last executing test programs: 8.886535127s ago: executing program 0 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000400)='./proc_mnt\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="de49f2", @ANYRESHEX], 0xd) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) 7.754794707s ago: executing program 0 (id=2023): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000019b80)=ANY=[], 0x10c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000198c0)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00') pread64(r4, &(0x7f00000006c0)=""/102400, 0x200000, 0x300) 7.664737819s ago: executing program 3 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setns(0xc9, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x8d00, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000780)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000007c0)=0x7) r10 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000800)=0xd) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000840), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.585431028s ago: executing program 3 (id=2026): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000019080), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000190c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000019140)=ANY=[@ANYBLOB="1502000000000a0000000000"], 0x1c}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000191c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019340)={'wlan0\x00'}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000193c0)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000019400)={'wlan0\x00', 0x1003}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="28005080141501004abee33957edf8aaae14574df400000005000200020000000800030008ac0f00"], 0x44}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x100008, &(0x7f00007a5000/0x2000)=nil, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf250200"/27], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 6.424242957s ago: executing program 0 (id=2029): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x36, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000e80)=ANY=[@ANYBLOB="940200007dc356f9f31670630a9f1b574ebb32234f5666e1bdbf85e7860cd04e6fb47430916a2f75824d3c53851db6d65f9b05ad0e9b1ac43ec6c5fb8b8548f52372765f178b09dd6c2df668764a8c75f00e7f4d20e12bddcc0401d5b205eb94508a63e33489318bbca551914b0ea7e1ecc613b744fa3460fd706cd456be0368402972280c3afc8f81fdd298c8a02189beb714be02939c5270f77f00"/169, @ANYRES16=r4, @ANYRES32=r3], 0x294}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000051) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000b05000/0x1000)=nil) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x7, 0x0, [0x5, 0x1, 0x3, 0x7f7, 0x4], [0xfffffffffffffffc, 0x2, 0x7fffffffffffffff, 0x2000000000007, 0x6a8, 0x1007fffffff, 0x0, 0xe06d, 0xffffffffffffffff, 0xde, 0x5, 0x3, 0x3f27, 0xfffffffffffffff4, 0x4a, 0xfffffffffffffffe, 0x8, 0xa, 0xffffffff00100000, 0x5, 0x7f, 0x2a9, 0xfffffffffffffff2, 0x34, 0x4, 0x200, 0x4, 0xffffffffffffffff, 0xa53, 0xffff, 0x6, 0x3, 0x5, 0x2, 0x800085, 0xfd, 0x2, 0x931, 0x101, 0x3, 0xffffffffffffff58, 0x40000000010000, 0x9, 0x3f, 0x8, 0x2000000008, 0x0, 0xfffffffffffffff9, 0xeb56, 0x2, 0x71e8, 0x100, 0xda, 0x5, 0xffffffffffffffff, 0x0, 0x714b26de, 0x9, 0x3, 0x77, 0xffffffff00000000, 0x80000000, 0x0, 0x1bc, 0x1, 0x1c, 0x1000, 0xfffffff7, 0x1, 0x7, 0x3, 0xa, 0x7, 0x7fb, 0x3, 0xe4, 0x800000000e, 0x6, 0x9, 0xd9, 0x1, 0x7fe, 0xa8, 0x5, 0xffff, 0xfffffffffffffffd, 0xffffffffffff4a38, 0x6, 0x200000000000006, 0x3, 0xf, 0x95, 0x4, 0x200c, 0x10000000000003, 0xfffffffffffbfffa, 0x8, 0x1, 0x28c1, 0x6, 0x68c, 0x0, 0x100000000a, 0x7ff, 0xc, 0x0, 0x5, 0x2, 0x1, 0x7, 0x3ff, 0x3, 0x7, 0x805, 0x4e, 0x1, 0x40, 0x7fffffff, 0x5f79, 0x2, 0xffffffffffffffff]}) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./sys\x00', &(0x7f0000000dc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000e40)="306663353a313232373a620afaf6379a248d1d6534518f109510", 0x1a) 6.382635486s ago: executing program 3 (id=2031): setns(0xc9, 0x0) syz_clone3(&(0x7f0000000400)={0x100, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000080), {0x21}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/35, &(0x7f00000019c0)=[0x0, 0x0], 0x2}, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x1ff, 0x620000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001ac0)={{r1}, "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"}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000800)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r2, 0x5) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="02c90012000e00050017420a008000001600020a0040"], 0x17) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000003b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003b80)={@fallback=r5, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003bc0)={@map=r6, r6, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003c40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003c80)={0x6, 0xc, &(0x7f0000003d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000003dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x4c, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, {0x20, 0x1, 0x1, 0x1, {0x4e21, 0x4e24, [0x9, 0x6, 0x8, 0xf], [0x2, 0x4, 0x800, 0x8], 0x0, [0xcf24e18, 0x8b]}, 0x1, 0x2}}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040014) 5.508276082s ago: executing program 0 (id=2035): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x541802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$video4linux(&(0x7f0000000080), 0x458d, 0x20500) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syz_tun\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[], 0x32600) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf250900020073797a300000000008004100736977001400330064756d6d793000000001000000000000ae17370d37c202a2"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000084) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, 0x1404, 0x1, 0x709d2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, 0x0, &(0x7f0000001140)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001180)=[{&(0x7f00000011c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001200)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x2c}], 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000012c0)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000001300)=0xc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001340), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000001380)={0x1, [0x0]}, &(0x7f00000013c0)=0x8) r7 = syz_open_dev$dri(&(0x7f0000001400), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) 4.926567206s ago: executing program 3 (id=2037): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0xae2) timer_settime(r1, 0x0, &(0x7f0000000480), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r4, 0x6, 0x0, 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/106, 0x6a}], 0x1, 0x3ff, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="20bad3cdd7827bf4c88c9eef1a2addfebd76b3b8aeeac17156170a61869a57b4d1917844e92605eb7db598e24ab69e30f37db27c2a8754a3c0b78db2c4ed999464870eb0505b11dad26f737d92e2e74edc5b1c7c6576563f5b12163380135383090f54b798ac31b93bc74560e953d6fd06c8032f9cca59822c3b1de1d882253494804c49a2397ce90e3c5dc55d1fd0", @ANYBLOB="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", @ANYRESOCT=r5, @ANYBLOB="2e795be371eead77596215e5794dc7fe74963c2afd122bb75eb77fd378c4bf00ef2caea8f44650ba56bb9d0f6f5aa278e06e1edf9eacab3354f0943a2b286cbc64659b4e938cf95af09dbb"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.136767607s ago: executing program 0 (id=2038): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @private1, 0x4f}], 0x2c) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@sndrcv={0x2c, 0x84, 0x1, {0x9, 0xf9f2, 0x8204, 0x4, 0xb3, 0x101, 0x9, 0x1, 0x1}}], 0x2c, 0x90}], 0x1, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x18b102, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) r7 = dup3(r0, r0, 0x0) r8 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0x100, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfc00000000000000}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x900, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x24}}, 0x0) r12 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000000)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.646649276s ago: executing program 2 (id=2039): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x541802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$video4linux(&(0x7f0000000080), 0x458d, 0x20500) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syz_tun\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[], 0x32600) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf250900020073797a300000000008004100736977001400330064756d6d793000000001000000000000ae17370d37c202a2"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000084) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, 0x1404, 0x1, 0x709d2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001040)=""/241, &(0x7f0000001140)=0xf1) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001180)=[{&(0x7f00000011c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001200)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x2c}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000012c0)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000001300)=0xc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001340), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000001380)={0x1, [0x0]}, &(0x7f00000013c0)=0x8) r7 = syz_open_dev$dri(&(0x7f0000001400), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) 2.62719007s ago: executing program 0 (id=2040): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setns(0xc9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000500), 0x4) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000740)=@caif, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffff9c, 0x0, 0x20480) write(r3, &(0x7f00000003c0)="28229e8804eb28de1ffa7f0df156b6765966e68d0ae4cc6b402214279bb4910ed3b43637528766bd5d8ac23dd5617c0a11becb2c4802", 0x36) write(r3, &(0x7f00000000c0)='1', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bc", 0x26) 2.458678353s ago: executing program 3 (id=2041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0xae2) timer_settime(r1, 0x0, &(0x7f0000000480), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r4, 0x6, 0x0, 0x0, 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/106, 0x6a}], 0x1, 0x3ff, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYBLOB="20bad3cdd7827bf4c88c9eef1a2addfebd76b3b8aeeac17156170a61869a57b4d1917844e92605eb7db598e24ab69e30f37db27c2a8754a3c0b78db2c4ed999464870eb0505b11dad26f737d92e2e74edc5b1c7c6576563f5b12163380135383090f54b798ac31b93bc74560e953d6fd06c8032f9cca59822c3b1de1d882253494804c49a2397ce90e3c5dc55d1fd0", @ANYBLOB="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", @ANYRESOCT=r6, @ANYBLOB="2e795be371eead77596215e5794dc7fe74963c2afd122bb75eb77fd378c4bf00ef2caea8f44650ba56bb9d0f6f5aa278e06e1edf9eacab3354f0943a2b286cbc64659b4e938cf95af09dbb"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.016724321s ago: executing program 2 (id=2043): r0 = openat$md(0xffffff9c, &(0x7f0000000000)={'/dev/md', @named={'_syz', 0x0, '1'}}, 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x430, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x626}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa45}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf8000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fff, @mcast2, 0xdb42}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @remote, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xddfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x8010}, 0x44) ioctl$GET_ARRAY_INFO(r0, 0x80480911, &(0x7f00000005c0)) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000640)) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000680), 0x60202, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r3, 0x5321, 0x12) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x450, 0x3f3, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x29, [0x3, 0x1000, 0x1, 0x40, 0x3, 0x8, 0x2, 0x8, 0x8, 0x7, 0x80000000, 0x7ff, 0x3, 0x1ff, 0x2, 0x7, 0x800, 0x10001, 0x0, 0x3, 0xff49, 0x2, 0x2, 0x5, 0x118, 0x7e, 0x9, 0x64a, 0xe, 0x23, 0x94d8, 0x5, 0x7, 0x2bb, 0x0, 0x9, 0xb, 0x2, 0x4, 0x1000, 0x81, 0xe330, 0x0, 0xb92, 0x51a, 0x6, 0x7, 0x7ff, 0x81bb, 0x40, 0x3, 0x2, 0xffff0001, 0x2, 0xe79, 0x7f, 0x0, 0x2, 0x6, 0x5, 0x6, 0x1, 0xf, 0x3b08], [0x6, 0x7, 0x7, 0x1, 0x0, 0x7d, 0x4, 0xfb7e, 0x400, 0x2, 0x4, 0x2, 0x1fae, 0x3, 0x401, 0xe878, 0x3ff, 0x200, 0x40, 0x1ff, 0x6, 0x2e42, 0x80000000, 0x6, 0x1c9c, 0x1, 0x10, 0x9, 0x1, 0x9, 0x4, 0xfffffffb, 0x9, 0x9, 0x0, 0x2, 0x2, 0x9, 0x400, 0x6, 0xffff212d, 0x2, 0xe, 0x2, 0x1, 0x3, 0x0, 0x9, 0xddfd, 0x4, 0x0, 0xfffffffb, 0x6, 0x101, 0x7, 0x40, 0x3, 0x401, 0x5, 0x4, 0x7, 0x0, 0x7fff, 0x2], [0xffffffea, 0x8, 0x7e, 0x7, 0x5, 0x6, 0x6, 0xfffff095, 0x0, 0x100, 0x0, 0x1, 0x8, 0x6, 0xd92, 0x6, 0x9, 0x8, 0x6, 0x7, 0xfffffff7, 0x256d, 0xffff, 0x2, 0x2400, 0x8, 0xd, 0x5, 0x2, 0x0, 0x4, 0x1, 0xf, 0xffffff1c, 0xfffff8d0, 0x63d5, 0x10000, 0x100, 0x6, 0x80, 0xe, 0x4, 0x8000, 0x163, 0x2, 0x1, 0x9, 0x3b36, 0x5, 0x7, 0xef48, 0x23, 0x8, 0x1, 0xa, 0x80000001, 0x80000000, 0x726, 0x800, 0xffffffff, 0x40, 0x8b, 0x4, 0x1], [0x8001, 0xf89, 0x10, 0x1, 0x10000, 0x7, 0x0, 0x0, 0xe, 0x5f, 0x0, 0x800, 0x2, 0x3, 0x8, 0x9, 0x1, 0x8a9, 0x4, 0x9cf, 0x0, 0x4, 0xffff8001, 0x8, 0xfffffff9, 0x0, 0x4, 0xfffffff8, 0x7, 0x967e, 0x6, 0x5, 0x2d, 0x2, 0x9, 0xfffeffff, 0x7, 0x6f7e6740, 0x7, 0x4, 0xffff, 0xffffffff, 0x3, 0x7, 0x7, 0x98, 0x6, 0x9, 0x38d, 0x4, 0x9, 0x80, 0xf, 0x45, 0x5, 0x8, 0x5, 0x6, 0x9, 0x1, 0x8aa1, 0x6, 0x7, 0x5], 0x2f, ['syz1\x00', 'TIPCv2\x00', '/(.-&%\x00', '@\\!}&+\x00', '\x00', '\x00', '\x00', 'broadcast-link\x00', '#\x00', '1']}}, 0x450}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000c40)=""/93) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000cc0)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000d00)={@desc={0x1, 0x0, @desc2}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000ec0)={0xa, 0x0, 0xf5, 0x4, 'syz0\x00', 0x5}) r6 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x200) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x7) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$DVD_READ_STRUCT(r7, 0x5390, &(0x7f0000000f80)=@bca={0x3, 0xbc, "49f740f44d1f9b21b9d66dae05fb18120f8ba36fb62a1f3af86e760e2a2964491e9be0425017461316ffd4b1e50cb7afca9bba9f99f8c725a820d4a7d8391b1d3d8ca65ab76affbc9a1049d853dc3c543f036843c53adf59c4f19c1158e3a69900a4d369eb4eb1c315a42aeb0c93dae1c1d3487dd1ec2cf1b5731875b3947c06b9128533de1d7873c71279b42a84b5e19901be4e51e95ccb3b444aa0dcc0450e54f14bdd5b4ec26c466e404f60b52698380dae819a77c994f2b498db"}) r8 = getpid() r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setaffinity(r8, 0x8, &(0x7f0000001900)=0x6) r10 = openat$ipvs(0xffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2108800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}}, 0x4) bind$pptp(r7, &(0x7f0000001a80)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000001b00)={{0x2, 0x7}, {}, 0xfff, 0x0, 0x3}) 1.804667469s ago: executing program 2 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setns(0xc9, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x8d00, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000780)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000007c0)=0x7) r10 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000800)=0xd) socket$rds(0x15, 0x5, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0xa, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1.675565884s ago: executing program 2 (id=2045): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000140)={'pimreg0\x00', @ifru_settings={0xb, 0x7f, @te1=&(0x7f0000000280)={0x9, 0x8, 0x4, 0x692}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='my_configfs\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 1.675386235s ago: executing program 1 (id=2046): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000240)) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4080) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (fail_nth: 3) 1.49263417s ago: executing program 1 (id=2047): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000019080), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000190c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000019140)=ANY=[@ANYBLOB="1502000000000a0000000000"], 0x1c}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000191c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019340)={'wlan0\x00'}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000193c0)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000019400)={'wlan0\x00', 0x1003}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="28005080141501004abee33957edf8aaae14574df400000005000200020000000800030008ac0f00"], 0x44}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x100008, &(0x7f00007a5000/0x2000)=nil, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf250200"/27], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 1.225700353s ago: executing program 2 (id=2048): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000140)={'pimreg0\x00', @ifru_settings={0xb, 0x7f, @te1=&(0x7f0000000280)={0x9, 0x8, 0x4, 0x692}}}) socket(0x10, 0x3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg/1:0:0:0\x00', 0xa2402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='my_configfs\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 473.681455ms ago: executing program 3 (id=2049): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x110, r0, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffe26, &(0x7f0000000340)=[{&(0x7f0000000380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) write(r2, &(0x7f00000000c0)="18000000010003", 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x9]}, 0x8, 0x80800) r6 = gettid() ppoll(&(0x7f0000000480)=[{r5, 0x28}], 0x1, 0x0, 0x0, 0x0) tkill(r6, 0x7) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x228, r7, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0x8, 0x7, 0x1, 0x9, 0x87, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbd1, 0x200, 0x9, 0x5, 0x9, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x1b, 0x2, 0x3, 0x4, 0xb, 0x9, 0x4, 0x24, 0x12, 0x6, 0x1b, 0x5, 0x12, 0xc, 0x5, 0x4, 0x16, 0x6c, 0x3, 0xb]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xd, 0x7, 0x401, 0x8, 0x6, 0x80, 0x85]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x18, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x30]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x3}, {0x5, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x32, 0xc, 0x36, 0x6c, 0x36, 0x1, 0xc, 0x16, 0x6c, 0x5, 0x2, 0x5]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdaa3, 0x200, 0x0, 0x5, 0x3, 0x688, 0xfffd, 0xc677]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x9, 0x6, 0x2, 0x8, 0x6589, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f36c3a40cbb122d7"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "1a70bab729c903d1"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe0}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x228}, 0x1, 0x0, 0x0, 0x400c4}, 0x8010) fcntl$lock(r1, 0x410, &(0x7f0000000500)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r9, 0x4004af07, &(0x7f0000000840)={&(0x7f00000008c0), 0x0, 0xc95, 0x0, 0xffff, 0x7, 0xd, 0x4, 0x4bf}) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 200.528384ms ago: executing program 1 (id=2050): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x9fd, 