last executing test programs: 9.296855969s ago: executing program 0 (id=2052): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) 8.780812092s ago: executing program 0 (id=2055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, r3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x4, 0x1000) fanotify_mark(r5, 0x1, 0x800002b, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r6, &(0x7f0000001100)="0f", 0x1) 7.181273869s ago: executing program 2 (id=2060): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 6.849719845s ago: executing program 1 (id=2061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000480)) 6.765472029s ago: executing program 2 (id=2063): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000002100)={@void, @void, @llc={@llc={0x8e, 0xdc, '/', "dde6ae84e2c0872f5ad3357af8faaecae71525f32a4497384f1e71bc8fd60a90db"}}}, 0x24) 5.900163445s ago: executing program 2 (id=2065): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x1, "906b8a", 0x1, 0xff}) syz_usb_connect(0x3, 0x32, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 5.685948955s ago: executing program 1 (id=2066): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff}, 0x0) tee(r2, 0xffffffffffffffff, 0xe, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREADLINK(r3, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) 4.923510817s ago: executing program 1 (id=2068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x4, 0x1000) fanotify_mark(r3, 0x1, 0x800002b, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r4, &(0x7f0000001100)="0f", 0x1) 4.833919501s ago: executing program 3 (id=2069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xe500, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0xe) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 4.199850786s ago: executing program 3 (id=2070): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x516, @remote, 0x55}}, [0x1d, 0x4, 0xfffffffffffffffc, 0x5243d027, 0xd6, 0x4, 0x7f, 0x7f, 0x3, 0x0, 0x101, 0x7, 0x3, 0xffffffffffffffff, 0x3]}, &(0x7f0000000080)=0x100) 3.572040751s ago: executing program 3 (id=2071): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300010029bd7000fbdbdf25736861332d333834"], 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000810) 2.82327285s ago: executing program 3 (id=2072): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000e00)) 2.682000686s ago: executing program 0 (id=2073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000740)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x40000, 0xc, 0x1, 0x80, 0xff, 0x3, 0x0, 0x0, 0xfd}, {0x26000, 0xa000, 0xb, 0x8, 0x4, 0x80, 0x0, 0x9, 0xd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xc7}, {0xeeee8000, 0xfec00000, 0x1f, 0x40, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe, 0x0, 0x0, 0xfc}, {0x0, 0x800}, {0x1, 0xfffe}, 0x80040001, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0xb4d, 0x9, 0x42, 0x80000001]}) 2.44966639s ago: executing program 2 (id=2074): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) flock(r3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.239190096s ago: executing program 3 (id=2075): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002b00)=0x223b, 0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) unshare(0x28040680) r3 = eventfd2(0x0, 0x80800) poll(&(0x7f0000000c80)=[{r3, 0x8000}], 0x1, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x25000, 0x89, &(0x7f0000000100)=""/137}]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.026621397s ago: executing program 0 (id=2076): r0 = syz_open_dev$mtd(&(0x7f0000000700), 0x0, 0x800) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f00000007c0)={0x0, 0x0, 0x5, &(0x7f0000000740)="1e7c9782dc"}) 2.026139177s ago: executing program 1 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000003b00)={0xd, @pix_mp={0x5, 0x4, 0x34324948, 0x7, 0xb, [{0x3, 0x7}, {0x4, 0x80000000}, {0xe, 0x58e}, {0x8, 0xe6}, {0x4}, {}, {0x9, 0x3}, {0x80000000, 0x3}], 0x0, 0x4, 0x4, 0x1, 0x7}}) 1.459322688s ago: executing program 0 (id=2078): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.384782964s ago: executing program 1 (id=2079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r4, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344000000000000000006000040"}}}}, 0x0) 1.110079147s ago: executing program 2 (id=2080): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 779.673123ms ago: executing program 3 (id=2081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, r3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x4, 0x1000) fanotify_mark(r5, 0x1, 0x800002b, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r6, &(0x7f0000001100)="0f", 0x1) 356.027447ms ago: executing program 2 (id=2082): getpid() sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) 335.893347ms ago: executing program 0 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) dup2(r0, 0xffffffffffffffff) write(r0, &(0x7f0000000000)='7', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=2084): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff}, 0x0) tee(r2, 0xffffffffffffffff, 0xe, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREADLINK(r3, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) kernel console output (not intermixed with test programs): high-speed USB device number 4 using dummy_hcd [ 62.329620][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 62.336781][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 62.340667][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.340705][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.340770][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.352426][ T9] usb 6-1: config 0 descriptor?? [ 62.357953][ T6237] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 62.362594][ T6237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.482803][ T6251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.155'. [ 62.642430][ T6267] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.709523][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.763052][ T9] hid_parser_main: 5 callbacks suppressed [ 62.766805][ T9] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 62.766847][ T9] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 62.766866][ T9] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 62.766882][ T9] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 62.766900][ T9] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 62.766916][ T9] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 62.767400][ T9] savu 0003:1E7D:2D5A.0005: parse failed [ 62.767454][ T9] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 62.869548][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 62.872251][ T5841] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 62.876670][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.882003][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.886102][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.891707][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.907495][ T5841] hub 5-1:1.0: bad descriptor, ignoring hub [ 62.907564][ T5841] hub 5-1:1.0: probe with driver hub failed with error -5 [ 62.908060][ T5841] cdc_wdm 5-1:1.0: skipping garbage [ 62.908074][ T5841] cdc_wdm 5-1:1.0: skipping garbage [ 62.908085][ T5841] cdc_wdm 5-1:1.0: skipping garbage [ 62.908102][ T5841] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 62.964100][ T9] usb 6-1: USB disconnect, device number 4 [ 63.113311][ T6291] lo: entered allmulticast mode [ 63.115400][ T6291] lo: left allmulticast mode [ 63.277421][ T6299] FAULT_INJECTION: forcing a failure. [ 63.277421][ T6299] name failslab, interval 1, probability 0, space 0, times 1 [ 63.277491][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 63.277527][ T6299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.277540][ T6299] Call Trace: [ 63.277546][ T6299] [ 63.277554][ T6299] dump_stack_lvl+0x100/0x190 [ 63.277599][ T6299] should_fail_ex.cold+0x5/0xa [ 63.277627][ T6299] should_failslab+0xc2/0x120 [ 63.277657][ T6299] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.277679][ T6299] ? do_getname+0x35/0x390 [ 63.277709][ T6299] do_getname+0x35/0x390 [ 63.277738][ T6299] do_sys_openat2+0xc7/0x1e0 [ 63.277766][ T6299] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.277793][ T6299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 63.277830][ T6299] __ia32_compat_sys_openat+0x12d/0x210 [ 63.277860][ T6299] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 63.277892][ T6299] ? ksys_write+0x1ac/0x250 [ 63.277920][ T6299] __do_fast_syscall_32+0x13a/0x8b0 [ 63.277951][ T6299] do_fast_syscall_32+0x32/0x70 [ 63.277978][ T6299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.278004][ T6299] RIP: 0023:0xf70befec [ 63.278025][ T6299] Code: Unable to access opcode bytes at 0xf70befc2. [ 63.278034][ T6299] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 63.278052][ T6299] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000000000000 [ 63.278065][ T6299] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.278077][ T6299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.278088][ T6299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.278100][ T6299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.278125][ T6299] [ 63.327962][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 63.328072][ T6301] bridge_slave_1: left allmulticast mode [ 63.328125][ T6301] bridge_slave_1: left promiscuous mode [ 63.330641][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.335945][ T6301] bridge_slave_0: left allmulticast mode [ 63.335976][ T6301] bridge_slave_0: left promiscuous mode [ 63.336171][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.392488][ T30] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 63.563242][ T30] usb 5-1: device firmware changed [ 63.564857][ T30] usb 5-1: USB disconnect, device number 4 [ 63.749495][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 63.889602][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.901458][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 63.901551][ T9] usb 6-1: no configurations [ 63.901590][ T9] usb 6-1: can't read configurations, error -22 [ 64.039555][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 64.049553][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 64.052093][ T30] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.057489][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.061086][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.064101][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.064125][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.069719][ T1037] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.081187][ T30] hub 5-1:1.0: bad descriptor, ignoring hub [ 64.084478][ T30] hub 5-1:1.0: probe with driver hub failed with error -5 [ 64.087423][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 64.087501][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 64.087518][ T30] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 64.200939][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.201032][ T9] usb 6-1: no configurations [ 64.201046][ T9] usb 6-1: can't read configurations, error -22 [ 64.201367][ T9] usb usb6-port1: attempt power cycle [ 64.233009][ T1037] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.233553][ T1037] usb 8-1: not running at top speed; connect to a high speed hub [ 64.233578][ T1037] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 64.235058][ T1037] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 64.235078][ T1037] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 64.235093][ T1037] usb 8-1: config 14 has no interface number 0 [ 64.235107][ T1037] usb 8-1: config 14 has no interface number 1 [ 64.235149][ T1037] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 64.235168][ T1037] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 64.235186][ T1037] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 64.235207][ T1037] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 64.235226][ T1037] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 64.235245][ T1037] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.235266][ T1037] usb 8-1: config 14 interface 57 has no altsetting 0 [ 64.235281][ T1037] usb 8-1: config 14 interface 228 has no altsetting 0 [ 64.237779][ T1037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.237799][ T1037] usb 8-1: Product: syz [ 64.237810][ T1037] usb 8-1: Manufacturer: syz [ 64.237824][ T1037] usb 8-1: SerialNumber: syz [ 64.401543][ T42] usb 5-1: USB disconnect, device number 5 [ 64.550479][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 64.571586][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.571648][ T9] usb 6-1: no configurations [ 64.571704][ T9] usb 6-1: can't read configurations, error -22 [ 64.657287][ T1037] legousbtower 8-1:14.57: interrupt endpoints not found [ 64.699912][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 64.727155][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.727341][ T9] usb 6-1: no configurations [ 64.727354][ T9] usb 6-1: can't read configurations, error -22 [ 64.727816][ T9] usb usb6-port1: unable to enumerate USB device [ 64.829181][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 64.862341][ T1037] legousbtower 8-1:14.228: interrupt endpoints not found [ 65.029599][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.189569][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 65.190484][ T35] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 65.191725][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.191749][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.191779][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.193945][ T35] usb 7-1: config 0 descriptor?? [ 65.605751][ T35] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 65.605871][ T35] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 65.605953][ T35] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 65.605983][ T35] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 65.606010][ T35] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 65.606036][ T35] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 65.606752][ T35] savu 0003:1E7D:2D5A.0006: parse failed [ 65.606826][ T35] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 65.804882][ T30] usb 7-1: USB disconnect, device number 5 [ 66.081156][ T43] audit: type=1326 audit(1788240915.796:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.0.