [ 237.546072][ T7440] Call Trace: [ 237.547141][ T7440] [ 237.548079][ T7440] dump_stack_lvl+0x100/0x190 [ 237.549621][ T7440] vpanic+0x553/0x970 [ 237.550897][ T7440] ? __pfx_vpanic+0x10/0x10 [ 237.552326][ T7440] ? mark_held_locks+0x40/0x70 [ 237.553864][ T7440] ? irqentry_exit+0x24d/0xa10 [ 237.555387][ T7440] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.557444][ T7440] panic+0xd1/0xe0 [ 237.558530][ T7440] ? __pfx_panic+0x10/0x10 [ 237.559981][ T7440] check_panic_on_warn.cold+0x19/0x34 [ 237.561684][ T7440] end_report.part.0+0x3a/0x90 [ 237.563241][ T7440] kasan_report.cold+0xe/0x18 [ 237.564774][ T7440] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.567034][ T7440] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 237.569292][ T7440] ? preempt_schedule_common+0x3c/0xb0 [ 237.571000][ T7440] ? preempt_schedule_thunk+0x16/0x40 [ 237.572722][ T7440] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 237.575110][ T7440] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 237.576959][ T7440] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 237.579032][ T7440] drm_atomic_helper_commit_tail+0xff/0x130 [ 237.580907][ T7440] commit_tail+0x338/0x430 [ 237.582393][ T7440] process_one_work+0xac7/0x1b10 [ 237.583930][ T7440] ? __pfx_process_one_work+0x10/0x10 [ 237.585612][ T7440] ? lock_acquire+0x1d1/0x380 [ 237.587108][ T7440] ? __pfx_commit_work+0x10/0x10 [ 237.588671][ T7440] worker_thread+0x5ef/0xe50 [ 237.590167][ T7440] ? kthread+0x13a/0x450 [ 237.591516][ T7440] ? __pfx_worker_thread+0x10/0x10 [ 237.593202][ T7440] kthread+0x373/0x450 [ 237.594488][ T7440] ? __pfx_kthread+0x10/0x10 [ 237.595935][ T7440] ret_from_fork+0x730/0xd60 [ 237.597399][ T7440] ? __pfx_ret_from_fork+0x10/0x10 [ 237.599004][ T7440] ? __switch_to+0x800/0x10f0 [ 237.600661][ T7440] ? __pfx_kthread+0x10/0x10 [ 237.602145][ T7440] ret_from_fork_asm+0x1a/0x30 [ 237.603782][ T7440] [ 237.605735][ T7440] Kernel Offset: disabled [ 237.607476][ T7440] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:04:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae8165 RDI=ffffffff9bc561e0 RBP=ffffffff9bc561a0 RSP=ffffc90006fa7220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6134343130386552 R12=0000000000000000 R13=0000000000000020 R14=0000000000000001 R15=ffffc90006fa7538 RIP=ffffffff85ae818f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096961000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f855c0 CR3=000000002513d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa2ad494a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa2ad571d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0783b0fb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa2ad4c6a0 000055aa2ad494a0 000055aa2ad508d0 000055aa2ad4ca10 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432302c34343230 2c363132302c4530 32302c433032302c 423032302c413032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c314132302c3238 32302c463532302c 443532302c423532 302c413532302c41 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cf14b00 RSI=ffffffff81b65e9e RDI=ffff88801cf14b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b65e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f04000 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88802b43c040 RCX=0000000000000000 RDX=1ffff110056879a9 RSI=0000000000000002 RDI=00000000000026e4 RBP=00000000000009ed RSP=ffffc90000548d88 R8 =ffff88802b43cc00 R9 =ffff88802b43cd40 R10=ffff88802b43cc10 R11=000000374037b400 R12=0000000000000002 R13=ffff88802b43cd48 R14=0000000000000002 R15=ffff88802b43cd5c RIP=ffffffff81de4730 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcb115d8300 ffffffff 00c00000 GS =0000 ffff888096b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b79557bf40 CR3=000000004b777000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=4dec6d4830c9cbc0 4f8e9b6356626b0b 4dec6d4830c9cbc0 4f8e9b6356626b0b 4dec6d4830c9cbc0 4f8e9b6356626b0b 4dec6d4830c9cbc0 4f8e9b6356626b0b ZMM18=62743b9e820a041b 08f0149a13eeb674 62743b9e820a041b 08f0149a13eeb674 62743b9e820a041b 08f0149a13eeb674 62743b9e820a041b 08f0149a13eeb674 ZMM19=1510000000000000 0000000000000004 1510000000000000 0000000000000003 1510000000000000 0000000000000002 1510000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030002000ba00300 08000b98030785f4 d008000b90032082 04000b8c03200400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b88037808000b80 030b800202800302 8002099003000800 0988030fffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0209800350800202 00769e0030656c69 662f2e01ffffffff ffffffffef085080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030030656c6966 2f2e01ffffffffff ffffffef08058003 0580044ba0030008 ZMM25=08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a 08f0149a08f0149a ZMM26=820a041b820a041b 820a041b820a041b 820a041b820a041b 820a041b820a041b 820a041b820a041b 820a041b820a041b 820a041b820a041b 820a041b820a041b ZMM27=62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e 62743b9e62743b9e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1410000014100000 1410000014100000 1410000014100000 1410000014100000 1410000014100000 1410000014100000 1410000014100000 1410000014100000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90020b97740 RCX=ffffffff91f72201 RDX=ffffc90020b97748 RSI=ffffc90020b97728 RDI=ffffc90020b97400 RBP=0000000000000001 RSP=ffffc90020b97378 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000017d6e R12=ffffc90020b97440 R13=ffffc90020b973f0 R14=ffffc90020b97740 R15=ffffc90020b97424 RIP=ffffffff8bce20f6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0783399880 ffffffff 00c00000 GS =0000 ffff888096c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7319c10 CR3=000000004cd3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0800000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 393a37622f617461 642f766564752f6e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa2ad4daa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0783b0fb20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0783b0fb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a9f492ddd0 00706d742e393a37 622f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 404d005640515c47 0550491d00050505 05050505051f405f 4c560540494c4300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa2ad59320 000055aa2ad5d530 000055aa2ad4fa40 000055aa2ad3d600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c314132302c3238 32302c463532302c 443532302c423532 302c413532302c41 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000