0x0, 0x101, 0x13f}}) 199.461782ms ago: executing program 1 (id=2051): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00000000000000000700", @ANYRES32=r2, @ANYBLOB="000000000000000010011a"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 198.997006ms ago: executing program 1 (id=2052): socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 16.257287ms ago: executing program 1 (id=2053): socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 0s ago: executing program 2 (id=2054): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x36, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000e80)=ANY=[@ANYBLOB="940200007dc356f9f31670630a9f1b574ebb32234f5666e1bdbf85e7860cd04e6fb47430916a2f75824d3c53851db6d65f9b05ad0e9b1ac43ec6c5fb8b8548f52372765f178b09dd6c2df668764a8c75f00e7f4d20e12bddcc0401d5b205eb94508a63e33489318bbca551914b0ea7e1ecc613b744fa3460fd706cd456be0368402972280c3afc8f81fdd298c8a02189beb714be02939c5270f77f00"/169, @ANYRES16=r4, @ANYRES32=r3], 0x294}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000051) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000b05000/0x1000)=nil) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x7, 0x0, [0x5, 0x1, 0x3, 0x7f7, 0x4], [0xfffffffffffffffc, 0x2, 0x7fffffffffffffff, 0x2000000000007, 0x6a8, 0x1007fffffff, 0x0, 0xe06d, 0xffffffffffffffff, 0xde, 0x5, 0x3, 0x3f27, 0xfffffffffffffff4, 0x4a, 0xfffffffffffffffe, 0x8, 0xa, 0xffffffff00100000, 0x5, 0x7f, 0x2a9, 0xfffffffffffffff2, 0x34, 0x4, 0x200, 0x4, 0xffffffffffffffff, 0xa53, 0xffff, 0x6, 0x3, 0x5, 0x2, 0x800085, 0xfd, 0x2, 0x931, 0x101, 0x3, 0xffffffffffffff58, 0x40000000010000, 0x9, 0x3f, 0x8, 0x2000000008, 0x0, 0xfffffffffffffff9, 0xeb56, 0x2, 0x71e8, 0x100, 0xda, 0x5, 0xffffffffffffffff, 0x0, 0x714b26de, 0x9, 0x3, 0x77, 0xffffffff00000000, 0x80000000, 0x0, 0x1bc, 0x1, 0x1c, 0x1000, 0xfffffff7, 0x1, 0x7, 0x3, 0xa, 0x7, 0x7fb, 0x3, 0xe4, 0x800000000e, 0x6, 0x9, 0xd9, 0x1, 0x7fe, 0xa8, 0x5, 0xffff, 0xfffffffffffffffd, 0xffffffffffff4a38, 0x6, 0x200000000000006, 0x3, 0xf, 0x95, 0x4, 0x200c, 0x10000000000003, 0xfffffffffffbfffa, 0x8, 0x1, 0x28c1, 0x6, 0x68c, 0x0, 0x100000000a, 0x7ff, 0xc, 0x0, 0x5, 0x2, 0x1, 0x7, 0x3ff, 0x3, 0x7, 0x805, 0x4e, 0x1, 0x40, 0x7fffffff, 0x5f79, 0x2, 0xffffffffffffffff]}) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./sys\x00', &(0x7f0000000dc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000e40)="306663353a313232373a620afaf6379a248d1d6534518f109510", 0x1a) kernel console output (not intermixed with test programs): [T11859] ? kmem_cache_free+0x127/0x6c0 [ 307.665135][T11859] ? kfree_skbmem+0x19a/0x210 [ 307.665149][T11859] ? consume_skb+0xd1/0x110 [ 307.665162][T11859] ? nlmon_xmit+0xa5/0xe0 [ 307.665179][T11859] ? dev_hard_start_xmit+0x121/0x760 [ 307.665197][T11859] tcf_action_add+0xef/0x750 [ 307.665213][T11859] ? __pfx_tcf_action_add+0x10/0x10 [ 307.665272][T11859] ? __nla_parse+0x40/0x60 [ 307.665315][T11859] tc_ctl_action+0x2e3/0x470 [ 307.665331][T11859] ? __pfx_tc_ctl_action+0x10/0x10 [ 307.665353][T11859] ? __pfx_tc_ctl_action+0x10/0x10 [ 307.665374][T11859] rtnetlink_rcv_msg+0x3c9/0xe90 [ 307.665398][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.665432][T11859] netlink_rcv_skb+0x159/0x420 [ 307.665453][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.665476][T11859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.665495][T11859] ? __asan_memcpy+0x3c/0x60 [ 307.665522][T11859] ? netlink_deliver_tap+0x1ae/0xb50 [ 307.665544][T11859] netlink_unicast+0x668/0x950 [ 307.665566][T11859] ? __pfx_netlink_unicast+0x10/0x10 [ 307.665590][T11859] netlink_sendmsg+0x9ac/0x10c0 [ 307.665611][T11859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.665634][T11859] ? apparmor_socket_sendmsg+0x165/0x280 [ 307.665653][T11859] ? ____sys_sendmsg+0xa99/0xc30 [ 307.665667][T11859] ____sys_sendmsg+0xa99/0xc30 [ 307.665680][T11859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.665701][T11859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.665723][T11859] ___sys_sendmsg+0x190/0x1e0 [ 307.665738][T11859] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.665754][T11859] ? futex_wait+0x11e/0x370 [ 307.665772][T11859] ? find_held_lock+0x2b/0x80 [ 307.665802][T11859] __sys_sendmsg+0x160/0x210 [ 307.665821][T11859] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.665848][T11859] __do_fast_syscall_32+0x14b/0x8c0 [ 307.665870][T11859] do_fast_syscall_32+0x32/0x70 [ 307.665897][T11859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.665922][T11859] RIP: 0023:0xf748efbc [ 307.665939][T11859] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 307.665960][T11859] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 307.665985][T11859] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000600 [ 307.665997][T11859] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.666008][T11859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.666014][T11859] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 307.666021][T11859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.666037][T11859] [ 307.784560][T11870] 8021q: VLANs not supported on sit0 [ 308.295841][T11881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1746'. [ 308.983778][T11889] FAULT_INJECTION: forcing a failure. [ 308.983778][T11889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 308.983809][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.0.1747 Not tainted syzkaller #0 PREEMPT(full) [ 308.983833][T11889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.983845][T11889] Call Trace: [ 308.983866][T11889] [ 308.983877][T11889] dump_stack_lvl+0x100/0x190 [ 308.983917][T11889] should_fail_ex.cold+0x5/0xa [ 308.983947][T11889] get_futex_key+0x1c9/0x13e0 [ 308.983978][T11889] ? __pfx_get_futex_key+0x10/0x10 [ 308.984005][T11889] ? putname+0xb1/0x110 [ 308.984031][T11889] ? kasan_save_stack+0x3f/0x50 [ 308.984053][T11889] ? kasan_save_stack+0x30/0x50 [ 308.984073][T11889] ? kasan_save_track+0x14/0x30 [ 308.984098][T11889] futex_wake+0xf4/0x5e0 [ 308.984122][T11889] ? __pfx_futex_wake+0x10/0x10 [ 308.984153][T11889] do_futex+0x2b2/0x440 [ 308.984183][T11889] ? __pfx_do_futex+0x10/0x10 [ 308.984220][T11889] __ia32_sys_futex_time32+0x2f4/0x470 [ 308.984255][T11889] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 308.984293][T11889] ? __might_fault+0xc5/0x140 [ 308.984327][T11889] __do_fast_syscall_32+0x14b/0x8c0 [ 308.984359][T11889] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.984391][T11889] do_fast_syscall_32+0x32/0x70 [ 308.984422][T11889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.984448][T11889] RIP: 0023:0xf748efbc [ 308.984465][T11889] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 308.984484][T11889] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 308.984505][T11889] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 308.984517][T11889] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 308.984530][T11889] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 308.984542][T11889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 308.984554][T11889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.984581][T11889] [ 309.294605][ T66] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 309.332858][T11889] FAULT_INJECTION: forcing a failure. [ 309.332858][T11889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 309.332884][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.0.1747 Not tainted syzkaller #0 PREEMPT(full) [ 309.332899][T11889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.332906][T11889] Call Trace: [ 309.332910][T11889] [ 309.332915][T11889] dump_stack_lvl+0x100/0x190 [ 309.332938][T11889] should_fail_ex.cold+0x5/0xa [ 309.332956][T11889] get_futex_key+0x1c9/0x13e0 [ 309.332975][T11889] ? __pfx_get_futex_key+0x10/0x10 [ 309.332991][T11889] ? __mutex_unlock_slowpath+0x35d/0x930 [ 309.333013][T11889] futex_wake+0xf4/0x5e0 [ 309.333028][T11889] ? __pfx_futex_wake+0x10/0x10 [ 309.333042][T11889] ? detach_task_ctx_data+0x83/0x490 [ 309.333072][T11889] do_futex+0x2b2/0x440 [ 309.333090][T11889] ? __pfx_do_futex+0x10/0x10 [ 309.333106][T11889] ? __might_fault+0xc5/0x140 [ 309.333125][T11889] mm_exit_exec_release+0x256/0x2f0 [ 309.333140][T11889] do_exit+0x6d8/0x2a00 [ 309.333154][T11889] ? irqentry_exit+0x202/0xab0 [ 309.333173][T11889] ? __pfx_do_exit+0x10/0x10 [ 309.333191][T11889] do_group_exit+0xd5/0x2a0 [ 309.333207][T11889] get_signal+0x1f58/0x22e0 [ 309.333224][T11889] ? __pfx___schedule+0x10/0x10 [ 309.333239][T11889] ? __pfx_get_signal+0x10/0x10 [ 309.333252][T11889] ? __pfx___cant_migrate+0x10/0x10 [ 309.333269][T11889] arch_do_signal_or_restart+0x91/0x7a0 [ 309.333299][T11889] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.333327][T11889] exit_to_user_mode_loop+0x139/0x700 [ 309.333349][T11889] ? rcu_is_watching+0x13/0xc0 [ 309.333368][T11889] __do_fast_syscall_32+0x5b0/0x8c0 [ 309.333388][T11889] do_fast_syscall_32+0x32/0x70 [ 309.333407][T11889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.333423][T11889] RIP: 0023:0xf748efbc [ 309.333433][T11889] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 309.333444][T11889] RSP: 002b:00000000f54a65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 309.333456][T11889] RAX: ffffffffffffffda RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 309.333463][T11889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 309.333470][T11889] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 309.333478][T11889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.333485][T11889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.333499][T11889] [ 309.393665][T11907] netlink: 'syz.0.1757': attribute type 3 has an invalid length. [ 309.393679][T11907] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 309.393687][T11907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1757'. [ 309.444601][ T66] usb 7-1: Using ep0 maxpacket: 16 [ 309.445958][ T66] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 309.446762][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.446780][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 309.448364][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.448377][ T66] usb 7-1: Product: syz [ 309.448385][ T66] usb 7-1: Manufacturer: syz [ 309.448392][ T66] usb 7-1: SerialNumber: syz [ 309.452184][ T66] usb 7-1: config 0 descriptor?? [ 309.542810][T11914] kAFS: No cell specified [ 309.570397][T11912] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.641592][T11921] FAULT_INJECTION: forcing a failure. [ 309.641592][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 309.641623][T11921] CPU: 2 UID: 0 PID: 11921 Comm: syz.3.1762 Not tainted syzkaller #0 PREEMPT(full) [ 309.641650][T11921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.641661][T11921] Call Trace: [ 309.641668][T11921] [ 309.641676][T11921] dump_stack_lvl+0x100/0x190 [ 309.641727][T11921] should_fail_ex.cold+0x5/0xa [ 309.641757][T11921] should_failslab+0xc2/0x120 [ 309.641781][T11921] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 309.641803][T11921] ? __alloc_skb+0x140/0x710 [ 309.641842][T11921] __alloc_skb+0x140/0x710 [ 309.641867][T11921] ? __alloc_skb+0x5b7/0x710 [ 309.641894][T11921] ? __pfx___alloc_skb+0x10/0x10 [ 309.641928][T11921] mgmt_cmd_complete+0x4f/0x5a0 [ 309.641963][T11921] remove_device+0x73b/0xbf0 [ 309.641982][T11921] ? __hci_dev_get+0x47/0x2b0 [ 309.642010][T11921] ? find_held_lock+0x2b/0x80 [ 309.642038][T11921] ? __pfx_remove_device+0x10/0x10 [ 309.642062][T11921] ? do_raw_read_unlock+0x3f/0x70 [ 309.642085][T11921] ? _raw_read_unlock+0x28/0x50 [ 309.642110][T11921] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 309.642133][T11921] hci_sock_sendmsg+0x159f/0x26f0 [ 309.642157][T11921] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 309.642177][T11921] ? apparmor_socket_sendmsg+0x165/0x280 [ 309.642208][T11921] sock_write_iter+0x560/0x5d0 [ 309.642231][T11921] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 309.642250][T11921] ? __pfx_sock_write_iter+0x10/0x10 [ 309.642280][T11921] ? bpf_lsm_file_permission+0x9/0x10 [ 309.642310][T11921] ? security_file_permission+0x76/0x210 [ 309.642341][T11921] ? rw_verify_area+0xce/0x6d0 [ 309.642373][T11921] vfs_write+0x6af/0x1050 [ 309.642395][T11921] ? __pfx_sock_write_iter+0x10/0x10 [ 309.642418][T11921] ? __fget_files+0x34/0x3d0 [ 309.642446][T11921] ? __pfx_vfs_write+0x10/0x10 [ 309.642465][T11921] ? find_held_lock+0x2b/0x80 [ 309.642510][T11921] ksys_write+0x1f8/0x250 [ 309.642532][T11921] ? __pfx_ksys_write+0x10/0x10 [ 309.642561][T11921] __do_fast_syscall_32+0x14b/0x8c0 [ 309.642589][T11921] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.642619][T11921] do_fast_syscall_32+0x32/0x70 [ 309.642647][T11921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.642671][T11921] RIP: 0023:0xf7fe4fbc [ 309.642687][T11921] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 309.642705][T11921] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 309.642723][T11921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 309.642735][T11921] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 309.642746][T11921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.642757][T11921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.642768][T11921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.642794][T11921] [ 309.663701][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 309.668642][ T66] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input71 [ 309.676692][ T66] imon:send_packet: packet tx failed (-71) [ 309.694639][ T66] imon 7-1:0.0: panel buttons/knobs setup failed [ 309.844615][ T66] rc_core: IR keymap rc-imon-pad not found [ 309.844632][ T66] Registered IR keymap rc-empty [ 309.844691][ T66] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 309.844706][ T66] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 309.845016][ T66] imon:send_packet: packet tx failed (-71) [ 309.863577][T11927] netlink: 'syz.0.1761': attribute type 15 has an invalid length. [ 309.863596][T11927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'. [ 309.864704][ T66] imon 7-1:0.0: remote input dev register failed [ 309.864828][ T66] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 309.899342][ T66] imon 7-1:0.0: unable to initialize intf0, err 0 [ 309.905558][ T66] usb 7-1: USB disconnect, device number 23 [ 309.948760][T11934] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 310.204642][ T66] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 310.366052][ T66] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 310.367170][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 310.367188][ T66] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 310.367203][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 310.369076][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.369090][ T66] usb 7-1: Product: syz [ 310.369098][ T66] usb 7-1: Manufacturer: syz [ 310.369105][ T66] usb 7-1: SerialNumber: syz [ 310.370806][ T66] usb 7-1: config 0 descriptor?? [ 310.371425][T11896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.584263][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 310.588671][ T66] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input73 [ 310.854568][ T66] rc_core: IR keymap rc-imon-pad not found [ 310.854585][ T66] Registered IR keymap rc-empty [ 310.854690][ T66] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 310.854706][ T66] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 311.005941][ T66] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 311.008717][ T66] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input74 [ 311.012454][ T66] imon 7-1:0.0: iMON device (15c2:0045) on usb<7:24> initialized [ 311.444701][ T3306] usb 7-1: USB disconnect, device number 24 [ 312.155900][T11958] pim6reg: entered allmulticast mode [ 312.219581][T11957] pim6reg: left allmulticast mode [ 312.554281][T11968] FAULT_INJECTION: forcing a failure. [ 312.554281][T11968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.554341][T11968] CPU: 3 UID: 0 PID: 11968 Comm: syz.0.1772 Not tainted syzkaller #0 PREEMPT(full) [ 312.554378][T11968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.554390][T11968] Call Trace: [ 312.554398][T11968] [ 312.554406][T11968] dump_stack_lvl+0x100/0x190 [ 312.554440][T11968] should_fail_ex.cold+0x5/0xa [ 312.554481][T11968] _copy_to_user+0x32/0xd0 [ 312.554513][T11968] simple_read_from_buffer+0xcb/0x170 [ 312.554540][T11968] proc_fail_nth_read+0x1af/0x230 [ 312.554566][T11968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.554593][T11968] ? rw_verify_area+0xce/0x6d0 [ 312.554623][T11968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.554647][T11968] vfs_read+0x1e4/0xb40 [ 312.554669][T11968] ? lock_acquire+0x1d1/0x380 [ 312.554688][T11968] ? __fget_files+0x34/0x3d0 [ 312.554710][T11968] ? __pfx_vfs_read+0x10/0x10 [ 312.554734][T11968] ? find_held_lock+0x2b/0x80 [ 312.554760][T11968] ? __fget_files+0x215/0x3d0 [ 312.554787][T11968] ? __fget_files+0x21f/0x3d0 [ 312.554813][T11968] ksys_read+0x12a/0x250 [ 312.554834][T11968] ? __pfx_ksys_read+0x10/0x10 [ 312.554863][T11968] do_int80_emulation+0x166/0x650 [ 312.554897][T11968] asm_int80_emulation+0x1a/0x20 [ 312.554917][T11968] RIP: 0023:0xf71e7f6b [ 312.554934][T11968] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 312.554953][T11968] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 312.554972][T11968] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54a65d0 [ 312.554983][T11968] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 312.554996][T11968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.555006][T11968] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 312.555017][T11968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.555044][T11968] [ 312.694597][ T5796] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 312.845474][ T5796] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 312.845500][ T5796] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 312.851984][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.852007][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.853053][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.853066][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.853845][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.853857][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.855548][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.855561][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.856486][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.856498][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.857407][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.857419][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.858524][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.858537][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.859419][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.859431][ T5796] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 312.861562][ T5796] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 312.861575][ T5796] usb 7-1: Product: syz [ 312.861616][ T5796] usb 7-1: Manufacturer: syz [ 312.861625][ T5796] usb 7-1: SerialNumber: syz [ 312.865365][ T5796] usb 7-1: config 0 descriptor?? [ 313.029718][T11989] futex_wake_op: syz.3.1782 tries to shift op by -1; fix this program [ 313.388644][ T30] usb 7-1: USB disconnect, device number 25 [ 313.454591][ T5796] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 313.604610][ T5796] usb 5-1: Using ep0 maxpacket: 16 [ 313.609377][ T5796] usb 