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7fc00000 [ 66.590680][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 66.809692][ T43] audit: type=1326 audit(1788240916.516:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.0.195" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2fec code=0x7fc00000 [ 66.838069][ T42] usb 8-1: USB disconnect, device number 4 [ 67.300277][ T6385] xt_hashlimit: size too large, truncated to 1048576 [ 67.300347][ T6385] xt_hashlimit: max too large, truncated to 1048576 [ 67.300374][ T6385] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 67.539522][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.569500][ T5887] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 67.691569][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.691645][ T35] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 67.693008][ T35] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 67.693024][ T35] usb 5-1: config 189 has no interface number 0 [ 67.693040][ T35] usb 5-1: config 189 interface 127 has no altsetting 0 [ 67.694868][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.694886][ T35] usb 5-1: Product: syz [ 67.694907][ T35] usb 5-1: Manufacturer: syz [ 67.694919][ T35] usb 5-1: SerialNumber: syz [ 67.734033][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.736196][ T5887] usb 8-1: not running at top speed; connect to a high speed hub [ 67.736224][ T5887] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 67.737330][ T5887] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 67.737343][ T5887] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 67.737353][ T5887] usb 8-1: config 14 has no interface number 0 [ 67.737361][ T5887] usb 8-1: config 14 has no interface number 1 [ 67.737390][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 67.737401][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 67.737413][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 67.737476][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 67.737496][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 67.737506][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.737519][ T5887] usb 8-1: config 14 interface 57 has no altsetting 0 [ 67.737528][ T5887] usb 8-1: config 14 interface 228 has no altsetting 0 [ 67.739500][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.739512][ T5887] usb 8-1: Product: syz [ 67.739519][ T5887] usb 8-1: Manufacturer: syz [ 67.739526][ T5887] usb 8-1: SerialNumber: syz [ 67.801527][ T6400] syzkaller0: entered promiscuous mode [ 67.801541][ T6400] syzkaller0: entered allmulticast mode [ 68.156247][ T5887] legousbtower 8-1:14.57: interrupt endpoints not found [ 68.224156][ T35] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 68.224209][ T35] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 68.224315][ T35] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 68.224696][ T35] safe_serial 5-1:189.127: safe_serial converter detected [ 68.224809][ T35] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 68.230145][ T35] usb 5-1: USB disconnect, device number 6 [ 68.358154][ T5887] legousbtower 8-1:14.228: interrupt endpoints not found [ 68.886277][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 68.887867][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.967035][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 69.967147][ T6440] bridge_slave_1: left allmulticast mode [ 69.967207][ T6440] bridge_slave_1: left promiscuous mode [ 69.967388][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.972892][ T6440] bridge_slave_0: left allmulticast mode [ 69.972909][ T6440] bridge_slave_0: left promiscuous mode [ 69.973036][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.244773][ T6452] bond0: entered promiscuous mode [ 70.244845][ T6452] bond_slave_0: entered promiscuous mode [ 70.245285][ T6452] bond_slave_1: entered promiscuous mode [ 70.245542][ T6452] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 70.331253][ T5886] usb 8-1: USB disconnect, device number 5 [ 70.914410][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.914501][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.929699][ T58] cfg80211: failed to load regulatory.db [ 71.189507][ T5886] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 71.230407][ T6491] input: syz1 as /devices/virtual/input/input9 [ 71.341328][ T5886] usb 8-1: unable to get BOS descriptor or descriptor too short [ 71.341767][ T5886] usb 8-1: not running at top speed; connect to a high speed hub [ 71.341782][ T5886] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 71.342523][ T5886] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 71.342535][ T5886] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 71.342545][ T5886] usb 8-1: config 14 has no interface number 0 [ 71.342553][ T5886] usb 8-1: config 14 has no interface number 1 [ 71.342577][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 71.342588][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 71.342599][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 71.342611][ T5886] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 71.342624][ T5886] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.342634][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.342647][ T5886] usb 8-1: config 14 interface 57 has no altsetting 0 [ 71.342655][ T5886] usb 8-1: config 14 interface 228 has no altsetting 0 [ 71.347896][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.347921][ T5886] usb 8-1: Product: syz [ 71.347933][ T5886] usb 8-1: Manufacturer: syz [ 71.347944][ T5886] usb 8-1: SerialNumber: syz [ 71.361371][ T6497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.361427][ T6497] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.377543][ T6497] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.388504][ T6497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.388557][ T6497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.394999][ T6503] fuse: Bad value for 'fd' [ 71.400303][ T6497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.405672][ T6497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.405725][ T6497] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.416382][ T6497] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.424768][ T6497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.424891][ T6497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.433965][ T6497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.639069][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 71.680521][ T6519] input: syz1 as /devices/virtual/input/input10 [ 71.721362][ T6522] FAULT_INJECTION: forcing a failure. [ 71.721362][ T6522] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.721453][ T6522] CPU: 2 UID: 0 PID: 6522 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 71.721500][ T6522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.721513][ T6522] Call Trace: [ 71.721521][ T6522] [ 71.721530][ T6522] dump_stack_lvl+0x100/0x190 [ 71.721572][ T6522] should_fail_ex.cold+0x5/0xa [ 71.721598][ T6522] get_futex_key+0x1d0/0x14f0 [ 71.721633][ T6522] ? __pfx_get_futex_key+0x10/0x10 [ 71.721657][ T6522] ? __pfx_futex_hash+0x10/0x10 [ 71.721682][ T6522] ? __lock_acquire+0x4c5/0x1ec0 [ 71.721712][ T6522] futex_wake+0xf4/0x5e0 [ 71.721731][ T6522] ? futex_wait+0x11e/0x370 [ 71.721748][ T6522] ? __pfx_futex_wake+0x10/0x10 [ 71.721888][ T6522] ? find_held_lock+0x2b/0x80 [ 71.721908][ T6522] ? do_sys_openat2+0x1b6/0x1e0 [ 71.721932][ T6522] ? do_sys_openat2+0x1b6/0x1e0 [ 71.721953][ T6522] do_futex+0x2b2/0x440 [ 71.721969][ T6522] ? __pfx_do_futex+0x10/0x10 [ 71.721985][ T6522] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.722007][ T6522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.722036][ T6522] __ia32_sys_futex_time32+0x2f4/0x470 [ 71.722058][ T6522] ? xfd_validate_state+0x129/0x190 [ 71.722092][ T6522] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 71.722124][ T6522] __do_fast_syscall_32+0x13a/0x8b0 [ 71.722153][ T6522] do_fast_syscall_32+0x32/0x70 [ 71.722174][ T6522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.722195][ T6522] RIP: 0023:0xf705efec [ 71.722214][ T6522] Code: Unable to access opcode bytes at 0xf705efc2. [ 71.722222][ T6522] RSP: 002b:00000000f544d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 71.722239][ T6522] RAX: ffffffffffffffda RBX: 00000000f7454f8c RCX: 0000000000000081 [ 71.722250][ T6522] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 71.722261][ T6522] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 71.722271][ T6522] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.722280][ T6522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.722301][ T6522] [ 71.762002][ T5886] legousbtower 8-1:14.57: interrupt endpoints not found [ 71.764270][ T6524] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 71.767539][ T6524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.962704][ T5886] legousbtower 8-1:14.228: interrupt endpoints not found [ 72.132877][ T6554] fuse: Unknown parameter 'grou00000000000000000000' [ 73.124489][ T6616] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.186545][ T6622] Illegal XDP return value 42744451 on prog (id 11) dev N/A, expect packet loss! [ 73.389560][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.389626][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.469503][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.469613][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.925053][ T58] usb 8-1: USB disconnect, device number 6 [ 74.419974][ T6660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.668074][ T6680] fuse: Unknown parameter 'group_i00000000000000000000' [ 74.849745][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.954249][ T6689] netlink: 'syz.1.329': attribute type 5 has an invalid length. [ 74.954296][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 74.999784][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 75.000357][ T58] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 75.001265][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.001281][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.001298][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.002717][ T58] usb 7-1: config 0 descriptor?? [ 75.446046][ T58] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 75.470854][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.470952][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.549539][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.549785][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.672251][ T5887] usb 7-1: USB disconnect, device number 6 [ 76.252923][ T6740] input: syz1 as /devices/virtual/input/input11 [ 76.445108][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 76.630033][ T42] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.633375][ T6765] fuse: Unknown parameter 'group_id00000000000000000000' [ 76.789534][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 76.792963][ T42] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 76.798434][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.803082][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.807473][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.812394][ T42] usb 8-1: config 0 descriptor?? [ 77.234165][ T42] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 77.403372][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 77.491204][ T1037] usb 8-1: USB disconnect, device number 7 [ 77.529526][ T42] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 77.549564][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.549628][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.629571][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.629652][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.679971][ T42] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.680017][ T42] usb 5-1: no configurations [ 77.680060][ T42] usb 5-1: can't read configurations, error -22 [ 77.774622][ T6805] input: syz1 as /devices/virtual/input/input12 [ 77.791548][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 77.819964][ T42] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 77.971383][ T42] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.971480][ T42] usb 5-1: no configurations [ 77.971518][ T42] usb 5-1: can't read configurations, error -22 [ 77.972860][ T42] usb usb5-port1: attempt power cycle [ 78.052958][ T6824] fuse: Bad value for 'user_id' [ 78.055549][ T6824] fuse: Bad value for 'user_id' [ 78.310288][ T42] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 78.332824][ T42] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.332908][ T42] usb 5-1: no configurations [ 78.332941][ T42] usb 5-1: can't read configurations, error -22 [ 78.460183][ T42] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 78.481702][ T42] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.481792][ T42] usb 5-1: no configurations [ 78.481804][ T42] usb 5-1: can't read configurations, error -22 [ 78.483391][ T42] usb usb5-port1: unable to enumerate USB device [ 78.754935][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 79.056036][ T6861] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 79.066679][ T6861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.599679][ T58] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 79.772919][ T58] usb 8-1: unable to get BOS descriptor or descriptor too short [ 79.777727][ T58] usb 8-1: not running at top speed; connect to a high speed hub [ 79.777842][ T58] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 79.786554][ T58] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 79.786605][ T58] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 79.786647][ T58] usb 8-1: config 14 has no interface number 0 [ 79.786676][ T58] usb 8-1: config 14 has no interface number 1 [ 79.786736][ T58] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 79.786772][ T58] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 79.786810][ T58] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 79.786848][ T58] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 79.786887][ T58] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 79.786926][ T58] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.786962][ T58] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.787001][ T58] usb 8-1: config 14 interface 57 has no altsetting 0 [ 79.787033][ T58] usb 8-1: config 14 interface 228 has no altsetting 0 [ 79.819958][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.819981][ T58] usb 8-1: Product: syz [ 79.819993][ T58] usb 8-1: Manufacturer: syz [ 79.820005][ T58] usb 8-1: SerialNumber: syz [ 79.884514][ T6903] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 79.898204][ T6903] pci 0000:00:00.0: Adding to iommu group 0 [ 80.039669][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.169749][ T42] usb 7-1: device descriptor read/64, error -71 [ 80.263431][ T58] legousbtower 8-1:14.57: interrupt endpoints not found [ 80.409897][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.468678][ T58] legousbtower 8-1:14.228: get version request failed: -71 [ 80.468856][ T58] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 80.484741][ T58] usb 8-1: USB disconnect, device number 8 [ 80.550204][ T42] usb 7-1: device descriptor read/64, error -71 [ 80.660996][ T42] usb usb7-port1: attempt power cycle [ 81.020589][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.050382][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 81.051217][ T42] usb 7-1: device descriptor read/8, error -71 [ 81.200258][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 81.202338][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.202379][ T58] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 81.203312][ T58] usb 5-1: config 14 has an invalid interface number: 228 but max is 0 [ 81.203332][ T58] usb 5-1: config 14 has no interface number 0 [ 81.203362][ T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 81.203383][ T58] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 81.203403][ T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 81.203422][ T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 81.203443][ T58] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.203463][ T58] usb 5-1: config 14 interface 228 has no altsetting 0 [ 81.205323][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.205344][ T58] usb 5-1: Product: syz [ 81.205355][ T58] usb 5-1: Manufacturer: syz [ 81.205367][ T58] usb 5-1: SerialNumber: syz [ 81.290273][ T42] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 81.311335][ T42] usb 7-1: device descriptor read/8, error -71 [ 81.420726][ T42] usb usb7-port1: unable to enumerate USB device [ 81.623169][ T58] legousbtower 5-1:14.228: interrupt endpoints not found [ 82.120148][ T6972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.259498][ T6978] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 82.273253][ T6978] pci 0000:00:00.0: Adding to iommu group 0 [ 82.349621][ T6986] ======================================================= [ 82.349621][ T6986] WARNING: The mand mount option has been deprecated and [ 82.349621][ T6986] and is ignored by this kernel. Remove the mand [ 82.349621][ T6986] option from the mount to silence this warning. [ 82.349621][ T6986] ======================================================= [ 82.791102][ T5887] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 82.842401][ T43] audit: type=1326 audit(1788240932.554:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.842561][ T43] audit: type=1326 audit(1788240932.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.844356][ T43] audit: type=1326 audit(1788240932.554:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.844526][ T43] audit: type=1326 audit(1788240932.554:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.844738][ T43] audit: type=1326 audit(1788240932.554:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.845078][ T43] audit: type=1326 audit(1788240932.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.845188][ T43] audit: type=1326 audit(1788240932.554:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.845806][ T43] audit: type=1326 audit(1788240932.554:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.845933][ T43] audit: type=1326 audit(1788240932.554:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.846047][ T43] audit: type=1326 audit(1788240932.554:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.2.468" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 82.892812][ T7014] fuse: Bad value for 'user_id' [ 82.892831][ T7014] fuse: Bad value for 'user_id' [ 82.953656][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 82.954283][ T5887] usb 8-1: not running at top speed; connect to a high speed hub [ 82.954309][ T5887] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 82.955443][ T5887] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 82.955465][ T5887] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 82.955482][ T5887] usb 8-1: config 14 has no interface number 0 [ 82.955494][ T5887] usb 8-1: config 14 has no interface number 1 [ 82.955542][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 82.955561][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 82.955581][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 82.955602][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 82.955624][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 82.955645][ T5887] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.955663][ T5887] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.955684][ T5887] usb 8-1: config 14 interface 57 has no altsetting 0 [ 82.955698][ T5887] usb 8-1: config 14 interface 228 has no altsetting 0 [ 82.958490][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.958511][ T5887] usb 8-1: Product: syz [ 82.958523][ T5887] usb 8-1: Manufacturer: syz [ 82.958534][ T5887] usb 8-1: SerialNumber: syz [ 83.382733][ T5887] legousbtower 8-1:14.57: interrupt endpoints not found [ 83.587922][ T5887] legousbtower 8-1:14.228: get version request failed: -71 [ 83.588040][ T5887] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 83.591595][ T5887] usb 8-1: USB disconnect, device number 9 [ 83.631487][ T1353] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 83.712180][ T5842] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 83.782220][ T1353] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.782295][ T1353] usb 7-1: no configurations [ 83.782332][ T1353] usb 7-1: can't read configurations, error -22 [ 83.871601][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 83.872349][ T5842] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.873202][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.873232][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 83.873261][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.875797][ T5842] usb 6-1: config 0 descriptor?? [ 83.880361][ T5842] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 83.897205][ T1037] usb 5-1: USB disconnect, device number 11 [ 83.911697][ T1353] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 83.961069][ T7039] input: syz1 as /devices/virtual/input/input13 [ 84.040062][ T7041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.072725][ T1353] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.072799][ T1353] usb 7-1: no configurations [ 84.073068][ T1353] usb 7-1: can't read configurations, error -22 [ 84.073336][ T1353] usb usb7-port1: attempt power cycle [ 84.229446][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.234605][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.382461][ T5586] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.382582][ T5586] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.382634][ T5586] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.382659][ T5586] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.421808][ T1353] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 84.440272][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 84.444075][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.445553][ T1353] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.445576][ T1353] usb 7-1: no configurations [ 84.445583][ T1353] usb 7-1: can't read configurations, error -22 [ 84.456368][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.571946][ T1353] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 84.593257][ T1353] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.593335][ T1353] usb 7-1: no configurations [ 84.593634][ T1353] usb 7-1: can't read configurations, error -22 [ 84.594164][ T1353] usb usb7-port1: unable to enumerate USB device [ 84.812048][ T58] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 84.972123][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 84.972895][ T58] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.973943][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.973963][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.973997][ T58] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 84.974018][ T58] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 84.974051][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.982753][ T58] hub 8-1:1.0: bad descriptor, ignoring hub [ 84.982774][ T58] hub 8-1:1.0: probe with driver hub failed with error -5 [ 84.983287][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 84.983308][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 84.988417][ T58] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 84.988436][ T58] cdc_wdm 8-1:1.0: Unknown control protocol [ 85.232238][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.232487][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.383324][ T1353] usb 8-1: USB disconnect, device number 10 [ 86.461118][ T7117] syzkaller0: entered promiscuous mode [ 86.463243][ T7117] syzkaller0: entered allmulticast mode [ 86.480090][ T1353] usb 6-1: USB disconnect, device number 9 [ 86.508807][ T7119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.510'. [ 87.545282][ T7142] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 87.546206][ T7143] capability: warning: `syz.0.521' uses 32-bit capabilities (legacy support in use) [ 87.566161][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.585186][ T7147] fuse: Bad value for 'fd' [ 87.598993][ T7142] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 87.610994][ T7142] bond1: entered allmulticast mode [ 87.611075][ T7142] syz_tun: entered allmulticast mode [ 87.822504][ T7174] fuse: fd is not a fuse device [ 87.863775][ T5508] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 88.018041][ T5508] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.020257][ T5508] usb 7-1: not running at top speed; connect to a high speed hub [ 88.020282][ T5508] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 88.021165][ T5508] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 88.021183][ T5508] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 88.021202][ T5508] usb 7-1: config 14 has no interface number 0 [ 88.021215][ T5508] usb 7-1: config 14 has no interface number 1 [ 88.021255][ T5508] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 88.021271][ T5508] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 88.021289][ T5508] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 88.021305][ T5508] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 88.021330][ T5508] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 88.021350][ T5508] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 88.021365][ T5508] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.021384][ T5508] usb 7-1: config 14 interface 57 has no altsetting 0 [ 88.021397][ T5508] usb 7-1: config 14 interface 228 has no altsetting 0 [ 88.023960][ T5508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.023972][ T5508] usb 7-1: Product: syz [ 88.023979][ T5508] usb 7-1: Manufacturer: syz [ 88.023986][ T5508] usb 7-1: SerialNumber: syz [ 88.439656][ T5508] legousbtower 7-1:14.57: interrupt endpoints not found [ 88.539544][ T7205] fuse: fd is not a fuse device [ 88.654616][ T5508] legousbtower 7-1:14.228: get version request failed: -71 [ 88.654772][ T5508] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 88.671793][ T5508] usb 7-1: USB disconnect, device number 15 [ 89.164225][ T1353] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 89.312180][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 89.314655][ T43] audit: type=1326 audit(1788240939.011:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 89.323082][ T43] audit: type=1326 audit(1788240939.011:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 89.323135][ T43] audit: type=1326 audit(1788240939.021:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.557" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70befec code=0x7ffc0000 [ 89.323178][ T43] audit: type=1326 audit(1788240939.021:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 89.323220][ T43] audit: type=1326 audit(1788240939.021:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 89.324286][ T1353] usb 6-1: Using ep0 maxpacket: 8 [ 89.327813][ T1353] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.328733][ T1353] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.328745][ T1353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.328764][ T1353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 89.328778][ T1353] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 89.328796][ T1353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.334640][ T1353] hub 6-1:1.0: bad descriptor, ignoring hub [ 89.334654][ T1353] hub 6-1:1.0: probe with driver hub failed with error -5 [ 89.335100][ T1353] cdc_wdm 6-1:1.0: skipping garbage [ 89.335108][ T1353] cdc_wdm 6-1:1.0: skipping garbage [ 89.339583][ T1353] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 89.339594][ T1353] cdc_wdm 6-1:1.0: Unknown control protocol [ 89.400523][ T7253] mmap: syz.3.560 (7253) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.590328][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.592199][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.654725][ T10] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 89.710011][ T5886] usb 6-1: USB disconnect, device number 10 [ 89.806238][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 89.806706][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 89.806720][ T10] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 89.807664][ T10] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 89.807684][ T10] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 89.807699][ T10] usb 7-1: config 14 has no interface number 0 [ 89.807712][ T10] usb 