5-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 313.623160][ T5796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.623191][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.661940][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.661964][ T5796] usb 5-1: Product: syz [ 313.661976][ T5796] usb 5-1: Manufacturer: syz [ 313.661987][ T5796] usb 5-1: SerialNumber: syz [ 313.663769][ T5796] usb 5-1: config 0 descriptor?? [ 313.897548][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 313.907369][ T5796] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input75 [ 313.910892][ T5796] imon:send_packet: packet tx failed (-71) [ 313.925027][ T5796] imon 5-1:0.0: panel buttons/knobs setup failed [ 314.015478][ T5796] rc_core: IR keymap rc-imon-pad not found [ 314.015495][ T5796] Registered IR keymap rc-empty [ 314.015549][ T5796] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 314.015564][ T5796] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 314.015829][ T5796] imon:send_packet: packet tx failed (-71) [ 314.034688][ T5796] imon 5-1:0.0: remote input dev register failed [ 314.034806][ T5796] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 314.053019][T12008] netlink: 'syz.3.1788': attribute type 2 has an invalid length. [ 314.053814][ T5796] imon 5-1:0.0: unable to initialize intf0, err 0 [ 314.061389][ T5796] usb 5-1: USB disconnect, device number 28 [ 314.134702][ T3306] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 314.285279][ T3306] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 314.286111][ T3306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.286126][ T3306] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.286138][ T3306] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.287673][ T3306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.287686][ T3306] usb 6-1: Product: syz [ 314.287694][ T3306] usb 6-1: Manufacturer: syz [ 314.287728][ T3306] usb 6-1: SerialNumber: syz [ 314.290267][ T3306] hub 6-1:1.0: bad descriptor, ignoring hub [ 314.290280][ T3306] hub 6-1:1.0: probe with driver hub failed with error -5 [ 314.306170][T12021] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1793'. [ 314.306480][T12021] netlink: get zone limit has 4 unknown bytes [ 314.417167][ T5796] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 314.494321][ T3306] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 314.613214][ T5796] usb 5-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 314.620641][ T5796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 314.620672][ T5796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 314.620696][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.630836][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.630862][ T5796] usb 5-1: Product: syz [ 314.630874][ T5796] usb 5-1: Manufacturer: syz [ 314.630889][ T5796] usb 5-1: SerialNumber: syz [ 314.636124][ T5796] usb 5-1: config 0 descriptor?? [ 314.637022][T11987] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 314.845785][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 314.850201][ T5796] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input77 [ 315.104688][ T5796] rc_core: IR keymap rc-imon-pad not found [ 315.104747][ T5796] Registered IR keymap rc-empty [ 315.104806][ T5796] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 315.104821][ T5796] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 315.124778][ T65] usb 6-1: USB disconnect, device number 24 [ 315.130140][ T65] usblp0: removed [ 315.265792][ T5796] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 315.267477][ T5796] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input78 [ 315.270283][ T5796] imon 5-1:0.0: iMON device (15c2:0045) on usb<5:29> initialized [ 315.687199][T12046] FAULT_INJECTION: forcing a failure. [ 315.687199][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 315.687219][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.1.1802 Not tainted syzkaller #0 PREEMPT(full) [ 315.687233][T12046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.687240][T12046] Call Trace: [ 315.687244][T12046] [ 315.687249][T12046] dump_stack_lvl+0x100/0x190 [ 315.687279][T12046] should_fail_ex.cold+0x5/0xa [ 315.687298][T12046] should_failslab+0xc2/0x120 [ 315.687313][T12046] kmem_cache_alloc_noprof+0x92/0x6a0 [ 315.687326][T12046] ? netlink_deliver_tap+0x103/0xb50 [ 315.687344][T12046] ? skb_clone+0x187/0x3f0 [ 315.687364][T12046] skb_clone+0x187/0x3f0 [ 315.687383][T12046] netlink_deliver_tap+0x82f/0xb50 [ 315.687404][T12046] netlink_dump+0x97d/0xd30 [ 315.687424][T12046] ? __pfx_netlink_dump+0x10/0x10 [ 315.687451][T12046] __netlink_dump_start+0x6d6/0x990 [ 315.687471][T12046] ? __pfx_neigh_dump_info+0x10/0x10 [ 315.687485][T12046] rtnetlink_rcv_msg+0xb3e/0xe90 [ 315.687498][T12046] ? __pfx_neigh_dump_info+0x10/0x10 [ 315.687512][T12046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.687525][T12046] ? __pfx_neigh_dump_info+0x10/0x10 [ 315.687544][T12046] netlink_rcv_skb+0x159/0x420 [ 315.687555][T12046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.687569][T12046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.687580][T12046] ? __asan_memcpy+0x3c/0x60 [ 315.687603][T12046] ? netlink_deliver_tap+0x1ae/0xb50 [ 315.687624][T12046] netlink_unicast+0x668/0x950 [ 315.687645][T12046] ? __pfx_netlink_unicast+0x10/0x10 [ 315.687668][T12046] netlink_sendmsg+0x9ac/0x10c0 [ 315.687710][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.687735][T12046] ? apparmor_socket_sendmsg+0x165/0x280 [ 315.687753][T12046] ? sock_write_iter+0x560/0x5d0 [ 315.687769][T12046] sock_write_iter+0x560/0x5d0 [ 315.687782][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.687801][T12046] ? __pfx_sock_write_iter+0x10/0x10 [ 315.687819][T12046] ? bpf_lsm_file_permission+0x9/0x10 [ 315.687837][T12046] ? security_file_permission+0x76/0x210 [ 315.687856][T12046] ? rw_verify_area+0xce/0x6d0 [ 315.687878][T12046] vfs_write+0x6af/0x1050 [ 315.687891][T12046] ? __pfx_sock_write_iter+0x10/0x10 [ 315.687906][T12046] ? __pfx_vfs_write+0x10/0x10 [ 315.687918][T12046] ? find_held_lock+0x2b/0x80 [ 315.687944][T12046] ksys_write+0x1f8/0x250 [ 315.687957][T12046] ? __pfx_ksys_write+0x10/0x10 [ 315.687975][T12046] __do_fast_syscall_32+0x14b/0x8c0 [ 315.687993][T12046] ? lockdep_hardirqs_on+0x7d/0x110 [ 315.688012][T12046] do_fast_syscall_32+0x32/0x70 [ 315.688030][T12046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.688045][T12046] RIP: 0023:0xf7ff5fbc [ 315.688056][T12046] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 315.688067][T12046] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 315.688079][T12046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 315.688087][T12046] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.688093][T12046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.688100][T12046] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 315.688106][T12046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.688121][T12046] [ 315.700774][ T64] usb 5-1: USB disconnect, device number 29 [ 316.017910][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1804'. [ 316.017991][T12052] openvswitch: netlink: Tunnel attr 7 has unexpected len 380 expected 0 [ 316.678056][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.678109][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.184691][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1806'. [ 317.306943][T12085] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1813'. [ 317.307005][T12086] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1813'. [ 317.307818][T12085] syz_tun: entered allmulticast mode [ 317.315194][T12078] 9p: Could not find request transport: vir$­o [ 317.846473][ T5802] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 317.853755][T12082] jffs2: notice: (12082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.699175][T12120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1820'. [ 318.751064][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 318.790224][T12122] FAULT_INJECTION: forcing a failure. [ 318.790224][T12122] name failslab, interval 1, probability 0, space 0, times 0 [ 318.790258][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.0.1821 Not tainted syzkaller #0 PREEMPT(full) [ 318.790285][T12122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.790298][T12122] Call Trace: [ 318.790305][T12122] [ 318.790315][T12122] dump_stack_lvl+0x100/0x190 [ 318.790352][T12122] should_fail_ex.cold+0x5/0xa [ 318.790384][T12122] should_failslab+0xc2/0x120 [ 318.790412][T12122] kmem_cache_alloc_noprof+0x92/0x6a0 [ 318.790435][T12122] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 318.790473][T12122] ? acpi_ut_create_update_state+0x72/0x130 [ 318.790514][T12122] acpi_ut_create_update_state+0x72/0x130 [ 318.790550][T12122] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 318.790583][T12122] acpi_ut_update_object_reference+0x32f/0x800 [ 318.790615][T12122] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 318.790642][T12122] ? __pfx_acpi_ut_trace+0x10/0x10 [ 318.790663][T12122] ? __pfx_acpi_ut_trace+0x10/0x10 [ 318.790686][T12122] ? acpi_ut_status_exit+0x111/0x1c0 [ 318.790716][T12122] acpi_ut_add_reference+0x80/0x170 [ 318.790742][T12122] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 318.790782][T12122] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 318.790817][T12122] ? acpi_ds_create_operand+0x267/0xc20 [ 318.790853][T12122] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 318.790881][T12122] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 318.790907][T12122] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 318.790930][T12122] ? __asan_memset+0x23/0x50 [ 318.790963][T12122] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 318.790991][T12122] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 318.791026][T12122] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 318.791062][T12122] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 318.791093][T12122] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 318.791120][T12122] acpi_ds_exec_end_op+0xb78/0x1e60 [ 318.791156][T12122] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 318.791187][T12122] acpi_ps_parse_loop+0x5e1/0x26e0 [ 318.791245][T12122] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 318.791274][T12122] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 318.791295][T12122] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 318.791318][T12122] ? acpi_ut_create_thread_state+0x6d/0x170 [ 318.791358][T12122] acpi_ps_parse_aml+0x81e/0x1120 [ 318.791385][T12122] acpi_ps_execute_method+0x5c4/0xe90 [ 318.791415][T12122] acpi_ns_evaluate+0x640/0x1670 [ 318.791448][T12122] acpi_ut_evaluate_object+0xf7/0x610 [ 318.791480][T12122] acpi_rs_get_prt_method_data+0xa0/0x150 [ 318.791507][T12122] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 318.791532][T12122] ? acpi_ut_status_exit+0x111/0x1c0 [ 318.791557][T12122] ? acpi_rs_validate_parameters+0x104/0x210 [ 318.791586][T12122] acpi_get_irq_routing_table+0xb8/0x140 [ 318.791614][T12122] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 318.791645][T12122] ? do_raw_spin_lock+0x128/0x260 [ 318.791697][T12122] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 318.791735][T12122] ? do_raw_spin_lock+0x128/0x260 [ 318.791764][T12122] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 318.791793][T12122] ? mark_held_locks+0x40/0x70 [ 318.791820][T12122] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.791853][T12122] acpi_pci_irq_lookup+0x8e/0x6b0 [ 318.791882][T12122] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 318.791919][T12122] acpi_pci_irq_disable+0x1a8/0x360 [ 318.791946][T12122] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 318.791974][T12122] pcibios_disable_device+0x89/0xb0 [ 318.792003][T12122] do_pci_disable_device+0x9f/0x100 [ 318.792040][T12122] ? __pfx_do_pci_disable_device+0x10/0x10 [ 318.792069][T12122] ? pci_release_region.part.0+0x15b/0x2e0 [ 318.792103][T12122] pci_disable_device+0x130/0x270 [ 318.792130][T12122] virtio_pci_remove+0xcf/0x110 [ 318.792167][T12122] pci_device_remove+0xb2/0x1d0 [ 318.792197][T12122] ? __pfx_pci_device_remove+0x10/0x10 [ 318.792232][T12122] device_remove+0xcb/0x180 [ 318.792264][T12122] device_release_driver_internal+0x441/0x610 [ 318.792293][T12122] pci_stop_bus_device+0x120/0x160 [ 318.792318][T12122] pci_stop_and_remove_bus_device+0x58/0xa0 [ 318.792342][T12122] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 318.792367][T12122] remove_store+0x123/0x140 [ 318.792404][T12122] ? __pfx_remove_store+0x10/0x10 [ 318.792429][T12122] ? find_held_lock+0x2b/0x80 [ 318.792457][T12122] ? sysfs_file_kobj+0xe4/0x290 [ 318.792485][T12122] ? sysfs_file_kobj+0xe4/0x290 [ 318.792515][T12122] ? __pfx_remove_store+0x10/0x10 [ 318.792540][T12122] dev_attr_store+0x58/0x80 [ 318.792562][T12122] ? __pfx_dev_attr_store+0x10/0x10 [ 318.792584][T12122] sysfs_kf_write+0xf2/0x150 [ 318.792614][T12122] kernfs_fop_write_iter+0x3e0/0x5f0 [ 318.792637][T12122] ? __pfx_sysfs_kf_write+0x10/0x10 [ 318.792667][T12122] vfs_write+0x6af/0x1050 [ 318.792692][T12122] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 318.792719][T12122] ? __pfx_vfs_write+0x10/0x10 [ 318.792741][T12122] ? find_held_lock+0x2b/0x80 [ 318.792788][T12122] ksys_write+0x12a/0x250 [ 318.792818][T12122] ? __pfx_ksys_write+0x10/0x10 [ 318.792850][T12122] __do_fast_syscall_32+0x14b/0x8c0 [ 318.792887][T12122] do_fast_syscall_32+0x32/0x70 [ 318.792919][T12122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.792947][T12122] RIP: 0023:0xf748efbc [ 318.792966][T12122] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 318.792985][T12122] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 318.793006][T12122] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000640 [ 318.793019][T12122] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.793031][T12122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.793043][T12122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.793055][T12122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.793084][T12122] [ 318.793109][T12122] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 319.161815][T12127] FAULT_INJECTION: forcing a failure. [ 319.161815][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 319.161844][T12127] CPU: 2 UID: 0 PID: 12127 Comm: syz.0.1823 Not tainted syzkaller #0 PREEMPT(full) [ 319.161865][T12127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.161878][T12127] Call Trace: [ 319.161883][T12127] [ 319.161890][T12127] dump_stack_lvl+0x100/0x190 [ 319.161926][T12127] should_fail_ex.cold+0x5/0xa [ 319.161954][T12127] should_failslab+0xc2/0x120 [ 319.161978][T12127] __kmalloc_cache_node_noprof+0x94/0x710 [ 319.161999][T12127] ? find_held_lock+0x2b/0x80 [ 319.162025][T12127] ? vm_map_ram+0x31d/0xf80 [ 319.162045][T12127] ? vm_map_ram+0x6d9/0xf80 [ 319.162081][T12127] vm_map_ram+0x6d9/0xf80 [ 319.162105][T12127] fuse_readdir_uncached+0x858/0x1c00 [ 319.162147][T12127] ? arch_scale_cpu_capacity+0x15/0xb0 [ 319.162169][T12127] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 319.162189][T12127] ? find_held_lock+0x2b/0x80 [ 319.162210][T12127] ? __schedule+0x3083/0x6990 [ 319.162234][T12127] ? rcu_is_watching+0x13/0xc0 [ 319.162258][T12127] ? trace_sched_exit_tp+0x120/0x160 [ 319.162280][T12127] ? __schedule+0x1270/0x6990 [ 319.162329][T12127] ? preempt_schedule+0x57/0xd0 [ 319.162351][T12127] ? preempt_schedule_thunk+0x16/0x40 [ 319.162378][T12127] fuse_readdir+0x96a/0x1ad0 [ 319.162398][T12127] ? down_read_killable+0x358/0x520 [ 319.162424][T12127] iterate_dir+0x2ba/0xc10 [ 319.162445][T12127] __ia32_sys_getdents64+0x13a/0x2c0 [ 319.162465][T12127] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 319.162484][T12127] ? __pfx_filldir64+0x10/0x10 [ 319.162508][T12127] __do_fast_syscall_32+0x14b/0x8c0 [ 319.162532][T12127] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.162557][T12127] do_fast_syscall_32+0x32/0x70 [ 319.162581][T12127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.162603][T12127] RIP: 0023:0xf748efbc [ 319.162618][T12127] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 319.162635][T12127] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 319.162651][T12127] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080007540 [ 319.162662][T12127] RDX: 0000000000000086 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.162671][T12127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.162680][T12127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.162690][T12127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.162712][T12127] [ 319.316037][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.408052][T12167] v: renamed from veth0_vlan (while UP) [ 320.408985][T12167] FAULT_INJECTION: forcing a failure. [ 320.408985][T12167] name failslab, interval 1, probability 0, space 0, times 0 [ 320.409004][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.2.1836 Not tainted syzkaller #0 PREEMPT(full) [ 320.409019][T12167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.409027][T12167] Call Trace: [ 320.409031][T12167] [ 320.409036][T12167] dump_stack_lvl+0x100/0x190 [ 320.409065][T12167] should_fail_ex.cold+0x5/0xa [ 320.409085][T12167] should_failslab+0xc2/0x120 [ 320.409103][T12167] kmem_cache_alloc_noprof+0x92/0x6a0 [ 320.409115][T12167] ? __asan_memcpy+0x3c/0x60 [ 320.409134][T12167] ? __kernfs_new_node+0xd2/0xa10 [ 320.409156][T12167] __kernfs_new_node+0xd2/0xa10 [ 320.409178][T12167] ? __pfx___kernfs_new_node+0x10/0x10 [ 320.409199][T12167] ? lock_acquire+0x1d1/0x380 [ 320.409212][T12167] ? kernfs_root+0x23/0x2a0 [ 320.409229][T12167] ? find_held_lock+0x2b/0x80 [ 320.409246][T12167] ? kernfs_root+0xee/0x2a0 [ 320.409263][T12167] ? kernfs_root+0xee/0x2a0 [ 320.409283][T12167] kernfs_new_node+0x194/0x200 [ 320.409296][T12167] ? __pfx_kernfs_new_node+0x10/0x10 [ 320.409307][T12167] ? kernfs_create_link+0xe4/0x280 [ 320.409322][T12167] ? kernfs_create_link+0xe4/0x280 [ 320.409339][T12167] kernfs_create_link+0x100/0x280 [ 320.409358][T12167] sysfs_do_create_link_sd+0x90/0x140 [ 320.409378][T12167] sysfs_create_link+0x61/0xc0 [ 320.409395][T12167] netdev_adjacent_rename_links+0x20f/0x480 [ 320.409417][T12167] ? __pfx_netdev_adjacent_rename_links+0x10/0x10 [ 320.409441][T12167] netif_change_name+0x2aa/0x830 [ 320.409463][T12167] ? __pfx_netif_change_name+0x10/0x10 [ 320.409482][T12167] ? __pfx_validate_linkmsg+0x10/0x10 [ 320.409494][T12167] ? unwind_get_return_address+0x59/0xa0 [ 320.409512][T12167] ? __asan_memset+0x23/0x50 [ 320.409533][T12167] do_setlink.isra.0+0x32bf/0x3f50 [ 320.409549][T12167] ? stack_trace_save+0x8e/0xc0 [ 320.409564][T12167] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 320.409579][T12167] ? __lock_acquire+0x5c0/0x1f40 [ 320.409592][T12167] ? __kasan_kmalloc+0xaa/0xb0 [ 320.409604][T12167] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 320.409621][T12167] ? rtnl_newlink+0x139/0x2620 [ 320.409633][T12167] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 320.409645][T12167] ? netlink_rcv_skb+0x159/0x420 [ 320.409656][T12167] ? netlink_unicast+0x668/0x950 [ 320.409674][T12167] ? netlink_sendmsg+0x9ac/0x10c0 [ 320.409692][T12167] ? ____sys_sendmsg+0xa99/0xc30 [ 320.409716][T12167] ? ___sys_sendmsg+0x190/0x1e0 [ 320.409731][T12167] ? __sys_sendmsg+0x160/0x210 [ 320.409751][T12167] ? lock_acquire+0x1d1/0x380 [ 320.409763][T12167] ? rtnl_newlink+0xac3/0x2620 [ 320.409779][T12167] ? rcu_is_watching+0x13/0xc0 [ 320.409798][T12167] ? trace_contention_end+0x126/0x160 [ 320.409814][T12167] ? __mutex_lock+0x267/0x1c10 [ 320.409832][T12167] ? rtnl_newlink+0xac3/0x2620 [ 320.409848][T12167] ? __nla_validate_parse+0x1e7/0x28b0 [ 320.409870][T12167] ? hook_capable+0x1bc/0x500 [ 320.409886][T12167] ? __pfx___mutex_lock+0x10/0x10 [ 320.409904][T12167] ? rcu_is_watching+0x13/0xc0 [ 320.409923][T12167] ? apparmor_capable+0x1d7/0x4d0 [ 320.409946][T12167] ? netlink_ns_capable+0xfa/0x130 [ 320.409967][T12167] rtnl_newlink+0x13c1/0x2620 [ 320.409987][T12167] ? __pfx_rtnl_newlink+0x10/0x10 [ 320.410002][T12167] ? rcu_is_watching+0x13/0xc0 [ 320.410020][T12167] ? kasan_quarantine_put+0x104/0x240 [ 320.410032][T12167] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.410051][T12167] ? kfree_skbmem+0x19a/0x210 [ 320.410069][T12167] ? __lock_acquire+0x5c0/0x1f40 [ 320.410083][T12167] ? hook_capable+0x1bc/0x500 [ 320.410114][T12167] ? __dev_queue_xmit+0xa2e/0x48d0 [ 320.410137][T12167] ? lock_acquire+0x1d1/0x380 [ 320.410150][T12167] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 320.410166][T12167] ? find_held_lock+0x2b/0x80 [ 320.410184][T12167] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 320.410198][T12167] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 320.410213][T12167] ? __pfx_rtnl_newlink+0x10/0x10 [ 320.410227][T12167] rtnetlink_rcv_msg+0x95e/0xe90 [ 320.410243][T12167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.410264][T12167] netlink_rcv_skb+0x159/0x420 [ 320.410277][T12167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.410292][T12167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.410303][T12167] ? __asan_memcpy+0x3c/0x60 [ 320.410327][T12167] ? netlink_deliver_tap+0x1ae/0xb50 [ 320.410351][T12167] netlink_unicast+0x668/0x950 [ 320.410373][T12167] ? __pfx_netlink_unicast+0x10/0x10 [ 320.410396][T12167] netlink_sendmsg+0x9ac/0x10c0 [ 320.410418][T12167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.410441][T12167] ? apparmor_socket_sendmsg+0x165/0x280 [ 320.410459][T12167] ? ____sys_sendmsg+0xa99/0xc30 [ 320.410473][T12167] ____sys_sendmsg+0xa99/0xc30 [ 320.410486][T12167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.410507][T12167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.410528][T12167] ___sys_sendmsg+0x190/0x1e0 [ 320.410544][T12167] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.410559][T12167] ? futex_wait+0x11e/0x370 [ 320.410578][T12167] ? find_held_lock+0x2b/0x80 [ 320.410604][T12167] __sys_sendmsg+0x160/0x210 [ 320.410623][T12167] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.410650][T12167] __do_fast_syscall_32+0x14b/0x8c0 [ 320.410670][T12167] do_fast_syscall_32+0x32/0x70 [ 320.410689][T12167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.410705][T12167] RIP: 0023:0xf73defbc [ 320.410716][T12167] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 320.410727][T12167] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 320.410740][T12167] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001440 [ 320.410747][T12167] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.410754][T12167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.410761][T12167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.410768][T12167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.410783][T12167] [ 320.867580][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'. [ 320.917647][T12196] FAULT_INJECTION: forcing a failure. [ 320.917647][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 320.917664][T12196] CPU: 1 UID: 0 PID: 12196 Comm: syz.2.1844 Not tainted syzkaller #0 PREEMPT(full) [ 320.917680][T12196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.917688][T12196] Call Trace: [ 320.917692][T12196] [ 320.917698][T12196] dump_stack_lvl+0x100/0x190 [ 320.917721][T12196] should_fail_ex.cold+0x5/0xa [ 320.917739][T12196] should_failslab+0xc2/0x120 [ 320.917756][T12196] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 320.917771][T12196] ? __alloc_skb+0x140/0x710 [ 320.917792][T12196] __alloc_skb+0x140/0x710 [ 320.917808][T12196] ? __alloc_skb+0x5b7/0x710 [ 320.917825][T12196] ? __pfx___alloc_skb+0x10/0x10 [ 320.917845][T12196] ? __asan_memcpy+0x3c/0x60 [ 320.917865][T12196] alloc_uevent_skb+0x7d/0x210 [ 320.917883][T12196] kobject_uevent_env+0x122c/0x18b0 [ 320.917902][T12196] ? bus_to_subsys+0x114/0x150 [ 320.917920][T12196] device_add+0x1173/0x1970 [ 320.917935][T12196] ? __pfx_device_add+0x10/0x10 [ 320.917947][T12196] ? __pfx_cfg80211_dev_check_name+0x10/0x10 [ 320.917964][T12196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 320.917981][T12196] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 320.918000][T12196] wiphy_register+0x2361/0x3380 [ 320.918022][T12196] ? __pfx_wiphy_register+0x10/0x10 [ 320.918042][T12196] ? __asan_memset+0x23/0x50 [ 320.918063][T12196] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 320.918081][T12196] ieee80211_register_hw+0x3086/0x45c0 [ 320.918106][T12196] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 320.918123][T12196] ? __pfx___debug_object_init+0x10/0x10 [ 320.918141][T12196] ? find_held_lock+0x2b/0x80 [ 320.918160][T12196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 320.918175][T12196] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 320.918190][T12196] ? __hrtimer_setup+0x208/0x330 [ 320.918210][T12196] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 320.918238][T12196] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 320.918275][T12196] hwsim_new_radio_nl+0xc6b/0x13f0 [ 320.918302][T12196] ? trace_kmalloc+0xeb/0x110 [ 320.918325][T12196] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.918363][T12196] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 320.918387][T12196] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 320.918407][T12196] genl_family_rcv_msg_doit+0x214/0x300 [ 320.918423][T12196] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.918438][T12196] ? genl_get_cmd+0x3e7/0x760 [ 320.918454][T12196] ? bpf_lsm_capable+0x9/0x10 [ 320.918468][T12196] ? security_capable+0x80/0x260 [ 320.918484][T12196] ? ns_capable+0xcd/0xf0 [ 320.918505][T12196] genl_rcv_msg+0x560/0x800 [ 320.918520][T12196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.918533][T12196] ? __lock_acquire+0x5c0/0x1f40 [ 320.918546][T12196] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.918569][T12196] netlink_rcv_skb+0x159/0x420 [ 320.918581][T12196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.918595][T12196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.918613][T12196] ? netlink_deliver_tap+0x1ae/0xb50 [ 320.918634][T12196] genl_rcv+0x28/0x40 [ 320.918645][T12196] netlink_unicast+0x668/0x950 [ 320.918667][T12196] ? __pfx_netlink_unicast+0x10/0x10 [ 320.918691][T12196] netlink_sendmsg+0x9ac/0x10c0 [ 320.918713][T12196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.918736][T12196] ? apparmor_socket_sendmsg+0x165/0x280 [ 320.918754][T12196] ? ____sys_sendmsg+0xa99/0xc30 [ 320.918768][T12196] ____sys_sendmsg+0xa99/0xc30 [ 320.918781][T12196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.918802][T12196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.918823][T12196] ___sys_sendmsg+0x190/0x1e0 [ 320.918839][T12196] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.918870][T12196] ? futex_wait+0x11e/0x370 [ 320.918890][T12196] ? find_held_lock+0x2b/0x80 [ 320.918919][T12196] __sys_sendmsg+0x160/0x210 [ 320.918940][T12196] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.918969][T12196] __do_fast_syscall_32+0x14b/0x8c0 [ 320.918991][T12196] do_fast_syscall_32+0x32/0x70 [ 320.919010][T12196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.919026][T12196] RIP: 0023:0xf73defbc [ 320.919038][T12196] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 320.919049][T12196] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 320.919061][T12196] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 320.919069][T12196] RDX: 0000000004080040 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.919076][T12196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.919083][T12196] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.919090][T12196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.919106][T12196] [ 321.242056][ T5798] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 321.595082][T12212] fuse: Unknown parameter '&d_0x0000000000000007' [ 321.736765][T12212] ftl_cs: FTL header not found. [ 321.780724][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1848'. [ 321.842551][T12212] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 322.407141][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1852'. [ 323.122045][ T5798] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 323.252312][T12236] fuse: Unknown parameter 'fd+-' [ 323.264128][T12236] FAULT_INJECTION: forcing a failure. [ 323.264128][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 323.264155][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.0.1854 Not tainted syzkaller #0 PREEMPT(full) [ 323.264177][T12236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.264189][T12236] Call Trace: [ 323.264196][T12236] [ 323.264204][T12236] dump_stack_lvl+0x100/0x190 [ 323.264243][T12236] should_fail_ex.cold+0x5/0xa [ 323.264269][T12236] should_failslab+0xc2/0x120 [ 323.264292][T12236] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 323.264312][T12236] ? is_module_address+0x5f/0xf0 [ 323.264337][T12236] ? fib_rules_register+0x30/0x510 [ 323.264363][T12236] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 323.264386][T12236] kmemdup_noprof+0x29/0x60 [ 323.264409][T12236] fib_rules_register+0x30/0x510 [ 323.264436][T12236] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 323.264458][T12236] fib6_rules_net_init+0x1f/0x140 [ 323.264500][T12236] ops_init+0x1e2/0x5f0 [ 323.264522][T12236] setup_net+0x118/0x3a0 [ 323.264541][T12236] ? __pfx_setup_net+0x10/0x10 [ 323.264560][T12236] ? bpf_lsm_namespace_init+0x9/0x10 [ 323.264587][T12236] copy_net_ns+0x340/0x7a0 [ 323.264609][T12236] create_new_namespaces+0x3ea/0xac0 [ 323.264636][T12236] unshare_nsproxy_namespaces+0xf6/0x210 [ 323.264658][T12236] ksys_unshare+0x44f/0x980 [ 323.264678][T12236] ? __pfx_ksys_unshare+0x10/0x10 [ 323.264700][T12236] ? __might_fault+0xc5/0x140 [ 323.264731][T12236] __ia32_sys_unshare+0x30/0x40 [ 323.264752][T12236] __do_fast_syscall_32+0x14b/0x8c0 [ 323.264783][T12236] do_fast_syscall_32+0x32/0x70 [ 323.264810][T12236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.264834][T12236] RIP: 0023:0xf748efbc [ 323.264851][T12236] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 323.264868][T12236] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 323.264889][T12236] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 323.264902][T12236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.264912][T12236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.264923][T12236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.264934][T12236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.264958][T12236] [ 324.285888][T12279] random: crng reseeded on system resumption [ 324.301362][T12279] Restarting kernel threads ... [ 324.301746][T12279] Done restarting kernel threads. [ 324.308832][ T25] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 324.360327][T12282] gadgetfs: bound to dummy_udc driver [ 324.474976][ T25] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 324.475773][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.475790][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.475802][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.475823][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.479094][ T25] usb 6-1: config 0 descriptor?? [ 324.515516][T12286] ucma_write: process 1291 (syz.0.1868) changed security contexts after opening file descriptor, this is not allowed. [ 324.518689][T12286] tipc: Failed to remove unknown binding: 66,0,2/0:3683883283/3683883284 [ 324.519183][T12286] tipc: Failed to remove unknown binding: 66,0,2/0:3683883283/3683883284 [ 324.594675][ T860] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 324.594904][ C1] gadgetfs: connected [ 324.596890][ T860] gadgetfs: disconnected [ 324.600922][ T5798] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 324.744813][ C1] gadgetfs: connected [ 324.745618][ T860] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 324.745882][ T860] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 324.745903][ T860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.747324][ C1] gadgetfs: configuration #1 [ 324.885905][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885935][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885948][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885960][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885972][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885985][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.885997][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.886009][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.886022][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.886034][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 324.917962][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 324.928063][T12310] FAULT_INJECTION: forcing a failure. [ 324.928063][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 324.928088][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.0.1872 Not tainted syzkaller #0 PREEMPT(full) [ 324.928105][T12310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.928115][T12310] Call Trace: [ 324.928120][T12310] [ 324.928127][T12310] dump_stack_lvl+0x100/0x190 [ 324.928156][T12310] should_fail_ex.cold+0x5/0xa [ 324.928180][T12310] should_failslab+0xc2/0x120 [ 324.928199][T12310] kmem_cache_alloc_noprof+0x92/0x6a0 [ 324.928217][T12310] ? __kernfs_new_node+0xd2/0xa10 [ 324.928246][T12310] __kernfs_new_node+0xd2/0xa10 [ 324.928273][T12310] ? __pfx___kernfs_new_node+0x10/0x10 [ 324.928300][T12310] ? lock_acquire+0x1d1/0x380 [ 324.928316][T12310] ? kernfs_root+0x23/0x2a0 [ 324.928339][T12310] ? find_held_lock+0x2b/0x80 [ 324.928360][T12310] ? kernfs_root+0xee/0x2a0 [ 324.928381][T12310] ? kernfs_root+0xee/0x2a0 [ 324.928408][T12310] kernfs_new_node+0x194/0x200 [ 324.928424][T12310] ? __pfx_kernfs_new_node+0x10/0x10 [ 324.928440][T12310] ? kernfs_add_one+0x213/0xb40 [ 324.928459][T12310] __kernfs_create_file+0x53/0x350 [ 324.928480][T12310] sysfs_add_file_mode_ns+0x207/0x3c0 [ 324.928507][T12310] internal_create_group+0x593/0xfb0 [ 324.928535][T12310] ? __pfx_internal_create_group+0x10/0x10 [ 324.928561][T12310] ? kernfs_create_link+0x1f1/0x280 [ 324.928583][T12310] internal_create_groups+0x9d/0x150 [ 324.928608][T12310] device_add+0xf60/0x1970 [ 324.928627][T12310] ? __pfx_device_add+0x10/0x10 [ 324.928644][T12310] ? lockdep_init_map_type+0x5c/0x250 [ 324.928662][T12310] ? __init_waitqueue_head+0xca/0x150 [ 324.928686][T12310] netdev_register_kobject+0x1df/0x410 [ 324.928711][T12310] register_netdevice+0x1313/0x26b0 [ 324.928732][T12310] ? __pfx_register_netdevice+0x10/0x10 [ 324.928775][T12310] __tun_chr_ioctl+0x1e6e/0x4940 [ 324.928793][T12310] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 324.928812][T12310] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 324.928827][T12310] ? __fget_files+0x34/0x3d0 [ 324.928847][T12310] ? hook_file_ioctl_common+0x140/0x440 [ 324.928875][T12310] ? __fget_files+0x21f/0x3d0 [ 324.928897][T12310] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 324.928914][T12310] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 324.928932][T12310] __do_fast_syscall_32+0x14b/0x8c0 [ 324.928956][T12310] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.928993][T12310] do_fast_syscall_32+0x32/0x70 [ 324.929017][T12310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.929036][T12310] RIP: 0023:0xf748efbc [ 324.929049][T12310] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 324.929064][T12310] RSP: 002b:00000000f542250c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 324.929079][T12310] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000400454ca [ 324.929089][T12310] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.929098][T12310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.929106][T12310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 324.929115][T12310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.929136][T12310] [ 324.955154][T12309] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 324.998122][T12309] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 325.091995][ T25] usb 6-1: USB disconnect, device number 25 [ 325.182211][T12281] gadgetfs: suspended from state 3 [ 325.182320][T12281] gadgetfs: disconnected [ 325.182538][ T860] usb 5-1: can't set config #1, error -71 [ 325.186551][ T860] usb 5-1: USB disconnect, device number 30 [ 325.790350][T12321] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 325.811622][T12321] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1880'. [ 325.939100][T12337] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 326.505000][ T25] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 326.665014][ T25] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 326.677342][ T25] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 326.677449][ T25] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 326.690416][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.690896][ T25] usb 8-1: Product: syz [ 326.691053][ T25] usb 8-1: Manufacturer: á°‰ [ 326.691278][ T25] usb 8-1: SerialNumber: syz [ 326.885616][T12348] netlink: 'syz.2.1887': attribute type 2 has an invalid length. [ 327.182982][T12353] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 327.334396][ T970] block nbd2: Receive control failed (result -32) [ 327.334662][T12342] block nbd2: shutting down sockets [ 327.431756][T12363] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 327.799197][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.800632][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.802763][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.818034][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.832709][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.839369][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.841255][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.841830][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.842360][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.842931][T12370] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.867478][T12367] ±ÿ)”ëfl: renamed from lo (while UP) [ 328.238574][T12379] FAULT_INJECTION: forcing a failure. [ 328.238574][T12379] name failslab, interval 1, probability 0, space 0, times 0 [ 328.238595][T12379] CPU: 1 UID: 0 PID: 12379 Comm: syz.1.1898 Not tainted syzkaller #0 PREEMPT(full) [ 328.238609][T12379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.238617][T12379] Call Trace: [ 328.238633][T12379] [ 328.238639][T12379] dump_stack_lvl+0x100/0x190 [ 328.238662][T12379] should_fail_ex.cold+0x5/0xa [ 328.238680][T12379] should_failslab+0xc2/0x120 [ 328.238696][T12379] kmem_cache_alloc_noprof+0x92/0x6a0 [ 328.238708][T12379] ? netlink_deliver_tap+0x103/0xb50 [ 328.238726][T12379] ? skb_clone+0x187/0x3f0 [ 328.238748][T12379] skb_clone+0x187/0x3f0 [ 328.238766][T12379] netlink_deliver_tap+0x82f/0xb50 [ 328.238787][T12379] netlink_unicast+0x784/0x950 [ 328.238809][T12379] ? __pfx_netlink_unicast+0x10/0x10 [ 328.238836][T12379] netlink_ack+0x660/0xba0 [ 328.238857][T12379] netlink_rcv_skb+0x333/0x420 [ 