7-1: config 14 has no interface number 1 [ 89.807756][ T10] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 89.807774][ T10] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 89.807794][ T10] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 89.807814][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 89.807835][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 89.807855][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.807872][ T10] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.807893][ T10] usb 7-1: config 14 interface 57 has no altsetting 0 [ 89.807908][ T10] usb 7-1: config 14 interface 228 has no altsetting 0 [ 89.810066][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.810084][ T10] usb 7-1: Product: syz [ 89.810095][ T10] usb 7-1: Manufacturer: syz [ 89.810106][ T10] usb 7-1: SerialNumber: syz [ 90.221842][ T10] legousbtower 7-1:14.57: interrupt endpoints not found [ 90.263250][ T7300] loop3: detected capacity change from 0 to 7 [ 90.272235][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 90.272678][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.272815][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 90.273710][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.273774][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 90.274211][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.274263][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 90.276337][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.276392][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 90.276897][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.276938][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 90.359625][ T7310] fuse: fd is not a fuse device [ 90.426051][ T10] legousbtower 7-1:14.228: get version request failed: -71 [ 90.426142][ T10] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 90.430057][ T10] usb 7-1: USB disconnect, device number 16 [ 90.665276][ T1037] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 90.805076][ T1037] usb 6-1: device descriptor read/64, error -71 [ 90.967375][ T7331] process '/newroot/123/file0' started with executable stack [ 91.055215][ T1037] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 91.185417][ T1037] usb 6-1: device descriptor read/64, error -71 [ 91.295579][ T1037] usb usb6-port1: attempt power cycle [ 91.327240][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 91.635389][ T1037] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 91.655824][ T1037] usb 6-1: device descriptor read/8, error -71 [ 91.895540][ T1037] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 91.915912][ T1037] usb 6-1: device descriptor read/8, error -71 [ 92.028932][ T1037] usb usb6-port1: unable to enumerate USB device [ 92.647605][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 92.669924][ T7387] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 92.677930][ T7387] bond1 (unregistering): (slave gretap0): Releasing backup interface [ 92.683067][ T7387] bond1 (unregistering): Released all slaves [ 92.975418][ T7407] fuse: fd is not a fuse device [ 93.105707][ T7423] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 93.262861][ T7440] fuse: fd is not a fuse device [ 93.320583][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 93.375760][ T7449] fuse: fd is not a fuse device [ 93.638968][ T7465] fuse: fd is not a fuse device [ 93.826525][ T42] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 93.976636][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 93.980271][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.984774][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 93.989643][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.001587][ T42] usb 6-1: config 0 descriptor?? [ 94.011325][ T42] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 94.325672][ T7480] fuse: fd is not a fuse device [ 94.473226][ T7484] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 94.504355][ T7489] fuse: Unknown parameter 'user_id00000000000000000000' [ 94.703530][ T7509] fuse: fd is not a fuse device [ 94.840814][ T7517] fuse: fd is not a fuse device [ 95.035122][ T7533] bonding: no command found in bonding_masters - use +ifname or -ifname [ 95.119408][ T7537] fuse: Bad value for 'fd' [ 95.695102][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.957612][ T5815] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.978370][ T5815] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.978437][ T5815] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.978477][ T5815] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.540018][ T1353] usb 6-1: USB disconnect, device number 15 [ 96.601091][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 96.611142][ T7584] fuse: Unknown parameter '0x0000000000000003' [ 96.761223][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.764563][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.795820][ T7592] overlayfs: failed to clone upperpath [ 96.914010][ T5815] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.914083][ T5815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.914153][ T5815] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.914196][ T5815] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.011203][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 97.032403][ T7600] hsr_slave_1 (unregistering): left promiscuous mode [ 97.423131][ T7620] fuse: Unknown parameter '0x0000000000000004' [ 97.443162][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 98.474509][ T7651] fuse: Unknown parameter '0x0000000000000004' [ 98.729230][ T5820] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 98.818994][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 98.889233][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 98.889976][ T5820] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.890803][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.890829][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.890846][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 98.890861][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.890874][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.890900][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.892907][ T5820] usb 6-1: config 0 descriptor?? [ 98.939997][ T5820] rc_core: IR keymap rc-hauppauge not found [ 98.940083][ T5820] Registered IR keymap rc-empty [ 98.940521][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 98.959221][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 98.969490][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 98.970385][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.970970][ T10] usb 7-1: config 0 has no interfaces? [ 98.970998][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.974149][ T10] usb 7-1: config 0 descriptor?? [ 98.982407][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 98.992730][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 99.005535][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.029270][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.059219][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.089178][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.119205][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.149236][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.169274][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.180854][ T5886] usb 7-1: USB disconnect, device number 17 [ 99.199313][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.229293][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.249464][ T5820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 99.286005][ T5820] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 99.286154][ T5820] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.303593][ T5841] usb 6-1: USB disconnect, device number 16 [ 99.894068][ T7680] tipc: Started in network mode [ 99.894131][ T7680] tipc: Node identity 7f000001, cluster identity 4711 [ 99.896419][ T7680] tipc: New replicast peer: 0.0.0.0 [ 99.896745][ T7680] tipc: Enabled bearer , priority 10 [ 99.933705][ T7685] fuse: Unknown parameter '0x0000000000000004' [ 100.074905][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 100.328693][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 100.860702][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 100.902026][ T5841] tipc: Node number set to 2130706433 [ 103.120979][ T7820] Need at least one configuration in g_uac2. [ 103.121788][ T7820] udc usbip-vudc.0: failed to start g_uac2: -22 [ 103.121803][ T7820] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 103.126690][ T7820] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 103.795314][ T7863] syzkaller0: entered promiscuous mode [ 103.795449][ T7863] syzkaller0: entered allmulticast mode [ 104.027946][ T7872] Need at least one configuration in g_uac2. [ 104.028130][ T7872] udc usbip-vudc.0: failed to start g_uac2: -22 [ 104.028153][ T7872] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 104.029460][ T7872] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 104.308843][ T7909] syzkaller0: entered promiscuous mode [ 104.308939][ T7909] syzkaller0: entered allmulticast mode [ 104.959976][ T7951] fuse: fd is not a fuse device [ 105.232926][ T7967] netlink: 'syz.0.859': attribute type 9 has an invalid length. [ 105.429927][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 105.438021][ T7969] bond0: left promiscuous mode [ 105.438068][ T7969] bond_slave_0: left promiscuous mode [ 105.438203][ T7969] bond_slave_1: left promiscuous mode [ 105.438872][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.439574][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.443974][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.464560][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.465855][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.467800][ T7969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.470154][ T7969] veth1_vlan: left promiscuous mode [ 105.470978][ T7969] veth0_vlan: left promiscuous mode [ 105.471824][ T7969] veth0_vlan: entered promiscuous mode [ 105.472384][ T7969] veth1_vlan: entered promiscuous mode [ 105.474579][ T7969] veth1_macvtap: left promiscuous mode [ 105.475053][ T7969] veth0_macvtap: left promiscuous mode [ 105.475584][ T7969] veth0_macvtap: entered promiscuous mode [ 105.476100][ T7969] veth1_macvtap: entered promiscuous mode [ 105.479369][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.479894][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.480593][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.481175][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.543417][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.543525][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.543581][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.543610][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.694654][ T7987] ifb1: entered promiscuous mode [ 105.758105][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.871'. [ 106.068555][ T8016] netlink: 140 bytes leftover after parsing attributes in process `syz.3.882'. [ 106.075024][ T8018] FAULT_INJECTION: forcing a failure. [ 106.075024][ T8018] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.075082][ T8018] CPU: 2 UID: 0 PID: 8018 Comm: syz.2.883 Not tainted syzkaller #0 PREEMPT(full) [ 106.075096][ T8018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.075104][ T8018] Call Trace: [ 106.075108][ T8018] [ 106.075114][ T8018] dump_stack_lvl+0x100/0x190 [ 106.075141][ T8018] should_fail_ex.cold+0x5/0xa [ 106.075156][ T8018] ? prepare_alloc_pages+0x16d/0x5b0 [ 106.075173][ T8018] should_fail_alloc_page+0xeb/0x140 [ 106.075190][ T8018] prepare_alloc_pages+0x1f0/0x5b0 [ 106.075209][ T8018] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 106.075236][ T8018] ? lock_acquire+0x1d1/0x380 [ 106.075252][ T8018] ? page_table_check_set+0x11d/0x580 [ 106.075267][ T8018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.075291][ T8018] ? page_table_check_set+0x31e/0x580 [ 106.075307][ T8018] ? __page_table_check_ptes_set+0x1d5/0x530 [ 106.075325][ T8018] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.075342][ T8018] ? xas_move_index+0xae/0x110 [ 106.075357][ T8018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.075373][ T8018] ? policy_nodemask+0xed/0x4f0 [ 106.075389][ T8018] alloc_pages_mpol+0x201/0x550 [ 106.075403][ T8018] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.075421][ T8018] folio_alloc_mpol_noprof+0x36/0x260 [ 106.075439][ T8018] vma_alloc_folio_noprof+0xed/0x1d0 [ 106.075455][ T8018] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 106.075470][ T8018] ? rcu_read_unlock+0x2d/0xb0 [ 106.075486][ T8018] ? rcu_read_unlock+0x2d/0xb0 [ 106.075504][ T8018] do_wp_page+0x1b15/0x45c0 [ 106.075521][ T8018] ? lock_acquire+0x1d1/0x380 [ 106.075535][ T8018] ? __pfx_do_wp_page+0x10/0x10 [ 106.075550][ T8018] ? do_raw_spin_lock+0x128/0x260 [ 106.075567][ T8018] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.075588][ T8018] __handle_mm_fault+0x1cd2/0x2f60 [ 106.075605][ T8018] ? lock_vma_under_rcu+0x11d/0x590 [ 106.075620][ T8018] ? __pfx___handle_mm_fault+0x10/0x10 [ 106.075639][ T8018] ? lock_vma_under_rcu+0x17c/0x590 [ 106.075661][ T8018] handle_mm_fault+0x363/0xa20 [ 106.075679][ T8018] do_user_addr_fault+0x59c/0x12f0 [ 106.075696][ T8018] exc_page_fault+0x6f/0xd0 [ 106.075710][ T8018] asm_exc_page_fault+0x26/0x30 [ 106.075721][ T8018] RIP: 0023:0xf7196b52 [ 106.075730][ T8018] Code: c7 cd 14 29 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 106.075741][ T8018] RSP: 002b:00000000f5455310 EFLAGS: 00010293 [ 106.075750][ T8018] RAX: 0000000000000008 RBX: 00000000f7427ff4 RCX: 00000000f725f5bc [ 106.075757][ T8018] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000f7427ff4 [ 106.075764][ T8018] RBP: 00000000f7f86ec0 R08: 0000000000000000 R09: 0000000000000000 [ 106.075770][ T8018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.075776][ T8018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.075790][ T8018] [ 106.075894][ T8018] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.078938][ T8016] netlink: 56 bytes leftover after parsing attributes in process `syz.3.882'. [ 106.281841][ T8039] fuse: fd is not a fuse device [ 106.983213][ T5820] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 107.135224][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 107.135297][ T5820] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 107.136637][ T5820] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 107.136661][ T5820] usb 6-1: config 189 has no interface number 0 [ 107.136689][ T5820] usb 6-1: config 189 interface 127 has no altsetting 0 [ 107.139723][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.139737][ T5820] usb 6-1: Product: syz [ 107.139745][ T5820] usb 6-1: Manufacturer: syz [ 107.139753][ T5820] usb 6-1: SerialNumber: syz [ 107.439351][ T5820] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 107.439409][ T5820] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 107.439834][ T5820] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 107.440410][ T5820] safe_serial 6-1:189.127: safe_serial converter detected [ 107.440559][ T5820] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 107.448438][ T5820] usb 6-1: USB disconnect, device number 17 [ 107.621824][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 108.348669][ T8138] program syz.2.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.930283][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'. [ 108.930860][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 108.966782][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 108.966868][ T8168] ifb1: left promiscuous mode [ 109.221904][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 109.267807][ T8193] ifb1: entered promiscuous mode [ 109.480103][ T8207] syzkaller0: entered promiscuous mode [ 109.480170][ T8207] syzkaller0: entered allmulticast mode [ 109.557759][ T8213] fuse: fd is not a fuse device [ 109.593512][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 109.593592][ T8216] ifb1: left promiscuous mode [ 109.864381][ T8236] fuse: fd is not a fuse device [ 109.929632][ T8239] ifb1: entered promiscuous mode [ 110.054652][ T1353] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 110.216434][ T1353] usb 7-1: unable to get BOS descriptor or descriptor too short [ 110.216879][ T1353] usb 7-1: not running at top speed; connect to a high speed hub [ 110.216894][ T1353] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 110.217661][ T1353] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 110.217674][ T1353] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 110.217684][ T1353] usb 7-1: config 14 has no interface number 0 [ 110.217692][ T1353] usb 7-1: config 14 has no interface number 1 [ 110.217716][ T1353] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 110.217727][ T1353] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 110.217739][ T1353] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 110.217750][ T1353] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 110.217763][ T1353] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 110.217775][ T1353] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.217786][ T1353] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.217798][ T1353] usb 7-1: config 14 interface 57 has no altsetting 0 [ 110.217807][ T1353] usb 7-1: config 14 interface 228 has no altsetting 0 [ 110.219952][ T1353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.219971][ T1353] usb 7-1: Product: syz [ 110.219983][ T1353] usb 7-1: Manufacturer: syz [ 110.219995][ T1353] usb 7-1: SerialNumber: syz [ 110.495600][ T8288] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.495803][ T8288] block device autoloading is deprecated and will be removed. [ 110.498824][ T8286] md: md130 stopped. [ 110.631104][ T1353] legousbtower 7-1:14.57: interrupt endpoints not found [ 111.033029][ T1353] legousbtower 7-1:14.228: get version request failed: -32 [ 111.033263][ T1353] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -32 [ 111.598128][ T8338] fuse: fd is not a fuse device [ 112.265807][ T5841] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 112.270559][ T8354] __nla_validate_parse: 1 callbacks suppressed [ 112.270650][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 112.270851][ T8354] sch_fq: defrate 20356 ignored. [ 112.436398][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 112.436908][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.438734][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.438758][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.438775][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.438804][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.440643][ T5841] usb 6-1: config 0 descriptor?? [ 112.592851][ T8372] ifb0: entered promiscuous mode [ 112.594585][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 112.594611][ T8372] ifb0: left promiscuous mode [ 112.811190][ T5886] usb 7-1: USB disconnect, device number 18 [ 113.049962][ T5841] usbhid 6-1:0.0: can't add hid device: -71 [ 113.050098][ T5841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 113.061471][ T5841] usb 6-1: USB disconnect, device number 18 [ 113.112765][ T43] audit: type=1326 audit(1788240962.809:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.3.1055" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befec code=0x0 [ 113.923718][ T8430] fuse: Bad value for 'fd' [ 114.177007][ T58] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 114.331733][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 114.331821][ T58] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 114.332741][ T58] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 114.332762][ T58] usb 7-1: config 189 has no interface number 0 [ 114.332784][ T58] usb 7-1: config 189 interface 127 has no altsetting 0 [ 114.334550][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.334569][ T58] usb 7-1: Product: syz [ 114.334579][ T58] usb 7-1: Manufacturer: syz [ 114.334589][ T58] usb 7-1: SerialNumber: syz [ 114.409246][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.413812][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.549901][ T58] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 114.549972][ T58] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 114.550042][ T58] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 114.550656][ T58] safe_serial 7-1:189.127: safe_serial converter detected [ 114.550787][ T58] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 114.556802][ T58] usb 7-1: USB disconnect, device number 19 [ 114.607076][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.607159][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.607188][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.607217][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.837888][ T8489] syzkaller0: entered promiscuous mode [ 114.837964][ T8489] syzkaller0: entered allmulticast mode [ 114.871303][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 114.924632][ T8492] fuse: fd is not a fuse device [ 115.162179][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 115.162227][ T8506] bridge_slave_0: default FDB implementation only supports local addresses [ 115.206073][ T8510] fuse: fd is not a fuse device [ 116.326230][ T8578] raw_sendmsg: syz.3.1124 forgot to set AF_INET. Fix it! [ 116.386177][ T8586] netlink: 'syz.3.1127': attribute type 3 has an invalid length. [ 116.682110][ T8613] ifb0: entered promiscuous mode [ 116.687276][ T8613] vlan0: entered promiscuous mode [ 116.715737][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 116.825646][ T43] audit: type=1326 audit(1788240966.517:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.825711][ T43] audit: type=1326 audit(1788240966.517:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.826878][ T43] audit: type=1326 audit(1788240966.517:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.828586][ T43] audit: type=1326 audit(1788240966.517:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.828683][ T43] audit: type=1326 audit(1788240966.517:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.828734][ T43] audit: type=1326 audit(1788240966.517:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.828761][ T43] audit: type=1326 audit(1788240966.517:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.828790][ T43] audit: type=1326 audit(1788240966.527:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 116.829528][ T43] audit: type=1326 audit(1788240966.527:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 117.664540][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 117.827613][ T8676] fuse: fd is not a fuse device [ 118.126680][ T43] audit: type=1326 audit(1788240967.816:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.127044][ T43] audit: type=1326 audit(1788240967.816:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.127159][ T43] audit: type=1326 audit(1788240967.816:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142502][ T43] audit: type=1326 audit(1788240967.816:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142557][ T43] audit: type=1326 audit(1788240967.836:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142589][ T43] audit: type=1326 audit(1788240967.836:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142620][ T43] audit: type=1326 audit(1788240967.836:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142650][ T43] audit: type=1326 audit(1788240967.836:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.142791][ T43] audit: type=1326 audit(1788240967.836:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.143090][ T43] audit: type=1326 audit(1788240967.836:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.3.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 118.293917][ T8718] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1181'. [ 118.298303][ T8718] gretap0: entered promiscuous mode [ 118.302419][ T8718] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1181'. [ 118.308463][ T8718] 0ªî{X¹¦: renamed from gretap0 [ 118.317614][ T8718] 0ªî{X¹¦: left promiscuous mode [ 118.317679][ T8718] 0ªî{X¹¦: entered allmulticast mode [ 118.319626][ T8718] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.449433][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 118.734880][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 118.774495][ T8757] macvtap1: entered allmulticast mode [ 118.774548][ T8757] dummy0: entered allmulticast mode [ 118.792155][ T8757] dummy0: left allmulticast mode [ 118.919939][ T8767] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.041868][ T8767] md: invalid raid superblock magic on ram1 [ 119.044624][ T8767] md: ram1 does not have a valid v0.0 superblock, not importing! [ 119.047987][ T8767] md: md_import_device returned -22 [ 119.054463][ T8782] fuse: fd is not a fuse device [ 119.302017][ T8797] FAULT_INJECTION: forcing a failure. [ 119.302017][ T8797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.302089][ T8797] CPU: 3 UID: 0 PID: 8797 Comm: syz.1.1218 Not tainted syzkaller #0 PREEMPT(full) [ 119.302129][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.302141][ T8797] Call Trace: [ 119.302146][ T8797] [ 119.302153][ T8797] dump_stack_lvl+0x100/0x190 [ 119.302183][ T8797] should_fail_ex.cold+0x5/0xa [ 119.302208][ T8797] get_futex_key+0x1d0/0x14f0 [ 119.302241][ T8797] ? __pfx_get_futex_key+0x10/0x10 [ 119.302268][ T8797] ? __destroy_inode+0x2cd/0x710 [ 119.302292][ T8797] ? __pfx_sock_free_inode+0x10/0x10 [ 119.302330][ T8797] ? destroy_inode+0x139/0x1c0 [ 119.302354][ T8797] futex_wake+0xf4/0x5e0 [ 119.302374][ T8797] ? lock_acquire+0x1d1/0x380 [ 119.302400][ T8797] ? __pfx_futex_wake+0x10/0x10 [ 119.302419][ T8797] ? iput.part.0+0x981/0x1050 [ 119.302452][ T8797] do_futex+0x2b2/0x440 [ 119.302470][ T8797] ? __pfx_do_futex+0x10/0x10 [ 119.302486][ T8797] ? iput+0x3a/0x40 [ 119.302508][ T8797] ? __sock_release+0x184/0x260 [ 119.302536][ T8797] __ia32_sys_futex_time32+0x2f4/0x470 [ 119.302558][ T8797] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 119.302595][ T8797] __do_fast_syscall_32+0x13a/0x8b0 [ 119.302634][ T8797] do_fast_syscall_32+0x32/0x70 [ 119.302663][ T8797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.302686][ T8797] RIP: 0023:0xf705efec [ 119.302707][ T8797] Code: Unable to access opcode bytes at 0xf705efc2. [ 119.302716][ T8797] RSP: 002b:00000000f544d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 119.302736][ T8797] RAX: ffffffffffffffda RBX: 00000000f7454f8c RCX: 0000000000000081 [ 119.302748][ T8797] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 119.302760][ T8797] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 119.302772][ T8797] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.302784][ T8797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.302810][ T8797] [ 119.402729][ T8803] fuse: Bad value for 'fd' [ 119.563550][ T8811] FAULT_INJECTION: forcing a failure. [ 119.563550][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 119.563622][ T8811] CPU: 3 UID: 0 PID: 8811 Comm: syz.2.1223 Not tainted syzkaller #0 PREEMPT(full) [ 119.563648][ T8811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.563656][ T8811] Call Trace: [ 119.563661][ T8811] [ 119.563666][ T8811] dump_stack_lvl+0x100/0x190 [ 119.563686][ T8811] should_fail_ex.cold+0x5/0xa [ 119.563704][ T8811] should_failslab+0xc2/0x120 [ 119.563719][ T8811] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 119.563733][ T8811] ? __alloc_skb+0x5b7/0x710 [ 119.563748][ T8811] ? __alloc_skb+0x140/0x710 [ 119.563764][ T8811] __alloc_skb+0x140/0x710 [ 119.563776][ T8811] ? __alloc_skb+0x5b7/0x710 [ 119.563788][ T8811] ? __pfx___alloc_skb+0x10/0x10 [ 119.563805][ T8811] netlink_alloc_large_skb+0x69/0x150 [ 119.563820][ T8811] netlink_sendmsg+0x680/0xda0 [ 119.563835][ T8811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.563848][ T8811] ? apparmor_socket_sendmsg+0x165/0x280 [ 119.563865][ T8811] sock_write_iter+0x53a/0x5b0 [ 119.563880][ T8811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.563892][ T8811] ? __pfx_sock_write_iter+0x10/0x10 [ 119.563912][ T8811] ? bpf_lsm_file_permission+0x9/0x10 [ 119.563926][ T8811] ? security_file_permission+0x76/0x210 [ 119.563944][ T8811] ? rw_verify_area+0xce/0x6d0 [ 119.563963][ T8811] vfs_write+0x6af/0x1050 [ 119.563975][ T8811] ? __pfx_sock_write_iter+0x10/0x10 [ 119.563993][ T8811] ? __pfx_vfs_write+0x10/0x10 [ 119.564002][ T8811] ? find_held_lock+0x2b/0x80 [ 119.564023][ T8811] ksys_write+0x1f8/0x250 [ 119.564034][ T8811] ? __pfx_ksys_write+0x10/0x10 [ 119.564068][ T8811] __do_fast_syscall_32+0x13a/0x8b0 [ 119.564087][ T8811] do_fast_syscall_32+0x32/0x70 [ 119.564104][ T8811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.564119][ T8811] RIP: 0023:0xf7f98fec [ 119.564134][ T8811] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 119.564139][ T8811] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 119.564151][ T8811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 119.564158][ T8811] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.564165][ T8811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.564171][ T8811] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.564178][ T8811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.564192][ T8811] [ 119.587375][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 119.840953][ T8836] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1234'. [ 119.995074][ T8848] overlayfs: failed to clone upperpath [ 120.338114][ T8857] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.478345][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 120.703303][ T8877] netlink: 'syz.2.1252': attribute type 5 has an invalid length. [ 120.794918][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 122.229489][ T8930] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1273'. [ 122.315056][ T8938] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 122.315148][ T8938] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 122.315200][ T8938] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 122.318055][ T8938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.325665][ T8938] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.027989][ T8957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.859830][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 124.135049][ T9018] fuse: fd is not a fuse device [ 124.619956][ T9041] fuse: Bad value for 'fd' [ 125.546114][ T9093] 8021q: VLANs not supported on gre0 [ 126.812476][ T9183] fuse: fd is not a fuse device [ 126.923964][ T9191] fuse: fd is not a fuse device [ 127.842387][ T9232] FAULT_INJECTION: forcing a failure. [ 127.842387][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 127.842466][ T9232] CPU: 1 UID: 0 PID: 9232 Comm: syz.2.1403 Not tainted syzkaller #0 PREEMPT(full) [ 127.842503][ T9232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.842517][ T9232] Call Trace: [ 127.842524][ T9232] [ 127.842533][ T9232] dump_stack_lvl+0x100/0x190 [ 127.842563][ T9232] should_fail_ex.cold+0x5/0xa [ 127.842590][ T9232] should_failslab+0xc2/0x120 [ 127.842615][ T9232] __kmalloc_noprof+0xfc/0x840 [ 127.842635][ T9232] ? trace_kmalloc+0xeb/0x110 [ 127.842656][ T9232] ? lsm_blob_alloc+0x68/0x90 [ 127.842678][ T9232] lsm_blob_alloc+0x68/0x90 [ 127.842696][ T9232] security_sk_alloc+0x2d/0x290 [ 127.842719][ T9232] sk_prot_alloc+0x12a/0x2a0 [ 127.842748][ T9232] sk_alloc+0x36/0xe80 [ 127.842770][ T9232] packet_create+0x127/0x8e0 [ 127.842793][ T9232] __sock_create+0x339/0x860 [ 127.842825][ T9232] __sys_socket+0x14d/0x260 [ 127.842852][ T9232] ? xfd_validate_state+0x129/0x190 [ 127.842881][ T9232] ? __pfx___sys_socket+0x10/0x10 [ 127.842916][ T9232] __ia32_sys_socket+0x72/0xb0 [ 127.842944][ T9232] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.842969][ T9232] __do_fast_syscall_32+0x13a/0x8b0 [ 127.842998][ T9232] do_fast_syscall_32+0x32/0x70 [ 127.843025][ T9232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.843049][ T9232] RIP: 0023:0xf7f98fec [ 127.843070][ T9232] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 127.843079][ T9232] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 127.843099][ T9232] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003 [ 127.843111][ T9232] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.843122][ T9232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.843133][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.843150][ T9232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.843175][ T9232] [ 128.966205][ T9292] syzkaller0: entered promiscuous mode [ 128.966268][ T9292] syzkaller0: entered allmulticast mode [ 130.022499][ T9341] overlayfs: failed to clone lowerpath [ 130.027939][ T9341] overlayfs: failed to clone lowerpath [ 130.272514][ T9347] bond1: option lp_interval: invalid value (18446744071562067969) [ 130.272604][ T9347] bond1: option lp_interval: allowed values 1 - 2147483647 [ 130.289211][ T9347] bond1 (unregistering): Released all slaves [ 130.444378][ T9354] fuse: fd is not a fuse device [ 130.876630][ T9385] fuse: Bad value for 'fd' [ 131.070954][ T9402] syzkaller0: entered promiscuous mode [ 131.070992][ T9402] syzkaller0: entered allmulticast mode [ 131.310054][ T9433] netlink: 'syz.3.1489': attribute type 4 has an invalid length. [ 131.322768][ T9421] zswap: compressor not available [ 131.368069][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 131.373014][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'. [ 131.518098][ T9459] overlayfs: failed to clone upperpath [ 131.546563][ T30] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 131.569849][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1502'. [ 131.570831][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 131.637899][ T9480] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 131.654951][ T9480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.665814][ T9480] vlan0: entered allmulticast mode [ 131.665868][ T9480] bond1: entered allmulticast mode [ 131.697153][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.697596][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 131.697793][ T30] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 131.698620][ T30] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 131.698633][ T30] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 131.698643][ T30] usb 6-1: config 14 has no interface number 0 [ 131.698651][ T30] usb 6-1: config 14 has no interface number 1 [ 131.698679][ T30] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 131.698690][ T30] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 131.698703][ T30] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 131.698715][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 131.698728][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 131.698741][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.698751][ T30] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.698764][ T30] usb 6-1: config 14 interface 57 has no altsetting 0 [ 131.698773][ T30] usb 6-1: config 14 interface 228 has no altsetting 0 [ 131.700582][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.700598][ T30] usb 6-1: Product: syz [ 131.700607][ T30] usb 6-1: Manufacturer: syz [ 131.700615][ T30] usb 6-1: SerialNumber: syz [ 131.741828][ T9493] ip6erspan0: entered allmulticast mode [ 132.124237][ T30] legousbtower 6-1:14.57: interrupt endpoints not found [ 132.381794][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.381904][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.522943][ T30] legousbtower 6-1:14.228: get version request failed: -121 [ 132.523099][ T30] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 132.688648][ T9580] fuse: Bad value for 'fd' [ 132.958964][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 133.201382][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 133.202178][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1570'. [ 133.719378][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 133.727183][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 133.990265][ T9689] 9p: Bad value for 'rfdno' [ 134.171073][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 134.261507][ T9710] fuse: fd is not a fuse device [ 134.311840][ T5887] usb 6-1: USB disconnect, device number 19 [ 134.832357][ T9738] fuse: Bad value for 'fd' [ 135.597673][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 136.965165][ T9760] fuse: fd is not a fuse device [ 141.339378][ T9781] warning: `syz.3.1642' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.548193][ T9801] ptrace attach of "/syz-executor exec"[5734] was attempted by ""[9801] [ 146.481964][ T9816] ip6erspan0: entered allmulticast mode [ 147.443998][ T5508] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 147.624275][ T5508] usb 6-1: Using ep0 maxpacket: 32 [ 147.674538][ T5508] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.679166][ T5508] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 147.736588][ T5508] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 147.739422][ T5508] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 147.742576][ T5508] usb 6-1: config 14 has no interface number 0 [ 147.747588][ T5508] usb 6-1: config 14 has no interface number 1 [ 147.752152][ T5508] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 147.756760][ T5508] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 147.761884][ T5508] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 147.766686][ T5508] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 147.771553][ T5508] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 147.780228][ T5508] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.785645][ T5508] usb 6-1: config 14 interface 57 has no altsetting 0 [ 147.788037][ T5508] usb 6-1: config 14 interface 228 has no altsetting 0 [ 147.860189][ T5508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.860327][ T5508] usb 6-1: Product: syz [ 147.860509][ T5508] usb 6-1: Manufacturer: syz [ 147.860639][ T5508] usb 6-1: SerialNumber: syz [ 148.646070][ T5508] legousbtower 6-1:14.57: interrupt endpoints not found [ 149.074475][ T5508] legousbtower 6-1:14.228: get version request failed: -32 [ 149.083190][ T5508] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -32 [ 150.248013][ T9845] ptrace attach of "/syz-executor exec"[5743] was attempted by ""[9845] [ 150.811192][ T8464] usb 6-1: USB disconnect, device number 20 [ 153.019593][ T9864] ip6erspan0: entered allmulticast mode [ 156.393019][ T9893] ip6erspan0: entered allmulticast mode [ 165.517334][ T9940] __nla_validate_parse: 4 callbacks suppressed [ 165.520065][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 167.474129][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 167.481164][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 167.493660][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 170.069620][ T9980] fuse: fd is not a fuse device [ 170.836737][ T9987] macvtap1: entered allmulticast mode [ 170.836912][ T9987] dummy0: entered allmulticast mode [ 170.841766][ T9987] dummy0: entered promiscuous mode [ 170.877239][ T9987] dummy0: left allmulticast mode [ 171.029996][ T35] dummy0: left promiscuous mode [ 173.310901][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 174.181798][T10013] macvtap1: entered allmulticast mode [ 174.181885][T10013] dummy0: entered allmulticast mode [ 174.215869][T10013] dummy0: left allmulticast mode [ 176.135725][T10032] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1742'. [ 178.222639][T10042] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 183.216167][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.274897][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.157189][T10062] macvtap1: entered allmulticast mode [ 184.157353][T10062] dummy0: entered allmulticast mode [ 184.234153][T10062] dummy0: left allmulticast mode [ 184.417598][ T5586] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.417918][ T5586] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.421249][ T5586] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.421386][ T5586] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.618755][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 186.001061][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 186.018630][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 187.407570][T10098] macvtap1: entered allmulticast mode [ 187.407702][T10098] dummy0: entered allmulticast mode [ 187.506264][T10098] dummy0: left allmulticast mode [ 187.753766][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 192.465195][T10139] macvtap1: entered allmulticast mode [ 192.465340][T10139] dummy0: entered allmulticast mode [ 192.510798][T10139] dummy0: left allmulticast mode [ 193.867670][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.868178][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.243625][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 195.803402][T10166] macvtap1: entered allmulticast mode [ 195.803986][T10166] dummy0: entered allmulticast mode [ 195.840837][T10166] dummy0: left allmulticast mode [ 197.898888][ T35] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 198.081749][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 198.087102][ T35] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.114729][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.119336][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.122700][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.128518][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.185459][ T35] usb 6-1: config 0 descriptor?? [ 198.436483][T10199] macvtap1: entered allmulticast mode [ 198.436656][T10199] dummy0: entered allmulticast mode [ 198.482444][T10199] dummy0: left allmulticast mode [ 198.953163][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 198.959313][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 199.032619][ T35] usb 6-1: USB disconnect, device number 21 [ 201.911211][ T8464] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 202.061301][ T8464] usb 6-1: Using ep0 maxpacket: 16 [ 202.073427][ T8464] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.098257][ T8464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.098499][ T8464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.098686][ T8464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.098890][ T8464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.167017][ T8464] usb 6-1: config 0 descriptor?? [ 202.942454][ T8464] usbhid 6-1:0.0: can't add hid device: -71 [ 202.943063][ T8464] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 202.999183][ T8464] usb 6-1: USB disconnect, device number 22 [ 204.300550][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 205.053759][ T58] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 205.263481][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.272021][ T58] usb 6-1: not running at top speed; connect to a high speed hub [ 205.272674][ T58] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 