328.238874][T12379] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.238898][T12379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.238924][T12379] ? ns_capable+0xcd/0xf0 [ 328.238945][T12379] nfnetlink_rcv+0x1b3/0x440 [ 328.238960][T12379] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.238975][T12379] ? netlink_deliver_tap+0x1ae/0xb50 [ 328.238997][T12379] netlink_unicast+0x668/0x950 [ 328.239018][T12379] ? __pfx_netlink_unicast+0x10/0x10 [ 328.239041][T12379] netlink_sendmsg+0x9ac/0x10c0 [ 328.239063][T12379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.239086][T12379] ? apparmor_socket_sendmsg+0x165/0x280 [ 328.239104][T12379] ? ____sys_sendmsg+0xa99/0xc30 [ 328.239117][T12379] ____sys_sendmsg+0xa99/0xc30 [ 328.239130][T12379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.239150][T12379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.239171][T12379] ___sys_sendmsg+0x190/0x1e0 [ 328.239186][T12379] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.239208][T12379] ? find_held_lock+0x2b/0x80 [ 328.239235][T12379] __sys_sendmsg+0x160/0x210 [ 328.239268][T12379] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.239299][T12379] __do_fast_syscall_32+0x14b/0x8c0 [ 328.239318][T12379] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.239413][T12379] do_fast_syscall_32+0x32/0x70 [ 328.239433][T12379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.239449][T12379] RIP: 0023:0xf7ff5fbc [ 328.239460][T12379] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 328.239471][T12379] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 328.239483][T12379] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 328.239491][T12379] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.239498][T12379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.239504][T12379] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.239511][T12379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.239526][T12379] [ 328.395125][ T25] cdc_ncm 8-1:1.0: bind() failure [ 328.400591][ T25] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 328.400630][ T25] cdc_ncm 8-1:1.1: bind() failure [ 328.407985][ T25] usb 8-1: USB disconnect, device number 27 [ 328.464052][T12383] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 329.765042][T12414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1906'. [ 331.845828][ T5796] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 332.004554][ T5796] usb 8-1: Using ep0 maxpacket: 32 [ 332.005020][ T5796] usb 8-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 332.005867][ T5796] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 332.005889][ T5796] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 332.005902][ T5796] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.005916][ T5796] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 332.007542][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.007556][ T5796] usb 8-1: Product: syz [ 332.007563][ T5796] usb 8-1: Manufacturer: syz [ 332.007571][ T5796] usb 8-1: SerialNumber: syz [ 332.014109][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 332.019105][ T5796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input79 [ 332.244588][ T5796] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 332.244603][ T5796] (id 0x00) [ 332.329370][ T5796] rc_core: IR keymap rc-imon-pad not found [ 332.329433][ T5796] Registered IR keymap rc-empty [ 332.329489][ T5796] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 332.329558][ T5796] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 332.436044][ T5796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 332.441887][ T5796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input80 [ 332.453481][ T5796] imon 8-1:155.0: iMON device (15c2:ffdc) on usb<8:28> initialized [ 332.624064][ T5796] usb 8-1: USB disconnect, device number 28 [ 332.635351][T12444] imon:display_open: could not find interface for minor 0 [ 332.779847][T12466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 332.779872][T12466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 332.785570][T12466] vhci_hcd vhci_hcd.0: Device attached [ 332.964651][ T25] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 333.024616][ T25] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 333.249111][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 333.249127][ T43] audit: type=1326 audit(2000000035.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249155][ T43] audit: type=1326 audit(2000000035.840:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249177][ T43] audit: type=1326 audit(2000000035.840:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249198][ T43] audit: type=1326 audit(2000000035.840:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249219][ T43] audit: type=1326 audit(2000000035.840:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249241][ T43] audit: type=1326 audit(2000000035.840:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249262][ T43] audit: type=1326 audit(2000000035.840:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249283][ T43] audit: type=1326 audit(2000000035.840:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249304][ T43] audit: type=1326 audit(2000000035.840:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.249325][ T43] audit: type=1326 audit(2000000035.840:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.0.1926" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 333.459356][T12481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1927'. [ 334.169115][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 335.886319][T12512] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 335.902445][T12467] vhci_hcd: connection reset by peer [ 335.916413][ T7166] vhci_hcd vhci_hcd.1: stop threads [ 335.919351][ T7166] vhci_hcd vhci_hcd.1: release socket [ 335.920924][ T7166] vhci_hcd vhci_hcd.1: disconnect device [ 336.771007][T12552] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 336.940102][T12556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 337.243368][T12561] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 337.244262][T12560] IPVS: stopping master sync thread 12561 ... [ 337.981966][T12577] nvme_rdma: malformed src address passed: 1270.0.1 [ 338.053794][T12584] nvme_rdma: malformed src address passed: 1270.0.1 [ 338.104645][ T25] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 338.780254][ T5798] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 338.844274][T12608] FAULT_INJECTION: forcing a failure. [ 338.844274][T12608] name failslab, interval 1, probability 0, space 0, times 0 [ 338.844295][T12608] CPU: 3 UID: 0 PID: 12608 Comm: syz.1.1961 Not tainted syzkaller #0 PREEMPT(full) [ 338.844309][T12608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.844317][T12608] Call Trace: [ 338.844321][T12608] [ 338.844326][T12608] dump_stack_lvl+0x100/0x190 [ 338.844350][T12608] should_fail_ex.cold+0x5/0xa [ 338.844369][T12608] should_failslab+0xc2/0x120 [ 338.844390][T12608] __kmalloc_noprof+0xfc/0x840 [ 338.844410][T12608] ? ethnl_default_doit+0x218/0x1530 [ 338.844446][T12608] ethnl_default_doit+0x218/0x1530 [ 338.844494][T12608] ? __pfx_ethnl_default_doit+0x10/0x10 [ 338.844523][T12608] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 338.844546][T12608] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 338.844588][T12608] genl_family_rcv_msg_doit+0x214/0x300 [ 338.844615][T12608] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 338.844636][T12608] ? genl_get_cmd+0x3e7/0x760 [ 338.844664][T12608] ? __radix_tree_lookup+0x217/0x2b0 [ 338.844696][T12608] genl_rcv_msg+0x560/0x800 [ 338.844721][T12608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.844744][T12608] ? __lock_acquire+0x5c0/0x1f40 [ 338.844766][T12608] ? __pfx_ethnl_default_doit+0x10/0x10 [ 338.844807][T12608] netlink_rcv_skb+0x159/0x420 [ 338.844825][T12608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.844848][T12608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.844879][T12608] ? netlink_deliver_tap+0x1ae/0xb50 [ 338.844914][T12608] genl_rcv+0x28/0x40 [ 338.844933][T12608] netlink_unicast+0x668/0x950 [ 338.844967][T12608] ? __pfx_netlink_unicast+0x10/0x10 [ 338.845002][T12608] netlink_sendmsg+0x9ac/0x10c0 [ 338.845033][T12608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.845065][T12608] ? apparmor_socket_sendmsg+0x165/0x280 [ 338.845092][T12608] ? ____sys_sendmsg+0xa99/0xc30 [ 338.845110][T12608] ____sys_sendmsg+0xa99/0xc30 [ 338.845128][T12608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.845156][T12608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.845188][T12608] ___sys_sendmsg+0x190/0x1e0 [ 338.845213][T12608] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.845254][T12608] ? find_held_lock+0x2b/0x80 [ 338.845296][T12608] __sys_sendmsg+0x160/0x210 [ 338.845318][T12608] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.845345][T12608] __do_fast_syscall_32+0x14b/0x8c0 [ 338.845363][T12608] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.845384][T12608] do_fast_syscall_32+0x32/0x70 [ 338.845411][T12608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.845438][T12608] RIP: 0023:0xf7ff5fbc [ 338.845453][T12608] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 338.845470][T12608] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 338.845488][T12608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 338.845499][T12608] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.845510][T12608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.845521][T12608] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.845530][T12608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.845545][T12608] [ 339.335705][T12619] input: syz1 as /devices/virtual/input/input82 [ 340.321319][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 340.800392][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 342.033810][T12672] FAULT_INJECTION: forcing a failure. [ 342.033810][T12672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.033858][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.0.1970 Not tainted syzkaller #0 PREEMPT(full) [ 342.033885][T12672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.033893][T12672] Call Trace: [ 342.033897][T12672] [ 342.033902][T12672] dump_stack_lvl+0x100/0x190 [ 342.033925][T12672] should_fail_ex.cold+0x5/0xa [ 342.033955][T12672] should_fail_alloc_page+0xeb/0x140 [ 342.033972][T12672] prepare_alloc_pages+0x1f0/0x5b0 [ 342.033989][T12672] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 342.034009][T12672] ? __pfx_get_page_from_freelist+0x10/0x10 [ 342.034028][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.034046][T12672] ? trace_mm_page_alloc+0x164/0x1c0 [ 342.034061][T12672] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 342.034081][T12672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.034104][T12672] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.034122][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.034139][T12672] ? irqentry_exit+0x202/0xab0 [ 342.034155][T12672] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.034172][T12672] ? irqentry_exit+0x202/0xab0 [ 342.034190][T12672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.034215][T12672] ? finish_task_switch.isra.0+0x2ca/0x10d0 [ 342.034230][T12672] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 342.034247][T12672] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 342.034269][T12672] ? policy_nodemask+0xed/0x5e0 [ 342.034286][T12672] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 342.034313][T12672] __kasan_populate_vmalloc+0xf0/0x210 [ 342.034329][T12672] alloc_vmap_area+0x963/0x2bc0 [ 342.034346][T12672] ? kasan_save_track+0x14/0x30 [ 342.034359][T12672] ? __kasan_kmalloc+0xaa/0xb0 [ 342.034372][T12672] ? __pfx_alloc_vmap_area+0x10/0x10 [ 342.034385][T12672] ? __get_vm_area_node+0x124/0x350 [ 342.034399][T12672] __get_vm_area_node+0x1ed/0x350 [ 342.034415][T12672] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 342.034430][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.034452][T12672] ? process_measurement+0x4c8/0x2360 [ 342.034479][T12672] ? process_measurement+0x4c8/0x2360 [ 342.034506][T12672] ? down_write+0x141/0x1f0 [ 342.034539][T12672] ? up_write+0x2dc/0x5b0 [ 342.034563][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.034583][T12672] ? process_measurement+0x1f4/0x2360 [ 342.034604][T12672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.034619][T12672] ? __lock_acquire+0x5c0/0x1f40 [ 342.034636][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.034651][T12672] __vmalloc_node_noprof+0xad/0xf0 [ 342.034665][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.034682][T12672] __vmalloc_noprof+0xa3/0x120 [ 342.034696][T12672] ? __pfx___vmalloc_noprof+0x10/0x10 [ 342.034710][T12672] ? lock_acquire+0x1d1/0x380 [ 342.034722][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.034740][T12672] ? apparmor_capable+0x1d7/0x4d0 [ 342.034757][T12672] bpf_prog_alloc_no_stats+0x58/0x690 [ 342.034772][T12672] ? security_capable+0x80/0x260 [ 342.034788][T12672] bpf_prog_alloc+0x3b/0x200 [ 342.034802][T12672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.034818][T12672] bpf_prog_load+0x4a3/0x2b20 [ 342.034834][T12672] ? __pfx_bpf_prog_load+0x10/0x10 [ 342.034857][T12672] __sys_bpf+0x146f/0x4b60 [ 342.034872][T12672] ? __pfx___sys_bpf+0x10/0x10 [ 342.034884][T12672] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 342.034908][T12672] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 342.034923][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.034941][T12672] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 342.034956][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.034972][T12672] ? trace_sched_exit_tp+0x120/0x160 [ 342.034988][T12672] ? __schedule+0x1270/0x6990 [ 342.035011][T12672] ? lock_acquire+0x1d1/0x380 [ 342.035023][T12672] ? __might_fault+0xc5/0x140 [ 342.035038][T12672] ? find_held_lock+0x2b/0x80 [ 342.035057][T12672] ? __ia32_sys_bpf+0xcc/0x170 [ 342.035068][T12672] __ia32_sys_bpf+0xcc/0x170 [ 342.035081][T12672] ? __might_fault+0x111/0x140 [ 342.035102][T12672] __do_fast_syscall_32+0x14b/0x8c0 [ 342.035120][T12672] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.035138][T12672] do_fast_syscall_32+0x32/0x70 [ 342.035156][T12672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.035172][T12672] RIP: 0023:0xf748efbc [ 342.035182][T12672] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 342.035194][T12672] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 342.035206][T12672] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 342.035214][T12672] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.035221][T12672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.035227][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.035234][T12672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.035248][T12672] [ 342.065452][T12672] syz.0.1970: vmalloc error: size 69632, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.065944][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.0.1970 Not tainted syzkaller #0 PREEMPT(full) [ 342.065981][T12672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.065992][T12672] Call Trace: [ 342.065999][T12672] [ 342.066007][T12672] dump_stack_lvl+0x100/0x190 [ 342.066041][T12672] warn_alloc.cold+0x9e/0xb2 [ 342.066080][T12672] ? __pfx_warn_alloc+0x10/0x10 [ 342.066112][T12672] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.066142][T12672] ? __get_vm_area_node+0x2f0/0x350 [ 342.066170][T12672] ? __get_vm_area_node+0x22b/0x350 [ 342.066197][T12672] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 342.066219][T12672] ? process_measurement+0x4c8/0x2360 [ 342.066246][T12672] ? process_measurement+0x4c8/0x2360 [ 342.066273][T12672] ? down_write+0x141/0x1f0 [ 342.066306][T12672] ? up_write+0x2dc/0x5b0 [ 342.066329][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.066355][T12672] ? process_measurement+0x1f4/0x2360 [ 342.066386][T12672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.066410][T12672] ? __lock_acquire+0x5c0/0x1f40 [ 342.066437][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.066462][T12672] __vmalloc_node_noprof+0xad/0xf0 [ 342.066484][T12672] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 342.066510][T12672] __vmalloc_noprof+0xa3/0x120 [ 342.066531][T12672] ? __pfx___vmalloc_noprof+0x10/0x10 [ 342.066552][T12672] ? lock_acquire+0x1d1/0x380 [ 342.066573][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.066601][T12672] ? apparmor_capable+0x1d7/0x4d0 [ 342.066629][T12672] bpf_prog_alloc_no_stats+0x58/0x690 [ 342.066653][T12672] ? security_capable+0x80/0x260 [ 342.066678][T12672] bpf_prog_alloc+0x3b/0x200 [ 342.066700][T12672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.066726][T12672] bpf_prog_load+0x4a3/0x2b20 [ 342.066753][T12672] ? __pfx_bpf_prog_load+0x10/0x10 [ 342.066795][T12672] __sys_bpf+0x146f/0x4b60 [ 342.066821][T12672] ? __pfx___sys_bpf+0x10/0x10 [ 342.066842][T12672] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 342.066880][T12672] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 342.066907][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.066937][T12672] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 342.066962][T12672] ? rcu_is_watching+0x13/0xc0 [ 342.066990][T12672] ? trace_sched_exit_tp+0x120/0x160 [ 342.067015][T12672] ? __schedule+0x1270/0x6990 [ 342.067055][T12672] ? lock_acquire+0x1d1/0x380 [ 342.067074][T12672] ? __might_fault+0xc5/0x140 [ 342.067105][T12672] ? find_held_lock+0x2b/0x80 [ 342.067136][T12672] ? __ia32_sys_bpf+0xcc/0x170 [ 342.067155][T12672] __ia32_sys_bpf+0xcc/0x170 [ 342.067176][T12672] ? __might_fault+0x111/0x140 [ 342.067201][T12672] __do_fast_syscall_32+0x14b/0x8c0 [ 342.067229][T12672] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.067257][T12672] do_fast_syscall_32+0x32/0x70 [ 342.067286][T12672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.067309][T12672] RIP: 0023:0xf748efbc [ 342.067326][T12672] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 342.067344][T12672] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 342.067363][T12672] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 342.067375][T12672] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.067387][T12672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.067399][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.067410][T12672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.067436][T12672] [ 342.090045][T12672] Mem-Info: [ 342.097004][T12672] active_anon:901 inactive_anon:3393 isolated_anon:0 [ 342.097004][T12672] active_file:2822 inactive_file:20784 isolated_file:0 [ 342.097004][T12672] unevictable:0 dirty:419 writeback:0 [ 342.097004][T12672] slab_reclaimable:7065 slab_unreclaimable:59725 [ 342.097004][T12672] mapped:25843 shmem:93 pagetables:1283 [ 342.097004][T12672] sec_pagetables:311 bounce:0 [ 342.097004][T12672] kernel_misc_reclaimable:0 [ 342.097004][T12672] free:60031 free_pcp:11871 free_cma:0 [ 342.099364][T12672] Node 0 active_anon:56kB inactive_anon:48kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9440kB pagetables:1628kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 342.100466][T12672] Node 1 active_anon:3548kB inactive_anon:13524kB active_file:11288kB inactive_file:83120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103348kB dirty:1672kB writeback:0kB shmem:372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5976kB pagetables:3504kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 342.100820][T12672] Node 0 DMA free:2044kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:216kB