205.287949][ T58] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 205.294968][ T58] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 205.299740][ T58] usb 6-1: config 14 has no interface number 0 [ 205.299888][ T58] usb 6-1: config 14 has no interface number 1 [ 205.300724][ T58] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 205.300827][ T58] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 205.300939][ T58] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 205.301064][ T58] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 205.301205][ T58] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 205.344864][ T58] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 205.350385][ T58] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.357681][ T58] usb 6-1: config 14 interface 57 has no altsetting 0 [ 205.364980][ T58] usb 6-1: config 14 interface 228 has no altsetting 0 [ 205.428055][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.433228][ T58] usb 6-1: Product: syz [ 205.435708][ T58] usb 6-1: Manufacturer: syz [ 205.438274][ T58] usb 6-1: SerialNumber: syz [ 206.196796][ T58] legousbtower 6-1:14.57: interrupt endpoints not found [ 206.580294][ T58] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 206.634580][ T58] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 206.892109][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 207.445271][ T35] usb 6-1: USB disconnect, device number 23 [ 207.662194][ T35] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 211.350936][T10296] macvtap1: entered allmulticast mode [ 211.351105][T10296] dummy0: entered allmulticast mode [ 211.513338][T10296] dummy0: left allmulticast mode [ 214.605177][T10326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1866'. [ 217.345634][T10339] FAULT_INJECTION: forcing a failure. [ 217.345634][T10339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.352777][T10339] CPU: 2 UID: 0 PID: 10339 Comm: syz.1.1872 Not tainted syzkaller #0 PREEMPT(full) [ 217.352859][T10339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.352890][T10339] Call Trace: [ 217.352938][T10339] [ 217.352986][T10339] dump_stack_lvl+0x100/0x190 [ 217.353221][T10339] should_fail_ex.cold+0x5/0xa [ 217.353313][T10339] ? prepare_alloc_pages+0x16d/0x5b0 [ 217.353439][T10339] should_fail_alloc_page+0xeb/0x140 [ 217.353553][T10339] prepare_alloc_pages+0x1f0/0x5b0 [ 217.353936][T10339] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 217.354150][T10339] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 217.354543][T10339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.354895][T10339] ? rb_commit+0x129/0x9d0 [ 217.355431][T10339] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 217.355576][T10339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.355786][T10339] ? policy_nodemask+0xed/0x4f0 [ 217.355959][T10339] alloc_pages_mpol+0x201/0x550 [ 217.356141][T10339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.356247][T10339] ? trace_event_raw_event_alloc_vmap_area+0x221/0x310 [ 217.356515][T10339] alloc_pages_noprof+0x1a/0x160 [ 217.356638][T10339] get_free_pages_noprof+0x10/0xb0 [ 217.356732][T10339] __kasan_populate_vmalloc+0xa0/0x210 [ 217.357023][T10339] alloc_vmap_area+0x95d/0x2bb0 [ 217.357390][T10339] ? kasan_save_track+0x14/0x30 [ 217.357442][T10339] ? __kasan_kmalloc+0xaa/0xb0 [ 217.357512][T10339] ? __pfx_alloc_vmap_area+0x10/0x10 [ 217.357698][T10339] ? __get_vm_area_node+0x124/0x350 [ 217.357911][T10339] __get_vm_area_node+0x1ed/0x350 [ 217.358163][T10339] __vmalloc_node_range_noprof+0x268/0x1420 [ 217.358304][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.358393][T10339] ? __pfx_stack_trace_save+0x10/0x10 [ 217.358470][T10339] ? stack_depot_save_flags+0x27/0x9f0 [ 217.358518][T10339] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 217.358757][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.358876][T10339] ? __kasan_kmalloc+0xaa/0xb0 [ 217.358931][T10339] ? __do_fast_syscall_32+0x13a/0x8b0 [ 217.359047][T10339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.359411][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.359474][T10339] __vmalloc_node_noprof+0xad/0xf0 [ 217.359571][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.359805][T10339] __vmalloc_noprof+0xa3/0x120 [ 217.359880][T10339] ? __pfx___vmalloc_noprof+0x10/0x10 [ 217.360276][T10339] bpf_prog_alloc_no_stats+0x58/0x690 [ 217.360429][T10339] bpf_prog_alloc+0x3b/0x200 [ 217.360612][T10339] bpf_prog_create_from_user+0xb4/0x2e0 [ 217.360750][T10339] ? __pfx_seccomp_check_filter+0x10/0x10 [ 217.360874][T10339] do_seccomp+0x7f7/0x2730 [ 217.361228][T10339] ? __pfx_do_seccomp+0x10/0x10 [ 217.361354][T10339] ? find_held_lock+0x2b/0x80 [ 217.361421][T10339] ? trace_syscall_enter+0xcc/0x120 [ 217.361502][T10339] ? trace_syscall_enter+0xcc/0x120 [ 217.361810][T10339] __do_fast_syscall_32+0x13a/0x8b0 [ 217.361869][T10339] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.362046][T10339] do_fast_syscall_32+0x32/0x70 [ 217.362178][T10339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.362235][T10339] RIP: 0023:0xf705efec [ 217.362301][T10339] Code: Unable to access opcode bytes at 0xf705efc2. [ 217.362319][T10339] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 217.362360][T10339] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000a [ 217.362384][T10339] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.362408][T10339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.362432][T10339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.362456][T10339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.362890][T10339] [ 217.443296][T10339] syz.1.1872: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.443605][T10339] CPU: 3 UID: 0 PID: 10339 Comm: syz.1.1872 Not tainted syzkaller #0 PREEMPT(full) [ 217.443626][T10339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.443641][T10339] Call Trace: [ 217.443663][T10339] [ 217.443688][T10339] dump_stack_lvl+0x100/0x190 [ 217.443814][T10339] warn_alloc.cold+0x9e/0xb2 [ 217.443904][T10339] ? __pfx_warn_alloc+0x10/0x10 [ 217.443943][T10339] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.444093][T10339] ? __get_vm_area_node+0x2f0/0x350 [ 217.444257][T10339] ? __get_vm_area_node+0x22b/0x350 [ 217.444435][T10339] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 217.444503][T10339] ? __pfx_stack_trace_save+0x10/0x10 [ 217.444547][T10339] ? stack_depot_save_flags+0x27/0x9f0 [ 217.444577][T10339] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 217.444724][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.444801][T10339] ? __kasan_kmalloc+0xaa/0xb0 [ 217.444835][T10339] ? __do_fast_syscall_32+0x13a/0x8b0 [ 217.444911][T10339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.445161][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.445202][T10339] __vmalloc_node_noprof+0xad/0xf0 [ 217.445268][T10339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 217.445421][T10339] __vmalloc_noprof+0xa3/0x120 [ 217.445474][T10339] ? __pfx___vmalloc_noprof+0x10/0x10 [ 217.445742][T10339] bpf_prog_alloc_no_stats+0x58/0x690 [ 217.445860][T10339] bpf_prog_alloc+0x3b/0x200 [ 217.446000][T10339] bpf_prog_create_from_user+0xb4/0x2e0 [ 217.446103][T10339] ? __pfx_seccomp_check_filter+0x10/0x10 [ 217.446202][T10339] do_seccomp+0x7f7/0x2730 [ 217.446471][T10339] ? __pfx_do_seccomp+0x10/0x10 [ 217.446572][T10339] ? find_held_lock+0x2b/0x80 [ 217.446622][T10339] ? trace_syscall_enter+0xcc/0x120 [ 217.446686][T10339] ? trace_syscall_enter+0xcc/0x120 [ 217.446925][T10339] __do_fast_syscall_32+0x13a/0x8b0 [ 217.446970][T10339] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.447107][T10339] do_fast_syscall_32+0x32/0x70 [ 217.447210][T10339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.447258][T10339] RIP: 0023:0xf705efec [ 217.447306][T10339] Code: Unable to access opcode bytes at 0xf705efc2. [ 217.447320][T10339] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 217.447349][T10339] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000a [ 217.447366][T10339] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.447384][T10339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.447401][T10339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.447419][T10339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.447741][T10339] [ 217.484130][T10339] Mem-Info: [ 217.484161][T10339] active_anon:7925 inactive_anon:723 isolated_anon:20 [ 217.484161][T10339] active_file:2637 inactive_file:43926 isolated_file:65 [ 217.484161][T10339] unevictable:1000 dirty:233 writeback:0 [ 217.484161][T10339] slab_reclaimable:9549 slab_unreclaimable:53191 [ 217.484161][T10339] mapped:23351 shmem:4358 pagetables:1290 [ 217.484161][T10339] sec_pagetables:302 bounce:0 [ 217.484161][T10339] kernel_misc_reclaimable:0 [ 217.484161][T10339] free:32687 free_pcp:16165 free_cma:0 [ 217.484218][T10339] Node 0 active_anon:20kB inactive_anon:64kB active_file:2096kB inactive_file:416kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:20kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1396kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.484275][T10339] Node 1 active_anon:31680kB inactive_anon:2828kB active_file:8452kB inactive_file:175288kB unevictable:2000kB isolated(anon):80kB isolated(file):260kB mapped:93288kB dirty:912kB writeback:0kB shmem:15432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4384kB pagetables:3764kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.484334][T10339] Node 0 DMA free:2972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 217.484419][T10339] lowmem_reserve[]: 0 278 278 278 278 [ 217.484559][T10339] Node 0 DMA32 free:17132kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:64kB active_file:2096kB inactive_file:416kB unevictable:2000kB writepending:20kB zspages:0kB present:1032196kB managed:284676kB mlocked:0kB bounce:0kB free_pcp:11340kB local_pcp:1084kB free_cma:0kB [ 217.484633][T10339] lowmem_reserve[]: 0 0 0 0 0 [ 217.484785][T10339] Node 1 DMA32 free:110644kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31680kB inactive_anon:2828kB active_file:8452kB inactive_file:175288kB unevictable:2000kB writepending:912kB zspages:1800kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:53312kB local_pcp:12664kB free_cma:0kB [ 217.484876][T10339] lowmem_reserve[]: 0 0 0 0 0 [ 217.485062][T10339] Node 0 DMA: 77*4kB (UE) 17*8kB (UE) 12*16kB (UE) 35*32kB (UE) 13*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2972kB [ 217.485461][T10339] Node 0 DMA32: 1*4kB (E) 43*8kB (UE) 13*16kB (UME) 124*32kB (UME) 55*64kB (UME) 15*128kB (UE) 8*256kB (UME) 6*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 17132kB [ 217.486038][T10339] Node 1 DMA32: 527*4kB (UM) 347*8kB (UME) 188*16kB (UME) 103*32kB (UME) 90*64kB (UME) 72*128kB (UME) 84*256kB (UME) 45*512kB (UM) 31*1024kB (UM) 4*2048kB (UM) 0*4096kB = 110644kB [ 217.492113][T10339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.492131][T10339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.492150][T10339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.492169][T10339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.492189][T10339] 51930 total pagecache pages [ 217.492205][T10339] 943 pages in swap cache [ 217.492223][T10339] Free swap = 118372kB [ 217.492241][T10339] Total swap = 124996kB [ 217.492261][T10339] 524155 pages RAM [ 217.492281][T10339] 0 pages HighMem/MovableOnly [ 217.492302][T10339] 212094 pages reserved [ 217.492324][T10339] 0 pages cma reserved [ 222.522854][T10375] Bluetooth: MGMT ver 1.23 [ 229.847262][ T8464] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 230.050444][ T8464] usb 6-1: Using ep0 maxpacket: 32 [ 230.238349][ T8464] usb 6-1: unable to get BOS descriptor or descriptor too short [ 230.238934][ T8464] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 230.258164][ T8464] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 230.258285][ T8464] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 230.258671][ T8464] usb 6-1: config 14 has no interface number 0 [ 230.258728][ T8464] usb 6-1: config 14 has no interface number 1 [ 230.259424][ T8464] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 230.259469][ T8464] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 230.259516][ T8464] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 230.259563][ T8464] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 230.259611][ T8464] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 230.259660][ T8464] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.259719][ T8464] usb 6-1: config 14 interface 57 has no altsetting 0 [ 230.259768][ T8464] usb 6-1: config 14 interface 228 has no altsetting 0 [ 230.317453][ T8464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.317721][ T8464] usb 6-1: Product: syz [ 230.317767][ T8464] usb 6-1: Manufacturer: syz [ 230.317813][ T8464] usb 6-1: SerialNumber: syz [ 230.892516][ T8464] legousbtower 6-1:14.57: interrupt endpoints not found [ 231.297572][ T8464] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 231.358565][ T8464] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 231.907889][T10432] usb 6-1: LEGO USB Tower reset control request failed [ 232.131995][ T8464] usb 6-1: USB disconnect, device number 24 [ 232.336614][ T8464] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 240.760861][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 240.761313][ T43] audit: type=1326 audit(1788241090.385:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.768228][ T43] audit: type=1326 audit(1788241090.395:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.802058][ T43] audit: type=1326 audit(1788241090.425:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.810340][ T43] audit: type=1326 audit(1788241090.435:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.818201][ T43] audit: type=1326 audit(1788241090.435:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.818489][ T43] audit: type=1326 audit(1788241090.435:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.818796][ T43] audit: type=1326 audit(1788241090.435:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.841217][ T43] audit: type=1326 audit(1788241090.455:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.848742][ T43] audit: type=1326 audit(1788241090.465:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 240.856723][ T43] audit: type=1326 