free_cma:0kB [ 342.103039][T12672] lowmem_reserve[]: 0 256 256 256 256 [ 342.103260][T12672] Node 0 DMA32 free:11316kB boost:0kB min:11544kB low:14428kB high:17312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:56kB inactive_anon:48kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:4kB zspages:728kB present:1032196kB managed:262284kB mlocked:0kB bounce:0kB free_pcp:12076kB local_pcp:2796kB free_cma:0kB [ 342.106835][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 342.107431][T12672] Node 1 DMA32 free:226764kB boost:0kB min:47136kB low:58920kB high:70704kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3548kB inactive_anon:13524kB active_file:11288kB inactive_file:83120kB unevictable:0kB writepending:1672kB zspages:3268kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:34864kB local_pcp:13288kB free_cma:0kB [ 342.108514][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 342.108716][T12672] Node 0 DMA: 25*4kB (U) 25*8kB (U) 11*16kB (U) 5*32kB (U) 6*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2044kB [ 342.118826][T12672] Node 0 DMA32: 103*4kB (UME) 77*8kB (UE) 81*16kB (UME) 65*32kB (UME) 34*64kB (UME) 13*128kB (UME) 4*256kB (UM) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 11316kB [ 342.136590][T12672] Node 1 DMA32: 1539*4kB (UME) 766*8kB (UM) 867*16kB (UM) 494*32kB (UM) 479*64kB (UME) 280*128kB (UM) 124*256kB (UM) 39*512kB (UM) 13*1024kB (ME) 18*2048kB (UME) 4*4096kB (U) = 226732kB [ 342.144360][T12672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.145714][T12672] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 342.147061][T12672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.147728][T12672] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 342.148600][T12672] 24902 total pagecache pages [ 342.149078][T12672] 1205 pages in swap cache [ 342.149750][T12672] Free swap = 107716kB [ 342.150334][T12672] Total swap = 124996kB [ 342.151131][T12672] 524155 pages RAM [ 342.151645][T12672] 0 pages HighMem/MovableOnly [ 342.152352][T12672] 217692 pages reserved [ 342.152887][T12672] 0 pages cma reserved [ 342.169600][T12678] FAULT_INJECTION: forcing a failure. [ 342.169600][T12678] name failslab, interval 1, probability 0, space 0, times 0 [ 342.169620][T12678] CPU: 2 UID: 0 PID: 12678 Comm: syz.3.1973 Not tainted syzkaller #0 PREEMPT(full) [ 342.169635][T12678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.169644][T12678] Call Trace: [ 342.169649][T12678] [ 342.169655][T12678] dump_stack_lvl+0x100/0x190 [ 342.169679][T12678] should_fail_ex.cold+0x5/0xa [ 342.169698][T12678] should_failslab+0xc2/0x120 [ 342.169715][T12678] kmem_cache_alloc_noprof+0x92/0x6a0 [ 342.169729][T12678] ? __asan_memcpy+0x3c/0x60 [ 342.169749][T12678] ? __kernfs_new_node+0xd2/0xa10 [ 342.169771][T12678] __kernfs_new_node+0xd2/0xa10 [ 342.169790][T12678] ? arch_stack_walk+0xa6/0xf0 [ 342.169809][T12678] ? __pfx___kernfs_new_node+0x10/0x10 [ 342.169830][T12678] ? lock_acquire+0x1d1/0x380 [ 342.169843][T12678] ? kernfs_root+0x23/0x2a0 [ 342.169861][T12678] ? find_held_lock+0x2b/0x80 [ 342.169879][T12678] ? kernfs_root+0xee/0x2a0 [ 342.169897][T12678] ? kernfs_root+0xee/0x2a0 [ 342.169918][T12678] kernfs_new_node+0x194/0x200 [ 342.169931][T12678] ? __pfx_kernfs_new_node+0x10/0x10 [ 342.169944][T12678] ? trace_contention_end+0x126/0x160 [ 342.169962][T12678] __kernfs_create_file+0x53/0x350 [ 342.169978][T12678] cgroup_addrm_files+0x48e/0xd30 [ 342.170003][T12678] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 342.170024][T12678] ? css_next_child+0xcf/0x2e0 [ 342.170044][T12678] ? css_next_descendant_pre+0x58/0x1a0 [ 342.170065][T12678] css_populate_dir+0x343/0x590 [ 342.170083][T12678] cgroup_mkdir+0x975/0x13a0 [ 342.170107][T12678] ? __pfx_cgroup_mkdir+0x10/0x10 [ 342.170124][T12678] kernfs_iop_mkdir+0x111/0x190 [ 342.170136][T12678] ? security_inode_mkdir+0xc9/0x2b0 [ 342.170151][T12678] vfs_mkdir+0x36d/0x8a0 [ 342.170175][T12678] filename_mkdirat+0x4c4/0x630 [ 342.170193][T12678] ? __pfx_filename_mkdirat+0x10/0x10 [ 342.170210][T12678] ? strncpy_from_user+0x19d/0x2d0 [ 342.170227][T12678] ? do_getname+0x191/0x390 [ 342.170246][T12678] __ia32_sys_mkdirat+0x88/0xc0 [ 342.170263][T12678] __do_fast_syscall_32+0x14b/0x8c0 [ 342.170284][T12678] do_fast_syscall_32+0x32/0x70 [ 342.170303][T12678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.170319][T12678] RIP: 0023:0xf7fe4fbc [ 342.170331][T12678] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 342.170344][T12678] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 342.170356][T12678] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 342.170365][T12678] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 342.170373][T12678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.170380][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.170388][T12678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.170403][T12678] [ 342.170417][T12678] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 342.741369][ T1172] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 342.741927][T12676] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 342.904903][ T3306] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 343.051983][T12693] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1976'. [ 343.058464][ T3306] usb 8-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 343.059501][ T3306] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.061177][ T3306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 343.061198][ T3306] usb 8-1: Product: syz [ 343.061212][ T3306] usb 8-1: Manufacturer: syz [ 343.076145][ T3306] navman 8-1:1.0: navman converter detected [ 343.084401][ T3306] usb 8-1: navman converter now attached to ttyUSB0 [ 343.095030][T12697] nvme_fabrics: unknown parameter or missing value 'tranxport=tcp' in ctrl creation request [ 343.291691][ T860] usb 8-1: USB disconnect, device number 29 [ 343.294382][ T860] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 343.294962][ T860] navman 8-1:1.0: device disconnected [ 343.324604][ T3306] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 343.395979][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 343.396000][ T43] audit: type=1107 audit(2000000045.980:112): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iC$F~/ˆãœ˜@˜ æqO' [ 343.404680][ T25] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 343.441196][T12708] syzkaller1: entered promiscuous mode [ 343.441211][T12708] syzkaller1: entered allmulticast mode [ 343.442199][T12708] FAULT_INJECTION: forcing a failure. [ 343.442199][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 343.442217][T12708] CPU: 2 UID: 0 PID: 12708 Comm: syz.1.1983 Not tainted syzkaller #0 PREEMPT(full) [ 343.442231][T12708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.442238][T12708] Call Trace: [ 343.442243][T12708] [ 343.442248][T12708] dump_stack_lvl+0x100/0x190 [ 343.442272][T12708] should_fail_ex.cold+0x5/0xa [ 343.442290][T12708] should_failslab+0xc2/0x120 [ 343.442307][T12708] kmem_cache_alloc_noprof+0x92/0x6a0 [ 343.442320][T12708] ? raw_local_deliver+0x2f3/0xd40 [ 343.442333][T12708] ? skb_clone+0x187/0x3f0 [ 343.442355][T12708] skb_clone+0x187/0x3f0 [ 343.442374][T12708] raw_local_deliver+0x84c/0xd40 [ 343.442390][T12708] ? __pfx_raw_local_deliver+0x10/0x10 [ 343.442403][T12708] ? lock_acquire+0x1d1/0x380 [ 343.442416][T12708] ? ip_local_deliver_finish+0x335/0x6e0 [ 343.442433][T12708] ip_protocol_deliver_rcu+0xeb/0x4d0 [ 343.442450][T12708] ip_local_deliver_finish+0x3fb/0x6e0 [ 343.442466][T12708] ip_local_deliver+0x1a3/0x200 [ 343.442480][T12708] ? __pfx_ip_local_deliver+0x10/0x10 [ 343.442494][T12708] ip_rcv+0x33a/0x3c0 [ 343.442508][T12708] ? __pfx_ip_rcv+0x10/0x10 [ 343.442521][T12708] __netif_receive_skb_one_core+0x197/0x1e0 [ 343.442539][T12708] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 343.442558][T12708] ? lock_acquire+0x1d1/0x380 [ 343.442572][T12708] ? find_held_lock+0x2b/0x80 [ 343.442591][T12708] __netif_receive_skb+0x1f/0x120 [ 343.442608][T12708] netif_receive_skb+0x139/0x7d0 [ 343.442626][T12708] ? __pfx_netif_receive_skb+0x10/0x10 [ 343.442643][T12708] ? _copy_from_iter+0x270/0x16c0 [ 343.442666][T12708] tun_rx_batched.isra.0+0x3f6/0x750 [ 343.442681][T12708] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 343.442705][T12708] ? tun_get_user+0x1dcd/0x3ee0 [ 343.442721][T12708] tun_get_user+0x1f62/0x3ee0 [ 343.442740][T12708] ? __lock_acquire+0x5c0/0x1f40 [ 343.442758][T12708] ? __pfx_tun_get_user+0x10/0x10 [ 343.442773][T12708] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 343.442794][T12708] ? find_held_lock+0x2b/0x80 [ 343.442811][T12708] ? tun_get+0x191/0x370 [ 343.442822][T12708] ? tun_get+0x191/0x370 [ 343.442838][T12708] tun_chr_write_iter+0xdc/0x200 [ 343.442853][T12708] vfs_write+0x6af/0x1050 [ 343.442868][T12708] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 343.442883][T12708] ? __pfx_vfs_write+0x10/0x10 [ 343.442895][T12708] ? find_held_lock+0x2b/0x80 [ 343.442921][T12708] ksys_write+0x12a/0x250 [ 343.442934][T12708] ? __pfx_ksys_write+0x10/0x10 [ 343.442951][T12708] __do_fast_syscall_32+0x14b/0x8c0 [ 343.442969][T12708] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.443001][T12708] do_fast_syscall_32+0x32/0x70 [ 343.443020][T12708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.443036][T12708] RIP: 0023:0xf7ff5fbc [ 343.443046][T12708] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 343.443058][T12708] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 343.443070][T12708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002240 [ 343.443078][T12708] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000000 [ 343.443085][T12708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.443092][T12708] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.443099][T12708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.443114][T12708] [ 343.474570][ T3306] usb 5-1: Using ep0 maxpacket: 8 [ 343.475148][ T3306] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.476027][ T3306] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 343.476045][ T3306] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.476065][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.476080][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.476094][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 343.476108][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.476123][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.476138][ T3306] usb 5-1: config 168 interface 0 has no altsetting 0 [ 343.476884][ T3306] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 343.476901][ T3306] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.476919][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.476933][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.476947][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 343.476960][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.476974][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.476989][ T3306] usb 5-1: config 168 interface 0 has no altsetting 0 [ 343.477711][ T3306] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 343.477728][ T3306] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.477746][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.477760][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.477773][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 343.477787][ T3306] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.477806][ T3306] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.477820][ T3306] usb 5-1: config 168 interface 0 has no altsetting 0 [ 343.480418][ T3306] usb 5-1: string descriptor 0 read error: -22 [ 343.480473][ T3306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.486598][ T3306] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.786944][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 343.808370][ T25] usb 7-1: not running at top speed; connect to a high speed hub [ 343.808402][ T25] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 343.869515][ T25] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 343.869535][ T25] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 343.869547][ T25] usb 7-1: config 14 has no interface number 0 [ 343.869555][ T25] usb 7-1: config 14 has no interface number 1 [ 343.869584][ T25] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 343.869597][ T25] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 343.869613][ T25] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 343.869627][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 343.869642][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 343.869656][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 343.869668][ T25] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.869683][ T25] usb 7-1: config 14 interface 57 has no altsetting 0 [ 343.869693][ T25] usb 7-1: config 14 interface 228 has no altsetting 0 [ 344.022946][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.022964][ T25] usb 7-1: Product: syz [ 344.022973][ T25] usb 7-1: Manufacturer: syz [ 344.022981][ T25] usb 7-1: SerialNumber: syz [ 344.441634][ T11] usb 5-1: USB disconnect, device number 31 [ 344.867298][T12737] futex_wake_op: syz.3.1991 tries to shift op by 144; fix this program [ 344.907544][T12739] netlink: 'syz.3.1992': attribute type 2 has an invalid length. [ 345.102837][ T25] legousbtower 7-1:14.57: interrupt endpoints not found [ 345.506316][ T25] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 345.507467][ T25] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 346.066639][T12783] usb 7-1: LEGO USB Tower reset control request failed [ 346.084554][ T11] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 346.246919][ T11] usb 6-1: not running at top speed; connect to a high speed hub [ 346.246950][ T11] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 346.247874][T12792] FAULT_INJECTION: forcing a failure. [ 346.247874][T12792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.247893][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.0.2006 Not tainted syzkaller #0 PREEMPT(full) [ 346.247907][T12792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.247915][T12792] Call Trace: [ 346.247919][T12792] [ 346.247925][T12792] dump_stack_lvl+0x100/0x190 [ 346.247949][T12792] should_fail_ex.cold+0x5/0xa [ 346.247979][T12792] should_fail_alloc_page+0xeb/0x140 [ 346.247999][T12792] prepare_alloc_pages+0x1f0/0x5b0 [ 346.248017][T12792] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 346.248037][T12792] ? stack_trace_save+0x8e/0xc0 [ 346.248051][T12792] ? __pfx_stack_trace_save+0x10/0x10 [ 346.248065][T12792] ? stack_depot_save_flags+0x27/0xa10 [ 346.248085][T12792] ? __lock_acquire+0x5c0/0x1f40 [ 346.248099][T12792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 346.248121][T12792] ? mfill_establish_pmd+0x197/0x210 [ 346.248149][T12792] ? userfaultfd_ioctl+0x316c/0x6550 [ 346.248176][T12792] ? look_up_lock_class+0x64/0x120 [ 346.248197][T12792] ? __do_fast_syscall_32+0x14b/0x8c0 [ 346.248217][T12792] ? register_lock_class+0x3f/0x7b0 [ 346.248234][T12792] ? __lock_acquire+0x5c0/0x1f40 [ 346.248250][T12792] ? rcu_is_watching+0x13/0xc0 [ 346.248270][T12792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.248286][T12792] ? policy_nodemask+0xed/0x5e0 [ 346.248304][T12792] alloc_pages_mpol+0x201/0x560 [ 346.248321][T12792] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 346.248336][T12792] ? __page_table_check_ptes_set+0x1d5/0x530 [ 346.248354][T12792] ? find_held_lock+0x2b/0x80 [ 346.248373][T12792] alloc_pages_noprof+0x1a/0x160 [ 346.248391][T12792] pte_alloc_one+0x1c/0x3d0 [ 346.248415][T12792] __pte_alloc+0x6d/0x3e0 [ 346.248439][T12792] ? __pfx___pte_alloc+0x10/0x10 [ 346.248467][T12792] ? mm_alloc_pmd+0x2c2/0x470 [ 346.248491][T12792] mfill_establish_pmd+0x197/0x210 [ 346.248510][T12792] mfill_atomic_zeropage+0x331/0x9e0 [ 346.248532][T12792] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 346.248551][T12792] ? find_held_lock+0x2b/0x80 [ 346.248576][T12792] userfaultfd_ioctl+0x316c/0x6550 [ 346.248595][T12792] ? get_pid_task+0x106/0x250 [ 346.248616][T12792] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 346.248640][T12792] ? do_vfs_ioctl+0x226/0x13e0 [ 346.248653][T12792] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 346.248669][T12792] ? find_held_lock+0x2b/0x80 [ 346.248686][T12792] ? __fget_files+0x215/0x3d0 [ 346.248700][T12792] ? hook_file_ioctl_common+0x140/0x440 [ 346.248722][T12792] ? __fget_files+0x21f/0x3d0 [ 346.248737][T12792] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 346.248747][ T11] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 346.248757][T12792] ? compat_ptr_ioctl+0x6e/0xa0 [ 346.248768][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.248775][T12792] compat_ptr_ioctl+0x6e/0xa0 [ 346.248784][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.248794][T12792] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 346.248820][T12792] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 346.248822][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.248841][T12792] __do_fast_syscall_32+0x14b/0x8c0 [ 346.248869][T12792] ? lockdep_hardirqs_on+0x7d/0x110 [ 346.248895][T12792] do_fast_syscall_32+0x32/0x70 [ 346.248921][T12792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.248944][T12792] RIP: 0023:0xf748efbc [ 346.248959][T12792] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 346.248978][T12792] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 346.248996][T12792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 346.249008][T12792] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.249018][T12792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.249029][T12792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.249040][T12792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.249064][T12792] [ 346.265632][ T11] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -22 [ 346.271748][ T11] usb 7-1: USB disconnect, device number 26 [ 346.315198][ T11] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 346.490810][ T10] usb 6-1: USB disconnect, device number 26 [ 347.948695][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 347.986673][ T43] audit: type=1326 audit(2000000050.580:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.986725][ T43] audit: type=1326 audit(2000000050.580:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987050][ T43] audit: type=1326 audit(2000000050.580:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987125][ T43] audit: type=1326 audit(2000000050.580:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987204][ T43] audit: type=1326 audit(2000000050.580:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987372][ T43] audit: type=1326 audit(2000000050.580:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987486][ T43] audit: type=1326 audit(2000000050.580:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987775][ T43] audit: type=1326 audit(2000000050.580:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 347.987871][ T43] audit: type=1326 audit(2000000050.580:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 348.131747][T12806] overlayfs: failed lookup in lower (newroot/483, name='file0', err=-40): overlapping layers [ 348.356875][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 348.626709][T12834] xt_connbytes: Forcing CT accounting to be enabled [ 348.626945][T12834] xt_SECMARK: invalid mode: 0 [ 349.443599][T12846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2022'. [ 350.765371][T12863] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 350.775717][T12863] FAULT_INJECTION: forcing a failure. [ 350.775717][T12863] name failslab, interval 1, probability 0, space 0, times 0 [ 350.775742][T12863] CPU: 2 UID: 0 PID: 12863 Comm: syz.2.2028 Not tainted syzkaller #0 PREEMPT(full) [ 350.775761][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.775770][T12863] Call Trace: [ 350.775776][T12863] [ 350.775782][T12863] dump_stack_lvl+0x100/0x190 [ 350.775828][T12863] should_fail_ex.cold+0x5/0xa [ 350.775852][T12863] should_failslab+0xc2/0x120 [ 350.775873][T12863] kmem_cache_alloc_noprof+0x92/0x6a0 [ 350.775895][T12863] ? anon_vma_clone+0x4b8/0x2080 [ 350.775917][T12863] anon_vma_clone+0x4b8/0x2080 [ 350.775942][T12863] __split_vma+0x58a/0xce0 [ 350.775968][T12863] ? __pfx___split_vma+0x10/0x10 [ 350.775988][T12863] ? mas_next_slot+0xc05/0x13a0 [ 350.776018][T12863] vms_gather_munmap_vmas+0x3a5/0x1720 [ 350.776047][T12863] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 350.776069][T12863] ? mtree_range_walk+0x72b/0xb70 [ 350.776102][T12863] ? mas_walk+0x260/0x310 [ 350.776128][T12863] __mmap_region+0x4d4/0x3910 [ 350.776155][T12863] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 350.776185][T12863] ? __pfx___mmap_region+0x10/0x10 [ 350.776212][T12863] ? __lock_acquire+0x5c0/0x1f40 [ 350.776241][T12863] ? do_raw_spin_lock+0x128/0x260 [ 350.776266][T12863] ? __lock_acquire+0x5c0/0x1f40 [ 350.776294][T12863] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 350.776325][T12863] ? find_held_lock+0x2b/0x80 [ 350.776351][T12863] ? __lock_acquire+0x5c0/0x1f40 [ 350.776374][T12863] ? __lock_acquire+0x5c0/0x1f40 [ 350.776394][T12863] ? lock_acquire+0x1d1/0x380 [ 350.776411][T12863] ? unwind_next_frame+0xbd/0x2090 [ 350.776474][T12863] mmap_region+0x3db/0x6d0 [ 350.776501][T12863] ? __pfx_mmap_region+0x10/0x10 [ 350.776526][T12863] ? shmem_get_unmapped_area+0x141/0x960 [ 350.776554][T12863] ? cap_mmap_addr+0x4b/0x120 [ 350.776582][T12863] ? bpf_lsm_mmap_addr+0x9/0x30 [ 350.776597][T12863] ? security_mmap_addr+0x71/0x1e0 [ 350.776623][T12863] ? __get_unmapped_area+0x255/0x3e0 [ 350.776643][T12863] do_mmap+0x12c7/0x1c30 [ 350.776664][T12863] ? lock_acquire+0x1d1/0x380 [ 350.776681][T12863] ? __pfx_do_mmap+0x10/0x10 [ 350.776707][T12863] ? __pfx_down_write_killable+0x10/0x10 [ 350.776739][T12863] vm_mmap_pgoff+0x283/0x490 [ 350.776766][T12863] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 350.776795][T12863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.776823][T12863] ksys_mmap_pgoff+0xe4/0x610 [ 350.776841][T12863] ? find_held_lock+0x2b/0x80 [ 350.776864][T12863] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 350.776887][T12863] __do_fast_syscall_32+0x14b/0x8c0 [ 350.776915][T12863] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.776944][T12863] do_fast_syscall_32+0x32/0x70 [ 350.776970][T12863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.776996][T12863] RIP: 0023:0xf73defbc [ 350.777013][T12863] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 350.777033][T12863] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 350.777053][T12863] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 350.777065][T12863] RDX: 0000000000000002 RSI: 0000000000008031 RDI: 00000000ffffffff [ 350.777078][T12863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.777090][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.777102][T12863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.777128][T12863] [ 350.975052][ T5798] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 352.148187][T12917] 0x000000000003-0x000000010001 : "" [ 352.392090][T12917] FAULT_INJECTION: forcing a failure. [ 352.392090][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 352.392113][T12917] CPU: 2 UID: 0 PID: 12917 Comm: syz.2.2036 Not tainted syzkaller #0 PREEMPT(full) [ 352.392128][T12917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.392141][T12917] Call Trace: [ 352.392146][T12917] [ 352.392152][T12917] dump_stack_lvl+0x100/0x190 [ 352.392177][T12917] should_fail_ex.cold+0x5/0xa [ 352.392197][T12917] should_failslab+0xc2/0x120 [ 352.392214][T12917] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 352.392228][T12917] ? zswap_store+0xc81/0x2f90 [ 352.392251][T12917] zswap_store+0xc81/0x2f90 [ 352.392276][T12917] ? __pfx_zswap_store+0x10/0x10 [ 352.392293][T12917] ? lock_acquire+0x1d1/0x380 [ 352.392308][T12917] ? do_raw_spin_lock+0x128/0x260 [ 352.392324][T12917] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.392341][T12917] ? find_held_lock+0x2b/0x80 [ 352.392358][T12917] ? swap_writeout+0xdc7/0x1b30 [ 352.392377][T12917] ? swap_writeout+0xdc7/0x1b30 [ 352.392410][T12917] swap_writeout+0xdcf/0x1b30 [ 352.392436][T12917] shrink_folio_list+0x528c/0x59c0 [ 352.392463][T12917] ? __pfx_shrink_folio_list+0x10/0x10 [ 352.392482][T12917] ? isolate_folios.constprop.0+0x10e7/0x2b50 [ 352.392501][T12917] ? isolate_folios.constprop.0+0x1150/0x2b50 [ 352.392543][T12917] ? find_held_lock+0x2b/0x80 [ 352.392560][T12917] ? find_held_lock+0x2b/0x80 [ 352.392577][T12917] ? evict_folios+0x287/0x1790 [ 352.392596][T12917] ? evict_folios+0x287/0x1790 [ 352.392618][T12917] evict_folios+0x35b/0x1790 [ 352.392645][T12917] ? __pfx_evict_folios+0x10/0x10 [ 352.392667][T12917] ? lock_acquire+0x1d1/0x380 [ 352.392693][T12917] try_to_shrink_lruvec+0x32e/0x7b0 [ 352.392716][T12917] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 352.392738][T12917] ? lock_acquire+0x1d1/0x380 [ 352.392754][T12917] shrink_one+0x342/0x870 [ 352.392772][T12917] ? shrink_node+0x2a41/0x4410 [ 352.392787][T12917] ? shrink_node+0x2a41/0x4410 [ 352.392800][T12917] shrink_node+0x2a61/0x4410 [ 352.392816][T12917] ? shrink_node+0x276d/0x4410 [ 352.392832][T12917] ? __pfx_shrink_node+0x10/0x10 [ 352.392850][T12917] ? compact_zone_order+0x12a/0x170 [ 352.392875][T12917] ? do_try_to_free_pages+0x2da/0x1500 [ 352.392888][T12917] do_try_to_free_pages+0x2da/0x1500 [ 352.392911][T12917] try_to_free_pages+0x2a0/0x740 [ 352.392925][T12917] ? __pfx_try_to_free_pages+0x10/0x10 [ 352.392945][T12917] ? find_held_lock+0x2b/0x80 [ 352.392962][T12917] ? fs_reclaim_acquire+0x70/0x100 [ 352.392977][T12917] ? fs_reclaim_acquire+0x70/0x100 [ 352.392994][T12917] __alloc_frozen_pages_noprof+0x11b6/0x31e0 [ 352.393024][T12917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.393049][T12917] ? lock_acquire+0x1d1/0x380 [ 352.393066][T12917] ? lock_acquire+0x1d1/0x380 [ 352.393081][T12917] ? is_bpf_text_address+0x8a/0x1a0 [ 352.393098][T12917] ? is_bpf_text_address+0x8a/0x1a0 [ 352.393114][T12917] ? bpf_ksym_find+0x124/0x1c0 [ 352.393128][T12917] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.393146][T12917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.393164][T12917] ? policy_nodemask+0xed/0x5e0 [ 352.393182][T12917] alloc_pages_mpol+0x201/0x560 [ 352.393200][T12917] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.393221][T12917] alloc_pages_noprof+0x1a/0x160 [ 352.393240][T12917] stack_depot_save_flags+0x91c/0xa10 [ 352.393261][T12917] kasan_save_stack+0x3f/0x50 [ 352.393275][T12917] ? kasan_save_stack+0x30/0x50 [ 352.393288][T12917] ? kasan_save_track+0x14/0x30 [ 352.393301][T12917] ? __kasan_slab_alloc+0x89/0x90 [ 352.393315][T12917] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 352.393326][T12917] ? security_inode_alloc+0x3b/0x2c0 [ 352.393342][T12917] ? inode_init_always_gfp+0xc75/0xfb0 [ 352.393358][T12917] ? alloc_inode+0x8e/0x250 [ 352.393375][T12917] ? new_inode+0x22/0x1c0 [ 352.393393][T12917] ? debugfs_create_dir+0xbe/0x440 [ 352.393407][T12917] ? add_mtd_device+0x9f1/0x1820 [ 352.393422][T12917] ? mtd_add_partition+0x376/0x6a0 [ 352.393439][T12917] ? mtdchar_blkpg_ioctl+0x207/0x250 [ 352.393456][T12917] ? mtdchar_compat_ioctl+0x3d6/0x440 [ 352.393474][T12917] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 352.393487][T12917] ? __do_fast_syscall_32+0x14b/0x8c0 [ 352.393506][T12917] ? do_fast_syscall_32+0x32/0x70 [ 352.393536][T12917] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.393572][T12917] kasan_save_track+0x14/0x30 [ 352.393586][T12917] __kasan_slab_alloc+0x89/0x90 [ 352.393602][T12917] kmem_cache_alloc_noprof+0x269/0x6a0 [ 352.393616][T12917] ? security_inode_alloc+0x3b/0x2c0 [ 352.393636][T12917] security_inode_alloc+0x3b/0x2c0 [ 352.393654][T12917] inode_init_always_gfp+0xc75/0xfb0 [ 352.393672][T12917] alloc_inode+0x8e/0x250 [ 352.393691][T12917] new_inode+0x22/0x1c0 [ 352.393712][T12917] debugfs_create_dir+0xbe/0x440 [ 352.393727][T12917] add_mtd_device+0x9f1/0x1820 [ 352.393746][T12917] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.393766][T12917] ? __pfx_add_mtd_device+0x10/0x10 [ 352.393786][T12917] mtd_add_partition+0x376/0x6a0 [ 352.393805][T12917] ? __pfx_mtd_add_partition+0x10/0x10 [ 352.393823][T12917] ? __might_fault+0xc5/0x140 [ 352.393838][T12917] ? __might_fault+0xc5/0x140 [ 352.393861][T12917] mtdchar_blkpg_ioctl+0x207/0x250 [ 352.393879][T12917] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 352.393912][T12917] mtdchar_compat_ioctl+0x3d6/0x440 [ 352.393932][T12917] ? find_held_lock+0x2b/0x80 [ 352.393950][T12917] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 352.393978][T12917] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 352.393997][T12917] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 352.394012][T12917] __do_fast_syscall_32+0x14b/0x8c0 [ 352.394031][T12917] ? lockdep_hardirqs_on+0x7d/0x110 [ 352.394051][T12917] do_fast_syscall_32+0x32/0x70 [ 352.394070][T12917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.394086][T12917] RIP: 0023:0xf73defbc [ 352.394098][T12917] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 352.394110][T12917] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 352.394123][T12917] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000001269 [ 352.394131][T12917] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.394142][T12917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.394149][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.394157][T12917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.394173][T12917] [ 353.371421][T12917] ftl_cs: FTL header corrupt! [ 354.338009][T12914] syz.1.2033 (12914) used greatest stack depth: 18888 bytes left [ 354.734134][T12899] syz.1.2033 (12899) used greatest stack depth: 18648 bytes left [ 355.063261][T12933] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 355.098039][T12933] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 355.098485][T12933] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 355.103529][T12933] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 355.103970][T12933] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 355.140648][T12933] pci 0000:00:01.0: Adding to iommu group 1 [ 355.161817][T12933] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 355.161832][T12933] pci 0000:00:01.0: vgaarb: bridge control possible [ 355.161841][T12933] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 355.165578][T12933] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 355.172605][T12933] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 355.172807][T12933] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 355.173111][T12933] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 355.227353][T12933] pci 0000:00:05.0: Adding to iommu group 5 [ 355.253011][T12933] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 355.254002][T12933] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 355.258475][T12933] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 355.258690][T12933] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 355.260474][T12933] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 355.265571][T12933] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 355.308549][T12933] [drm] Found bochs VGA, ID 0xb0c5. [ 355.309147][T12933] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 355.411635][T12933] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 355.600671][T12946] capability: warning: `syz.1.2046' uses 32-bit capabilities (legacy support in use) [ 355.601559][T12946] FAULT_INJECTION: forcing a failure. [ 355.601559][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.601593][T12946] CPU: 0 UID: 0 PID: 12946 Comm: syz.1.2046 Not tainted syzkaller #0 PREEMPT(full) [ 355.601612][T12946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.601630][T12946] Call Trace: [ 355.601657][T12946] [ 355.601667][T12946] dump_stack_lvl+0x100/0x190 [ 355.601760][T12946] should_fail_ex.cold+0x5/0xa [ 355.601799][T12946] _copy_to_user+0x32/0xd0 [ 355.601843][T12946] simple_read_from_buffer+0xcb/0x170 [ 355.601875][T12946] proc_fail_nth_read+0x1af/0x230 [ 355.601896][T12946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.601913][T12946] ? rw_verify_area+0xce/0x6d0 [ 355.601937][T12946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.601953][T12946] vfs_read+0x1e4/0xb40 [ 355.601970][T12946] ? lock_acquire+0x1d1/0x380 [ 355.602002][T12946] ? __fget_files+0x34/0x3d0 [ 355.602017][T12946] ? __pfx_vfs_read+0x10/0x10 [ 355.602031][T12946] ? find_held_lock+0x2b/0x80 [ 355.602055][T12946] ? __fget_files+0x215/0x3d0 [ 355.602072][T12946] ? __fget_files+0x21f/0x3d0 [ 355.602090][T12946] ksys_read+0x12a/0x250 [ 355.602103][T12946] ? __pfx_ksys_read+0x10/0x10 [ 355.602121][T12946] do_int80_emulation+0x166/0x650 [ 355.602172][T12946] asm_int80_emulation+0x1a/0x20 [ 355.602185][T12946] RIP: 0023:0xf71e7f6b [ 355.602196][T12946] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 355.602209][T12946] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 355.602243][T12946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 355.602251][T12946] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 355.602258][T12946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.602266][T12946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.602273][T12946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.602288][T12946] [ 357.108147][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 357.108166][ T43] audit: type=1326 audit(2000000059.700:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.108295][ T43] audit: type=1326 audit(2000000059.700:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.108961][ T43] audit: type=1326 audit(2000000059.700:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.109074][ T43] audit: type=1326 audit(2000000059.700:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.109168][ T43] audit: type=1326 audit(2000000059.700:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.109415][ T43] audit: type=1326 audit(2000000059.700:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.109570][ T43] audit: type=1326 audit(2000000059.700:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.109963][ T43] audit: type=1326 audit(2000000059.700:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.110067][ T43] audit: type=1326 audit(2000000059.700:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.110172][ T43] audit: type=1326 audit(2000000059.700:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.2052" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x7ffc0000 [ 357.304554][T12933] Console: switching to colour frame buffer device 160x50 [ 357.420172][T12933] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 357.426740][T12933] ========= ** replaying previous printk message ** [ 357.426740][T12933] ================================================================== [ 357.426756][T12933] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 357.426783][T12933] Read of size 1 at addr ffff88802231d480 by task syz.0.2040/12933 [ 357.426793][T12933] [ 357.426799][T12933] CPU: 3 UID: 0 PID: 12933 Comm: syz.0.2040 Not tainted syzkaller #0 PREEMPT(full) [ 357.426813][T12933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.426822][T12933] Call Trace: [ 357.426826][T12933] [ 357.426832][T12933] dump_stack_lvl+0x100/0x190 [ 357.426851][T12933] print_report+0x13d/0x4b0 [ 357.426876][T12933] ? __virt_addr_valid+0x239/0x430 [ 357.426896][T12933] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 357.426912][T12933] kasan_report+0xdf/0x1c0 [ 357.426933][T12933] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 357.426951][T12933] acpi_ns_get_attached_object+0x148/0x1b0 [ 357.426967][T12933] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 357.426983][T12933] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 357.427001][T12933] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 357.427018][T12933] ? acpi_ds_create_operand+0x267/0xc20 [ 357.427038][T12933] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 357.427054][T12933] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 357.427070][T12933] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 357.427086][T12933] ? __asan_memset+0x23/0x50 [ 357.427105][T12933] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 357.427120][T12933] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 357.427139][T12933] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 357.427160][T12933] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 357.427179][T12933] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 357.427193][T12933] acpi_ds_exec_end_op+0xb78/0x1e60 [ 357.427213][T12933] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 357.427232][T12933] acpi_ps_parse_loop+0x5e1/0x26e0 [ 357.427253][T12933] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 357.427272][T12933] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 357.427291][T12933] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 357.427304][T12933] ? acpi_ut_create_thread_state+0x6d/0x170 [ 357.427326][T12933] acpi_ps_parse_aml+0x81e/0x1120 [ 357.427339][T12933] acpi_ps_execute_method+0x5c4/0xe90 [ 357.427354][T12933] acpi_ns_evaluate+0x640/0x1670 [ 357.427370][T12933] acpi_ut_evaluate_object+0xf7/0x610 [ 357.427386][T12933] acpi_rs_get_prt_method_data+0xa0/0x150 [ 357.427402][T12933] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 357.427417][T12933] ? acpi_ut_status_exit+0x111/0x1c0 [ 357.427430][T12933] ? acpi_rs_validate_parameters+0x104/0x210 [ 357.427446][T12933] acpi_get_irq_routing_table+0xb8/0x140 [ 357.427462][T12933] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 357.427479][T12933] ? do_raw_spin_lock+0x128/0x260 [ 357.427518][T12933] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 357.427536][T12933] ? mark_held_locks+0x40/0x70 [ 357.427550][T12933] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 357.427568][T12933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.427585][T12933] ? pci_conf1_read+0x138/0x240 [ 357.427604][T12933] acpi_pci_irq_lookup+0x8e/0x6b0 [ 357.427619][T12933] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 357.427635][T12933] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 357.427655][T12933] ? __driver_probe_device+0x210/0x460 [ 357.427700][T12933] ? __device_attach_driver+0x1df/0x320 [ 357.427720][T12933] ? bus_for_each_drv+0x159/0x1e0 [ 357.427735][T12933] ? __device_attach+0x1e4/0x4c0 [ 357.427746][T12933] acpi_pci_irq_enable+0x1f5/0x6f0 [ 357.427762][T12933] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 357.427778][T12933] ? __pfx_pci_enable_resources+0x10/0x10 [ 357.427795][T12933] ? __pfx___pci_set_power_state+0x10/0x10 [ 357.427809][T12933] pcibios_enable_device+0xb6/0xe0 [ 357.427825][T12933] do_pci_enable_device+0x21f/0x4a0 [ 357.427839][T12933] ? __pfx_do_pci_enable_device+0x10/0x10 [ 357.427853][T12933] ? pci_update_current_state+0x102/0x240 [ 357.427866][T12933] ? __pfx_pci_update_current_state+0x10/0x10 [ 357.427878][T12933] ? ksm_might_need_to_copy+0x630/0xdf0 [ 357.427891][T12933] ? __kasan_kmalloc+0xaa/0xb0 [ 357.427905][T12933] pci_enable_device_flags+0x27c/0x370 [ 357.427922][T12933] ? __pfx_virtio_pci_probe+0x10/0x10 [ 357.427942][T12933] virtio_pci_probe+0x1d5/0x410 [ 357.427956][T12933] local_pci_probe+0xdd/0x1b0 [ 357.427976][T12933] pci_call_probe+0x176/0x800 [ 357.427988][T12933] ? pci_match_device+0x147/0x7d0 [ 357.427999][T12933] ? __pfx_pci_call_probe+0x10/0x10 [ 357.428013][T12933] ? __pfx_pci_match_device+0x10/0x10 [ 357.428025][T12933] ? pci_find_host_bridge+0x3c/0x80 [ 357.428041][T12933] pci_device_probe+0x25b/0x400 [ 357.428054][T12933] ? __pfx_pci_device_probe+0x10/0x10 [ 357.428068][T12933] ? sysfs_create_link+0x68/0xc0 [ 357.428090][T12933] ? __pfx_pci_device_probe+0x10/0x10 [ 357.428104][T12933] really_probe+0x241/0xa60 [ 357.428123][T12933] __driver_probe_device+0x210/0x460 [ 357.428142][T12933] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.428159][T12933] driver_probe_device+0x4a/0x140 [ 357.428178][T12933] __device_attach_driver+0x1df/0x320 [ 357.428198][T12933] ? __pfx___device_attach_driver+0x10/0x10 [ 357.428218][T12933] bus_for_each_drv+0x159/0x1e0 [ 357.428234][T12933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.428250][T12933] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.428267][T12933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.428284][T12933] __device_attach+0x1e4/0x4c0 [ 357.428296][T12933] ? __pfx___device_attach+0x10/0x10 [ 357.428307][T12933] ? do_raw_spin_unlock+0x145/0x1e0 [ 357.428324][T12933] device_initial_probe+0xaf/0xf0 [ 357.428336][T12933] pci_bus_add_device+0xc5/0x100 [ 357.428353][T12933] pci_bus_add_devices+0x9a/0x1f0 [ 357.428370][T12933] pci_rescan_bus+0x2a/0x40 [ 357.428381][T12933] rescan_store+0xfb/0x130 [ 357.428398][T12933] ? __pfx_rescan_store+0x10/0x10 [ 357.428411][T12933] ? sysfs_file_kobj+0xe4/0x290 [ 357.428426][T12933] ? __pfx_rescan_store+0x10/0x10 [ 357.428438][T12933] bus_attr_store+0x74/0xb0 [ 357.428452][T12933] ? __pfx_bus_attr_store+0x10/0x10 [ 357.428466][T12933] sysfs_kf_write+0xf2/0x150 [ 357.428482][T12933] kernfs_fop_write_iter+0x3e0/0x5f0 [ 357.428495][T12933] ? __pfx_sysfs_kf_write+0x10/0x10 [ 357.428511][T12933] vfs_write+0x6af/0x1050 [ 357.428524][T12933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.428539][T12933] ? __pfx_vfs_write+0x10/0x10 [ 357.428551][T12933] ? find_held_lock+0x2b/0x80 [ 357.428572][T12933] ksys_write+0x12a/0x250 [ 357.428585][T12933] ? __pfx_ksys_write+0x10/0x10 [ 357.428600][T12933] __do_fast_syscall_32+0x14b/0x8c0 [ 357.428618][T12933] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.428635][T12933] do_fast_syscall_32+0x32/0x70 [ 357.428654][T12933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.428670][T12933] RIP: 0023:0xf748efbc [ 357.428679][T12933] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 357.428692][T12933] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 357.428704][T12933] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000700 [ 357.428712][T12933] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.428719][T12933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.428727][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.428734][T12933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.428745][T12933] [ 357.428749][T12933] [ 357.428752][T12933] Allocated by task 1: [ 357.428758][T12933] kasan_save_stack+0x30/0x50 [ 357.428770][T12933] kasan_save_track+0x14/0x30 [ 357.428782][T12933] __kasan_slab_alloc+0x89/0x90 [ 357.428795][T12933] kmem_cache_alloc_noprof+0x269/0x6a0 [ 357.428805][T12933] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 357.428823][T12933] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 357.428840][T12933] acpi_ds_build_internal_object+0x173/0x790 [ 357.428857][T12933] acpi_ds_create_node+0xe3/0x280 [ 357.428873][T12933] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 357.428891][T12933] acpi_ps_parse_loop+0x5e1/0x26e0 [ 357.428909][T12933] acpi_ps_parse_aml+0x81e/0x1120 [ 357.428919][T12933] acpi_ps_execute_table+0x393/0x500 [ 357.428931][T12933] acpi_ns_execute_table+0x596/0x970 [ 357.428945][T12933] acpi_ns_parse_table+0xcb/0x160 [ 357.428959][T12933] acpi_ns_load_table+0xc9/0x490 [ 357.428972][T12933] acpi_tb_load_namespace+0x2b0/0x8f0 [ 357.428989][T12933] acpi_load_tables+0x89/0x160 [ 357.429017][T12933] acpi_init+0x146/0x840 [ 357.429030][T12933] do_one_initcall+0x11c/0x6f0 [ 357.429043][T12933] kernel_init_freeable+0x6ea/0x7b0 [ 357.429066][T12933] kernel_init+0x21/0x1e0 [ 357.429076][T12933] ret_from_fork+0x730/0xd60 [ 357.429098][T12933] ret_from_fork_asm+0x1a/0x30 [ 357.429111][T12933] [ 357.429113][T12933] Freed by task 12122: [ 357.429119][T12933] kasan_save_stack+0x30/0x50 [ 357.429131][T12933] kasan_save_track+0x14/0x30 [ 357.429143][T12933] kasan_save_free_info+0x3b/0x70 [ 357.429159][T12933] __kasan_slab_free+0x5f/0x80 [ 357.429185][T12933] kmem_cache_free+0x127/0x6c0 [ 357.429203][T12933] acpi_os_release_object+0x1c/0x30 [ 357.429215][T12933] acpi_ut_delete_object_desc+0xea/0x130 [ 357.429232][T12933] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 357.429246][T12933] acpi_ut_update_object_reference+0x5f9/0x800 [ 357.429260][T12933] acpi_ut_remove_reference+0x192/0x1d0 [ 357.429273][T12933] acpi_rs_get_prt_method_data+0xcd/0x150 [ 357.429287][T12933] acpi_get_irq_routing_table+0xb8/0x140 [ 357.429302][T12933] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 357.429316][T12933] acpi_pci_irq_lookup+0x8e/0x6b0 [ 357.429329][T12933] acpi_pci_irq_disable+0x1a8/0x360 [ 357.429343][T12933] pcibios_disable_device+0x89/0xb0 [ 357.429358][T12933] do_pci_disable_device+0x9f/0x100 [ 357.429370][T12933] pci_disable_device+0x130/0x270 [ 357.429382][T12933] virtio_pci_remove+0xcf/0x110 [ 357.429395][T12933] pci_device_remove+0xb2/0x1d0 [ 357.429412][T12933] device_remove+0xcb/0x180 [ 357.429429][T12933] device_release_driver_internal+0x441/0x610 [ 357.429440][T12933] pci_stop_bus_device+0x120/0x160 [ 357.429451][T12933] pci_stop_and_remove_bus_device+0x58/0xa0 [ 357.429464][T12933] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 357.429477][T12933] remove_store+0x123/0x140 [ 357.429492][T12933] dev_attr_store+0x58/0x80 [ 357.429503][T12933] sysfs_kf_write+0xf2/0x150 [ 357.429516][T12933] kernfs_fop_write_iter+0x3e0/0x5f0 [ 357.429528][T12933] vfs_write+0x6af/0x1050 [ 357.429539][T12933] ksys_write+0x12a/0x250 [ 357.429550][T12933] __do_fast_syscall_32+0x14b/0x8c0 [ 357.429567][T12933] do_fast_syscall_32+0x32/0x70 [ 357.429584][T12933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.429599][T12933] [ 357.429601][T12933] The buggy address belongs to the object at ffff88802231d478 [ 357.429601][T12933] which belongs to the cache Acpi-Operand of size 72 [ 357.429611][T12933] The buggy address is located 8 bytes inside of [ 357.429611][T12933] freed 72-byte region [ffff88802231d478, ffff88802231d4c0) [ 357.429622][T12933] [ 357.429625][T12933] The buggy address belongs to the physical page: [ 357.429631][T12933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802231df08 pfn:0x2231d [ 357.429643][T12933] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 357.429654][T12933] page_type: f5(slab) [ 357.429664][T12933] raw: 00fff00000000200 ffff88801d44da40 ffffea000088db10 ffffea000088d3d0 [ 357.429681][T12933] raw: ffff88802231df08 0000000200270006 00000000f5000000 0000000000000000 [ 357.429688][T12933] page dumped because: kasan: bad access detected [ 357.429698][T12933] page_owner tracks the page as allocated [ 357.429702][T12933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2631372032 [ 357.429721][T12933] post_alloc_hook+0xfd/0x120 [ 357.429737][T12933] get_page_from_freelist+0x112f/0x3640 [ 357.429754][T12933] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 357.429771][T12933] new_slab+0xb1/0x6d0 [ 357.429787][T12933] refill_objects+0xe3/0x410 [ 357.429803][T12933] __pcs_replace_empty_main+0x35e/0x650 [ 357.429819][T12933] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 357.429829][T12933] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 357.429847][T12933] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 357.429864][T12933] acpi_ds_create_operand+0x6be/0xc20 [ 357.429881][T12933] acpi_ds_eval_data_object_operands+0x125/0x640 [ 357.429899][T12933] acpi_ds_exec_end_op+0xe41/0x1e60 [ 357.429916][T12933] acpi_ps_parse_loop+0x5e1/0x26e0 [ 357.429934][T12933] acpi_ps_parse_aml+0x81e/0x1120 [ 357.429944][T12933] acpi_ps_execute_table+0x393/0x500 [ 357.429956][T12933] acpi_ns_execute_table+0x596/0x970 [ 357.429971][T12933] page_owner free stack trace missing [ 357.429975][T12933] [ 357.429977][T12933] Memory state around the buggy address: [ 357.429983][T12933] ffff88802231d380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 357.429991][T12933] ffff88802231d400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 357.429999][T12933] >ffff88802231d480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 357.430005][T12933] ^ [ 357.430011][T12933] ffff88802231d500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 357.430019][T12933] ffff88802231d580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 357.430025][T12933] ================================================================== [ 357.430210][T12933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.828159][T12933] CPU: 3 UID: 0 PID: 12933 Comm: syz.0.2040 Not tainted syzkaller #0 PREEMPT(full) [ 357.830854][T12933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.833781][T12933] Call Trace: [ 357.834779][T12933] [ 357.835681][T12933] dump_stack_lvl+0x100/0x190 [ 357.837083][T12933] vpanic+0x2dc/0x6f8 [ 357.838281][T12933] panic+0xd1/0xe0 [ 357.839381][T12933] ? __pfx_panic+0x10/0x10 [ 357.840699][T12933] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 357.842476][T12933] ? preempt_schedule+0x57/0xd0 [ 357.843962][T12933] check_panic_on_warn.cold+0x19/0x34 [ 357.845540][T12933] end_report.part.0+0x3a/0x90 [ 357.846962][T12933] kasan_report.cold+0xe/0x18 [ 357.848370][T12933] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 357.850120][T12933] acpi_ns_get_attached_object+0x148/0x1b0 [ 357.852052][T12933] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 357.853818][T12933] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 357.855357][T12933] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 357.857361][T12933] ? acpi_ds_create_operand+0x267/0xc20 [ 357.858987][T12933] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 357.860601][T12933] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 357.862412][T12933] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 357.863973][T12933] ? __asan_memset+0x23/0x50 [ 357.865352][T12933] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 357.867131][T12933] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 357.868794][T12933] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 357.870620][T12933] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 357.872348][T12933] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 357.873867][T12933] acpi_ds_exec_end_op+0xb78/0x1e60 [ 357.875535][T12933] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 357.877259][T12933] acpi_ps_parse_loop+0x5e1/0x26e0 [ 357.878801][T12933] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 357.880420][T12933] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 357.882065][T12933] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 357.883839][T12933] ? acpi_ut_create_thread_state+0x6d/0x170 [ 357.885593][T12933] acpi_ps_parse_aml+0x81e/0x1120 [ 357.887076][T12933] acpi_ps_execute_method+0x5c4/0xe90 [ 357.888678][T12933] acpi_ns_evaluate+0x640/0x1670 [ 357.890138][T12933] acpi_ut_evaluate_object+0xf7/0x610 [ 357.891759][T12933] acpi_rs_get_prt_method_data+0xa0/0x150 [ 357.893417][T12933] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 357.895306][T12933] ? acpi_ut_status_exit+0x111/0x1c0 [ 357.896965][T12933] ? acpi_rs_validate_parameters+0x104/0x210 [ 357.898870][T12933] acpi_get_irq_routing_table+0xb8/0x140 [ 357.900627][T12933] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 357.902589][T12933] ? do_raw_spin_lock+0x128/0x260 [ 357.904217][T12933] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 357.906032][T12933] ? mark_held_locks+0x40/0x70 [ 357.907547][T12933] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 357.909512][T12933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.911363][T12933] ? pci_conf1_read+0x138/0x240 [ 357.912906][T12933] acpi_pci_irq_lookup+0x8e/0x6b0 [ 357.914496][T12933] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 357.916253][T12933] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 357.918138][T12933] ? __driver_probe_device+0x210/0x460 [ 357.919845][T12933] ? __device_attach_driver+0x1df/0x320 [ 357.921598][T12933] ? bus_for_each_drv+0x159/0x1e0 [ 357.923178][T12933] ? __device_attach+0x1e4/0x4c0 [ 357.924744][T12933] acpi_pci_irq_enable+0x1f5/0x6f0 [ 357.926358][T12933] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 357.928112][T12933] ? __pfx_pci_enable_resources+0x10/0x10 [ 357.929862][T12933] ? __pfx___pci_set_power_state+0x10/0x10 [ 357.931719][T12933] pcibios_enable_device+0xb6/0xe0 [ 357.933321][T12933] do_pci_enable_device+0x21f/0x4a0 [ 357.934939][T12933] ? __pfx_do_pci_enable_device+0x10/0x10 [ 357.936717][T12933] ? pci_update_current_state+0x102/0x240 [ 357.938485][T12933] ? __pfx_pci_update_current_state+0x10/0x10 [ 357.940382][T12933] ? ksm_might_need_to_copy+0x630/0xdf0 [ 357.942133][T12933] ? __kasan_kmalloc+0xaa/0xb0 [ 357.943645][T12933] pci_enable_device_flags+0x27c/0x370 [ 357.945351][T12933] ? __pfx_virtio_pci_probe+0x10/0x10 [ 357.947022][T12933] virtio_pci_probe+0x1d5/0x410 [ 357.948558][T12933] local_pci_probe+0xdd/0x1b0 [ 357.950045][T12933] pci_call_probe+0x176/0x800 [ 357.951558][T12933] ? pci_match_device+0x147/0x7d0 [ 357.953125][T12933] ? __pfx_pci_call_probe+0x10/0x10 [ 357.954748][T12933] ? __pfx_pci_match_device+0x10/0x10 [ 357.956432][T12933] ? pci_find_host_bridge+0x3c/0x80 [ 357.958056][T12933] pci_device_probe+0x25b/0x400 [ 357.959582][T12933] ? __pfx_pci_device_probe+0x10/0x10 [ 357.961271][T12933] ? sysfs_create_link+0x68/0xc0 [ 357.962822][T12933] ? __pfx_pci_device_probe+0x10/0x10 [ 357.964566][T12933] really_probe+0x241/0xa60 [ 357.965999][T12933] __driver_probe_device+0x210/0x460 [ 357.967655][T12933] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.969468][T12933] driver_probe_device+0x4a/0x140 [ 357.971071][T12933] __device_attach_driver+0x1df/0x320 [ 357.972753][T12933] ? __pfx___device_attach_driver+0x10/0x10 [ 357.974595][T12933] bus_for_each_drv+0x159/0x1e0 [ 357.976125][T12933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.977790][T12933] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.979419][T12933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.981275][T12933] __device_attach+0x1e4/0x4c0 [ 357.982773][T12933] ? __pfx___device_attach+0x10/0x10 [ 357.984429][T12933] ? do_raw_spin_unlock+0x145/0x1e0 [ 357.986052][T12933] device_initial_probe+0xaf/0xf0 [ 357.987633][T12933] pci_bus_add_device+0xc5/0x100 [ 357.989191][T12933] pci_bus_add_devices+0x9a/0x1f0 [ 357.990764][T12933] pci_rescan_bus+0x2a/0x40 [ 357.992248][T12933] rescan_store+0xfb/0x130 [ 357.993647][T12933] ? __pfx_rescan_store+0x10/0x10 [ 357.995243][T12933] ? sysfs_file_kobj+0xe4/0x290 [ 357.996780][T12933] ? __pfx_rescan_store+0x10/0x10 [ 357.998351][T12933] bus_attr_store+0x74/0xb0 [ 357.999782][T12933] ? __pfx_bus_attr_store+0x10/0x10 [ 358.001528][T12933] sysfs_kf_write+0xf2/0x150 [ 358.003025][T12933] kernfs_fop_write_iter+0x3e0/0x5f0 [ 358.004710][T12933] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.006358][T12933] vfs_write+0x6af/0x1050 [ 358.007799][T12933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.009642][T12933] ? __pfx_vfs_write+0x10/0x10 [ 358.011195][T12933] ? find_held_lock+0x2b/0x80 [ 358.012702][T12933] ksys_write+0x12a/0x250 [ 358.014074][T12933] ? __pfx_ksys_write+0x10/0x10 [ 358.015618][T12933] __do_fast_syscall_32+0x14b/0x8c0 [ 358.017356][T12933] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.019022][T12933] do_fast_syscall_32+0x32/0x70 [ 358.020634][T12933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.022648][T12933] RIP: 0023:0xf748efbc [ 358.023957][T12933] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 358.029943][T12933] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 358.032562][T12933] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000700 [ 358.035012][T12933] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.037477][T12933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.039933][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.042413][T12933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.044888][T12933] [ 358.046706][T12933] Kernel Offset: disabled [ 358.048086][T12933] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:28:46 Registers: info registers vcpu 0 CPU#0 EAX=f6dcef90 EBX=ffffffff ECX=8293e2c7 EDX=f6ebebf8 ESI=8252c3ee EDI=ffffffff EBP=ffffffff ESP=ffaf28b0 EIP=f703bd02 EFL=00000293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 576b8480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c4318de CR3=000000004e2a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801ebf8000 RSI=ffffffff81ebe3f7 RDI=0000000000000001 RBP=ffffc900006cfda8 RSP=ffffc900006cfa40 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=3d3d3d3d3d3d3d3d R12=0000000000000000 R13=1ffff920000d9f52 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ebe3f9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095379000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53d4ff4 CR3=000000004e2a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=f6f07278 EBX=ffffffff ECX=82161bf6 EDX=ffffffff ESI=82161bf6 EDI=f6f07278 EBP=f6f07280 ESP=ffe5d700 EIP=f70f05bf EFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57361480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f512d2a8 CR3=0000000044927000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c18c95 RDI=ffffffff9cf42560 RBP=ffffffff9cf42520 RSP=ffffc90002ec6520 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000033 R14=0000000000000004 R15=ffffc90002ec6838 RIP=ffffffff85c18cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095579000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=0000000044927000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c000 Opmask01=00000000000000ff Opmask02=00000000fffffeff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e3c3ea1550 000055e3c3ea1550 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e3c3e9a660 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4a5ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00065c405d17101b 2c0a1e1e06175c1e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732690b0948a83 73732690b094a953 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3446413130303030 7673313131313030 3030643433323130 303030763a696370 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030306930306373 3330636230303131 3030303064733446 4131303030307673 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e0c0c0c0c0d0d0d 0d59090e0f0c0d0d 0d0d4b07545e4d00 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d414e4553454c 5050554c50504553 4f50005700350032 31313d4d554e3d45 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d4145454f4500 303d554c49004150 4143005700350032 31313d454c4e3d00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000