audit(1788241090.455:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 246.354395][ T58] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 246.535855][ T58] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 246.550545][ T58] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 246.665228][ T58] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 246.669004][ T58] usb 6-1: Product: syz [ 246.671927][ T58] usb 6-1: Manufacturer: syz [ 246.676372][ T58] usb 6-1: SerialNumber: syz [ 246.770794][T10507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.540445][ T58] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.546819][ T58] usb 6-1: MIDIStreaming interface descriptor not found [ 248.491574][ T58] usb 6-1: USB disconnect, device number 25 [ 248.645786][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 249.804895][T10540] udevd[10540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.258174][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 251.347499][ T58] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 251.590864][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.595179][ T58] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 251.619942][ T58] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 251.620144][ T58] usb 6-1: config 189 has no interface number 0 [ 251.620503][ T58] usb 6-1: config 189 interface 127 has no altsetting 0 [ 251.762951][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.763092][ T58] usb 6-1: Product: syz [ 251.763343][ T58] usb 6-1: Manufacturer: syz [ 251.763492][ T58] usb 6-1: SerialNumber: syz [ 252.211035][ T58] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 252.211223][ T58] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 252.211615][ T58] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 252.228489][ T58] safe_serial 6-1:189.127: safe_serial converter detected [ 252.230644][ T58] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 252.313040][ T58] usb 6-1: USB disconnect, device number 26 [ 254.293797][T10585] fuse: fd is not a fuse device [ 255.375527][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.376057][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.319836][T10730] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 275.444408][T10730] 9p: Bad value for 'wfdno' [ 286.888516][T10782] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 291.855867][T10811] fuse: fd is not a fuse device [ 295.027452][ T8464] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 295.199268][ T8464] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 295.237634][ T8464] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.237963][ T8464] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 295.238136][ T8464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.351415][ T8464] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 295.357098][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 295.357944][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 295.402519][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 295.403392][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 295.454784][ T8464] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 295.482800][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 295.483508][ T8464] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 295.511552][ T8464] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 295.887908][ T8464] usb 6-1: USB disconnect, device number 27 [ 296.001330][ T8464] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 296.049877][ T8464] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 296.056835][ T8464] keyspan 6-1:1.0: device disconnected [ 302.541179][T10884] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 302.632065][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 305.200949][T10920] FAULT_INJECTION: forcing a failure. [ 305.200949][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 305.201095][T10920] CPU: 3 UID: 0 PID: 10920 Comm: syz.2.2080 Not tainted syzkaller #0 PREEMPT(full) [ 305.201133][T10920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.201148][T10920] Call Trace: [ 305.201165][T10920] [ 305.201186][T10920] dump_stack_lvl+0x100/0x190 [ 305.201294][T10920] should_fail_ex.cold+0x5/0xa [ 305.201474][T10920] should_failslab+0xc2/0x120 [ 305.201516][T10920] __kmalloc_noprof+0xfc/0x840 [ 305.201554][T10920] ? trace_kmalloc+0xeb/0x110 [ 305.201598][T10920] ? lsm_blob_alloc+0x68/0x90 [ 305.201780][T10920] lsm_blob_alloc+0x68/0x90 [ 305.201829][T10920] security_sk_alloc+0x2d/0x290 [ 305.201899][T10920] sk_prot_alloc+0x12a/0x2a0 [ 305.202028][T10920] sk_alloc+0x36/0xe80 [ 305.202133][T10920] bpf_prog_test_run_skb+0x4d2/0x3530 [ 305.202265][T10920] ? lock_acquire+0x1d1/0x380 [ 305.202322][T10920] ? __fget_files+0x34/0x3d0 [ 305.202415][T10920] ? find_held_lock+0x2b/0x80 [ 305.202467][T10920] ? __fget_files+0x161/0x3d0 [ 305.202644][T10920] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 305.202781][T10920] ? fput+0x7c/0x100 [ 305.202895][T10920] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 305.202993][T10920] __sys_bpf+0x2265/0x4a30 [ 305.203236][T10920] ? __pfx___sys_bpf+0x10/0x10 [ 305.203453][T10920] ? rb_commit+0x129/0x9d0 [ 305.203862][T10920] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 305.204017][T10920] ? trace_event_buffer_commit+0x20a/0xa80 [ 305.204506][T10920] ? find_held_lock+0x2b/0x80 [ 305.204647][T10920] ? __ia32_sys_bpf+0xcc/0x170 [ 305.204691][T10920] __ia32_sys_bpf+0xcc/0x170 [ 305.204766][T10920] ? rcu_is_watching+0x13/0xc0 [ 305.204847][T10920] __do_fast_syscall_32+0x13a/0x8b0 [ 305.204985][T10920] do_fast_syscall_32+0x32/0x70 [ 305.205081][T10920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.205145][T10920] RIP: 0023:0xf7f98fec [ 305.205192][T10920] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 305.205205][T10920] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 305.205238][T10920] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 305.205255][T10920] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.205270][T10920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.205287][T10920] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.205303][T10920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.205609][T10920] [ 306.020629][T10927] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 306.080593][ T38] rtrs_client L2018: : CM error (CM event: address error, err: -ENODEV) [ 306.080724][ T38] ================================================================== [ 306.080745][ T38] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.080772][ T38] Read of size 255 at addr 0000000000000000 by task kworker/u33:1/38 [ 306.080783][ T38] [ 306.080791][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 306.080805][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.080815][ T38] Workqueue: ib_addr process_one_req [ 306.080838][ T38] Call Trace: [ 306.080847][ T38] [ 306.080860][ T38] dump_stack_lvl+0x100/0x190 [ 306.080894][ T38] kasan_report+0xdf/0x1c0 [ 306.080931][ T38] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.080989][ T38] kasan_check_range+0x10f/0x1e0 [ 306.081019][ T38] __asan_memcpy+0x23/0x60 [ 306.081044][ T38] trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.081070][ T38] ? __pfx_trace_event_raw_event_rtrs_clt_conn_class+0x10/0x10 [ 306.081093][ T38] ? _printk+0xcf/0x110 [ 306.081133][ T38] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 306.081191][ T38] rtrs_rdma_error_recovery.isra.0+0x237/0x370 [ 306.081225][ T38] rtrs_clt_rdma_cm_handler+0xab1/0x1f00 [ 306.081273][ T38] ? __pfx_rtrs_clt_rdma_cm_handler+0x10/0x10 [ 306.081300][ T38] ? trace_event_raw_event_cm_event_handler+0x2af/0x3c0 [ 306.081331][ T38] ? __pfx_trace_event_raw_event_cm_event_handler+0x10/0x10 [ 306.081364][ T38] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 306.081430][ T38] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 306.081467][ T38] ? rcu_is_watching+0x13/0xc0 [ 306.081502][ T38] cma_cm_event_handler+0x99/0x300 [ 306.081535][ T38] addr_handler+0x286/0x4c0 [ 306.081570][ T38] ? __pfx_addr_handler+0x10/0x10 [ 306.081688][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.081716][ T38] ? trace_event_raw_event_workqueue_execute_start+0x185/0x250 [ 306.081759][ T38] process_one_req+0x127/0x680 [ 306.081795][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.081813][ T38] ? process_one_work+0x906/0x1b10 [ 306.081859][ T38] process_one_work+0xac7/0x1b10 [ 306.081935][ T38] ? __pfx_process_one_work+0x10/0x10 [ 306.081964][ T38] ? lock_acquire+0x1d1/0x380 [ 306.082023][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.082061][ T38] worker_thread+0x5ef/0xe50 [ 306.082120][ T38] ? __pfx_worker_thread+0x10/0x10 [ 306.082149][ T38] ? kthread+0x13a/0x450 [ 306.082164][ T38] ? __pfx_worker_thread+0x10/0x10 [ 306.082186][ T38] kthread+0x373/0x450 [ 306.082207][ T38] ? __pfx_kthread+0x10/0x10 [ 306.082237][ T38] ret_from_fork+0x730/0xd60 [ 306.082271][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 306.082306][ T38] ? __switch_to+0x800/0x10f0 [ 306.082333][ T38] ? __pfx_kthread+0x10/0x10 [ 306.082363][ T38] ret_from_fork_asm+0x1a/0x30 [ 306.082445][ T38] [ 306.082451][ T38] ================================================================== [ 306.082507][ T38] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.181900][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 306.184999][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.188018][ T38] Workqueue: ib_addr process_one_req [ 306.189652][ T38] Call Trace: [ 306.190686][ T38] [ 306.191621][ T38] dump_stack_lvl+0x100/0x190 [ 306.193098][ T38] vpanic+0x553/0x970 [ 306.194342][ T38] ? __pfx_vpanic+0x10/0x10 [ 306.195743][ T38] ? mark_held_locks+0x40/0x70 [ 306.197253][ T38] ? irqentry_exit+0x24d/0xa10 [ 306.198733][ T38] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.201071][ T38] panic+0xd1/0xe0 [ 306.202376][ T38] ? __pfx_panic+0x10/0x10 [ 306.204054][ T38] check_panic_on_warn.cold+0x19/0x34 [ 306.205837][ T38] end_report.part.0+0x3a/0x90 [ 306.207394][ T38] kasan_report.cold+0xe/0x18 [ 306.208895][ T38] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.211110][ T38] kasan_check_range+0x10f/0x1e0 [ 306.212658][ T38] __asan_memcpy+0x23/0x60 [ 306.214037][ T38] trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 306.216231][ T38] ? __pfx_trace_event_raw_event_rtrs_clt_conn_class+0x10/0x10 [ 306.218548][ T38] ? _printk+0xcf/0x110 [ 306.219987][ T38] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 306.222078][ T38] rtrs_rdma_error_recovery.isra.0+0x237/0x370 [ 306.224378][ T38] rtrs_clt_rdma_cm_handler+0xab1/0x1f00 [ 306.226316][ T38] ? __pfx_rtrs_clt_rdma_cm_handler+0x10/0x10 [ 306.228181][ T38] ? trace_event_raw_event_cm_event_handler+0x2af/0x3c0 [ 306.230356][ T38] ? __pfx_trace_event_raw_event_cm_event_handler+0x10/0x10 [ 306.232709][ T38] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 306.235301][ T38] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 306.237331][ T38] ? rcu_is_watching+0x13/0xc0 [ 306.238843][ T38] cma_cm_event_handler+0x99/0x300 [ 306.240501][ T38] addr_handler+0x286/0x4c0 [ 306.242038][ T38] ? __pfx_addr_handler+0x10/0x10 [ 306.243840][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.245593][ T38] ? trace_event_raw_event_workqueue_execute_start+0x185/0x250 [ 306.248276][ T38] process_one_req+0x127/0x680 [ 306.249792][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.251445][ T38] ? process_one_work+0x906/0x1b10 [ 306.253099][ T38] process_one_work+0xac7/0x1b10 [ 306.254756][ T38] ? __pfx_process_one_work+0x10/0x10 [ 306.256586][ T38] ? lock_acquire+0x1d1/0x380 [ 306.258443][ T38] ? __pfx_process_one_req+0x10/0x10 [ 306.260380][ T38] worker_thread+0x5ef/0xe50 [ 306.261920][ T38] ? __pfx_worker_thread+0x10/0x10 [ 306.263542][ T38] ? kthread+0x13a/0x450 [ 306.264934][ T38] ? __pfx_worker_thread+0x10/0x10 [ 306.266584][ T38] kthread+0x373/0x450 [ 306.267911][ T38] ? __pfx_kthread+0x10/0x10 [ 306.269407][ T38] ret_from_fork+0x730/0xd60 [ 306.270863][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 306.272708][ T38] ? __switch_to+0x800/0x10f0 [ 306.274397][ T38] ? __pfx_kthread+0x10/0x10 [ 306.276126][ T38] ret_from_fork_asm+0x1a/0x30 [ 306.278025][ T38] [ 306.279941][ T38] Kernel Offset: disabled [ 306.281726][ T38] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:39:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae0d15 RDI=ffffffff9bc4f1e0 RBP=ffffffff9bc4f1a0 RSP=ffffc90000616eb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303030306552 R12=0000000000000000 R13=0000000000000030 R14=000000000000000b R15=ffffc900006171c8 RIP=ffffffff85ae0d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096968000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7218c10 CR3=000000006e1c7000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff820dbf50 RDX=0000000000000003 RSI=000000000000001c RDI=ffff88804a130000 RBP=ffffffff8bf67760 RSP=ffffc900065a6e78 R8 =0000000000000001 R9 =000000000000001c R10=000000000000000a R11=0000000000000000 R12=000000000000000a R13=0000000000000005 R14=0000000000000001 R15=ffff888050920010 RIP=ffffffff820b3560 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a68000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c26c639 CR3=000000005296b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88804c6401c8 RCX=ffffffff820dc18d RDX=0000000000000102 RSI=0000000000000608 RDI=ffff88801cf62580 RBP=00000000000001e4 RSP=ffffc9000051f758 R8 =0000000000000004 R9 =0000000000000608 R10=00000000000001e4 R11=0000000000000001 R12=0000000000000608 R13=000000000000002c R14=0000004745ea6ecb R15=ffff88804c640010 RIP=ffffffff820b3560 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b68000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ae784 CR3=000000005517b000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96919f20 RBX=0000000000000319 RCX=ffffffff96907fd0 RDX=ffffffff96919818 RSI=000000000000031d RDI=ffffffff98163c98 RBP=0000000000000030 RSP=ffffc9000444e898 R8 =ffffffff96919848 R9 =0000000000000005 R10=ffffc9000444ea28 R11=0000000000000001 R12=ffffffff81e602e0 R13=ffffc9000444e940 R14=ffffffff81e60c90 R15=ffffffff98164b08 RIP=ffffffff81e616ba RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c68000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f742cbf4 CR3=000000004bd87000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000